$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft File: 0m38xFnFMcUEmANsxs5nBrgGF1I.mft (raw, json) Hash identifier: 3ewmrP2kgQgpFm2jsPhzVe0Hb+RMZrXk6BYOcK+KkRU= Subject key identifier: B7:3B:8A:15:C7:F9:25:AD:E2:EF:8B:F2:11:5C:E6:8F:0F:92:78:60 Authority key identifier: D2:6D:FC:C4:59:C5:31:C5:04:98:03:6C:C6:CE:67:06:B8:06:17:52 Certificate issuer: /CN=A91C1DA6/serialNumber=D26DFCC459C531C50498036CC6CE6706B8061752 Certificate serial: 0D28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft Manifest number: 0D1E Signing time: Wed 02 Jul 2025 18:16:00 +0000 Manifest this update: Wed 02 Jul 2025 18:15:59 +0000 Manifest next update: Wed 09 Jul 2025 18:15:59 +0000 Files and hashes: 1: 0m38xFnFMcUEmANsxs5nBrgGF1I.crl (hash: IQFr0L1gMiJYD3KEYKFclYxFssJ6vNI1hHqAYC+M5tg=) 2: 5563895C378911EABB08EC0EC4F9AE02.roa (hash: WnvG/G2ljF/bLCjnLck6amfr8nqRxURnaP7xF6JQcoo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.crl rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:15:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3368 (0xd28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1DA6, serialNumber=D26DFCC459C531C50498036CC6CE6706B8061752 Validity Not Before: Jul 2 18:15:59 2025 GMT Not After : Jul 9 18:15:59 2025 GMT Subject: CN=68657760-cf91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a8:cc:98:7b:06:8a:f8:2e:0a:84:12:87:8d: fc:b7:f6:88:95:79:ea:5a:94:76:cd:4d:4d:3b:9b: 94:87:f8:88:f2:b7:71:87:88:1a:23:97:97:00:2e: 36:bf:19:05:f5:e8:14:11:dd:5d:ee:80:72:f1:4c: 25:42:04:6e:3a:3a:7f:35:5b:06:73:69:d2:d9:e9: 52:10:68:2e:51:2d:a7:99:6c:e7:e2:92:12:ac:be: 28:e8:2a:0e:46:cd:99:2f:69:8e:75:dd:4a:a1:5b: 12:2e:4c:a2:db:8f:12:4e:c4:23:0f:b0:40:6f:80: 53:13:96:5d:55:9e:2f:5a:cd:ea:fd:85:59:e3:f3: a8:da:50:d0:01:d8:5d:92:0c:01:80:f9:e9:5b:7f: 58:cf:16:c0:f6:77:ab:75:34:48:03:81:5a:b1:06: 88:c6:d1:b8:62:f2:50:ab:7b:5f:12:bf:a5:23:74: cb:3a:96:f3:ca:b3:b6:fd:39:01:4e:28:72:af:5b: 95:dc:7c:52:45:3c:69:55:fc:93:2b:d0:1d:2b:77: d2:17:24:cf:c2:fc:94:a0:74:1c:07:05:65:e0:ec: ba:21:70:38:d9:01:19:a7:7b:89:fb:99:b5:20:fb: 89:19:39:be:4f:21:f0:14:76:dc:e5:41:b8:cc:b2: d5:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:3B:8A:15:C7:F9:25:AD:E2:EF:8B:F2:11:5C:E6:8F:0F:92:78:60 X509v3 Authority Key Identifier: keyid:D2:6D:FC:C4:59:C5:31:C5:04:98:03:6C:C6:CE:67:06:B8:06:17:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:1d:67:f7:4e:c3:51:90:c0:13:e9:00:cd:27:ae:e0:64:7b: fd:e6:31:04:af:fc:24:3b:52:de:f7:23:fa:95:e1:0f:50:d9: 89:d5:c3:90:0d:68:0e:b4:45:2f:3a:21:e7:84:3e:05:e9:da: 52:7f:4e:a7:3b:b9:c5:07:11:23:b5:f5:bd:70:c7:ae:70:a7: 62:b1:d5:ef:26:3c:64:77:b0:b6:f9:42:dd:73:4b:8d:2e:a8: d8:20:56:54:aa:5a:cb:cb:d7:18:8d:49:a0:f3:7a:93:e1:c9: b3:4f:db:ba:e0:6b:66:3d:04:1b:e5:37:c1:e3:fd:0c:13:5a: e4:49:fe:25:cb:34:77:b1:ff:e4:bc:a1:16:27:8e:7c:94:5f: 96:e7:9f:4d:d0:fc:74:45:f9:d5:a6:50:14:fc:57:d2:e0:58: 95:9e:bd:e0:ce:23:b9:95:8b:d2:38:a2:1b:88:cd:72:f6:9b: 15:c2:ec:6a:ca:d9:58:73:df:d0:78:5c:87:28:ef:5f:1e:44: 61:f2:67:8f:01:6f:6f:96:1c:e8:db:d1:31:83:6d:a2:f5:14: c3:29:34:bb:f5:0d:45:bd:bd:43:af:c1:24:a9:cb:cb:f6:75: ec:df:5b:51:f3:51:ec:70:79:bb:87:e0:76:82:2d:e8:34:68: 75:00:57:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDSgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFEQTYxMTAvBgNVBAUTKEQyNkRGQ0M0NTlDNTMxQzUwNDk4MDM2Q0M2Q0U2NzA2 QjgwNjE3NTIwHhcNMjUwNzAyMTgxNTU5WhcNMjUwNzA5MTgxNTU5WjAYMRYwFAYD VQQDEw02ODY1Nzc2MC1jZjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvqjMmHsGivguCoQSh438t/aIlXnqWpR2zU1NO5uUh/iI8rdxh4gaI5eXAC42 vxkF9egUEd1d7oBy8UwlQgRuOjp/NVsGc2nS2elSEGguUS2nmWzn4pISrL4o6CoO Rs2ZL2mOdd1KoVsSLkyi248STsQjD7BAb4BTE5ZdVZ4vWs3q/YVZ4/Oo2lDQAdhd kgwBgPnpW39YzxbA9nerdTRIA4FasQaIxtG4YvJQq3tfEr+lI3TLOpbzyrO2/TkB Tihyr1uV3HxSRTxpVfyTK9AdK3fSFyTPwvyUoHQcBwVl4Oy6IXA42QEZp3uJ+5m1 IPuJGTm+TyHwFHbc5UG4zLLViQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLc7ihXH +SWt4u+L8hFc5o8PknhgMB8GA1UdIwQYMBaAFNJt/MRZxTHFBJgDbMbOZwa4BhdS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMURBNi9EQjE4QjhFNkRE REYxMUU5OTkzQ0YyNjVDNEY5QUUwMi8wbTM4eEZuRk1jVUVtQU5zeHM1bkJyZ0dG MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBtMzh4Rm5GTWNVRW1BTnN4czVuQnJnR0YxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MURBNi9EQjE4QjhFNkREREYxMUU5OTkzQ0YyNjVDNEY5QUUwMi8wbTM4eEZuRk1j VUVtQU5zeHM1bkJyZ0dGMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaHWf3TsNRkMAT6QDNJ67gZHv95jEEr/wkO1Le9yP6leEPUNmJ1cOQ DWgOtEUvOiHnhD4F6dpSf06nO7nFBxEjtfW9cMeucKdisdXvJjxkd7C2+ULdc0uN LqjYIFZUqlrLy9cYjUmg83qT4cmzT9u64GtmPQQb5TfB4/0ME1rkSf4lyzR3sf/k vKEWJ458lF+W559N0Px0RfnVplAU/FfS4FiVnr3gziO5lYvSOKIbiM1y9psVwuxq ytlYc9/QeFyHKO9fHkRh8mePAW9vlhzo29Exg22i9RTDKTS79Q1Fvb1Dr8EkqcvL 9nXs31tR81HscHm7h+B2gi3oNGh1AFf7 -----END CERTIFICATE-----Generated at Thu Jul 3 09:10:09 2025 by rpki-client