$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft File: D6tO-YKPSvJnwW2K1HEKjuybu64.mft (raw, json) Hash identifier: rcOyiTFU/fY51ShAxRfR8AEcBPmZU8ZaLsyx1oVcnoA= Subject key identifier: 79:E0:37:F5:D0:98:87:37:AF:B0:DF:38:17:56:42:27:4B:17:DC:72 Authority key identifier: 0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE Certificate issuer: /CN=A91BEBE9/serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE Certificate serial: 01B0 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft Manifest number: 01A5 Signing time: Sat 23 Aug 2025 03:21:04 +0000 Manifest this update: Sat 23 Aug 2025 03:21:03 +0000 Manifest next update: Sat 30 Aug 2025 03:21:03 +0000 Files and hashes: 1: D6tO-YKPSvJnwW2K1HEKjuybu64.crl (hash: lukdn2bQDq7eBocY5T2AMsSg/I/oQRTso3heOW2fBYA=) 2: A0DEDD52FDF811EEA4D57274C4F9AE02.roa (hash: 5LwG+YuvnWBKIRnuTBcbel0b3f9GalJtz9Pj2RCQeu4=) 3: A16366C6FDF811EEA4D57274C4F9AE02.roa (hash: XEujoILkyQGDOgd5du+8WCWbh++D58fSsRkYOzlukgc=) 4: A1C0742EFDF811EEA4D57274C4F9AE02.roa (hash: NGaaDsp7E7XVzTL3vht2Lwlvp5OwCewd6D52RccQHyQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:50:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 432 (0x1b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEBE9, serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE Validity Not Before: Aug 23 03:21:03 2025 GMT Not After : Aug 30 03:21:03 2025 GMT Subject: CN=68a933a0-0628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ec:1f:08:a8:fc:69:6b:15:4a:7f:23:17:f3: 41:89:b9:25:f2:a6:72:b7:5b:4e:66:64:ed:46:84: e1:23:2b:9d:e8:af:67:31:7b:0b:d2:02:5a:8d:5a: 37:d5:2c:79:15:f9:a3:cb:0b:76:5d:eb:0f:06:5a: ff:09:7b:9f:47:c3:54:5a:f1:c7:ee:ca:17:bf:b6: a3:be:ce:71:58:d5:08:0f:0d:31:d8:65:99:76:4d: 0c:df:86:36:e2:4c:8d:3f:44:f7:18:fa:a6:68:1e: f1:58:4e:33:b7:9f:02:4d:ea:70:0d:b9:51:91:82: ce:cf:c3:d9:f9:4e:22:a8:5e:62:55:2b:ac:e1:fb: 78:8f:c2:7d:5f:a4:eb:29:f6:82:6e:af:51:7b:27: de:10:c4:0c:66:56:16:90:a7:33:e0:8c:f7:70:60: c8:4f:c9:65:59:f5:4a:17:4a:3b:67:d5:4a:e6:54: 4c:e0:db:04:3e:13:66:74:38:4e:08:de:08:53:53: 6a:3d:0e:1f:c1:b6:42:6d:9d:60:82:5c:b4:e8:9d: 8e:58:2c:56:b7:7a:d7:14:87:f8:48:8d:44:d9:9a: 17:cb:96:33:6a:3b:29:81:54:e7:9a:f1:ae:35:5b: ce:e1:ca:de:c6:ad:24:86:85:f9:88:17:34:24:61: 02:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:E0:37:F5:D0:98:87:37:AF:B0:DF:38:17:56:42:27:4B:17:DC:72 X509v3 Authority Key Identifier: keyid:0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:18:69:f2:4e:55:6f:ba:2b:fc:0d:b4:03:a3:95:95:47:bc: 71:f6:94:0d:b7:cb:87:82:f4:fe:a0:ea:ad:3a:ba:dc:55:d4: f8:2f:f0:2b:4f:91:86:bf:d0:ba:05:50:60:e1:0b:e3:95:84: b2:4e:3d:a7:24:de:93:b2:a2:7a:23:cf:0a:65:c7:cd:8f:13: 74:11:81:eb:6a:e8:9c:48:7b:48:e0:56:c8:61:e2:ea:e6:7a: 0d:b5:ab:6b:96:ea:37:45:ab:75:68:42:f2:d6:a6:52:f4:60: 20:ce:59:85:30:70:9a:f2:32:59:25:76:57:3e:99:e2:28:88: 08:a8:06:44:d1:62:2a:22:8c:df:31:88:33:17:28:de:19:d2: a9:60:39:ac:71:7d:4c:be:c1:0a:23:ba:b7:48:f1:5a:34:41: 86:1e:9e:60:5a:ca:f8:19:c9:1d:56:2f:13:7a:fd:13:87:e7: ed:ed:e2:e3:15:cb:c0:39:29:67:3a:8e:77:3f:35:c0:67:46: d8:7e:1c:6b:d6:91:a9:ff:cb:6e:eb:25:4b:d2:da:da:37:54: 16:91:f7:fa:58:6b:a0:37:06:24:b3:ce:18:e1:92:b6:0d:9c: a6:be:60:17:60:6f:d9:74:b2:3a:9f:d5:da:da:78:ae:f7:e3: ab:f4:59:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVCRTkxMTAvBgNVBAUTKDBGQUI0RUY5ODI4RjRBRjI2N0MxNkQ4QUQ0NzEwQThF RUM5QkJCQUUwHhcNMjUwODIzMDMyMTAzWhcNMjUwODMwMDMyMTAzWjAYMRYwFAYD VQQDEw02OGE5MzNhMC0wNjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuewfCKj8aWsVSn8jF/NBibkl8qZyt1tOZmTtRoThIyud6K9nMXsL0gJajVo3 1Sx5Ffmjywt2XesPBlr/CXufR8NUWvHH7soXv7ajvs5xWNUIDw0x2GWZdk0M34Y2 4kyNP0T3GPqmaB7xWE4zt58CTepwDblRkYLOz8PZ+U4iqF5iVSus4ft4j8J9X6Tr KfaCbq9ReyfeEMQMZlYWkKcz4Iz3cGDIT8llWfVKF0o7Z9VK5lRM4NsEPhNmdDhO CN4IU1NqPQ4fwbZCbZ1ggly06J2OWCxWt3rXFIf4SI1E2ZoXy5YzajspgVTnmvGu NVvO4crexq0khoX5iBc0JGECowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHngN/XQ mIc3r7DfOBdWQidLF9xyMB8GA1UdIwQYMBaAFA+rTvmCj0ryZ8FtitRxCo7sm7uu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUJFOS85NEM5Qjg3ODAw NUQxMUVFQkU3QTkyNDFDNEY5QUUwMi9ENnRPLVlLUFN2Sm53VzJLMUhFS2p1eWJ1 NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0Q2dE8tWUtQU3ZKbndXMksxSEVLanV5YnU2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUJFOS85NEM5Qjg3ODAwNUQxMUVFQkU3QTkyNDFDNEY5QUUwMi9ENnRPLVlLUFN2 Sm53VzJLMUhFS2p1eWJ1NjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgGGnyTlVvuiv8DbQDo5WVR7xx9pQNt8uHgvT+oOqtOrrcVdT4L/Ar T5GGv9C6BVBg4QvjlYSyTj2nJN6TsqJ6I88KZcfNjxN0EYHrauicSHtI4FbIYeLq 5noNtatrluo3Rat1aELy1qZS9GAgzlmFMHCa8jJZJXZXPpniKIgIqAZE0WIqIozf MYgzFyjeGdKpYDmscX1MvsEKI7q3SPFaNEGGHp5gWsr4GckdVi8Tev0Th+ft7eLj FcvAOSlnOo53PzXAZ0bYfhxr1pGp/8tu6yVL0traN1QWkff6WGugNwYks84Y4ZK2 DZymvmAXYG/ZdLI6n9Xa2niu9+Or9Fm7 -----END CERTIFICATE-----Generated at Sat Aug 23 10:44:51 2025 by rpki-client