$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft File: U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft (raw, json) Hash identifier: 2s7vYtx7W35U5GUf/yrG4CMHzktzAh6JMHugbBCXKQw= Subject key identifier: 20:CB:2E:3F:81:20:D8:9C:14:E4:F2:92:7D:8F:F7:35:55:03:AD:5F Authority key identifier: 53:D5:DB:87:0E:5C:CD:48:E9:8D:73:56:0D:BD:5E:65:94:6C:2D:D4 Certificate issuer: /CN=A91BA251/serialNumber=53D5DB870E5CCD48E98D73560DBD5E65946C2DD4 Certificate serial: 056F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft Manifest number: 0565 Signing time: Fri 22 Aug 2025 23:31:57 +0000 Manifest this update: Fri 22 Aug 2025 23:31:57 +0000 Manifest next update: Fri 29 Aug 2025 23:31:57 +0000 Files and hashes: 1: U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl (hash: 14uvXnYixTDhTR71JuosM9RVVNpfc8uyjY5QV4+b740=) 2: 567C8DB8354111ECBCC05B63C4F9AE02.roa (hash: bYFWsdvkvj/YP0lWqT722iQHX6ldCjoCu3l/f+mKfk8=) 3: DEA2CCF8050511EEB4D8141FC4F9AE02.roa (hash: CWQZ2s8MFSjBmURLoXYowyPCs3y0c7wnZAfg2tROfa4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:31:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1391 (0x56f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA251, serialNumber=53D5DB870E5CCD48E98D73560DBD5E65946C2DD4 Validity Not Before: Aug 22 23:31:57 2025 GMT Not After : Aug 29 23:31:57 2025 GMT Subject: CN=68a8fded-25e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:16:38:10:dd:e4:82:83:ed:c8:55:34:4f:11: 81:98:b0:bd:a2:ac:90:fe:be:61:28:db:c5:37:8a: 46:b3:dd:ef:ce:70:47:2e:bd:af:29:44:9b:42:04: 55:c6:35:51:39:66:53:3d:a0:71:01:3a:68:f4:d1: c6:ae:2a:16:ab:9d:57:d2:91:47:76:eb:ff:ff:2c: 6e:50:9b:0a:c4:a6:2d:60:53:f1:0c:00:c0:0c:55: af:4e:c5:b9:f6:fc:5e:23:88:82:2a:eb:b5:2d:cb: 3a:d7:b3:e3:39:9c:ac:d4:e0:c0:97:f9:e9:4e:8a: de:ae:4c:c3:a5:3e:02:d5:45:82:84:40:07:14:a7: 04:ec:f4:e7:b6:03:30:d7:fb:c6:df:20:bd:4c:ad: f2:7a:89:f8:72:57:f1:24:f5:9b:2a:6d:24:36:ea: 61:55:33:bc:2a:23:6c:a3:7a:76:f9:98:1b:15:f8: 8b:61:8f:94:d8:47:1d:69:ef:32:63:9c:76:46:05: 5e:8d:66:91:f6:65:ba:eb:45:07:9d:9b:e8:fc:b1: de:76:10:6b:69:f1:2f:55:36:b5:a4:24:0b:b6:94: ed:7a:b3:73:f2:c0:e6:3c:01:a5:22:7c:14:34:31: 1c:57:c1:46:bf:8d:b6:e6:29:c1:88:51:7d:28:65: f8:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:CB:2E:3F:81:20:D8:9C:14:E4:F2:92:7D:8F:F7:35:55:03:AD:5F X509v3 Authority Key Identifier: keyid:53:D5:DB:87:0E:5C:CD:48:E9:8D:73:56:0D:BD:5E:65:94:6C:2D:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:d4:27:22:0a:5d:ec:76:24:8f:a7:2d:33:68:7f:50:02:1e: 2d:f9:e8:5b:a8:f3:ce:b1:08:d3:e0:94:39:54:67:05:75:c3: 1a:ab:ee:6e:dd:ae:94:03:58:ff:eb:81:3d:14:19:22:38:a5: 6f:a5:46:2a:9c:35:04:ae:bb:9e:f6:11:76:a7:23:32:36:99: 40:18:3c:07:f2:51:18:d0:bb:00:78:03:4c:b2:59:a6:fd:c1: 6c:94:6a:74:dd:29:a7:08:b5:eb:a3:52:1a:ca:b7:4d:92:1e: f6:db:ac:27:60:0a:c0:3e:74:20:7f:dd:92:c1:da:fd:d7:fd: 96:ba:78:3e:65:40:73:b6:31:42:26:1a:80:68:ad:68:00:ce: 99:87:6d:18:3a:d0:67:e6:59:3f:8b:90:f6:e4:34:d4:c7:ad: 14:2e:88:8a:8e:9b:4d:24:18:f0:c5:7d:e7:5a:bb:21:c9:a2: 84:f0:02:1c:38:c4:b3:ef:5c:7d:f6:4b:0b:37:62:28:6c:b3: 4c:b1:14:5f:56:dc:db:9b:c3:db:95:2a:5e:e6:b3:98:a8:c7: ad:d5:ae:62:48:89:dd:1f:6a:8b:a4:8c:9c:b0:eb:92:e0:5a: cd:82:66:31:ba:cc:08:29:d7:78:9b:c9:20:f9:22:d2:94:ac: b2:25:4e:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEyNTExMTAvBgNVBAUTKDUzRDVEQjg3MEU1Q0NENDhFOThENzM1NjBEQkQ1RTY1 OTQ2QzJERDQwHhcNMjUwODIyMjMzMTU3WhcNMjUwODI5MjMzMTU3WjAYMRYwFAYD VQQDEw02OGE4ZmRlZC0yNWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3RY4EN3kgoPtyFU0TxGBmLC9oqyQ/r5hKNvFN4pGs93vznBHLr2vKUSbQgRV xjVROWZTPaBxATpo9NHGrioWq51X0pFHduv//yxuUJsKxKYtYFPxDADADFWvTsW5 9vxeI4iCKuu1Lcs617PjOZys1ODAl/npTorerkzDpT4C1UWChEAHFKcE7PTntgMw 1/vG3yC9TK3yeon4clfxJPWbKm0kNuphVTO8KiNso3p2+ZgbFfiLYY+U2Ecdae8y Y5x2RgVejWaR9mW660UHnZvo/LHedhBrafEvVTa1pCQLtpTterNz8sDmPAGlInwU NDEcV8FGv4225inBiFF9KGX4FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCDLLj+B INicFOTykn2P9zVVA61fMB8GA1UdIwQYMBaAFFPV24cOXM1I6Y1zVg29XmWUbC3U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTI1MS9EOTNENzk2MEY3 NDgxMUVCQTc1RkNDMTNDNEY5QUUwMi9VOVhiaHc1Y3pVanBqWE5XRGIxZVpaUnNM ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U5WGJodzVjelVqcGpYTldEYjFlWlpSc0xkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTI1MS9EOTNENzk2MEY3NDgxMUVCQTc1RkNDMTNDNEY5QUUwMi9VOVhiaHc1Y3pV anBqWE5XRGIxZVpaUnNMZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBm1CciCl3sdiSPpy0zaH9QAh4t+ehbqPPOsQjT4JQ5VGcFdcMaq+5u 3a6UA1j/64E9FBkiOKVvpUYqnDUErrue9hF2pyMyNplAGDwH8lEY0LsAeANMslmm /cFslGp03SmnCLXro1IayrdNkh7226wnYArAPnQgf92Swdr91/2Wung+ZUBztjFC JhqAaK1oAM6Zh20YOtBn5lk/i5D25DTUx60ULoiKjptNJBjwxX3nWrshyaKE8AIc OMSz71x99ksLN2IobLNMsRRfVtzbm8PblSpe5rOYqMet1a5iSIndH2qLpIycsOuS 4FrNgmYxuswIKdd4m8kg+SLSlKyyJU4p -----END CERTIFICATE-----Generated at Sun Aug 24 00:20:08 2025 by rpki-client