$ rpki-client -vvf rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft File: S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft (raw, json) Hash identifier: PZvhFWcco6chleRrzflUjvAa65DQOAet/hBkxlHbYn0= Subject key identifier: 72:D4:2B:ED:ED:EE:F0:FE:65:FF:02:86:91:0D:0C:16:EC:AF:E8:67 Authority key identifier: 4B:EA:EC:33:7C:6E:89:F2:79:4A:97:44:E1:6D:91:9C:9C:79:3B:1E Certificate issuer: /CN=A91D82F4/serialNumber=4BEAEC337C6E89F2794A9744E16D919C9C793B1E Certificate serial: 0710 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft Manifest number: 0707 Signing time: Fri 22 Aug 2025 22:01:44 +0000 Manifest this update: Fri 22 Aug 2025 22:01:44 +0000 Manifest next update: Fri 29 Aug 2025 22:01:44 +0000 Files and hashes: 1: S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl (hash: yP4w6bvictgKkPdnBggugJBC+MlWVRb+wkpSWr6Yx6k=) 2: A2EF68E66EAD11EC8796A251C4F9AE02.roa (hash: hiz98+Tla2jui/7o4KW1a6oKm5a+tUfazFi0UQ7ozaI=) 3: 56617572537F11EB9C970658C4F9AE02.roa (hash: xS7amPwlmGL+CP12HQjnbonilF649h5RUnRZcUUg8FE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1808 (0x710) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D82F4, serialNumber=4BEAEC337C6E89F2794A9744E16D919C9C793B1E Validity Not Before: Aug 22 22:01:44 2025 GMT Not After : Aug 29 22:01:44 2025 GMT Subject: CN=68a8e8c8-1c35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f2:2f:9f:d5:c1:5d:6e:89:79:c0:53:03:51: 61:f3:9d:39:1c:14:2a:e3:1b:77:cd:6f:ea:66:b4: aa:11:08:af:ab:73:55:1a:8b:33:bd:35:42:6a:2b: 6d:40:9d:a3:07:25:86:5a:bc:7b:e3:5b:6f:96:f3: ca:27:4f:c8:ca:48:0c:2c:1f:1d:9a:da:21:d6:d8: aa:9e:f3:53:95:48:ee:45:17:76:c5:d0:d3:d3:03: 28:a8:a3:e8:76:35:40:29:dd:08:38:e2:b9:ed:8f: 0b:a9:a1:e7:d7:e7:36:33:7f:3c:e0:50:89:d3:b2: d8:03:c1:71:fb:4e:73:82:cd:37:4f:40:97:04:c0: 5e:21:48:98:8e:9c:9d:1d:6a:23:9e:36:96:f1:f2: 32:a6:b9:3f:38:79:d5:28:aa:f9:dc:f3:da:a5:8d: 9c:78:8b:7d:f2:84:5f:dd:25:bb:32:a0:4d:33:81: 55:74:5f:42:04:86:b6:41:2c:b2:7e:6b:cf:7d:17: 9a:0f:68:b5:41:2a:f4:6c:3f:df:d9:9a:5e:75:77: c4:5f:70:7b:fb:35:00:35:51:0c:d7:af:c8:d8:0e: 7f:f0:f5:ad:41:50:c5:9c:69:e2:24:1e:4d:cc:fd: f0:86:b8:be:e1:b4:18:a7:35:61:f6:6b:32:f9:d7: 51:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:D4:2B:ED:ED:EE:F0:FE:65:FF:02:86:91:0D:0C:16:EC:AF:E8:67 X509v3 Authority Key Identifier: