$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft File: exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft (raw, json) Hash identifier: y/PwNjz4+FpteQUNc/56h/INHMTE+1YeebaPnKWS/Uk= Subject key identifier: AA:3E:A8:67:99:34:DC:6E:B0:FB:38:A9:A5:38:53:41:76:2E:43:AF Authority key identifier: 7B:19:C5:AE:35:AE:D8:3A:FA:60:46:3B:5F:3C:0A:60:36:E4:FF:9B Certificate issuer: /CN=A91D1C02/serialNumber=7B19C5AE35AED83AFA60463B5F3C0A6036E4FF9B Certificate serial: 03D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft Manifest number: 03CD Signing time: Sat 23 Aug 2025 01:05:38 +0000 Manifest this update: Sat 23 Aug 2025 01:05:37 +0000 Manifest next update: Sat 30 Aug 2025 01:05:37 +0000 Files and hashes: 1: exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl (hash: 8n0R/Navw6LcTd7NPuCRn41nOgwrMynJjidnIcaTlGs=) 2: 964EB3D49A5F11EC9124627BC4F9AE02.roa (hash: 8YnQugqr595jhqZisXArYlRiOGH/9vz6hBQ33+FTmLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:05:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 980 (0x3d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1C02, serialNumber=7B19C5AE35AED83AFA60463B5F3C0A6036E4FF9B Validity Not Before: Aug 23 01:05:37 2025 GMT Not After : Aug 30 01:05:37 2025 GMT Subject: CN=68a913e2-1e3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c1:cb:f9:71:ad:af:cd:c5:75:2d:16:1f:dd: e1:ec:f8:73:f0:30:c8:05:cb:cd:fe:db:90:83:4e: af:d7:dc:ad:57:5b:89:d5:f4:19:2a:b0:de:00:d2: e1:38:72:97:33:55:2e:b0:1c:f7:23:10:c7:ee:e6: b3:f6:d6:4e:77:61:51:c9:45:9f:e5:7c:1c:39:15: f7:63:e2:50:63:98:62:a8:67:12:1a:28:cc:92:a3: 5c:7c:ad:b3:ca:65:7d:84:7a:f4:40:1e:c8:c0:b0: 44:13:79:dd:63:01:54:72:be:98:76:e9:96:11:45: 85:2c:4e:e8:65:68:dc:c6:e1:2b:44:9c:62:0f:57: da:49:c2:54:0e:ca:01:50:33:a6:c6:12:ea:4e:db: 1d:03:e9:bf:ba:62:71:b6:5f:cd:af:ac:24:97:1a: 0e:a5:d9:b5:b5:90:38:e3:f7:92:66:d4:9c:82:3b: d1:99:4e:cb:ae:3f:4e:68:b0:08:e8:9a:3d:db:5d: 91:62:ce:1a:8e:1a:d5:57:23:18:01:c8:d4:bb:d7: fc:dd:92:2d:1e:5a:db:a3:ab:99:a6:57:64:dc:7c: 33:ca:a4:20:fe:ac:a1:82:36:a7:83:33:9e:2a:a9: 17:31:2a:c4:dd:33:f8:4a:8f:b2:f2:b4:db:f4:c4: 9e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:3E:A8:67:99:34:DC:6E:B0:FB:38:A9:A5:38:53:41:76:2E:43:AF X509v3 Authority Key Identifier: keyid:7B:19:C5:AE:35:AE:D8:3A:FA:60:46:3B:5F:3C:0A:60:36:E4:FF:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:2b:79:1b:80:45:55:83:26:c7:0d:d7:b4:84:36:74:95:d6: