$ rpki-client -vvf rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft File: Ut5nj6808fJ7_XLOdS9c1X6ME84.mft (raw, json) Hash identifier: 5ADlAQgOdVIPui/HApqs60mnb1rb3azlewsEnqa0nNU= Subject key identifier: 52:E3:61:0A:2F:B5:46:DC:C5:B5:64:AF:62:FA:1D:83:BE:C7:01:C7 Authority key identifier: 52:DE:67:8F:AF:34:F1:F2:7B:FD:72:CE:75:2F:5C:D5:7E:8C:13:CE Certificate issuer: /CN=A91781C0/serialNumber=52DE678FAF34F1F27BFD72CE752F5CD57E8C13CE Certificate serial: 01FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft Manifest number: 01F6 Signing time: Sat 23 Aug 2025 02:36:48 +0000 Manifest this update: Sat 23 Aug 2025 02:36:48 +0000 Manifest next update: Sat 30 Aug 2025 02:36:47 +0000 Files and hashes: 1: Ut5nj6808fJ7_XLOdS9c1X6ME84.crl (hash: SBvlnPZJqi4FJpQ3RZY3/kNv+86jsjH+0C0iT9/ii0U=) 2: F5D6B6B8810811ED9EA03683C4F9AE02.roa (hash: WWuM765nOGpRARWICFdR3WrAuYsh9pXJlLffK+z2xm8=) 3: F69540BA810811ED9EA03683C4F9AE02.roa (hash: WdWxS6dCM7XMQ2LQO0o9GTTA7XcowvkD2iePT2v6AE4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.crl rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:36:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 510 (0x1fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91781C0, serialNumber=52DE678FAF34F1F27BFD72CE752F5CD57E8C13CE Validity Not Before: Aug 23 02:36:48 2025 GMT Not After : Aug 30 02:36:47 2025 GMT Subject: CN=68a92940-b844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1d:b3:65:d5:cc:e1:5b:06:08:3f:7c:7c:b9: 27:0b:d1:b3:9f:57:5b:f5:ba:6d:db:1e:55:97:08: 11:25:1b:08:03:08:b0:f6:50:1f:3b:4b:0a:97:10: 41:2d:fd:ba:89:79:5b:77:b4:ab:c3:38:c6:a5:82: f1:ce:35:fa:47:e0:59:ad:09:58:9d:1e:be:74:34: f3:3d:13:e2:6f:49:6a:9e:bc:88:e9:ab:ec:b6:74: b7:63:55:13:c9:1c:96:74:9d:33:0e:e4:b4:3e:bb: 4d:ee:40:47:55:72:b2:fd:eb:20:2e:7a:28:f4:87: 09:43:22:ba:bb:ef:82:60:0e:a0:8e:c0:3a:49:9e: 48:dd:a0:01:9c:d5:1d:52:0f:85:63:72:76:9b:5f: d3:1e:3b:73:10:d6:a9:5e:04:a1:66:13:24:de:05: f3:00:a3:7a:af:27:0f:91:68:b9:54:77:c1:93:50: 9c:cf:f7:17:18:de:e2:e6:55:6f:f4:22:29:22:2b: 26:3e:6e:eb:1c:be:d4:92:33:3b:3a:8f:43:ec:cc: 69:ba:ae:9c:4a:bc:ff:28:11:e6:4b:79:d7:26:fb: a5:56:f3:07:a6:6f:85:8f:89:b9:3c:fd:e6:8a:8f: 13:36:05:fc:d3:09:1d:fc:cf:f7:04:f4:25:5c:ec: 1a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E3:61:0A:2F:B5:46:DC:C5:B5:64:AF:62:FA:1D:83:BE:C7:01:C7 X509v3 Authority Key Identifier: keyid:52:DE:67:8F:AF:34:F1:F2:7B:FD:72:CE:75:2F:5C:D5:7E:8C:13:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:90:ac:3f:0a:3d:2a:1f:4a:38:00:9e:f5:de:a7:64:e9:30: c1:f9:31:89:39:32:1f:50:b4:3f:3d:78:67:40:36:36:5b:54: e1:07:66:60:03:9f:7c:16:d8:98:16:40:47:e2:14:41:fb:43: 05:b5:42:98:e9:78:af:93:64:cb:80:4e:9d:8c:aa:36:48:2c: d6:bf:11:42:c7:53:48:ad:eb:a4:d0:0a:1c:ec:12:c1:8a:42: 52:5c:f6:33:4c:cc:06:77:a7:64:c9:c1:83:8c:0b:2c:e3:7e: 30:dc:92:45:83:32:fe:ab:75:6c:7d:64:c2:a9:42:25:69:07: 8b:f2:9d:a6:5e:c3:ca:88:e8:66:cc:04:d7:23:ab:7d:45:6a: 24:79:70:66:02:af:91:cb:8d:bd:c6:7d:19:4f:62:d3:bb:d3: bc:7c:78:57:2a:08:5e:f6:c0:64:86:a3:21:cf:b2:03:e3:17: c5:61:25:1d:12:9e:4d:63:3e:29:de:d2:ea:75:6e:0f:09:d8: 0a:3d:9e:52:8b:04:bc:78:7c:37:96:f0:28:89:fd:48:c4:58: 58:22:0b:91:26:a4:41:d1:14:80:c1:0d:66:42:f5:17:62:f6: 86:dd:45:c2:19:88:50:dc:22:d1:43:15:a8:5d:c2:b4:76:cf: 2d:86:cb:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzgxQzAxMTAvBgNVBAUTKDUyREU2NzhGQUYzNEYxRjI3QkZENzJDRTc1MkY1Q0Q1 N0U4QzEzQ0UwHhcNMjUwODIzMDIzNjQ4WhcNMjUwODMwMDIzNjQ3WjAYMRYwFAYD VQQDEw02OGE5Mjk0MC1iODQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxh2zZdXM4VsGCD98fLknC9Gzn1db9bpt2x5VlwgRJRsIAwiw9lAfO0sKlxBB Lf26iXlbd7SrwzjGpYLxzjX6R+BZrQlYnR6+dDTzPRPib0lqnryI6avstnS3Y1UT yRyWdJ0zDuS0PrtN7kBHVXKy/esgLnoo9IcJQyK6u++CYA6gjsA6SZ5I3aABnNUd Ug+FY3J2m1/THjtzENapXgShZhMk3gXzAKN6rycPkWi5VHfBk1Ccz/cXGN7i5lVv 9CIpIismPm7rHL7UkjM7Oo9D7Mxpuq6cSrz/KBHmS3nXJvulVvMHpm+Fj4m5PP3m io8TNgX80wkd/M/3BPQlXOwaPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFLjYQov tUbcxbVkr2L6HYO+xwHHMB8GA1UdIwQYMBaAFFLeZ4+vNPHye/1yznUvXNV+jBPO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODFDMC8yRjI4OUVENjgx MDQxMUVEQkVDNjUwODdDNEY5QUUwMi9VdDVuajY4MDhmSjdfWExPZFM5YzFYNk1F ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V0NW5qNjgwOGZKN19YTE9kUzljMVg2TUU4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODFDMC8yRjI4OUVENjgxMDQxMUVEQkVDNjUwODdDNEY5QUUwMi9VdDVuajY4MDhm SjdfWExPZFM5YzFYNk1FODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBikKw/Cj0qH0o4AJ713qdk6TDB+TGJOTIfULQ/PXhnQDY2W1ThB2Zg A598FtiYFkBH4hRB+0MFtUKY6Xivk2TLgE6djKo2SCzWvxFCx1NIreuk0Aoc7BLB ikJSXPYzTMwGd6dkycGDjAss434w3JJFgzL+q3VsfWTCqUIlaQeL8p2mXsPKiOhm zATXI6t9RWokeXBmAq+Ry429xn0ZT2LTu9O8fHhXKghe9sBkhqMhz7ID4xfFYSUd Ep5NYz4p3tLqdW4PCdgKPZ5SiwS8eHw3lvAoif1IxFhYIguRJqRB0RSAwQ1mQvUX YvaG3UXCGYhQ3CLRQxWoXcK0ds8thsuL -----END CERTIFICATE-----Generated at Sat Aug 23 14:06:41 2025 by rpki-client