$ rpki-client -vvf rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft File: 0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft (raw, json) Hash identifier: Iu1S72qkCG9cZa5SfpeZ9ORXT7MO11u0gd39vJR+VxM= Subject key identifier: 9A:6D:41:64:EF:58:01:D7:55:E8:CF:5B:CB:6A:8C:F3:E1:C9:7B:5E Authority key identifier: D2:9B:64:E6:34:46:5A:B4:13:20:54:BB:7E:83:C9:D5:F1:83:49:F7 Certificate issuer: /CN=A91D26C6/serialNumber=D29B64E634465AB4132054BB7E83C9D5F18349F7 Certificate serial: 06E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ptk5jRGWrQTIFS7foPJ1fGDSfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft Manifest number: 06CA Signing time: Fri 22 Aug 2025 22:15:15 +0000 Manifest this update: Fri 22 Aug 2025 22:15:15 +0000 Manifest next update: Fri 29 Aug 2025 22:15:15 +0000 Files and hashes: 1: 0ptk5jRGWrQTIFS7foPJ1fGDSfc.crl (hash: +nX34SO0YbnFc8hiD5oX1JoGU52T8YeG38mhUv3VSm0=) 2: 3B03239684CE11EF9D90A966C4F9AE02.roa (hash: 0+CvQqBA1GWK9uAje6YI9ltQjscAcIJ8/LtX4JAvJgQ=) 3: 6A8A22841DCE11EF85CAC83EC4F9AE02.roa (hash: BifS2RiKJAeyaao2xahiTEJyhWsX4uSdQw3ik4lZCoM=) 4: DD3C61621DCD11EF88E9EE3DC4F9AE02.roa (hash: qv769QTOuxRY2vZMEitP1PhQNGQQJL1+VWV0CsKcicw=) 5: 178E201EA51911EDB711B90AC4F9AE02.roa (hash: Fk3FD4AcHMukexgYcFy6H4xmHyHDGU1VOrgDQ2JaHQ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.crl rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ptk5jRGWrQTIFS7foPJ1fGDSfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:15:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1767 (0x6e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D26C6, serialNumber=D29B64E634465AB4132054BB7E83C9D5F18349F7 Validity Not Before: Aug 22 22:15:15 2025 GMT Not After : Aug 29 22:15:15 2025 GMT Subject: CN=68a8ebf3-58af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:81:f0:27:c3:e4:9b:c3:ee:cd:81:1a:f0:14: 30:33:9c:36:f2:e7:aa:67:0d:e5:af:de:8b:45:f6: c2:7a:49:89:d5:00:21:b0:ea:2b:f8:61:1b:77:4d: fa:9d:ae:ce:82:4c:5d:7c:74:9f:c1:12:e1:a9:72: fe:a6:cf:bd:4f:9f:7f:96:dc:e4:ec:52:8d:9d:19: a6:f4:1c:1c:9a:b9:77:b7:b4:76:e8:19:0f:5f:4d: 66:22:3b:1c:6d:5f:bc:39:3c:36:e9:c4:93:88:81: 31:bd:64:6f:66:37:d4:4c:59:68:88:44:7b:34:71: ba:b2:83:c4:7c:ef:2d:67:1b:d2:b9:06:5d:6d:89: 0e:a7:b1:d7:db:a5:a0:39:c0:f3:3a:c9:77:e3:68: e9:7b:2a:89:2b:d4:2b:20:2c:1a:3b:eb:4d:7e:2d: 9d:2c:6a:a0:cd:04:69:37:b8:68:8e:9f:71:db:ea: 4f:25:40:2a:d4:fe:7c:a1:bd:81:b5:5f:61:8e:a5: 42:0d:f2:3d:77:96:24:6d:91:49:22:85:f2:06:d7: 49:1e:5f:4b:2e:7c:7b:46:ca:bc:04:8a:6e:d7:8a: e6:6f:b9:da:9b:75:a9:ab:0d:8f:2c:47:ce:0d:6f: fb:bb:9a:6e:8f:84:6b:d7:95:51:ed:b4:a1:9a:45: 1a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:6D:41:64:EF:58:01:D7:55:E8:CF:5B:CB:6A:8C:F3:E1:C9:7B:5E