$ rpki-client -vvf rpki.apnic.net/member_repository/A91105F6/E820026AB3FB11EDBBDB3022C4F9AE02/acVuJtdk8a5PRoYo5XUx03NKwCc.mft File: acVuJtdk8a5PRoYo5XUx03NKwCc.mft (raw, json) Hash identifier: R2SccY45hQtUHyBEgjUaTLhPpyyR/J/GSL/qDI7zhiM= Subject key identifier: 42:C5:BA:AD:CC:27:67:7C:D7:56:FC:27:EB:13:0E:DA:F6:11:19:0D Authority key identifier: 69:C5:6E:26:D7:64:F1:AE:4F:46:86:28:E5:75:31:D3:73:4A:C0:27 Certificate issuer: /CN=A91105F6/serialNumber=69C56E26D764F1AE4F468628E57531D3734AC027 Certificate serial: 01E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acVuJtdk8a5PRoYo5XUx03NKwCc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91105F6/E820026AB3FB11EDBBDB3022C4F9AE02/acVuJtdk8a5PRoYo5XUx03NKwCc.mft Manifest number: 01D8 Signing time: Sat 23 Aug 2025 02:53:59 +0000 Manifest this update: Sat 23 Aug 2025 02:53:58 +0000 Manifest next update: Sat 30 Aug 2025 02:53:58 +0000 Files and hashes: 1: acVuJtdk8a5PRoYo5XUx03NKwCc.crl (hash: Lof77QiVQmiHiwni0eFA3yFkjxc4/P86Cy9rOONcsgI=) 2: 3D93BEB65E6611EEA526DB11C4F9AE02.roa (hash: rj/BOYyadeyH55DESWaHfqSsiGriCli8KPof7zAigo4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91105F6/E820026AB3FB11EDBBDB3022C4F9AE02/acVuJtdk8a5PRoYo5XUx03NKwCc.crl rsync://rpki.apnic.net/member_repository/A91105F6/E820026AB3FB11EDBBDB3022C4F9AE02/acVuJtdk8a5PRoYo5XUx03NKwCc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acVuJtdk8a5PRoYo5XUx03NKwCc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:53:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 480 (0x1e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91105F6, serialNumber=69C56E26D764F1AE4F468628E57531D3734AC027 Validity Not Before: Aug 23 02:53:58 2025 GMT Not After : Aug 30 02:53:58 2025 GMT Subject: CN=68a92d46-bda6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4e:41:b5:1d:ba:4c:4b:11:83:f6:68:a3:fb: 29:d5:77:60:0e:50:95:4f:47:38:7b:21:b8:85:27: 97:ef:a7:99:37:6f:47:e8:c2:77:49:3c:d9:e4:47: 85:aa:cd:6e:03:f6:b4:4a:57:fc:ad:e5:1d:c2:93: 6d:bd:02:96:27:0a:cd:79:52:8f:65:fe:65:fd:45: 88:f8:83:a7:f7:6a:c6:a2:29:e3:02:fb:63:df:49: e9:55:fb:a3:ba:69:d4:bf:9e:55:27:b4:2d:dc:cc: 07:00:92:2f:f8:60:0c:ca:59:f5:56:e6:3b:5d:2c: ab:1c:58:35:40:45:74:39:c5:33:6f:29:4c:fa:67: b4:63:00:08:2c:04:49:88:8b:ec:28:80:6d:68:46: b5:35:23:a6:e8:e4:63:7c:a0:98:10:7e:17:3f:31: 86:18:3e:fb:e7:0e:fe:54:2a:15:3f:1c:3a:60:22: 0f:60:91:c7:ec:9e:d0:4e:a2:ed:59:ed:bb:0d:b0: 65:32:6f:8c:16:91:7e:a7:f0:d9:4e:af:8d:6e:23: 2e:4e:1a:e5:d3:a7:6c:db:7e:86:cb:c9:25:20:ef: 9c:31:00:8a:1b:11:ce:d8:e3:23:82:89:1b:bb:b3: dd:c4:d2:24:93:35:34:64:05:e1:ee:e1:98:ea:ba: 5f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C5:BA:AD:CC:27:67:7C:D7:56:FC:27:EB:13:0E:DA:F6:11:19:0D X509v3 Authority Key Identifier: keyid:69:C5:6E:26:D7:64:F1:AE:4F:46:86:28:E5:75:31:D3:73:4A:C0:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91105F6/E820026AB3FB11EDBBDB3022C4F9AE02/acVuJtdk8a5PRoYo5XUx03NKwCc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acVuJtdk8a5PRoYo5XUx03NKwCc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91105F6/E820026AB3FB11EDBBDB3022C4F9AE02/acVuJtdk8a5PRoYo5XUx03NKwCc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:23:a6:55:b4:41:48:3c:65:14:30:a0:6d:b5:46:94:93:64: c3:ad:2f:68:1f:05:f0:a6:ac:90:9a:b2:ba:fb:30:62:85:73: 54:c9:e9:d0:54:63:40:2d:de:d9:aa:cb:75:5a:f3:9d:7a:30: 5f:87:98:9a:67:b7:03:bd:a6:f8:37:97:9a:3f:ef:bf:6a:0f: 91:db:7d:7b:7e:57:29:85:95:57:08:9f:d2:08:54:3b:61:e2: cd:11:0c:ae:d7:9e:16:c0:76:43:bf:53:19:e9:77:42:ac:36: 39:a0:16:0b:50:10:a7:f1:bb:f3:e7:aa:66:05:cb:fc:67:b0: 1c:87:16:95:e5:94:9f:66:7b:fd:2c:5c:f7:36:85:57:4f:3f: 4f:f0:7d:87:48:a7:82:94:45:c8:e7:98:16:14:3e:22:be:5b: fd:b6:15:07:d0:f4:6c:be:97:6c:d3:f6:ae:c3:69:2a:82:bf: e9:d0:09:d2:94:00:7e:07:03:0a:94:44:f7:2d:f6:c1:d3:07: b6:8f:4f:94:6d:18:f1:18:ac:78:d5:17:a9:5d:ee:59:ef:51: 7e:9d:5d:a1:de:c6:9a:5d:90:e3:d0:a0:fa:cd:eb:fb:ac:ac: e2:4d:29:c2:36:26:c6:e3:14:cb:f7:f9:80:95:96:34:c6:e1: 4c:b6:77:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA1RjYxMTAvBgNVBAUTKDY5QzU2RTI2RDc2NEYxQUU0RjQ2ODYyOEU1NzUzMUQz NzM0QUMwMjcwHhcNMjUwODIzMDI1MzU4WhcNMjUwODMwMDI1MzU4WjAYMRYwFAYD VQQDEw02OGE5MmQ0Ni1iZGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz05BtR26TEsRg/Zoo/sp1XdgDlCVT0c4eyG4hSeX76eZN29H6MJ3STzZ5EeF qs1uA/a0Slf8reUdwpNtvQKWJwrNeVKPZf5l/UWI+IOn92rGoinjAvtj30npVfuj umnUv55VJ7Qt3MwHAJIv+GAMyln1VuY7XSyrHFg1QEV0OcUzbylM+me0YwAILARJ iIvsKIBtaEa1NSOm6ORjfKCYEH4XPzGGGD775w7+VCoVPxw6YCIPYJHH7J7QTqLt We27DbBlMm+MFpF+p/DZTq+NbiMuThrl06ds236Gy8klIO+cMQCKGxHO2OMjgokb u7PdxNIkkzU0ZAXh7uGY6rpfjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFELFuq3M J2d811b8J+sTDtr2ERkNMB8GA1UdIwQYMBaAFGnFbibXZPGuT0aGKOV1MdNzSsAn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDVGNi9FODIwMDI2QUIz RkIxMUVEQkJEQjMwMjJDNEY5QUUwMi9hY1Z1SnRkazhhNVBSb1lvNVhVeDAzTkt3 Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FjVnVKdGRrOGE1UFJvWW81WFV4MDNOS3dDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDVGNi9FODIwMDI2QUIzRkIxMUVEQkJEQjMwMjJDNEY5QUUwMi9hY1Z1SnRkazhh NVBSb1lvNVhVeDAzTkt3Q2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1I6ZVtEFIPGUUMKBttUaUk2TDrS9oHwXwpqyQmrK6+zBihXNUyenQ VGNALd7Zqst1WvOdejBfh5iaZ7cDvab4N5eaP++/ag+R2317flcphZVXCJ/SCFQ7 YeLNEQyu154WwHZDv1MZ6XdCrDY5oBYLUBCn8bvz56pmBcv8Z7AchxaV5ZSfZnv9 LFz3NoVXTz9P8H2HSKeClEXI55gWFD4ivlv9thUH0PRsvpds0/auw2kqgr/p0AnS lAB+BwMKlET3LfbB0we2j0+UbRjxGKx41RepXe5Z71F+nV2h3saaXZDj0KD6zev7 rKziTSnCNibG4xTL9/mAlZY0xuFMtnfS -----END CERTIFICATE-----Generated at Sat Aug 23 14:26:45 2025 by rpki-client