$ rpki-client -vvf rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft File: 38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft (raw, json) Hash identifier: qtVL0BTgZxflN73QXtvwetJ0BVR+ovqBwYa9F+Rn8FI= Subject key identifier: B4:FC:AD:0A:84:16:9E:6B:F2:2D:35:8D:81:D5:4C:EC:3E:93:47:29 Authority key identifier: DF:CA:8F:DA:A5:FE:F9:48:E0:EC:F6:F9:C7:03:63:9B:56:53:9D:99 Certificate issuer: /CN=A91516FF/serialNumber=DFCA8FDAA5FEF948E0ECF6F9C703639B56539D99 Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft Manifest number: 30 Signing time: Thu 03 Jul 2025 07:59:27 +0000 Manifest this update: Thu 03 Jul 2025 07:59:27 +0000 Manifest next update: Thu 10 Jul 2025 07:59:27 +0000 Files and hashes: 1: 38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl (hash: l+pn+m0qwyGgv99b5BoV8dS7g1TIuH70mKLYX9d//JA=) 2: F3CCB2C846A411F0909DA511C4F9AE02.roa (hash: WdytCQTC82Xj3l6x6W+Fu2cSc3JDJ2cKAkESsG1ZKic=) 3: 692243D640AA11F096F2746AC4F9AE02.roa (hash: rkd9k1u1dkPxEMEh5w+r9Bswb8IlB1n+y2yWKJIM8Tk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91516FF, serialNumber=DFCA8FDAA5FEF948E0ECF6F9C703639B56539D99 Validity Not Before: Jul 3 07:59:27 2025 GMT Not After : Jul 10 07:59:27 2025 GMT Subject: CN=6866385f-2ff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a1:26:37:65:51:b4:1d:ca:f4:bd:c2:75:39: bf:37:3e:56:d1:82:ef:71:1a:2e:87:96:50:2b:3f: d4:5f:32:8a:36:5a:10:5e:90:fa:45:6e:84:d7:85: d1:d4:d0:86:6b:d1:a4:5c:cb:d8:9f:b7:41:31:3b: 3f:d5:07:d8:14:71:91:f4:00:4f:1e:32:90:99:13: f0:fb:a1:3e:d7:61:a4:41:0a:45:26:d0:81:0c:57: fb:19:7c:70:05:b0:37:be:df:14:7c:0d:6e:09:a1: 3d:9e:36:45:2d:ff:93:3e:76:85:a4:33:49:c0:81: 56:00:d5:c6:80:f5:80:28:b0:7d:77:5e:99:ae:87: ad:3c:75:6a:70:ac:9b:48:31:3e:1c:6c:cb:6f:01: 4a:03:89:99:c8:03:ba:65:dd:c3:12:4c:bd:b5:28: 75:c7:c4:35:ed:c0:a6:91:0e:15:7d:6f:7f:c4:e3: c8:11:2c:b7:df:de:fe:49:a8:64:78:e0:24:28:aa: e4:c3:12:60:b1:72:6d:a4:8f:08:5e:1c:60:33:3e: 47:01:8f:6c:35:28:62:ac:07:97:24:e4:e8:90:ca: ff:06:4e:ab:8f:72:e3:5a:32:20:78:35:17:07:e3: aa:ca:1c:d7:b5:8a:26:06:99:61:42:de:3b:18:4c: 95:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:FC:AD:0A:84:16:9E:6B:F2:2D:35:8D:81:D5:4C:EC:3E:93:47:29 X509v3 Authority Key Identifier: keyid:DF:CA:8F:DA:A5:FE:F9:48:E0:EC:F6:F9:C7:03:63:9B:56:53:9D:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:42:2a:36:5e:0e:c8:3f:fd:6d:de:1c:7f:96:43:33:98:bb: 