$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.mft File: 83-esXYeax0_fqbWxvyluZc5FKs.mft (raw, json) Hash identifier: Y64AYgpluwiQtsfM7e71qpQW9/yhMLniJKUL8JUbfe4= Subject key identifier: 8A:1D:CA:00:14:D5:BF:21:85:72:21:DC:30:13:45:18:F6:65:0D:21 Authority key identifier: F3:7F:9E:B1:76:1E:6B:1D:3F:7E:A6:D6:C6:FC:A5:B9:97:39:14:AB Certificate issuer: /CN=A91B8FA2/serialNumber=F37F9EB1761E6B1D3F7EA6D6C6FCA5B9973914AB Certificate serial: 0450 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83-esXYeax0_fqbWxvyluZc5FKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.mft Manifest number: 044B Signing time: Sat 23 Aug 2025 00:29:16 +0000 Manifest this update: Sat 23 Aug 2025 00:29:16 +0000 Manifest next update: Sat 30 Aug 2025 00:29:16 +0000 Files and hashes: 1: 83-esXYeax0_fqbWxvyluZc5FKs.crl (hash: lkVvu1bXnuj+gMTtmtbrM/7ApwBpwVFr7ot8WyoSztk=) 2: FEDE0F2066C611EC93A73A3DC4F9AE02.roa (hash: OrbaAoDN+OT8Q5oOwIoJmcxxZsgOvnH47cr4vwyZT3M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.crl rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83-esXYeax0_fqbWxvyluZc5FKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:29:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1104 (0x450) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8FA2, serialNumber=F37F9EB1761E6B1D3F7EA6D6C6FCA5B9973914AB Validity Not Before: Aug 23 00:29:16 2025 GMT Not After : Aug 30 00:29:16 2025 GMT Subject: CN=68a90b5c-feba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b0:18:ff:b7:0b:77:b5:a5:c9:cb:a4:8f:c8: d5:65:0f:6f:93:53:fe:0c:df:c8:64:55:e7:4d:73: 5a:69:fe:6a:89:67:7d:8d:b1:ba:3f:d2:5e:e8:c2: 2f:c4:db:86:a2:85:2c:1a:ef:8b:d2:34:cc:de:65: de:e1:b3:fa:2f:94:79:1d:71:20:63:21:8a:7e:be: 35:19:ca:23:50:af:cf:5f:02:d6:d3:bb:d6:4b:ea: 7a:f8:57:fc:a6:c1:80:d5:c4:40:96:ab:76:42:a3: 33:7d:dc:09:47:2a:cd:ff:41:90:39:fb:ac:e5:8a: 7a:3b:3e:4d:dc:13:d5:81:f4:08:4b:54:c9:4c:6b: 08:66:06:3d:f8:49:ba:54:7d:70:ce:17:56:84:13: b9:a8:78:fe:90:e6:f3:bf:2a:d3:7b:49:38:2a:e4: 7f:e6:e5:31:d6:81:8b:c8:ac:00:bc:dc:de:95:f6: 20:38:b8:dc:12:13:65:fe:5f:35:de:31:40:ff:84: cd:58:c4:a1:09:f6:ef:ad:62:35:c5:18:c4:8f:cc: dd:3c:78:3b:75:e2:eb:68:d4:27:63:b0:4e:0b:ae: fc:70:ed:98:3b:a9:b2:5e:20:78:81:fb:fe:38:e1: ae:96:39:68:2c:04:60:b1:1e:45:f7:af:d3:70:27: 9c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:1D:CA:00:14:D5:BF:21:85:72:21:DC:30:13:45:18:F6:65:0D:21 X509v3 Authority Key Identifier: keyid:F3:7F:9E:B1:76:1E:6B:1D:3F:7E:A6:D6:C6:FC:A5:B9:97:39:14:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83-esXYeax0_fqbWxvyluZc5FKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:ad:54:a6:f5:4f:8e:30:9e:84:a1:f9:6f:32:0e:9c:16:1d: 5c:0d:60:c9:81:38:7e:bf:d2:09:93:6e:df:6d:b5:5d:e3:a2: b8:83:64:80:cd:cc:87:9b:2b:1a:21:bd:76:27:52:56:3a:2d: 85:a3:3f:6f:a6:bc:d5:cb:da:29:70:4d:78:4b:bd:af:0e:3c: 2f:ec:ff:7e:9c:27:88:4a:e4:22:ab:6d:92:3b:2c:29:79:48: ba:da:9d:73:14:c4:30:5d:aa:d7:e8:5c:49:99:67:95:f2:ab: 7a:6c:75:46:14:7a:43:ac:05:2b:2f:2b:83:2c:b9:d7:a3:25: 76:8c:d0:4e:89:b3:58:4b:27:69:aa:25:24:58:f2:e9:21:8a: 1c:f2:b5:b2:85:e5:04:66:28:ce:6c:48:6e:24:2a:a3:dc:1d: 85:91:0f:70:c2:50:6a:f0:ba:9b:dc:dd:4f:44:f5:54:0c:c9: eb:1a:45:84:cc:21:b7:da:68:cd:ab:e9:61:ad:49:4c:fe:d8: f4:82:ad:67:32:ed:b4:67:77:b0:58:0b:38:46:f1:5c:0d:bc: 69:92:57:df:73:79:dc:c4:0e:e9:a2:48:dd:74:f0:af:65:db: b3:79:d3:e5:07:1d:1f:4f:89:c6:6c:27:45:ad:26:de:3b:b2: b8:61:bb:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhGQTIxMTAvBgNVBAUTKEYzN0Y5RUIxNzYxRTZCMUQzRjdFQTZENkM2RkNBNUI5 OTczOTE0QUIwHhcNMjUwODIzMDAyOTE2WhcNMjUwODMwMDAyOTE2WjAYMRYwFAYD VQQDEw02OGE5MGI1Yy1mZWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqbAY/7cLd7Wlycukj8jVZQ9vk1P+DN/IZFXnTXNaaf5qiWd9jbG6P9Je6MIv xNuGooUsGu+L0jTM3mXe4bP6L5R5HXEgYyGKfr41GcojUK/PXwLW07vWS+p6+Ff8 psGA1cRAlqt2QqMzfdwJRyrN/0GQOfus5Yp6Oz5N3BPVgfQIS1TJTGsIZgY9+Em6 VH1wzhdWhBO5qHj+kObzvyrTe0k4KuR/5uUx1oGLyKwAvNzelfYgOLjcEhNl/l81 3jFA/4TNWMShCfbvrWI1xRjEj8zdPHg7deLraNQnY7BOC678cO2YO6myXiB4gfv+ OOGuljloLARgsR5F96/TcCecuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIodygAU 1b8hhXIh3DATRRj2ZQ0hMB8GA1UdIwQYMBaAFPN/nrF2HmsdP36m1sb8pbmXORSr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEZBMi85MUI3REY0QzY2 QzIxMUVDQjU1QTlGMzFDNEY5QUUwMi84My1lc1hZZWF4MF9mcWJXeHZ5bHVaYzVG S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgzLWVzWFllYXgwX2ZxYld4dnlsdVpjNUZLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEZBMi85MUI3REY0QzY2QzIxMUVDQjU1QTlGMzFDNEY5QUUwMi84My1lc1hZZWF4 MF9mcWJXeHZ5bHVaYzVGS3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPrVSm9U+OMJ6EoflvMg6cFh1cDWDJgTh+v9IJk27fbbVd46K4g2SA zcyHmysaIb12J1JWOi2Foz9vprzVy9opcE14S72vDjwv7P9+nCeISuQiq22SOywp eUi62p1zFMQwXarX6FxJmWeV8qt6bHVGFHpDrAUrLyuDLLnXoyV2jNBOibNYSydp qiUkWPLpIYoc8rWyheUEZijObEhuJCqj3B2FkQ9wwlBq8Lqb3N1PRPVUDMnrGkWE zCG32mjNq+lhrUlM/tj0gq1nMu20Z3ewWAs4RvFcDbxpklffc3ncxA7pokjddPCv ZduzedPlBx0fT4nGbCdFrSbeO7K4YbvK -----END CERTIFICATE-----Generated at Sat Aug 23 22:31:14 2025 by rpki-client