X509v3 Authority Key Identifier: keyid:D2:9B:64:E6:34:46:5A:B4:13:20:54:BB:7E:83:C9:D5:F1:83:49:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ptk5jRGWrQTIFS7foPJ1fGDSfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:56:e6:60:7c:50:00:e3:79:87:a5:de:53:b2:0f:c1:df:dc: 88:50:e6:32:b6:1d:09:3f:c4:c9:36:bc:ec:a8:e4:c7:8d:47: 15:4f:d5:f9:c6:b6:85:48:88:71:13:16:08:2a:5c:68:92:4d: bc:4b:ff:1d:ac:ca:ef:d2:5e:b2:3e:ac:79:ff:31:00:73:c5: f0:a4:56:be:71:df:5c:c1:e1:0e:34:80:4f:6c:dc:9d:4b:5d: 3d:96:96:41:2b:c6:ae:c5:e4:89:da:88:b8:a4:ce:3b:e2:56: 36:be:01:61:d9:39:09:38:6f:09:07:d8:6d:95:ea:7e:e8:8a: ff:4b:b6:06:6d:39:3e:91:3c:fc:29:74:3d:1b:d3:92:99:e2: 99:fe:ea:e7:8a:39:6b:54:b2:82:c6:36:44:f3:3c:0c:e5:ac: f9:32:fc:57:0e:99:9f:f0:39:48:f5:98:3d:d9:f9:de:b9:42: 4d:9c:57:9c:08:5b:ee:4e:56:39:a4:83:1a:ed:e4:4e:3f:82: f1:8c:fc:2b:26:52:51:bf:b6:72:c3:17:86:67:e6:db:51:fb: fc:47:1e:19:22:12:ef:71:ba:9f:82:81:98:c8:9d:2c:49:2d: 5a:9c:df:d0:4f:a1:c5:28:fd:9a:96:b6:13:42:fc:e7:88:0b: 42:40:6f:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBucwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI2QzYxMTAvBgNVBAUTKEQyOUI2NEU2MzQ0NjVBQjQxMzIwNTRCQjdFODNDOUQ1 RjE4MzQ5RjcwHhcNMjUwODIyMjIxNTE1WhcNMjUwODI5MjIxNTE1WjAYMRYwFAYD VQQDEw02OGE4ZWJmMy01OGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq4HwJ8Pkm8PuzYEa8BQwM5w28ueqZw3lr96LRfbCekmJ1QAhsOor+GEbd036 na7OgkxdfHSfwRLhqXL+ps+9T59/ltzk7FKNnRmm9Bwcmrl3t7R26BkPX01mIjsc bV+8OTw26cSTiIExvWRvZjfUTFloiER7NHG6soPEfO8tZxvSuQZdbYkOp7HX26Wg OcDzOsl342jpeyqJK9QrICwaO+tNfi2dLGqgzQRpN7hojp9x2+pPJUAq1P58ob2B tV9hjqVCDfI9d5YkbZFJIoXyBtdJHl9LLnx7Rsq8BIpu14rmb7nam3Wpqw2PLEfO DW/7u5puj4Rr15VR7bShmkUaSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJptQWTv WAHXVejPW8tqjPPhyXteMB8GA1UdIwQYMBaAFNKbZOY0Rlq0EyBUu36DydXxg0n3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjZDNi81OEU5OUU5NDZG NzkxMUVCQTREMjIyODdDNEY5QUUwMi8wcHRrNWpSR1dyUVRJRlM3Zm9QSjFmR0RT ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBwdGs1alJHV3JRVElGUzdmb1BKMWZHRFNmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjZDNi81OEU5OUU5NDZGNzkxMUVCQTREMjIyODdDNEY5QUUwMi8wcHRrNWpSR1dy UVRJRlM3Zm9QSjFmR0RTZmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnVuZgfFAA43mHpd5Tsg/B39yIUOYyth0JP8TJNrzsqOTHjUcVT9X5 xraFSIhxExYIKlxokk28S/8drMrv0l6yPqx5/zEAc8XwpFa+cd9cweEONIBPbNyd S109lpZBK8auxeSJ2oi4pM474lY2vgFh2TkJOG8JB9htlep+6Ir/S7YGbTk+kTz8 KXQ9G9OSmeKZ/urnijlrVLKCxjZE8zwM5az5MvxXDpmf8DlI9Zg92fneuUJNnFec CFvuTlY5pIMa7eROP4LxjPwrJlJRv7ZywxeGZ+bbUfv8Rx4ZIhLvcbqfgoGYyJ0s SS1anN/QT6HFKP2alrYTQvzniAtCQG/c -----END CERTIFICATE-----Generated at Sat Aug 23 19:25:10 2025 by rpki-client