$ rpki-client -vvf rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.mft File: acCJt6SOfabuTwH-xqmOCtL6gQs.mft (raw, json) Hash identifier: Y5t/a7C6MP58yvp1XXasDM+1HpZ3iJiLAsuWhmQQa/w= Subject key identifier: 4E:74:07:C2:65:6C:82:6C:47:4D:D2:D8:14:BD:75:71:8D:76:E0:56 Authority key identifier: 69:C0:89:B7:A4:8E:7D:A6:EE:4F:01:FE:C6:A9:8E:0A:D2:FA:81:0B Certificate issuer: /CN=A91D32F4/serialNumber=69C089B7A48E7DA6EE4F01FEC6A98E0AD2FA810B Certificate serial: 022B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acCJt6SOfabuTwH-xqmOCtL6gQs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.mft Manifest number: 021F Signing time: Sat 23 Aug 2025 02:14:22 +0000 Manifest this update: Sat 23 Aug 2025 02:14:22 +0000 Manifest next update: Sat 30 Aug 2025 02:14:22 +0000 Files and hashes: 1: acCJt6SOfabuTwH-xqmOCtL6gQs.crl (hash: F7tk/PumiV6A1iO0fcaVGmb1EgsXK6QB+py44toVnWk=) 2: 350CDCB44ED611ED84336740C4F9AE02.roa (hash: Rl7cC9aD2+HUzvALoJy+W3POWuoH4LCYbv/U7VQpjNA=) 3: 4214E284606911EFBDF1A71AC4F9AE02.roa (hash: 6Nzq1WoXAkjRrieEemeMX09rMtSXxNTIJXhrfWNFeNg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.crl rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acCJt6SOfabuTwH-xqmOCtL6gQs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:14:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 555 (0x22b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D32F4, serialNumber=69C089B7A48E7DA6EE4F01FEC6A98E0AD2FA810B Validity Not Before: Aug 23 02:14:22 2025 GMT Not After : Aug 30 02:14:22 2025 GMT Subject: CN=68a923fe-23f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e3:93:fd:7e:c8:4b:90:8f:e3:57:c5:51:36: b6:83:b3:38:d6:23:2f:f8:b4:9a:8c:04:e0:9d:f7: 0f:27:ea:ac:f7:a0:e6:91:c1:ba:bc:de:6a:ea:7b: a2:4a:a8:be:f6:18:3e:1e:ba:7e:df:e4:20:f9:f7: f8:a3:b8:b2:95:83:b8:f8:48:16:98:3d:89:d8:de: 96:38:7d:28:16:c5:0c:95:70:8a:97:6b:bf:b8:d0: 33:be:ff:fe:65:8d:fe:2c:cf:6f:8b:69:10:26:d6: ad:9f:e3:8e:6e:da:c2:74:6f:93:29:24:b6:b1:8d: 05:a5:5d:b6:df:ed:e9:69:87:80:21:eb:cd:29:e9: 15:e3:fb:eb:8c:e2:cc:f4:ee:dd:48:b3:6d:1b:67: 5a:9b:a1:46:b1:00:fd:5c:4a:89:36:24:bf:b1:4e: 06:d9:65:8a:d7:34:e4:1c:3e:21:97:31:51:46:27: 9c:92:b5:d5:9b:64:8b:dc:19:04:f1:94:bb:74:4f: ba:97:3d:fc:2c:1f:07:ea:28:d5:56:f3:ad:7e:22: 0c:4a:21:db:12:e0:71:62:9d:f7:0b:96:04:aa:e2: 0b:ee:b6:ff:be:6a:5d:e4:31:26:7d:23:b6:4f:9b: d0:43:e1:fd:84:2b:1b:ee:c9:70:fb:ea:0e:db:0b: 6a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:74:07:C2:65:6C:82:6C:47:4D:D2:D8:14:BD:75:71:8D:76:E0:56 X509v3 Authority Key Identifier: keyid:69:C0:89:B7:A4:8E:7D:A6:EE:4F:01:FE:C6:A9:8E:0A:D2:FA:81:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acCJt6SOfabuTwH-xqmOCtL6gQs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:ea:45:99:86:e3:b1:dc:70:62:7a:4e:23:53:d0:20:9d:b1: 63:28:cc:d5:7b:af:42:3b:b1:04:a0:16:d6:85:ef:dd:4f:06: f2:16:ef:f9:41:ec:75:3b:f9:8e:5a:be:1d:b9:cf:4c:b9:36: 17:d7:36:03:cd:16:48:0b:85:47:4d:a2:47:98:a3:83:f3:9f: f0:5b:0f:3d:aa:c2:c1:02:10:af:fd:ee:37:cb:12:e2:0d:1e: 7d:b6:eb:4d:d5:85:48:d6:17:4b:a4:80:27:27:68:1d:a3:50: fd:02:39:e6:93:e2:ac:1e:3d:70:ab:9e:af:f4:11:ce:fd:34: 4a:b2:c9:ed:d0:92:c4:cf:7d:e6:e3:39:bb:df:ad:23:06:17: 87:0c:61:00:08:7e:f6:39:c0:51:82:11:7f:87:8f:fe:ec:a4: f4:cd:34:1f:1b:23:53:17:d8:24:b1:08:82:ff:aa:29:8c:9c: 5c:35:a4:c4:c0:f5:4e:d8:28:c1:47:95:f2:35:0c:5a:aa:32: 00:67:7f:b2:0f:13:9e:3c:26:af:fb:43:1d:03:10:a8:25:72: c3:ca:67:26:7d:2b:9d:1a:e9:e8:53:68:4e:c0:c2:d1:59:ec: 95:96:f1:d1:73:5e:ce:de:71:13:da:5a:5c:e4:55:9e:9c:b7: aa:67:6f:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMyRjQxMTAvBgNVBAUTKDY5QzA4OUI3QTQ4RTdEQTZFRTRGMDFGRUM2QTk4RTBB RDJGQTgxMEIwHhcNMjUwODIzMDIxNDIyWhcNMjUwODMwMDIxNDIyWjAYMRYwFAYD VQQDEw02OGE5MjNmZS0yM2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmuOT/X7IS5CP41fFUTa2g7M41iMv+LSajATgnfcPJ+qs96DmkcG6vN5q6nui Sqi+9hg+Hrp+3+Qg+ff4o7iylYO4+EgWmD2J2N6WOH0oFsUMlXCKl2u/uNAzvv/+ ZY3+LM9vi2kQJtatn+OObtrCdG+TKSS2sY0FpV223+3paYeAIevNKekV4/vrjOLM 9O7dSLNtG2dam6FGsQD9XEqJNiS/sU4G2WWK1zTkHD4hlzFRRieckrXVm2SL3BkE 8ZS7dE+6lz38LB8H6ijVVvOtfiIMSiHbEuBxYp33C5YEquIL7rb/vmpd5DEmfSO2 T5vQQ+H9hCsb7slw++oO2wtqTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE50B8Jl bIJsR03S2BS9dXGNduBWMB8GA1UdIwQYMBaAFGnAibekjn2m7k8B/sapjgrS+oEL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzJGNC9CNENBNzc5NjRE RTAxMUVEQTZGMDEwNDhDNEY5QUUwMi9hY0NKdDZTT2ZhYnVUd0gteHFtT0N0TDZn UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FjQ0p0NlNPZmFidVR3SC14cW1PQ3RMNmdRcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzJGNC9CNENBNzc5NjRERTAxMUVEQTZGMDEwNDhDNEY5QUUwMi9hY0NKdDZTT2Zh YnVUd0gteHFtT0N0TDZnUXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCw6kWZhuOx3HBiek4jU9AgnbFjKMzVe69CO7EEoBbWhe/dTwbyFu/5 Qex1O/mOWr4duc9MuTYX1zYDzRZIC4VHTaJHmKOD85/wWw89qsLBAhCv/e43yxLi DR59tutN1YVI1hdLpIAnJ2gdo1D9Ajnmk+KsHj1wq56v9BHO/TRKssnt0JLEz33m 4zm7360jBheHDGEACH72OcBRghF/h4/+7KT0zTQfGyNTF9gksQiC/6opjJxcNaTE wPVO2CjBR5XyNQxaqjIAZ3+yDxOePCav+0MdAxCoJXLDymcmfSudGunoU2hOwMLR WeyVlvHRc17O3nET2lpc5FWenLeqZ2+O -----END CERTIFICATE-----Generated at Sat Aug 23 21:34:57 2025 by rpki-client