b0:ac:5f:5e:76:36:10:dc:fc:27:12:ff:72:e8:c3:9b:8c:c4: da:0c:86:87:5e:22:4a:c6:fd:5b:3a:89:bb:bd:bc:fe:7b:dd: 7c:f2:31:49:e4:b2:b4:1d:e4:c9:39:86:35:28:26:1d:c5:59: 9a:99:77:53:d0:74:32:2b:fe:d6:91:a4:db:61:02:20:43:26: 88:47:62:a1:a2:bd:86:1f:72:22:d6:23:71:11:ff:66:24:6b: 3e:33:51:b3:99:87:a9:50:81:3b:77:66:e8:02:ca:0e:f6:0f: 67:77:29:32:c7:47:34:25:33:21:51:eb:ab:4c:2e:65:a3:1a: 19:72:97:80:d8:01:31:39:77:5d:aa:6e:a6:f4:63:15:58:8e: bf:06:5c:7f:5b:da:8f:db:d4:ac:1f:d8:01:18:0b:14:85:d1: 58:c9:3a:ac:34:1d:e6:cf:27:74:f8:3e:9d:58:bf:d6:92:98: c6:41:f2:fa:5a:c6:87:fb:e3:29:d9:2a:aa:ae:91:8c:fc:26: ca:95:1a:74:89:19:e3:9d:ab:8b:31:c9:be:27:a0:71:40:3a: f1:e6:6c:89:c0:7f:63:25:11:b4:91:62:1a:fd:fc:fd:84:13: f4:5c:35:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFDMDIxMTAvBgNVBAUTKDdCMTlDNUFFMzVBRUQ4M0FGQTYwNDYzQjVGM0MwQTYw MzZFNEZGOUIwHhcNMjUwODIzMDEwNTM3WhcNMjUwODMwMDEwNTM3WjAYMRYwFAYD VQQDEw02OGE5MTNlMi0xZTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn8HL+XGtr83FdS0WH93h7Phz8DDIBcvN/tuQg06v19ytV1uJ1fQZKrDeANLh OHKXM1UusBz3IxDH7uaz9tZOd2FRyUWf5XwcORX3Y+JQY5hiqGcSGijMkqNcfK2z ymV9hHr0QB7IwLBEE3ndYwFUcr6YdumWEUWFLE7oZWjcxuErRJxiD1faScJUDsoB UDOmxhLqTtsdA+m/umJxtl/Nr6wklxoOpdm1tZA44/eSZtScgjvRmU7Lrj9OaLAI 6Jo9212RYs4ajhrVVyMYAcjUu9f83ZItHlrbo6uZpldk3HwzyqQg/qyhgjangzOe KqkXMSrE3TP4So+y8rTb9MSeTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKo+qGeZ NNxusPs4qaU4U0F2LkOvMB8GA1UdIwQYMBaAFHsZxa41rtg6+mBGO188CmA25P+b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUMwMi9CRDdGMkY1NjlB MDAxMUVDODM2QkM5NThDNEY5QUUwMi9leG5GcmpXdTJEcjZZRVk3WHp3S1lEYmtf NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4bkZyald1MkRyNllFWTdYendLWURia181cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUMwMi9CRDdGMkY1NjlBMDAxMUVDODM2QkM5NThDNEY5QUUwMi9leG5GcmpXdTJE cjZZRVk3WHp3S1lEYmtfNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzK3kbgEVVgybHDde0hDZ0ldawrF9edjYQ3PwnEv9y6MObjMTaDIaH XiJKxv1bOom7vbz+e9188jFJ5LK0HeTJOYY1KCYdxVmamXdT0HQyK/7WkaTbYQIg QyaIR2Khor2GH3Ii1iNxEf9mJGs+M1GzmYepUIE7d2boAsoO9g9ndykyx0c0JTMh UeurTC5loxoZcpeA2AExOXddqm6m9GMVWI6/Blx/W9qP29SsH9gBGAsUhdFYyTqs NB3mzyd0+D6dWL/WkpjGQfL6WsaH++Mp2SqqrpGM/CbKlRp0iRnjnauLMcm+J6Bx QDrx5myJwH9jJRG0kWIa/fz9hBP0XDWp -----END CERTIFICATE-----Generated at Sat Aug 23 19:13:15 2025 by rpki-client