$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft File: f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft (raw, json) Hash identifier: rLRrpeg7Crlh+eefYolaR65M6JprKGErZ2YxWrChyHc= Subject key identifier: A0:DA:45:8D:D9:E1:3C:4B:3A:21:9A:B6:3E:B1:AD:9D:F3:E2:B2:C2 Authority key identifier: 7F:FC:80:56:50:74:2C:EA:50:98:6D:11:AB:CB:73:E0:F5:50:58:F9 Certificate issuer: /CN=A91D8DD9/serialNumber=7FFC805650742CEA50986D11ABCB73E0F55058F9 Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft Manifest number: 34 Signing time: Sat 23 Aug 2025 07:49:51 +0000 Manifest this update: Sat 23 Aug 2025 07:49:51 +0000 Manifest next update: Sat 30 Aug 2025 07:49:51 +0000 Files and hashes: 1: f_yAVlB0LOpQmG0Rq8tz4PVQWPk.crl (hash: HbMRLBiKgAzsUCEb9LoWtfgE2ENtPI+brTqi9hdcsBY=) 2: 9BCD7C8E2FD311F0A93F2250C4F9AE02.roa (hash: vDWq5W9RCH51uCc7RR26CZCfoA3jrfAEXK2LnEYPwlQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.crl rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8DD9, serialNumber=7FFC805650742CEA50986D11ABCB73E0F55058F9 Validity Not Before: Aug 23 07:49:51 2025 GMT Not After : Aug 30 07:49:51 2025 GMT Subject: CN=68a9729f-102b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c7:57:a6:39:36:dd:4b:d6:cd:66:cb:3b:b7: 28:a2:f9:3f:cb:75:45:5a:34:cb:58:3d:2d:44:3c: 68:f3:53:ec:83:6e:8f:d1:10:11:32:e8:34:55:fa: ca:03:57:c1:c7:65:78:8a:17:6d:3c:41:df:3c:ac: 3e:7f:cc:21:cc:c3:b5:d0:b2:3b:33:d3:f7:a5:df: 20:a8:8e:09:67:dd:4b:cb:67:7c:b1:8e:47:b1:78: 0b:24:64:49:02:58:df:26:4a:a6:e2:d4:d1:fd:c3: fd:3d:7e:a2:e7:a2:b0:14:47:6d:24:81:28:57:1a: 71:3d:c0:7c:d4:88:19:2a:3b:7e:89:21:46:23:48: a9:fd:15:ad:32:44:b1:39:29:70:85:0b:3a:53:2c: 47:5c:7d:ca:c7:12:dc:67:40:0a:08:37:51:5f:71: d3:23:0b:de:e4:bf:5e:6c:50:90:f6:cb:91:29:43: e3:f4:78:2c:6d:b6:68:1e:78:af:87:23:1f:45:b3: 61:15:31:17:34:c4:3a:36:42:39:c4:b8:08:c0:ce: 88:ed:39:e5:e3:7e:a1:99:3f:1d:83:7c:d3:f7:96: bb:ea:3f:5a:5d:19:07:64:a2:58:18:47:5c:4b:54: 17:91:c3:72:b2:b8:f5:4f:cf:0c:f3:bb:fc:37:ee: 2e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:DA:45:8D:D9:E1:3C:4B:3A:21:9A:B6:3E:B1:AD:9D:F3:E2:B2:C2 X509v3 Authority Key Identifier: keyid:7F:FC:80:56:50:74:2C:EA:50:98:6D:11:AB:CB:73:E0:F5:50:58:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:26:41:ef:cf:79:a0:55:d9:2c:37:ae:82:94:00:c0:66:72: 