$ rpki-client -vvf rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft File: xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft (raw, json) Hash identifier: HZwAdVhxY6sh1f9/RfWdb8KMV3bPVAedqm91CemPi40= Subject key identifier: 1F:71:D0:9E:67:E5:71:18:7C:C2:2A:35:CD:DD:A6:39:74:DD:FE:92 Authority key identifier: C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39 Certificate issuer: /CN=A91D51A0/serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539 Certificate serial: 0459 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft Manifest number: 042D Signing time: Sat 23 Aug 2025 00:38:23 +0000 Manifest this update: Sat 23 Aug 2025 00:38:22 +0000 Manifest next update: Sat 30 Aug 2025 00:38:22 +0000 Files and hashes: 1: xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl (hash: k6bXQpnSyibXO2puSaeIzVl//zbRM45OcPO5CLzGvDY=) 2: 5CA964A68AC111EC91D19A11C4F9AE02.roa (hash: JDhvBxRe3WYJ1iKQKnxqCUD2z2C21JJ9nqsXsWXBpYM=) 3: 6F8A81CCF30C11ED94750772C4F9AE02.roa (hash: QNRRPIEXpBXbzOjvogyb/5EofzlDIH5pOqmalYkDTHw=) 4: 86131D8AEA5D11ED80641166C4F9AE02.roa (hash: pOC7yi76swQlUgILehboMwNcNI7fxV+UlNvd0wZTls0=) 5: 8FD0B12E400311EEBF5A8B52C4F9AE02.roa (hash: QSRbYccf6zSEHa0HsQVgKCVz5nS1O8L5U8Elot2Xz40=) 6: D46B2C087F8711EC81E76A59C4F9AE02.roa (hash: R3jOsVUDlgPUNcLVjE2JxsnxeughPhg0TvY+Ytf4478=) 7: D83192B0152B11EE85ED4B1DC4F9AE02.roa (hash: 8STPYAJJhsqxveLpZRzmdl9yhMuww2dhMQO1WbQeNbU=) 8: 5F14A15442D111EF8424E65BC4F9AE02.roa (hash: +sir/1Ip5eUjrTrKzP4T0efIjhcNSv/WtmTYay9OtXs=) 9: C3261EF826DF11ED94E18118C4F9AE02.roa (hash: 7KI+xGonwsZRICria/4CZwlDNlRIuXU/wVts22Crf9U=) 10: 350FEB88D40611EDADEE3D1EC4F9AE02.roa (hash: fPCfFsxMUqOAvLJmkWjc+RPsiCNLjQ233XGNCqOiY/w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:38:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1113 (0x459) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D51A0, serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539 Validity Not Before: Aug 23 00:38:22 2025 GMT Not After : Aug 30 00:38:22 2025 GMT Subject: CN=68a90d7e-f8b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:86:c2:f6:26:4a:47:8d:72:7b:e1:98:a0:0d: 1e:40:50:59:e0:2e:f8:11:cc:4d:39:04:eb:95:8b: db:9f:67:6d:fd:2f:6e:f1:4a:9b:1d:44:1a:e9:98: 13:91:7e:2b:8c:9c:4d:4f:36:19:30:37:c8:43:22: 8b:c0:2c:be:38:98:9b:05:ed:3a:0b:44:55:ef:6a: 6e:5e:d7:b5:27:b4:7e:7e:b1:31:35:18:80:de:14: 0b:0b:33:1a:b2:36:5b:e2:1f:fb:6a:07:5a:ae:9e: b9:6d:8c:49:77:14:36:a8:b0:0a:1f:a3:5e:46:f5: 4a:9f:44:ad:20:6c:9c:65:0c:7d:93:89:ad:7e:f2: 9e:31:34:95:f0:57:be:93:fb:f3:45:40:63:33:7f: 9d:54:d9:1a:15:c5:6a:f8:98:be:26:07:85:14:fd: 81:08:f0:44:2a:e2:d2:f3:80:3e:f0:18:43:0a:ac: e6:37:96:3b:1c:92:4a:87:d8:ab:f1:2c:98:71:e4: c7:fd:6e:c4:9e:7a:e0:d4:b6:12:4b:e8:6a:8f:16: 