$ rpki-client -vvf rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/36hgRQpvzrHG57jU_1SxVBobabM.mft File: 36hgRQpvzrHG57jU_1SxVBobabM.mft (raw, json) Hash identifier: kRFWO1CScOPZNKPzNu7BZ3MqWwc1z2cYOWAw1Jdwkkw= Subject key identifier: 80:A1:38:65:90:93:78:BD:24:AB:B6:A6:B5:E3:D4:54:DB:ED:1A:F2 Authority key identifier: DF:A8:60:45:0A:6F:CE:B1:C6:E7:B8:D4:FF:54:B1:54:1A:1B:69:B3 Certificate issuer: /CN=A91534B8/serialNumber=DFA860450A6FCEB1C6E7B8D4FF54B1541A1B69B3 Certificate serial: 02C3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/36hgRQpvzrHG57jU_1SxVBobabM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/36hgRQpvzrHG57jU_1SxVBobabM.mft Manifest number: 02BB Signing time: Sat 23 Aug 2025 01:45:16 +0000 Manifest this update: Sat 23 Aug 2025 01:45:15 +0000 Manifest next update: Sat 30 Aug 2025 01:45:15 +0000 Files and hashes: 1: 36hgRQpvzrHG57jU_1SxVBobabM.crl (hash: XqBhSddAwuXmEnwoREggip3y9vN++1XzW3t93jvkar4=) 2: 56C4B5083DF511ED98215F18C4F9AE02.roa (hash: u+f2WuZi/RfejSsKb+UJ5iop6uONOfiC5gYEcHsbs6w=) 3: B0FA33FE6F9611ED8A672F69C4F9AE02.roa (hash: YDAiAdPjFYhBL5YjXoGqzzo8vheOfOc5VPFiiANGCJc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/36hgRQpvzrHG57jU_1SxVBobabM.crl rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/36hgRQpvzrHG57jU_1SxVBobabM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/36hgRQpvzrHG57jU_1SxVBobabM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:45:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 707 (0x2c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91534B8, serialNumber=DFA860450A6FCEB1C6E7B8D4FF54B1541A1B69B3 Validity Not Before: Aug 23 01:45:15 2025 GMT Not After : Aug 30 01:45:15 2025 GMT Subject: CN=68a91d2c-666f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0e:1c:bc:fb:71:ba:23:25:63:5c:07:09:ab: 9c:23:b4:1f:31:a1:0a:1b:83:06:3c:37:35:1c:d9: fb:d4:14:83:7c:1f:b5:84:5b:de:04:29:68:3a:06: ff:49:f2:2c:81:3c:f0:e6:66:b8:70:3a:25:db:39: d4:51:31:45:ef:1b:19:df:81:04:1e:0d:b7:92:60: a4:be:fd:f8:c7:7a:cc:1b:08:3d:56:47:0e:b6:8d: 48:dc:a6:6c:c4:87:25:b5:11:9a:33:4c:52:9c:fb: ba:e0:6e:52:a1:f9:54:66:71:aa:3f:fb:ad:2c:5a: fb:50:c6:5b:2c:cc:25:15:4d:a4:cd:1f:a4:4f:41: 47:d5:a9:8a:86:1e:06:18:8c:23:e5:f5:81:2a:13: 82:96:ff:f1:be:69:94:fc:55:5e:5d:20:03:8a:5a: 4e:ed:8b:4a:0c:b9:be:e5:b6:e2:7b:9e:13:e5:8c: 8a:d3:18:a3:35:e2:78:88:7a:dd:30:7f:62:4c:f0: 95:84:79:4b:fb:b7:e0:17:65:ea:74:1f:4b:4f:92: ea:e7:d9:47:69:ed:cd:79:51:6c:6a:55:69:8e:c4: 29:c9:21:e1:82:9e:a2:7a:4c:52:c7:9a:1a:19:97: 03:c8:62:67:87:fc:d9:67:c0:b3:c5:06:3f:74:8f: d6:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:A1:38:65:90:93:78:BD:24:AB:B6:A6:B5:E3:D4:54:DB:ED:1A:F2 X509v3 Authority Key Identifier: keyid:DF:A8:60:45:0A:6F:CE:B1:C6:E7:B8:D4:FF:54:B1:54:1A:1B:69:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/36hgRQpvzrHG57jU_1SxVBobabM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/36hgRQpvzrHG57jU_1SxVBobabM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/36hgRQpvzrHG57jU_1SxVBobabM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:04:3d:a4:ce:7c:a1:90:66:a2:61:29:87:8e:b1:c9:cd:e4: 88:66:0d:d8:97:a2:cd:9e:9e:bb:3e:58:b5:4f:91:ec:7f:2c: f7:a3:15:30:d1:eb:f3:52:2a:3c:dd:7e:3d:43:f6:04:41:a4: 12:2d:1f:d2:9b:ae:80:f2:22:e8:20:44:40:bd:b6:d1:01:c3: ca:0b:d9:2f:76:71:88:a6:33:ec:d5:98:1b:6e:ef:9d:57:b0: 7d:0f:6d:b8:35:93:2c:15:14:a6:de:7a:0d:4b:8d:a5:99:04: 5d:12:c1:09:86:95:17:a7:9c:fc:ba:da:fd:8b:22:d6:ec:2c: 08:f1:b6:de:dc:a9:1e:29:cc:f5:ab:f2:db:ae:1f:18:4d:9d: ea:3f:9e:e7:b6:1f:5a:67:a0:71:46:75:b0:ca:32:88:59:c7: d2:14:79:f5:67:ab:4b:c7:bc:87:69:a0:90:0c:be:ab:9a:55: cf:35:d7:bb:51:c1:ae:bd:d7:ed:64:1a:57:4b:43:8a:43:32: b5:db:34:b9:c4:cb:b2:31:0e:b8:97:5c:2d:47:e7:37:42:a8: f8:b0:30:3e:8d:8a:a5:43:a7:b2:78:37:7d:87:e8:8a:67:64: 57:2d:15:b2:81:93:47:8a:54:9e:74:31:d4:0a:fd:dd:b2:03: 28:28:2b:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM0QjgxMTAvBgNVBAUTKERGQTg2MDQ1MEE2RkNFQjFDNkU3QjhENEZGNTRCMTU0 MUExQjY5QjMwHhcNMjUwODIzMDE0NTE1WhcNMjUwODMwMDE0NTE1WjAYMRYwFAYD VQQDEw02OGE5MWQyYy02NjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQ4cvPtxuiMlY1wHCaucI7QfMaEKG4MGPDc1HNn71BSDfB+1hFveBCloOgb/ SfIsgTzw5ma4cDol2znUUTFF7xsZ34EEHg23kmCkvv34x3rMGwg9VkcOto1I3KZs xIcltRGaM0xSnPu64G5SoflUZnGqP/utLFr7UMZbLMwlFU2kzR+kT0FH1amKhh4G GIwj5fWBKhOClv/xvmmU/FVeXSADilpO7YtKDLm+5bbie54T5YyK0xijNeJ4iHrd MH9iTPCVhHlL+7fgF2XqdB9LT5Lq59lHae3NeVFsalVpjsQpySHhgp6iekxSx5oa GZcDyGJnh/zZZ8CzxQY/dI/WmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIChOGWQ k3i9JKu2prXj1FTb7RryMB8GA1UdIwQYMBaAFN+oYEUKb86xxue41P9UsVQaG2mz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzRCOC85RjAzQkI2MDA5 NDQxMUVEOEREMTA5NzFDNEY5QUUwMi8zNmhnUlFwdnpySEc1N2pVXzFTeFZCb2Jh Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzM2aGdSUXB2enJIRzU3alVfMVN4VkJvYmFiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzRCOC85RjAzQkI2MDA5NDQxMUVEOEREMTA5NzFDNEY5QUUwMi8zNmhnUlFwdnpy SEc1N2pVXzFTeFZCb2JhYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYBD2kznyhkGaiYSmHjrHJzeSIZg3Yl6LNnp67Pli1T5Hsfyz3oxUw 0evzUio83X49Q/YEQaQSLR/Sm66A8iLoIERAvbbRAcPKC9kvdnGIpjPs1Zgbbu+d V7B9D224NZMsFRSm3noNS42lmQRdEsEJhpUXp5z8utr9iyLW7CwI8bbe3KkeKcz1 q/Lbrh8YTZ3qP57nth9aZ6BxRnWwyjKIWcfSFHn1Z6tLx7yHaaCQDL6rmlXPNde7 UcGuvdftZBpXS0OKQzK12zS5xMuyMQ64l1wtR+c3Qqj4sDA+jYqlQ6eyeDd9h+iK Z2RXLRWygZNHilSedDHUCv3dsgMoKCvh -----END CERTIFICATE-----Generated at Sat Aug 23 12:40:29 2025 by rpki-client