$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.mft File: RcneJU4uAwXWUKUKa_GSaIB-8Qo.mft (raw, json) Hash identifier: 4VF6EXGvwcmPvVn5NqcmK06tq3o+o+iNCucbcT56WuM= Subject key identifier: 1A:7D:B0:98:A9:92:30:24:67:5C:58:CF:DA:D0:3F:11:10:41:F0:7B Authority key identifier: 45:C9:DE:25:4E:2E:03:05:D6:50:A5:0A:6B:F1:92:68:80:7E:F1:0A Certificate issuer: /CN=A91A1938/serialNumber=45C9DE254E2E0305D650A50A6BF19268807EF10A Certificate serial: 01B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcneJU4uAwXWUKUKa_GSaIB-8Qo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.mft Manifest number: 01AF Signing time: Sat 23 Aug 2025 03:15:33 +0000 Manifest this update: Sat 23 Aug 2025 03:15:32 +0000 Manifest next update: Sat 30 Aug 2025 03:15:32 +0000 Files and hashes: 1: RcneJU4uAwXWUKUKa_GSaIB-8Qo.crl (hash: If3fUkC535mr7eIRkAwTJfyScWwnZc+A0LS3XXI43s4=) 2: 68ECF3BAEE1911ED9C7CDC63C4F9AE02.roa (hash: BCIBhB1yRhPPINtU+Jvj6+AcCagEYHcs0oGO7PLSo3Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.crl rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcneJU4uAwXWUKUKa_GSaIB-8Qo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 435 (0x1b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1938, serialNumber=45C9DE254E2E0305D650A50A6BF19268807EF10A Validity Not Before: Aug 23 03:15:32 2025 GMT Not After : Aug 30 03:15:32 2025 GMT Subject: CN=68a93254-6d43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:15:40:0b:89:fa:02:33:9e:3b:6d:fa:78:3b: e3:3b:ca:5d:d2:10:b6:af:a2:4e:46:63:fc:d1:e4: 5a:76:fe:a5:11:b2:98:de:84:fd:2a:f1:2a:51:90: 99:2a:6c:44:94:f7:27:2b:0d:a2:54:12:b6:3c:3d: 2e:b5:21:24:43:5c:17:07:fe:60:ca:e3:1e:9f:bc: 7a:f8:3d:20:7b:39:d8:c9:32:2b:bd:ca:00:3f:c2: dd:4b:a4:aa:b4:1e:cb:7d:5e:fb:3d:ee:d6:84:8d: e8:82:86:98:f2:cc:5f:e9:3d:08:99:a9:3d:63:7b: b9:92:e9:f2:07:e8:e3:49:26:ef:63:87:03:3a:ca: 12:65:d5:9d:be:31:5e:64:38:6c:63:78:19:93:b5: f8:fd:f4:80:51:a3:b0:e0:8a:3a:a3:2f:f8:02:89: 91:fd:b0:3a:2f:7c:7f:39:00:ee:0f:1b:4e:fe:15: ff:82:8e:05:50:57:2f:95:79:db:6a:51:5e:08:22: c8:f8:5d:c8:29:71:3a:e0:a0:e6:55:04:f8:14:0b: ec:00:50:5e:c5:03:3b:90:59:af:01:fb:2f:f8:06: 50:bf:ec:8b:80:dc:c2:eb:9b:0e:1f:63:d5:4a:49: 14:de:d9:fc:7c:3d:63:56:f0:23:0a:93:88:8b:ca: bd:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:7D:B0:98:A9:92:30:24:67:5C:58:CF:DA:D0:3F:11:10:41:F0:7B X509v3 Authority Key Identifier: keyid:45:C9:DE:25:4E:2E:03:05:D6:50:A5:0A:6B:F1:92:68:80:7E:F1:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcneJU4uAwXWUKUKa_GSaIB-8Qo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:7a:ce:fd:da:ce:aa:f9:64:1b:3e:f8:85:76:04:98:c4:f0: 44:d2:d2:6f:27:bd:a3:75:52:f3:13:46:c7:cf:62:dc:da:36: e7:e7:bd:cb:6a:18:ca:d4:9a:ce:fc:43:dd:7b:59:85:a4:eb: 63:18:98:2e:39:62:4e:f7:dd:93:5d:18:2c:f7:8e:1c:ad:1f: fc:c5:f5:e8:d2:d0:a9:12:76:f5:0d:7d:4c:99:df:b4:2e:6e: b0:5d:10:dd:ec:0a:c6:62:81:91:bb:94:13:c1:95:3f:44:ff: 1f:98:9a:70:35:1d:53:f4:67:a4:d0:30:59:5d:ba:0b:9f:c3: 36:61:01:f7:c4:f8:a7:d7:01:bf:94:1c:1b:d2:3a:77:04:97: 94:40:cc:17:f9:24:23:b3:42:ae:d1:94:30:4e:9f:e2:dd:c3: 29:19:db:08:2b:ae:68:4d:08:67:84:74:11:c1:ad:b6:74:63: 2c:ae:d7:c9:c8:0d:24:31:00:19:26:6f:d3:04:b0:dd:fb:1d: c8:2a:56:86:3a:0c:d2:18:65:28:46:da:58:2f:3f:ad:02:e0: 86:2c:b4:b9:a6:e1:d3:7a:f2:57:b6:54:f9:b1:e4:97:e2:f2: e4:2e:5f:90:a5:f9:fe:9e:b6:f9:73:50:fb:9c:ee:ac:0b:14: e3:5a:6d:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTE5MzgxMTAvBgNVBAUTKDQ1QzlERTI1NEUyRTAzMDVENjUwQTUwQTZCRjE5MjY4 ODA3RUYxMEEwHhcNMjUwODIzMDMxNTMyWhcNMjUwODMwMDMxNTMyWjAYMRYwFAYD VQQDEw02OGE5MzI1NC02ZDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyxVAC4n6AjOeO236eDvjO8pd0hC2r6JORmP80eRadv6lEbKY3oT9KvEqUZCZ KmxElPcnKw2iVBK2PD0utSEkQ1wXB/5gyuMen7x6+D0geznYyTIrvcoAP8LdS6Sq tB7LfV77Pe7WhI3ogoaY8sxf6T0Imak9Y3u5kunyB+jjSSbvY4cDOsoSZdWdvjFe ZDhsY3gZk7X4/fSAUaOw4Io6oy/4AomR/bA6L3x/OQDuDxtO/hX/go4FUFcvlXnb alFeCCLI+F3IKXE64KDmVQT4FAvsAFBexQM7kFmvAfsv+AZQv+yLgNzC65sOH2PV SkkU3tn8fD1jVvAjCpOIi8q9dwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBp9sJip kjAkZ1xYz9rQPxEQQfB7MB8GA1UdIwQYMBaAFEXJ3iVOLgMF1lClCmvxkmiAfvEK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTkzOC81MjY4NDk3MkVF MTAxMUVEOTA2NTc0MzZDNEY5QUUwMi9SY25lSlU0dUF3WFdVS1VLYV9HU2FJQi04 UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JjbmVKVTR1QXdYV1VLVUthX0dTYUlCLThRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTkzOC81MjY4NDk3MkVFMTAxMUVEOTA2NTc0MzZDNEY5QUUwMi9SY25lSlU0dUF3 WFdVS1VLYV9HU2FJQi04UW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABes792s6q+WQbPviFdgSYxPBE0tJvJ72jdVLzE0bHz2Lc2jbn573L ahjK1JrO/EPde1mFpOtjGJguOWJO992TXRgs944crR/8xfXo0tCpEnb1DX1Mmd+0 Lm6wXRDd7ArGYoGRu5QTwZU/RP8fmJpwNR1T9Gek0DBZXboLn8M2YQH3xPin1wG/ lBwb0jp3BJeUQMwX+SQjs0Ku0ZQwTp/i3cMpGdsIK65oTQhnhHQRwa22dGMsrtfJ yA0kMQAZJm/TBLDd+x3IKlaGOgzSGGUoRtpYLz+tAuCGLLS5puHTevJXtlT5seSX 4vLkLl+Qpfn+nrb5c1D7nO6sCxTjWm3j -----END CERTIFICATE-----Generated at Sat Aug 23 18:26:39 2025 by rpki-client