55:ce:8f:77:50:e5:8c:8a:5c:ab:4f:df:a4:7c:38:d1:5a:a3: 7d:86:9d:0e:8b:33:1c:68:1c:e5:80:ff:3b:3a:67:8d:0f:ca: 57:27:6d:24:ff:0d:8a:75:09:67:8d:d4:80:d5:7b:70:58:05: 99:f0:dc:f3:28:e5:e3:c0:ec:f2:10:91:c8:36:0e:8a:52:f7: bb:fb:59:a2:ab:f8:72:f6:15:e0:9c:b0:68:56:ef:8e:55:5b: b9:fa:41:01:46:e1:04:28:0e:6e:f4:e4:7d:a2:7d:d7:df:a1: 71:1f:99:dc:6a:c4:3c:77:3f:05:2d:3a:43:84:60:8e:da:8c: df:7d:ad:62:31:b7:8c:70:5e:84:f2:32:ca:8d:b3:6f:0d:85: c4:9c:85:50:16:d1:46:d9:b9:4c:c6:e4:06:c4:3b:82:e4:73: a8:e3:37:94:7c:f9:95:65:d6:05:e4:ca:73:40:0e:c9:b7:33: ba:17:16:bd:81:26:1b:95:30:27:d3:cc:f3:57:af:7d:ee:d0: 50:9e:d2:a5:59:35:e9:1c:3c:48:19:98:dc:c7:aa:43:c6:a4: 63:ac:da:00:09:23:63:f6:13:1e:10:38:70:af:0e:0a:70:57: 0e:20:2d:f7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OEREOTExMC8GA1UEBRMoN0ZGQzgwNTY1MDc0MkNFQTUwOTg2RDExQUJDQjczRTBG NTUwNThGOTAeFw0yNTA4MjMwNzQ5NTFaFw0yNTA4MzAwNzQ5NTFaMBgxFjAUBgNV BAMTDTY4YTk3MjlmLTEwMmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6x1emOTbdS9bNZss7tyii+T/LdUVaNMtYPS1EPGjzU+yDbo/REBEy6DRV+soD V8HHZXiKF208Qd88rD5/zCHMw7XQsjsz0/el3yCojgln3UvLZ3yxjkexeAskZEkC WN8mSqbi1NH9w/09fqLnorAUR20kgShXGnE9wHzUiBkqO36JIUYjSKn9Fa0yRLE5 KXCFCzpTLEdcfcrHEtxnQAoIN1FfcdMjC97kv15sUJD2y5EpQ+P0eCxttmgeeK+H Ix9Fs2EVMRc0xDo2QjnEuAjAzojtOeXjfqGZPx2DfNP3lrvqP1pdGQdkolgYR1xL VBeRw3KyuPVPzwzzu/w37i7vAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoNpFjdnh PEs6IZq2PrGtnfPissIwHwYDVR0jBBgwFoAUf/yAVlB0LOpQmG0Rq8tz4PVQWPkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4REQ5L0EzODdDRjhFMkZE MjExRjBBOUFDNUUyRkM0RjlBRTAyL2ZfeUFWbEIwTE9wUW1HMFJxOHR6NFBWUVdQ ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZl95QVZsQjBMT3BRbUcwUnE4dHo0UFZRV1BrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 REQ5L0EzODdDRjhFMkZEMjExRjBBOUFDNUUyRkM0RjlBRTAyL2ZfeUFWbEIwTE9w UW1HMFJxOHR6NFBWUVdQay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABQmQe/PeaBV2Sw3roKUAMBmclXOj3dQ5YyKXKtP36R8ONFao32GnQ6L MxxoHOWA/zs6Z40PylcnbST/DYp1CWeN1IDVe3BYBZnw3PMo5ePA7PIQkcg2DopS 97v7WaKr+HL2FeCcsGhW745VW7n6QQFG4QQoDm705H2ifdffoXEfmdxqxDx3PwUt OkOEYI7ajN99rWIxt4xwXoTyMsqNs28NhcSchVAW0UbZuUzG5AbEO4Lkc6jjN5R8 +ZVl1gXkynNADsm3M7oXFr2BJhuVMCfTzPNXr33u0FCe0qVZNekcPEgZmNzHqkPG pGOs2gAJI2P2Ex4QOHCvDgpwVw4gLfc= -----END CERTIFICATE-----Generated at Sat Aug 23 16:12:01 2025 by rpki-client