$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft File: dfDxcTIKeOUHAm-fL1T0smcMYhE.mft (raw, json) Hash identifier: X52xqgx7NNHWzrGVu9rYBOt+usZTSqEZ9KgXMB/iZVY= Subject key identifier: 1B:0A:4D:CA:E4:AC:59:27:7B:84:8B:30:9D:9A:00:27:C0:D4:2C:9E Authority key identifier: 75:F0:F1:71:32:0A:78:E5:07:02:6F:9F:2F:54:F4:B2:67:0C:62:11 Certificate issuer: /CN=A91C9161/serialNumber=75F0F171320A78E507026F9F2F54F4B2670C6211 Certificate serial: 1A99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft Manifest number: 1A8D Signing time: Fri 22 Aug 2025 16:24:37 +0000 Manifest this update: Fri 22 Aug 2025 16:24:36 +0000 Manifest next update: Fri 29 Aug 2025 16:24:36 +0000 Files and hashes: 1: dfDxcTIKeOUHAm-fL1T0smcMYhE.crl (hash: 3bHhl71ACt3ycejDs6itUlZxSzqS4Fsp72vgrBty7P4=) 2: 95A226D0EF3C11E9A7190355C4F9AE02.roa (hash: 1daEoei36geA2L+OhDw4+YDumwBLUAs+Z5wiCTxRQ6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.crl rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:24:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6809 (0x1a99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9161, serialNumber=75F0F171320A78E507026F9F2F54F4B2670C6211 Validity Not Before: Aug 22 16:24:36 2025 GMT Not After : Aug 29 16:24:36 2025 GMT Subject: CN=68a899c4-a815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:62:29:0e:9c:17:51:c0:cc:76:9f:1f:45:17: 06:ab:5d:36:7c:30:6a:23:a2:a2:ee:8d:c6:be:07: 3a:6f:76:38:b0:cb:0a:a9:c0:53:96:c8:75:61:09: 16:97:2f:b2:e5:21:43:82:b8:39:ed:14:0c:ce:41: 24:bd:39:ac:ed:ce:c1:ad:36:9f:05:7c:ae:e4:98: de:bd:7d:36:4d:73:cc:8d:86:ca:5e:e7:84:ce:c2: 26:19:ab:62:2d:90:7e:07:1d:4a:2e:76:46:37:2d: 2e:c1:15:76:d9:80:42:6d:cf:e9:df:ff:84:b1:ce: b3:9e:d2:58:77:d7:52:fc:35:7c:ee:ab:63:64:ca: d6:5e:fb:35:28:5e:be:bb:e9:26:bc:9b:0c:80:4e: 37:29:15:f8:29:6d:2a:10:b8:f9:37:56:13:a3:7e: ee:87:21:80:e7:15:82:ab:68:7f:a7:02:7b:7a:6f: ec:31:7c:32:f0:58:68:72:6f:df:c3:40:d8:02:be: 84:42:d4:70:7c:84:f1:74:e2:51:7a:37:cd:d2:c1: b4:67:37:99:4c:ed:18:49:e9:da:c1:ee:5b:b6:0a: 13:dd:4b:18:37:71:f0:6d:93:24:28:bf:c1:d5:1d: aa:52:74:42:a4:79:43:7e:27:32:5b:b0:c9:10:93: 3a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:0A:4D:CA:E4:AC:59:27:7B:84:8B:30:9D:9A:00:27:C0:D4:2C:9E X509v3 Authority Key Identifier: keyid:75:F0:F1:71:32:0A:78:E5:07:02:6F:9F:2F:54:F4:B2:67:0C:62:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:8e:9c:0f:c7:37:d0:4d:d3:a1:20:d3:30:55:27:16:30:8a: d7:07:fd:01:55:78:c3:97:3d:3e:6d:6d:9e:aa:67:21:9a:1d: d3:fe:bf:3d:76:35:6e:b7:e6:16:bf:00:d6:c8:35:01:3a:4c: 8c:85:93:10:45:a0:86:cd:a1:6b:1a:8a:0a:7d:98:04:db:ec: d7:ad:37:ce:6a:bf:52:b1:ae:56:b4:d0:c9:2a:71:93:73:c0: 82:38:c2:52:9f:b7:bc:19:d6:6b:da:2d:ef:81:23:0a:41:fb: 0c:b2:bf:bf:95:34:ae:af:62:9c:4f:7b:7c:ee:53:07:86:98: df:b9:45:72:c7:4d:54:dd:58:56:38:c9:a5:3c:a9:8a:f8:99: e7:25:a2:1a:00:a3:54:d4:f1:f7:d8:40:62:23:c0:3d:50:2d: 96:82:5b:e8:54:1f:f7:87:d8:52:4d:f5:e6:e8:c6:96:ed:f4: b6:c9:50:f6:90:fc:da:b8:17:51:16:7a:8e:55:0a:b5:bc:12: 1e:78:d6:d8:3c:4d:d6:7a:ab:a6:18:06:56:f9:3e:00:08:95: 8e:5b:26:68:6c:4f:6c:f0:a7:03:af:a5:30:22:25:e7:1f:63: b0:08:eb:ba:c3:f7:5a:80:15:6e:2e:02:35:44:fa:a1:d9:dd: b3:86:39:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGpkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkxNjExMTAvBgNVBAUTKDc1RjBGMTcxMzIwQTc4RTUwNzAyNkY5RjJGNTRGNEIy NjcwQzYyMTEwHhcNMjUwODIyMTYyNDM2WhcNMjUwODI5MTYyNDM2WjAYMRYwFAYD VQQDEw02OGE4OTljNC1hODE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArmIpDpwXUcDMdp8fRRcGq102fDBqI6Ki7o3Gvgc6b3Y4sMsKqcBTlsh1YQkW ly+y5SFDgrg57RQMzkEkvTms7c7BrTafBXyu5JjevX02TXPMjYbKXueEzsImGati LZB+Bx1KLnZGNy0uwRV22YBCbc/p3/+Esc6zntJYd9dS/DV87qtjZMrWXvs1KF6+ u+kmvJsMgE43KRX4KW0qELj5N1YTo37uhyGA5xWCq2h/pwJ7em/sMXwy8Fhocm/f w0DYAr6EQtRwfITxdOJRejfN0sG0ZzeZTO0YSenawe5btgoT3UsYN3HwbZMkKL/B 1R2qUnRCpHlDficyW7DJEJM6UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBsKTcrk rFkne4SLMJ2aACfA1CyeMB8GA1UdIwQYMBaAFHXw8XEyCnjlBwJvny9U9LJnDGIR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTE2MS83MENDMjQ4NjNG OEIxMUU3QTlFNjcyNDRDNEY5QUUwMi9kZkR4Y1RJS2VPVUhBbS1mTDFUMHNtY01Z aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RmRHhjVElLZU9VSEFtLWZMMVQwc21jTVloRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTE2MS83MENDMjQ4NjNGOEIxMUU3QTlFNjcyNDRDNEY5QUUwMi9kZkR4Y1RJS2VP VUhBbS1mTDFUMHNtY01ZaEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjjpwPxzfQTdOhINMwVScWMIrXB/0BVXjDlz0+bW2eqmchmh3T/r89 djVut+YWvwDWyDUBOkyMhZMQRaCGzaFrGooKfZgE2+zXrTfOar9Ssa5WtNDJKnGT c8CCOMJSn7e8GdZr2i3vgSMKQfsMsr+/lTSur2KcT3t87lMHhpjfuUVyx01U3VhW OMmlPKmK+JnnJaIaAKNU1PH32EBiI8A9UC2WglvoVB/3h9hSTfXm6MaW7fS2yVD2 kPzauBdRFnqOVQq1vBIeeNbYPE3WequmGAZW+T4ACJWOWyZobE9s8KcDr6UwIiXn H2OwCOu6w/dagBVuLgI1RPqh2d2zhjng -----END CERTIFICATE-----Generated at Sun Aug 24 00:48:08 2025 by rpki-client