keyid:4B:EA:EC:33:7C:6E:89:F2:79:4A:97:44:E1:6D:91:9C:9C:79:3B:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:e7:2e:25:8d:a3:24:40:c7:1b:1d:75:56:9d:7b:18:20:f3: e6:0b:7f:4a:24:bd:3e:3c:bb:f9:95:a5:cd:be:26:47:1b:9b: a8:0d:e1:70:cd:22:db:92:8f:dd:b1:e6:25:a3:62:13:bd:c1: 82:1c:3f:0b:a7:ef:6c:98:c2:a0:02:79:73:0a:55:1f:e9:e8: 28:c6:bf:f7:92:7d:04:2f:42:a6:78:aa:95:52:25:bf:eb:12: e6:81:cc:3f:1d:af:2a:3b:70:ed:79:c7:fd:9f:15:d0:4e:a8: ab:5f:72:8b:22:75:3f:95:2f:87:2a:94:de:87:a1:76:53:01: 75:1d:7f:aa:9d:c7:ab:f7:08:91:72:74:a1:ca:82:3a:68:1f: 33:d2:50:17:1e:41:a5:e8:d4:e7:3c:1f:60:28:5d:44:fb:da: ae:67:86:a0:86:a6:59:e8:ad:a5:4e:4c:df:8b:1c:c5:6c:91: 11:8d:03:eb:44:bb:64:09:f3:e6:04:1d:d0:a8:1d:7d:b0:1c: c2:17:89:09:ca:f6:c9:39:cf:fe:59:12:c2:5f:71:c7:ae:16: f3:6b:f7:54:9b:c9:7a:6e:7c:99:20:7b:70:5f:0c:4d:bb:fd: df:4c:ed:e4:6e:fd:cc:cb:f2:13:62:36:b2:5f:ad:82:8c:eb: 53:82:14:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgyRjQxMTAvBgNVBAUTKDRCRUFFQzMzN0M2RTg5RjI3OTRBOTc0NEUxNkQ5MTlD OUM3OTNCMUUwHhcNMjUwODIyMjIwMTQ0WhcNMjUwODI5MjIwMTQ0WjAYMRYwFAYD VQQDEw02OGE4ZThjOC0xYzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4fIvn9XBXW6JecBTA1Fh8505HBQq4xt3zW/qZrSqEQivq3NVGoszvTVCaitt QJ2jByWGWrx741tvlvPKJ0/IykgMLB8dmtoh1tiqnvNTlUjuRRd2xdDT0wMoqKPo djVAKd0IOOK57Y8LqaHn1+c2M3884FCJ07LYA8Fx+05zgs03T0CXBMBeIUiYjpyd HWojnjaW8fIyprk/OHnVKKr53PPapY2ceIt98oRf3SW7MqBNM4FVdF9CBIa2QSyy fmvPfReaD2i1QSr0bD/f2ZpedXfEX3B7+zUANVEM16/I2A5/8PWtQVDFnGniJB5N zP3whri+4bQYpzVh9msy+ddRLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHLUK+3t 7vD+Zf8ChpENDBbsr+hnMB8GA1UdIwQYMBaAFEvq7DN8bonyeUqXROFtkZyceTse MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODJGNC85MzZFNTlCRTUz N0QxMUVCQjJCRDdCNTNDNEY5QUUwMi9TLXJzTTN4dWlmSjVTcGRFNFcyUm5KeDVP eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MtcnNNM3h1aWZKNVNwZEU0VzJSbkp4NU94NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODJGNC85MzZFNTlCRTUzN0QxMUVCQjJCRDdCNTNDNEY5QUUwMi9TLXJzTTN4dWlm SjVTcGRFNFcyUm5KeDVPeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBU5y4ljaMkQMcbHXVWnXsYIPPmC39KJL0+PLv5laXNviZHG5uoDeFw zSLbko/dseYlo2ITvcGCHD8Lp+9smMKgAnlzClUf6egoxr/3kn0EL0KmeKqVUiW/ 6xLmgcw/Ha8qO3Dtecf9nxXQTqirX3KLInU/lS+HKpTeh6F2UwF1HX+qncer9wiR cnShyoI6aB8z0lAXHkGl6NTnPB9gKF1E+9quZ4aghqZZ6K2lTkzfixzFbJERjQPr RLtkCfPmBB3QqB19sBzCF4kJyvbJOc/+WRLCX3HHrhbza/dUm8l6bnyZIHtwXwxN u/3fTO3kbv3My/ITYjayX62CjOtTghR6 -----END CERTIFICATE-----Generated at Sat Aug 23 20:33:26 2025 by rpki-client