38:14:c9:5a:03:a7:ad:fd:7c:b7:09:19:30:4a:ea: c4:e3:65:bc:e1:91:6d:39:22:27:63:96:20:0f:c1: 7b:03:29:d5:a3:1c:cc:51:0d:ad:d4:53:f7:23:68: 63:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:71:D0:9E:67:E5:71:18:7C:C2:2A:35:CD:DD:A6:39:74:DD:FE:92 X509v3 Authority Key Identifier: keyid:C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:b1:52:83:30:ad:7c:8e:70:19:10:29:ca:63:64:a7:cf:64: a4:94:40:66:c6:ee:e5:68:78:62:68:67:1e:24:16:51:32:e3: 35:73:94:05:9d:a9:b8:8f:8e:25:cc:21:12:c0:fb:3d:e7:8c: 8d:a3:c1:d8:6e:6d:b0:55:53:0d:67:d3:a0:7e:97:ba:a8:69: 95:c4:0b:35:30:a0:cb:c6:e5:2c:82:d6:51:4b:b7:5e:85:93: 1a:1e:72:f6:e1:38:09:a5:ab:9e:4d:a6:08:af:51:09:9f:b0: 23:79:22:8f:34:2a:37:7a:9a:29:0f:34:a3:36:6b:7a:5a:aa: 1f:dd:d9:c1:ca:08:81:67:f0:1d:df:dd:90:1c:43:7a:79:d1: e3:8a:62:b9:82:d5:60:36:2a:5a:b3:ed:f2:fa:74:24:ae:f5: 2b:79:29:f2:ce:ac:f8:b1:93:36:c8:32:1a:68:74:97:a4:82: 37:f8:fb:a6:dd:e8:81:9f:d0:ec:25:16:96:3e:96:ec:55:4c: 41:07:18:3e:22:7b:27:c5:f2:78:a5:42:a4:08:5d:b1:49:04: 7c:af:d4:16:af:32:dd:fd:fd:a3:57:12:aa:e7:58:71:8e:e5: c3:fc:eb:36:ff:4b:b5:d9:63:46:29:03:1b:39:4c:a3:e2:56: de:bf:07:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUxQTAxMTAvBgNVBAUTKEM2RUFCRUI5M0UxRDA2RTJDMzJFMUM0Q0JFMTQ3Q0ZC Mzk5OTI1MzkwHhcNMjUwODIzMDAzODIyWhcNMjUwODMwMDAzODIyWjAYMRYwFAYD VQQDEw02OGE5MGQ3ZS1mOGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt4bC9iZKR41ye+GYoA0eQFBZ4C74EcxNOQTrlYvbn2dt/S9u8UqbHUQa6ZgT kX4rjJxNTzYZMDfIQyKLwCy+OJibBe06C0RV72puXte1J7R+frExNRiA3hQLCzMa sjZb4h/7agdarp65bYxJdxQ2qLAKH6NeRvVKn0StIGycZQx9k4mtfvKeMTSV8Fe+ k/vzRUBjM3+dVNkaFcVq+Ji+JgeFFP2BCPBEKuLS84A+8BhDCqzmN5Y7HJJKh9ir 8SyYceTH/W7Ennrg1LYSS+hqjxY4FMlaA6et/Xy3CRkwSurE42W84ZFtOSInY5Yg D8F7AynVoxzMUQ2t1FP3I2hjqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB9x0J5n 5XEYfMIqNc3dpjl03f6SMB8GA1UdIwQYMBaAFMbqvrk+HQbiwy4cTL4UfPs5mSU5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTFBMC83QzUzOTEwQzdG ODQxMUVDODA1MThFNTFDNEY5QUUwMi94dXEtdVQ0ZEJ1TERMaHhNdmhSOC16bVpK VGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h1cS11VDRkQnVMRExoeE12aFI4LXptWkpUay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTFBMC83QzUzOTEwQzdGODQxMUVDODA1MThFNTFDNEY5QUUwMi94dXEtdVQ0ZEJ1 TERMaHhNdmhSOC16bVpKVGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnsVKDMK18jnAZECnKY2Snz2SklEBmxu7laHhiaGceJBZRMuM1c5QF nam4j44lzCESwPs954yNo8HYbm2wVVMNZ9Ogfpe6qGmVxAs1MKDLxuUsgtZRS7de hZMaHnL24TgJpaueTaYIr1EJn7AjeSKPNCo3epopDzSjNmt6Wqof3dnBygiBZ/Ad 392QHEN6edHjimK5gtVgNipas+3y+nQkrvUreSnyzqz4sZM2yDIaaHSXpII3+Pum 3eiBn9DsJRaWPpbsVUxBBxg+InsnxfJ4pUKkCF2xSQR8r9QWrzLd/f2jVxKq51hx juXD/Os2/0u12WNGKQMbOUyj4lbevwf+ -----END CERTIFICATE-----Generated at Sat Aug 23 17:11:04 2025 by rpki-client