$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.mft File: m_aWWObA_qLqCOOn_dKtysoTOUk.mft (raw, json) Hash identifier: oFM/4iOquLRfJHH9nvREVlPzZhpy7ZIkSTODJNllJAM= Subject key identifier: 87:61:4E:5A:7E:6D:C3:50:67:7E:57:22:4E:3C:00:9B:16:44:FB:96 Authority key identifier: 9B:F6:96:58:E6:C0:FE:A2:EA:08:E3:A7:FD:D2:AD:CA:CA:13:39:49 Certificate issuer: /CN=A91CC28E/serialNumber=9BF69658E6C0FEA2EA08E3A7FDD2ADCACA133949 Certificate serial: 01FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m_aWWObA_qLqCOOn_dKtysoTOUk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.mft Manifest number: 01FA Signing time: Sat 23 Aug 2025 02:32:07 +0000 Manifest this update: Sat 23 Aug 2025 02:32:07 +0000 Manifest next update: Sat 30 Aug 2025 02:32:07 +0000 Files and hashes: 1: m_aWWObA_qLqCOOn_dKtysoTOUk.crl (hash: yphcjdo/JAzbdFvz/sgjqSM/x/5pFX7gg2D6btLy2vA=) 2: 73E253FC76D011EDBAECD665C4F9AE02.roa (hash: n/BMRPFUHjUzsfa0GoSirwLl0k+pEwLO2kUv8wHTWRI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.crl rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m_aWWObA_qLqCOOn_dKtysoTOUk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:32:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 509 (0x1fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC28E, serialNumber=9BF69658E6C0FEA2EA08E3A7FDD2ADCACA133949 Validity Not Before: Aug 23 02:32:07 2025 GMT Not After : Aug 30 02:32:07 2025 GMT Subject: CN=68a92827-22a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:be:03:3e:ad:f4:2c:49:d9:67:47:03:e6:fc: 1a:b2:eb:a1:90:bd:20:51:8e:02:5d:e5:e9:26:7f: f2:44:d9:9c:a2:5d:7a:cd:fc:82:10:41:0c:dd:79: 40:2a:22:43:34:ed:d2:e8:24:79:f3:57:68:1b:e4: e2:bc:cb:46:be:5f:ef:7b:35:66:82:d5:2a:8f:c4: 07:6d:91:48:6c:ee:64:d0:01:2f:c0:d5:12:e5:db: 38:5f:f0:1e:af:c9:99:42:26:3d:ea:72:b0:02:be: f7:20:56:aa:37:60:19:62:e6:a8:5a:26:7b:9c:32: b0:16:c1:17:a0:9e:9b:8a:b2:27:be:b1:db:c6:76: cc:98:1d:59:58:a4:88:c9:04:de:33:e3:8f:74:6c: 40:63:f8:b0:29:00:4b:9c:36:3a:96:63:c0:29:36: 07:f3:f5:8d:b8:1f:31:3b:2f:c0:ed:40:d7:b3:c2: aa:04:d8:5d:ef:89:ef:80:79:9d:d1:b4:a4:64:21: ed:4f:f4:27:39:53:65:1f:36:a9:07:16:95:3c:a2: 36:99:40:44:16:b4:15:b2:bf:90:c0:6b:90:3e:b8: 12:6d:ba:da:44:40:f7:48:cb:35:cf:2f:49:2e:a5: 67:90:87:c4:7f:d8:eb:4a:c7:25:71:53:42:8d:4d: 65:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:61:4E:5A:7E:6D:C3:50:67:7E:57:22:4E:3C:00:9B:16:44:FB:96 X509v3 Authority Key Identifier: keyid:9B:F6:96:58:E6:C0:FE:A2:EA:08:E3:A7:FD:D2:AD:CA:CA:13:39:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m_aWWObA_qLqCOOn_dKtysoTOUk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:b5:69:63:92:f0:99:47:b1:43:91:bf:94:62:9c:af:34:72: 93:63:49:86:a0:37:8d:31:81:7c:0d:61:65:d1:cb:9d:1f:fb: 5a:b0:8f:20:48:e4:c8:98:ed:c1:b5:27:42:df:18:c5:5b:af: 80:b9:1a:47:e4:ce:ee:c6:fb:3b:ad:4f:7d:30:a8:75:b7:3d: d0:7d:d3:c2:d4:3d:ba:d5:bb:14:76:ac:e3:0f:e2:ed:b3:39: 63:25:30:4a:d1:18:a0:69:bf:24:9f:31:89:7a:69:8d:07:32: 4a:bb:ab:6a:cc:6c:76:d0:21:d9:50:15:1f:ae:3a:47:bd:17: cb:10:4f:c5:0d:15:99:0d:7a:6f:ae:b7:aa:11:ae:31:12:2e: 9d:13:40:4e:19:65:f2:72:94:b3:2a:57:f6:34:5f:80:60:3e: 2f:9b:7a:62:23:83:f2:bc:00:d7:3b:9c:62:fc:87:ac:0e:4d: 80:c5:0d:99:65:b8:23:37:f0:ed:97:07:9b:a9:8a:06:e0:5a: 34:b6:8b:1d:93:4a:40:2d:a8:30:e1:2f:b2:43:90:eb:7a:de: 8c:0e:07:53:ad:2c:62:5b:7e:bc:40:fb:65:91:df:47:a2:29: a3:7e:d7:29:28:fa:dc:a1:5e:c1:49:3f:51:f1:6f:c8:17:36: 14:c2:c1:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0MyOEUxMTAvBgNVBAUTKDlCRjY5NjU4RTZDMEZFQTJFQTA4RTNBN0ZERDJBRENB Q0ExMzM5NDkwHhcNMjUwODIzMDIzMjA3WhcNMjUwODMwMDIzMjA3WjAYMRYwFAYD VQQDEw02OGE5MjgyNy0yMmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3r4DPq30LEnZZ0cD5vwasuuhkL0gUY4CXeXpJn/yRNmcol16zfyCEEEM3XlA KiJDNO3S6CR581doG+TivMtGvl/vezVmgtUqj8QHbZFIbO5k0AEvwNUS5ds4X/Ae r8mZQiY96nKwAr73IFaqN2AZYuaoWiZ7nDKwFsEXoJ6birInvrHbxnbMmB1ZWKSI yQTeM+OPdGxAY/iwKQBLnDY6lmPAKTYH8/WNuB8xOy/A7UDXs8KqBNhd74nvgHmd 0bSkZCHtT/QnOVNlHzapBxaVPKI2mUBEFrQVsr+QwGuQPrgSbbraRED3SMs1zy9J LqVnkIfEf9jrSsclcVNCjU1l/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIdhTlp+ bcNQZ35XIk48AJsWRPuWMB8GA1UdIwQYMBaAFJv2lljmwP6i6gjjp/3SrcrKEzlJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzI4RS9CNUNBODk2ODc2 Q0QxMUVEOERDNjNBNjRDNEY5QUUwMi9tX2FXV09iQV9xTHFDT09uX2RLdHlzb1RP VWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21fYVdXT2JBX3FMcUNPT25fZEt0eXNvVE9Vay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzI4RS9CNUNBODk2ODc2Q0QxMUVEOERDNjNBNjRDNEY5QUUwMi9tX2FXV09iQV9x THFDT09uX2RLdHlzb1RPVWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAotWljkvCZR7FDkb+UYpyvNHKTY0mGoDeNMYF8DWFl0cudH/tasI8g SOTImO3BtSdC3xjFW6+AuRpH5M7uxvs7rU99MKh1tz3QfdPC1D261bsUdqzjD+Lt szljJTBK0Rigab8knzGJemmNBzJKu6tqzGx20CHZUBUfrjpHvRfLEE/FDRWZDXpv rreqEa4xEi6dE0BOGWXycpSzKlf2NF+AYD4vm3piI4PyvADXO5xi/IesDk2AxQ2Z ZbgjN/DtlwebqYoG4Fo0tosdk0pALagw4S+yQ5Dret6MDgdTrSxiW368QPtlkd9H oimjftcpKPrcoV7BST9R8W/IFzYUwsFx -----END CERTIFICATE-----Generated at Sat Aug 23 15:43:51 2025 by rpki-client