$ rpki-client -vvf rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft File: _vLBxOoJZEd1FMGqlG5sQXeNBr8.mft (raw, json) Hash identifier: sV/CUh35YPGU0tQk2QgAQSfR6E6eZDAeD2Yzn9W6m1w= Subject key identifier: 40:9F:5E:99:0E:94:86:BB:9A:7A:08:A7:18:A7:42:62:E9:5E:1D:E7 Authority key identifier: FE:F2:C1:C4:EA:09:64:47:75:14:C1:AA:94:6E:6C:41:77:8D:06:BF Certificate issuer: /CN=A91D298D/serialNumber=FEF2C1C4EA0964477514C1AA946E6C41778D06BF Certificate serial: 0890 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vLBxOoJZEd1FMGqlG5sQXeNBr8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft Manifest number: 0857 Signing time: Fri 22 Aug 2025 21:04:09 +0000 Manifest this update: Fri 22 Aug 2025 21:04:09 +0000 Manifest next update: Fri 29 Aug 2025 21:04:09 +0000 Files and hashes: 1: _vLBxOoJZEd1FMGqlG5sQXeNBr8.crl (hash: WycE7kogzllp669YWn29Tk1fNS2F5kz3hbgms6PfMeY=) 2: 65519ACC506C11EC99354984C4F9AE02.roa (hash: FSKLxu00ctg24+HmZkC2VPQWpobiDfHHaUN+7Y4NQZA=) 3: 01BB1B8E7C0411EFB0D29158C4F9AE02.roa (hash: KU0OYgNotYA3UtDO5hlxYlQJ813PAymWu54BIJPXlUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.crl rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vLBxOoJZEd1FMGqlG5sQXeNBr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:04:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2192 (0x890) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D298D, serialNumber=FEF2C1C4EA0964477514C1AA946E6C41778D06BF Validity Not Before: Aug 22 21:04:09 2025 GMT Not After : Aug 29 21:04:09 2025 GMT Subject: CN=68a8db49-62be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:48:ee:5c:25:d1:2d:7c:b8:b9:9a:2d:6f:e8: cc:f1:f5:3d:c6:5e:0a:b3:fd:b8:32:92:58:e4:a7: b1:c2:e0:d7:86:84:ff:95:f0:ba:53:04:fe:40:b7: 96:05:5d:ba:b6:4f:70:8b:f6:61:47:5d:99:a4:c6: 9b:6d:5b:1a:df:d2:13:73:03:48:49:15:83:66:c2: ba:99:46:ac:ce:f9:be:9b:28:45:8b:4c:d9:59:cb: 5d:ad:6a:34:ac:d1:28:6e:c3:11:07:d3:11:16:3e: 2f:ba:e4:42:95:df:a1:80:f3:b8:93:8a:eb:8e:e1: 4d:f3:2d:46:b3:dd:f2:d8:7e:6f:a8:0f:64:1c:d1: 49:71:8c:84:f0:32:82:36:46:d2:e9:7c:e0:d9:ac: 08:2b:2d:8d:28:7b:95:ff:41:3f:9d:39:38:8c:f9: 3b:68:da:0c:bb:05:21:6c:53:2a:d1:e7:da:87:85: de:b3:d5:34:48:d2:61:10:21:df:25:f5:65:25:b3: 94:ba:85:f6:9f:43:39:68:09:11:a4:2f:c7:d0:1b: 1f:e6:91:f1:75:de:15:0a:f0:11:5f:49:6f:03:5a: 52:a7:ef:12:de:40:3a:c0:74:e8:5a:7b:0e:42:58: ca:19:d4:1c:c8:e8:85:10:ab:8a:b2:17:95:54:c7: 20:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:9F:5E:99:0E:94:86:BB:9A:7A:08:A7:18:A7:42:62:E9:5E:1D:E7 X509v3 Authority Key Identifier: keyid:FE:F2:C1:C4:EA:09:64:47:75:14:C1:AA:94:6E:6C:41:77:8D:06:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vLBxOoJZEd1FMGqlG5sQXeNBr8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:64:4f:0b:02:e3:b9:64:35:6c:8d:4b:2d:6b:43:fc:3b:f0: d5:81:ac:5d:c2:26:db:65:6b:c3:d7:2d:50:60:bf:99:98:5f: 83:fe:33:a2:da:98:b7:82:79:a3:aa:ce:72:09:8b:c5:d2:32: a1:3d:04:42:96:b0:7a:af:59:e5:21:65:6b:6c:f9:5f:1c:e6: b8:c6:1a:3e:27:8f:47:5e:d2:e6:21:57:7a:eb:11:e8:77:c7: 16:21:44:db:3b:af:76:7c:44:8e:29:2d:d0:ed:fa:d3:33:ea: db:f0:01:28:04:ee:91:35:e1:7e:42:eb:8e:63:eb:6f:94:20: 3c:32:d6:c6:25:98:c1:04:b8:0e:5f:5b:26:f2:ab:39:4a:8c: c6:84:90:cb:87:a5:32:6d:7e:ed:6a:a1:2b:d3:a3:89:46:33: bd:a7:58:e2:d8:a4:f2:3d:1d:4e:b0:0d:5e:82:12:06:5b:b5: 05:0b:a0:03:18:83:9b:40:1a:71:02:95:81:6c:dc:e4:34:b9: b7:56:79:a4:3b:05:fa:85:c2:da:35:1a:73:f4:f2:52:a0:b3: f5:96:4d:45:12:c1:df:0d:03:b2:76:6d:eb:1c:14:d2:0d:12: 14:08:9a:ac:a5:28:73:1c:c6:f4:f7:80:d8:fa:b5:c4:11:03: 26:e0:61:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI5OEQxMTAvBgNVBAUTKEZFRjJDMUM0RUEwOTY0NDc3NTE0QzFBQTk0NkU2QzQx Nzc4RDA2QkYwHhcNMjUwODIyMjEwNDA5WhcNMjUwODI5MjEwNDA5WjAYMRYwFAYD VQQDEw02OGE4ZGI0OS02MmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsUjuXCXRLXy4uZotb+jM8fU9xl4Ks/24MpJY5KexwuDXhoT/lfC6UwT+QLeW BV26tk9wi/ZhR12ZpMabbVsa39ITcwNISRWDZsK6mUaszvm+myhFi0zZWctdrWo0 rNEobsMRB9MRFj4vuuRCld+hgPO4k4rrjuFN8y1Gs93y2H5vqA9kHNFJcYyE8DKC NkbS6Xzg2awIKy2NKHuV/0E/nTk4jPk7aNoMuwUhbFMq0efah4Xes9U0SNJhECHf JfVlJbOUuoX2n0M5aAkRpC/H0Bsf5pHxdd4VCvARX0lvA1pSp+8S3kA6wHToWnsO QljKGdQcyOiFEKuKsheVVMcgsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFECfXpkO lIa7mnoIpxinQmLpXh3nMB8GA1UdIwQYMBaAFP7ywcTqCWRHdRTBqpRubEF3jQa/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjk4RC8zMzdBNjQzMkYx QTYxMUVBQjk1QzBFMkZDNEY5QUUwMi9fdkxCeE9vSlpFZDFGTUdxbEc1c1FYZU5C cjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL192TEJ4T29KWkVkMUZNR3FsRzVzUVhlTkJyOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Mjk4RC8zMzdBNjQzMkYxQTYxMUVBQjk1QzBFMkZDNEY5QUUwMi9fdkxCeE9vSlpF ZDFGTUdxbEc1c1FYZU5CcjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnZE8LAuO5ZDVsjUsta0P8O/DVgaxdwibbZWvD1y1QYL+ZmF+D/jOi 2pi3gnmjqs5yCYvF0jKhPQRClrB6r1nlIWVrbPlfHOa4xho+J49HXtLmIVd66xHo d8cWIUTbO692fESOKS3Q7frTM+rb8AEoBO6RNeF+QuuOY+tvlCA8MtbGJZjBBLgO X1sm8qs5SozGhJDLh6UybX7taqEr06OJRjO9p1ji2KTyPR1OsA1eghIGW7UFC6AD GIObQBpxApWBbNzkNLm3VnmkOwX6hcLaNRpz9PJSoLP1lk1FEsHfDQOydm3rHBTS DRIUCJqspShzHMb094DY+rXEEQMm4GEI -----END CERTIFICATE-----Generated at Sun Aug 24 04:44:15 2025 by rpki-client