$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft File: mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft (raw, json) Hash identifier: AnzyYX5agfbBeVL1upOp4I53BjtQ7384uH32ioj+rf0= Subject key identifier: 7E:F1:22:7E:CD:49:5C:22:57:13:0D:DF:FA:02:F3:48:29:45:40:77 Authority key identifier: 9A:4D:AF:8F:CA:85:E1:93:D3:4E:A4:95:97:99:6D:ED:17:CB:DF:1E Certificate issuer: /CN=A91B6D28/serialNumber=9A4DAF8FCA85E193D34EA49597996DED17CBDF1E Certificate serial: 34D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft Manifest number: 34C4 Signing time: Fri 22 Aug 2025 14:45:15 +0000 Manifest this update: Fri 22 Aug 2025 14:45:15 +0000 Manifest next update: Fri 29 Aug 2025 14:45:15 +0000 Files and hashes: 1: mk2vj8qF4ZPTTqSVl5lt7RfL3x4.crl (hash: KMIBHPrUP9ApYqweOfaVb1G5V+LqqlXecnBp5AM8BlY=) 2: AA6965E4CD8D11EF8DF2E66DC4F9AE02.roa (hash: gFJk3bH7mXlCaj14z9kV9xuGKxMKaTna9ngpZWUJXOU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.crl rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:45:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13523 (0x34d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6D28, serialNumber=9A4DAF8FCA85E193D34EA49597996DED17CBDF1E Validity Not Before: Aug 22 14:45:15 2025 GMT Not After : Aug 29 14:45:15 2025 GMT Subject: CN=68a8827b-eeff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a9:1a:1a:c4:74:59:3b:05:dc:43:bf:3d:16: e7:b7:bd:c3:07:ab:86:5a:22:57:5e:70:72:ce:ef: a9:42:c1:4c:f0:d4:ef:ca:6f:1c:83:97:62:7e:5d: 48:9c:5b:20:64:92:bb:b7:23:cc:f4:f5:60:59:d8: ae:3b:ff:35:66:55:dc:05:4e:60:ff:1b:03:91:b5: af:71:9c:01:ec:dc:47:17:a2:86:13:c4:bf:dd:45: a0:78:39:6b:2c:ad:54:eb:69:5b:04:18:d4:ea:00: 87:42:62:2c:f2:8a:62:0d:8b:59:28:2f:a3:25:a6: ed:53:23:03:15:02:7a:1b:62:17:4d:c9:89:e7:06: 50:2d:8e:79:17:ea:da:5d:f9:0f:4b:81:a1:b1:d7: 5a:7c:15:bb:20:c5:8c:17:67:7d:e1:ab:a7:5a:73: d4:3b:8a:17:e4:09:a5:80:6b:6b:9c:e6:28:26:20: f2:84:ae:d0:f5:b0:a5:b9:db:90:a4:de:f4:fb:38: 58:40:d8:7c:08:15:4c:46:4e:41:d4:04:dd:20:bc: c7:11:81:1c:8d:6e:f1:66:81:21:b9:a9:cf:5a:97: d3:90:c0:c0:a7:9d:e7:d5:10:55:28:9e:1f:38:75: b9:30:b9:0d:41:65:f5:0f:e8:35:d0:ce:c4:fe:6d: f8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:F1:22:7E:CD:49:5C:22:57:13:0D:DF:FA:02:F3:48:29:45:40:77 X509v3 Authority Key Identifier: keyid:9A:4D:AF:8F:CA:85:E1:93:D3:4E:A4:95:97:99:6D:ED:17:CB:DF:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:57:c3:8e:9d:43:2d:14:83:28:0c:71:c7:09:0d:69:7f:e2: 