$ rpki-client -vvf rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft File: 92dQUVu3YtGADFrmxsLbJP6VLQI.mft (raw, json) Hash identifier: b5ugsRkxTvJk+WiZj8+bfmXumSG5YTx/iHTVLLOhGg4= Subject key identifier: C9:58:C1:50:AB:01:32:54:1E:2F:DA:EA:85:8F:8E:67:4F:54:D6:17 Authority key identifier: F7:67:50:51:5B:B7:62:D1:80:0C:5A:E6:C6:C2:DB:24:FE:95:2D:02 Certificate issuer: /CN=A91C83EA/serialNumber=F76750515BB762D1800C5AE6C6C2DB24FE952D02 Certificate serial: 2ABA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92dQUVu3YtGADFrmxsLbJP6VLQI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft Manifest number: 2AA3 Signing time: Fri 22 Aug 2025 15:36:49 +0000 Manifest this update: Fri 22 Aug 2025 15:36:48 +0000 Manifest next update: Fri 29 Aug 2025 15:36:48 +0000 Files and hashes: 1: 92dQUVu3YtGADFrmxsLbJP6VLQI.crl (hash: fV/48b7tqKi3hHPbZdIpfHF+SVntg1+IeeXiv/3zKWs=) 2: 2ED1150C561D11E7B003DF26C4F9AE02.roa (hash: hRXVDS2SOPtJ34LPdCH4GrMLjogwv7F/rCNwzymK5NA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.crl rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92dQUVu3YtGADFrmxsLbJP6VLQI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:36:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10938 (0x2aba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C83EA, serialNumber=F76750515BB762D1800C5AE6C6C2DB24FE952D02 Validity Not Before: Aug 22 15:36:48 2025 GMT Not After : Aug 29 15:36:48 2025 GMT Subject: CN=68a88e90-c5a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ff:8d:8a:19:9d:fa:71:83:ea:c0:47:d3:09: f2:52:fc:29:47:6e:57:a2:37:01:72:10:39:05:e6: 59:92:7b:54:12:e9:27:22:10:05:23:fd:fe:ac:db: 4e:d3:88:b1:97:d5:0d:c3:be:e5:b7:13:d3:3e:91: 25:e2:24:89:89:28:8a:61:b1:c8:50:8a:d2:e3:e0: 0b:61:f2:a8:a1:b6:15:67:98:e0:2c:54:ae:c9:99: e3:cf:ec:d2:cd:32:e9:74:a3:69:c7:93:59:c5:56: 03:99:7c:c8:8c:18:ce:17:59:1c:3f:97:32:7c:e9: 09:1b:62:54:71:6a:38:53:9b:6a:b7:b2:00:c8:c6: f5:e1:1c:6f:69:a0:97:f8:89:f0:6c:64:e7:e5:17: 5f:49:b7:84:94:2f:c5:39:89:76:8c:95:57:78:b3: fb:2a:d3:28:79:ec:ce:11:45:fc:ea:bb:ff:f8:e8: ff:25:be:33:b0:84:28:86:29:65:71:3e:10:4b:0a: 4e:38:fb:fc:b7:02:18:35:66:c1:c9:97:20:d3:53: f6:3d:98:64:3f:ad:f9:c1:4c:08:2f:4a:65:75:70: 2e:c6:09:9e:1a:4e:5e:01:43:2c:b8:68:56:18:bc: bf:02:19:4f:cf:a9:40:dc:f9:17:2b:b8:d6:29:74: ae:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:58:C1:50:AB:01:32:54:1E:2F:DA:EA:85:8F:8E:67:4F:54:D6:17 X509v3 Authority Key Identifier: keyid:F7:67:50:51:5B:B7:62:D1:80:0C:5A:E6:C6:C2:DB:24:FE:95:2D:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92dQUVu3YtGADFrmxsLbJP6VLQI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:72:63:02:85:68:cb:08:ad:9c:2a:a3:66:5f:6d:f8:57:bf: 5d:4d:68:c0:d2:2d:0b:49:dd:54:c9:86:39:3b:10:ab:71:e5: ac:8f:f6:6c:1c:6a:8e:fb:10:b3:d3:fa:da:c1:8d:55:f3:c2: 8d:08:92:d2:66:20:ec:f4:22:2d:b7:8e:ce:e1:20:5c:8b:2f: 7e:b7:84:1c:2b:62:53:0c:92:c2:81:ad:91:10:ed:2e:c9:b8: 57:1b:d6:02:92:a5:23:4f:fb:55:7a:d3:95:0f:d2:a8:f2:e5: 93:53:97:55:2b:45:f1:ee:55:52:e6:61:dc:79:d6:c7:cf:ec: 40:db:13:ee:da:7c:6f:84:c9:e9:ef:52:56:c9:5f:b4:cb:32: 93:fb:45:7c:38:6c:9e:29:e4:e3:d6:1a:6a:ac:45:05:95:00: 68:65:95:b1:b4:9d:d5:06:42:5f:3d:b4:3b:d0:42:de:88:37: 85:17:76:80:43:31:f2:7f:44:ce:8d:78:da:0b:a3:aa:82:d7: 80:59:04:04:51:32:96:2a:9e:71:15:04:d9:2d:96:6d:85:5e: 4c:02:21:b3:b2:7f:54:f9:7c:b6:86:98:9b:5b:f7:8a:ba:f3: a1:e0:a9:76:b4:12:6f:ed:a0:73:65:ce:e5:ec:ed:87:90:b2: bb:d6:f2:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKrowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgzRUExMTAvBgNVBAUTKEY3Njc1MDUxNUJCNzYyRDE4MDBDNUFFNkM2QzJEQjI0 RkU5NTJEMDIwHhcNMjUwODIyMTUzNjQ4WhcNMjUwODI5MTUzNjQ4WjAYMRYwFAYD VQQDEw02OGE4OGU5MC1jNWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApP+Nihmd+nGD6sBH0wnyUvwpR25XojcBchA5BeZZkntUEuknIhAFI/3+rNtO 04ixl9UNw77ltxPTPpEl4iSJiSiKYbHIUIrS4+ALYfKoobYVZ5jgLFSuyZnjz+zS zTLpdKNpx5NZxVYDmXzIjBjOF1kcP5cyfOkJG2JUcWo4U5tqt7IAyMb14RxvaaCX +InwbGTn5RdfSbeElC/FOYl2jJVXeLP7KtMoeezOEUX86rv/+Oj/Jb4zsIQohill cT4QSwpOOPv8twIYNWbByZcg01P2PZhkP635wUwIL0pldXAuxgmeGk5eAUMsuGhW GLy/AhlPz6lA3PkXK7jWKXSuDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMlYwVCr ATJUHi/a6oWPjmdPVNYXMB8GA1UdIwQYMBaAFPdnUFFbt2LRgAxa5sbC2yT+lS0C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODNFQS9EODJDNjFFODFD NDUxMUU0OTRBNzZGMUJDNEY5QUUwMi85MmRRVVZ1M1l0R0FERnJteHNMYkpQNlZM UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkyZFFVVnUzWXRHQURGcm14c0xiSlA2VkxRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODNFQS9EODJDNjFFODFDNDUxMUU0OTRBNzZGMUJDNEY5QUUwMi85MmRRVVZ1M1l0 R0FERnJteHNMYkpQNlZMUUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmcmMChWjLCK2cKqNmX234V79dTWjA0i0LSd1UyYY5OxCrceWsj/Zs HGqO+xCz0/rawY1V88KNCJLSZiDs9CItt47O4SBciy9+t4QcK2JTDJLCga2REO0u ybhXG9YCkqUjT/tVetOVD9Ko8uWTU5dVK0Xx7lVS5mHcedbHz+xA2xPu2nxvhMnp 71JWyV+0yzKT+0V8OGyeKeTj1hpqrEUFlQBoZZWxtJ3VBkJfPbQ70ELeiDeFF3aA QzHyf0TOjXjaC6OqgteAWQQEUTKWKp5xFQTZLZZthV5MAiGzsn9U+Xy2hpibW/eK uvOh4Kl2tBJv7aBzZc7l7O2HkLK71vIV -----END CERTIFICATE-----Generated at Sat Aug 23 19:31:30 2025 by rpki-client