73:d9:42:85:4d:8f:b3:16:5c:62:55:c5:17:b8:ad:9d:2c:3c: f5:f7:24:88:98:49:21:b8:85:b0:32:a8:ce:8a:90:16:57:bd: 35:a4:9f:3a:b1:0b:c0:75:e6:7e:21:ff:26:f2:2f:ff:9c:88: 29:17:5e:6b:61:38:1d:7b:c8:33:b5:ad:12:07:6a:6c:34:8b: bb:0c:5d:85:da:df:06:89:22:0c:bc:3a:6b:f8:16:8f:bd:0b: d6:59:6c:68:10:fb:af:5c:fd:e9:12:33:fd:1c:e3:3c:7a:ae: 29:d9:e2:21:be:27:be:44:43:d2:25:b5:22:1a:05:28:01:15: 01:4a:4a:76:31:59:e6:c8:d7:b5:50:6b:1b:a8:80:28:1f:b1: c2:2e:1f:35:81:2b:4f:28:ea:5a:21:1d:c3:88:95:bd:d2:20: 92:a6:1f:9f:7b:fc:74:5e:bf:c7:7e:b6:a3:65:b8:33:d5:1e: 53:2a:54:15:3e:6d:3f:32:f4:45:2e:9a:32:e3:11:c8:7b:f3: 3d:54:a2:33:70:50:6f:98:e5:c1:99:d7:6a:18:08:3f:06:a2: 5c:30:f5:8f:27:20:84:60:30:81:09:ae:36:81:b8:9b:6d:c8: c7:ad:6d:93 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MTZGRjExMC8GA1UEBRMoREZDQThGREFBNUZFRjk0OEUwRUNGNkY5QzcwMzYzOUI1 NjUzOUQ5OTAeFw0yNTA3MDMwNzU5MjdaFw0yNTA3MTAwNzU5MjdaMBgxFjAUBgNV BAMTDTY4NjYzODVmLTJmZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpoSY3ZVG0Hcr0vcJ1Ob83PlbRgu9xGi6HllArP9RfMoo2WhBekPpFboTXhdHU 0IZr0aRcy9ift0ExOz/VB9gUcZH0AE8eMpCZE/D7oT7XYaRBCkUm0IEMV/sZfHAF sDe+3xR8DW4JoT2eNkUt/5M+doWkM0nAgVYA1caA9YAosH13Xpmuh608dWpwrJtI MT4cbMtvAUoDiZnIA7pl3cMSTL21KHXHxDXtwKaRDhV9b3/E48gRLLff3v5JqGR4 4CQoquTDEmCxcm2kjwheHGAzPkcBj2w1KGKsB5ck5OiQyv8GTquPcuNaMiB4NRcH 46rKHNe1iiYGmWFC3jsYTJW/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtPytCoQW nmvyLTWNgdVM7D6TRykwHwYDVR0jBBgwFoAU38qP2qX++Ujg7Pb5xwNjm1ZTnZkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUxNkZGLzJEQTU1OTEyMTQx NjExRjBBODUyMzIxOUM0RjlBRTAyLzM4cVAycVgtLVVqZzdQYjV4d05qbTFaVG5a ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMzhxUDJxWC0tVWpnN1BiNXh3TmptMVpUblprLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUx NkZGLzJEQTU1OTEyMTQxNjExRjBBODUyMzIxOUM0RjlBRTAyLzM4cVAycVgtLVVq ZzdQYjV4d05qbTFaVG5aay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGxCKjZeDsg//W3eHH+WQzOYu3PZQoVNj7MWXGJVxRe4rZ0sPPX3JIiY SSG4hbAyqM6KkBZXvTWknzqxC8B15n4h/ybyL/+ciCkXXmthOB17yDO1rRIHamw0 i7sMXYXa3waJIgy8Omv4Fo+9C9ZZbGgQ+69c/ekSM/0c4zx6rinZ4iG+J75EQ9Il tSIaBSgBFQFKSnYxWebI17VQaxuogCgfscIuHzWBK08o6lohHcOIlb3SIJKmH597 /HRev8d+tqNluDPVHlMqVBU+bT8y9EUumjLjEch78z1UojNwUG+Y5cGZ12oYCD8G olww9Y8nIIRgMIEJrjaBuJttyMetbZM= -----END CERTIFICATE-----Generated at Thu Jul 3 23:44:48 2025 by rpki-client