$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft File: cxfXd72qYzPNlqgQS5TeD6R1IRM.mft (raw, json) Hash identifier: HXpPWj9speKnY28w8nBcPr7I623YMkmAcnsbs48wePo= Subject key identifier: 42:20:42:8D:E4:31:39:2A:C1:34:7C:C5:2E:7A:EC:3D:BC:CC:D1:3F Authority key identifier: 73:17:D7:77:BD:AA:63:33:CD:96:A8:10:4B:94:DE:0F:A4:75:21:13 Certificate issuer: /CN=A91BA941/serialNumber=7317D777BDAA6333CD96A8104B94DE0FA4752113 Certificate serial: 99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxfXd72qYzPNlqgQS5TeD6R1IRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft Manifest number: 96 Signing time: Sat 23 Aug 2025 06:40:15 +0000 Manifest this update: Sat 23 Aug 2025 06:40:15 +0000 Manifest next update: Sat 30 Aug 2025 06:40:15 +0000 Files and hashes: 1: cxfXd72qYzPNlqgQS5TeD6R1IRM.crl (hash: TmPEpcabRj8j9Q3CLYOukZ4V0wa933tuMzUOGGzEX7A=) 2: 48A5FCA4A0A211EF81FA6876C4F9AE02.roa (hash: hQ884t+I5StX9TWBv4SYubO1nFPYJpeoarqEYGTcC7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.crl rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxfXd72qYzPNlqgQS5TeD6R1IRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:40:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA941, serialNumber=7317D777BDAA6333CD96A8104B94DE0FA4752113 Validity Not Before: Aug 23 06:40:15 2025 GMT Not After : Aug 30 06:40:15 2025 GMT Subject: CN=68a9624f-cd7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e6:81:6b:aa:04:85:8f:5c:ad:e0:15:bd:15: 9e:a1:5a:92:6c:e6:99:10:12:e6:16:51:57:66:5f: 5c:1c:d9:2c:27:92:73:56:6b:68:17:42:7d:c0:af: be:1d:a9:8a:d7:40:fd:2c:b0:af:fb:9f:2f:68:11: 85:87:59:87:22:f7:ca:44:ef:8f:19:2b:6b:86:5b: b8:38:3f:e0:7a:e4:14:61:29:af:1d:ed:55:8b:22: c1:61:8c:6e:bf:84:23:a5:de:88:53:9c:bf:ce:f4: 67:69:11:3a:28:9e:09:55:d6:27:d9:70:c7:c4:11: 8e:da:4c:68:c1:a9:5f:80:0e:26:9e:47:8c:ff:7a: 14:20:8f:fd:39:25:fc:da:5d:96:33:d0:3c:dd:ab: 08:a8:5f:59:22:64:20:13:2d:f9:07:8f:9b:23:ce: fb:b8:f5:1e:08:10:98:6c:59:79:00:07:63:2f:90: e8:19:fb:7f:5e:79:83:1d:96:7c:f7:58:1d:de:3a: e3:40:44:2e:79:1c:04:fb:f0:4d:1f:8b:4c:ba:31: dc:f9:2a:12:52:c5:d8:e0:1c:f6:3f:e0:2b:f3:22: 8a:b3:de:4c:b9:ee:41:af:fe:9b:6d:c6:d3:99:c5: 69:90:c1:b3:fd:40:20:1b:41:d2:a2:10:9e:ad:7a: 99:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:20:42:8D:E4:31:39:2A:C1:34:7C:C5:2E:7A:EC:3D:BC:CC:D1:3F X509v3 Authority Key Identifier: keyid:73:17:D7:77:BD:AA:63:33:CD:96:A8:10:4B:94:DE:0F:A4:75:21:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxfXd72qYzPNlqgQS5TeD6R1IRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:b5:c9:9c:c2:71:71:b1:c6:6e:b1:31:b5:fa:8d:59:76:c2: 51:64:1d:1d:36:d9:e7:fc:a8:09:1a:1f:2d:00:d1:f2:03:df: c7:f9:dd:ec:ea:9d:85:3f:96:92:05:95:49:e6:77:be:3b:1c: 62:c1:13:07:c1:0c:a9:af:9e:98:06:ad:fe:df:25:0f:ca:ce: 21:22:68:fc:48:ae:3c:99:2b:f7:3c:1e:55:a3:f0:96:a6:3d: 98:7c:71:8d:3a:90:e7:2d:eb:5b:43:b4:ca:b2:54:5e:83:ac: 10:33:8d:27:09:b9:7b:84:b3:1d:62:a7:96:3c:e7:93:de:50: a2:77:12:99:09:80:59:49:66:a2:29:4e:d2:40:76:db:cb:12: 84:bb:65:eb:20:88:5e:da:e6:2f:13:0c:26:28:6a:59:ed:fd: 16:e3:a9:73:f6:68:dc:bf:40:20:ee:de:1c:6e:95:97:af:61: dd:5d:e6:20:88:cf:99:a1:ff:73:3b:c6:2a:4a:69:b2:8e:27: 87:f6:57:8e:a8:b7:48:0d:ce:36:cf:a0:f2:be:aa:22:22:0b: 3c:26:50:64:4e:f3:7b:27:7b:0f:b8:fd:1c:a3:e4:70:2b:a8: 26:a6:a1:36:e6:f4:4f:0f:bb:02:6f:eb:0d:1a:d0:56:33:28: 97:b1:81:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE5NDExMTAvBgNVBAUTKDczMTdENzc3QkRBQTYzMzNDRDk2QTgxMDRCOTRERTBG QTQ3NTIxMTMwHhcNMjUwODIzMDY0MDE1WhcNMjUwODMwMDY0MDE1WjAYMRYwFAYD VQQDEw02OGE5NjI0Zi1jZDdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy+aBa6oEhY9creAVvRWeoVqSbOaZEBLmFlFXZl9cHNksJ5JzVmtoF0J9wK++ HamK10D9LLCv+58vaBGFh1mHIvfKRO+PGStrhlu4OD/geuQUYSmvHe1ViyLBYYxu v4Qjpd6IU5y/zvRnaRE6KJ4JVdYn2XDHxBGO2kxowalfgA4mnkeM/3oUII/9OSX8 2l2WM9A83asIqF9ZImQgEy35B4+bI877uPUeCBCYbFl5AAdjL5DoGft/XnmDHZZ8 91gd3jrjQEQueRwE+/BNH4tMujHc+SoSUsXY4Bz2P+Ar8yKKs95Mue5Br/6bbcbT mcVpkMGz/UAgG0HSohCerXqZAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEIgQo3k MTkqwTR8xS567D28zNE/MB8GA1UdIwQYMBaAFHMX13e9qmMzzZaoEEuU3g+kdSET MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTk0MS85QjNEMjU0OEEw QTAxMUVGOTA1MjMyNUZDNEY5QUUwMi9jeGZYZDcycVl6UE5scWdRUzVUZUQ2UjFJ Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N4ZlhkNzJxWXpQTmxxZ1FTNVRlRDZSMUlSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTk0MS85QjNEMjU0OEEwQTAxMUVGOTA1MjMyNUZDNEY5QUUwMi9jeGZYZDcycVl6 UE5scWdRUzVUZUQ2UjFJUk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWtcmcwnFxscZusTG1+o1ZdsJRZB0dNtnn/KgJGh8tANHyA9/H+d3s 6p2FP5aSBZVJ5ne+OxxiwRMHwQypr56YBq3+3yUPys4hImj8SK48mSv3PB5Vo/CW pj2YfHGNOpDnLetbQ7TKslReg6wQM40nCbl7hLMdYqeWPOeT3lCidxKZCYBZSWai KU7SQHbbyxKEu2XrIIhe2uYvEwwmKGpZ7f0W46lz9mjcv0Ag7t4cbpWXr2HdXeYg iM+Zof9zO8YqSmmyjieH9leOqLdIDc42z6DyvqoiIgs8JlBkTvN7J3sPuP0co+Rw K6gmpqE25vRPD7sCb+sNGtBWMyiXsYEt -----END CERTIFICATE-----Generated at Sat Aug 23 20:23:49 2025 by rpki-client