19:6e:35:ee:58:a1:2f:c0:23:54:68:1e:3c:77:c2:ab:2c:a5: 4f:4d:7e:86:53:3d:5f:75:dc:56:f0:7e:82:63:d8:8e:c4:b2: e0:36:04:97:a5:34:0c:f8:c4:7c:54:ab:31:5d:f5:69:19:99: 23:99:45:f6:a7:85:98:eb:1e:ef:66:bf:77:52:59:a1:a1:52: 76:ec:7b:5e:75:6a:fd:7a:00:39:2b:b5:ce:db:cd:f8:60:90: 57:95:57:1e:65:ae:50:53:50:f6:b6:85:96:45:98:8d:41:76: a9:8b:94:0a:c6:d5:d9:0d:0c:f3:3a:73:be:5c:31:2a:31:2e: 9d:45:b7:cc:c6:61:d9:b4:d2:01:65:c2:06:75:9d:59:2c:f8: 03:fa:84:09:cf:b4:71:ab:6c:e2:a6:4b:7b:cd:d3:25:ba:b5: f9:06:10:f1:eb:1b:19:32:fa:7d:e4:fd:ef:9f:79:04:e0:c4: f1:ca:5a:87:24:e6:14:91:ce:80:21:a8:ee:64:90:09:ad:6f: f3:78:f4:99:c4:00:d9:40:f9:37:74:e7:73:66:cb:41:f1:eb: 2e:eb:e0:dc:7e:62:55:8a:f1:f4:68:ad:8f:86:74:c2:a4:74: 50:8f:38:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZEMjgxMTAvBgNVBAUTKDlBNERBRjhGQ0E4NUUxOTNEMzRFQTQ5NTk3OTk2REVE MTdDQkRGMUUwHhcNMjUwODIyMTQ0NTE1WhcNMjUwODI5MTQ0NTE1WjAYMRYwFAYD VQQDEw02OGE4ODI3Yi1lZWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx6kaGsR0WTsF3EO/PRbnt73DB6uGWiJXXnByzu+pQsFM8NTvym8cg5difl1I nFsgZJK7tyPM9PVgWdiuO/81ZlXcBU5g/xsDkbWvcZwB7NxHF6KGE8S/3UWgeDlr LK1U62lbBBjU6gCHQmIs8opiDYtZKC+jJabtUyMDFQJ6G2IXTcmJ5wZQLY55F+ra XfkPS4GhsddafBW7IMWMF2d94aunWnPUO4oX5AmlgGtrnOYoJiDyhK7Q9bCluduQ pN70+zhYQNh8CBVMRk5B1ATdILzHEYEcjW7xZoEhuanPWpfTkMDAp53n1RBVKJ4f OHW5MLkNQWX1D+g10M7E/m34cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH7xIn7N SVwiVxMN3/oC80gpRUB3MB8GA1UdIwQYMBaAFJpNr4/KheGT006klZeZbe0Xy98e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkQyOC82MUQ0NTMxMDFE OTIxMUUyOUM1RjNBRjUwOEIwMkNEMi9tazJ2ajhxRjRaUFRUcVNWbDVsdDdSZkwz eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21rMnZqOHFGNFpQVFRxU1ZsNWx0N1JmTDN4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkQyOC82MUQ0NTMxMDFEOTIxMUUyOUM1RjNBRjUwOEIwMkNEMi9tazJ2ajhxRjRa UFRUcVNWbDVsdDdSZkwzeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaV8OOnUMtFIMoDHHHCQ1pf+IZbjXuWKEvwCNUaB48d8KrLKVPTX6G Uz1fddxW8H6CY9iOxLLgNgSXpTQM+MR8VKsxXfVpGZkjmUX2p4WY6x7vZr93Ulmh oVJ27HtedWr9egA5K7XO2834YJBXlVceZa5QU1D2toWWRZiNQXapi5QKxtXZDQzz OnO+XDEqMS6dRbfMxmHZtNIBZcIGdZ1ZLPgD+oQJz7Rxq2zipkt7zdMlurX5BhDx 6xsZMvp95P3vn3kE4MTxylqHJOYUkc6AIajuZJAJrW/zePSZxADZQPk3dOdzZstB 8esu6+DcfmJVivH0aK2PhnTCpHRQjzgh -----END CERTIFICATE-----Generated at Sat Aug 23 20:39:34 2025 by rpki-client