$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft File: 90n3b5KhbSqHFDf3LIbQ0F3imtU.mft (raw, json) Hash identifier: 4LkCm5ZKjLHjmU+NGbS+zp5m1a1pKiUZnsSDt/psY/M= Subject key identifier: B3:94:1D:05:11:BE:B4:E7:7E:BB:65:56:D5:7A:98:C6:07:A5:E6:47 Authority key identifier: F7:49:F7:6F:92:A1:6D:2A:87:14:37:F7:2C:86:D0:D0:5D:E2:9A:D5 Certificate issuer: /CN=A91DDDED/serialNumber=F749F76F92A16D2A871437F72C86D0D05DE29AD5 Certificate serial: 01E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/90n3b5KhbSqHFDf3LIbQ0F3imtU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft Manifest number: 01E0 Signing time: Sat 23 Aug 2025 02:47:29 +0000 Manifest this update: Sat 23 Aug 2025 02:47:28 +0000 Manifest next update: Sat 30 Aug 2025 02:47:28 +0000 Files and hashes: 1: 90n3b5KhbSqHFDf3LIbQ0F3imtU.crl (hash: ADfJSPprpQh8omhQbINbADnZ3O633PJMVGIfC7dmWSo=) 2: 69B6C14A9DF611ED8D51D272C4F9AE02.roa (hash: 54OZtiC3lpeukDDzmCUDt697LQ+SuKtxGSa0nhIWHEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.crl rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/90n3b5KhbSqHFDf3LIbQ0F3imtU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:47:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 483 (0x1e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDDED, serialNumber=F749F76F92A16D2A871437F72C86D0D05DE29AD5 Validity Not Before: Aug 23 02:47:28 2025 GMT Not After : Aug 30 02:47:28 2025 GMT Subject: CN=68a92bc1-4908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:72:6f:42:00:05:ab:88:6b:a7:82:0b:07:73: c4:f1:13:ad:55:f4:e3:7d:a8:c0:a9:4c:ab:8b:d4: b9:ff:2a:ce:94:5c:58:23:26:2c:17:bc:6a:45:21: 03:3b:34:8d:3a:ba:f0:b0:6b:c9:76:7f:e4:a1:68: 0e:4c:fd:05:ad:3a:e8:fd:d3:bb:11:47:9a:70:1f: 3f:ff:d5:99:d6:bd:1c:51:9b:39:f7:7d:a0:fd:c8: e6:8e:2f:44:e5:26:5a:dd:8c:8c:0b:c9:bb:0c:88: 0b:e2:8e:7b:06:68:bc:39:a6:0a:9d:4e:c4:9b:97: 3b:70:d9:61:43:97:29:15:a5:3d:09:89:24:8b:82: b1:b5:db:72:76:21:c3:00:84:c7:35:3a:fe:8d:ca: 2c:60:d9:80:59:91:c3:97:96:f2:9b:70:af:dd:3f: fb:16:07:f0:2f:3d:0d:67:49:a1:f2:0d:26:a9:78: fb:a8:1b:4e:89:26:a4:e2:13:9c:23:b2:c6:84:73: 50:80:3d:ab:8d:cb:ca:39:38:75:c6:ed:2a:ca:de: 7c:39:16:de:68:62:c2:12:51:b0:ec:39:04:d4:37: dd:39:a9:6c:c7:24:81:af:9e:6f:ed:64:0c:45:58: 4d:a3:82:c9:a5:9d:d6:e0:70:fc:93:d8:18:77:e4: f9:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:94:1D:05:11:BE:B4:E7:7E:BB:65:56:D5:7A:98:C6:07:A5:E6:47 X509v3 Authority Key Identifier: keyid:F7:49:F7:6F:92:A1:6D:2A:87:14:37:F7:2C:86:D0:D0:5D:E2:9A:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/90n3b5KhbSqHFDf3LIbQ0F3imtU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:b3:1e:d1:bd:41:98:d9:79:16:8b:16:45:f1:2a:07:fd:a3: e3:68:99:d5:21:9a:18:92:d3:0e:9c:c7:77:ad:df:1b:ac:77: ea:55:e8:53:e4:42:94:cb:45:cc:4f:c3:c1:35:b1:56:9c:27: 08:b0:99:07:f9:7e:b0:ed:9a:2b:9a:72:6d:27:e0:c7:48:3a: a9:35:83:18:dd:a4:4c:5f:a3:0a:35:2c:21:49:60:7f:40:ce: 55:78:80:da:df:87:37:10:32:6c:7e:e0:f7:a7:ad:8a:0f:2d: 20:d2:9b:52:3d:e2:8f:57:89:db:44:3f:e4:ec:63:78:c9:e4: ff:aa:dd:46:2d:4f:de:83:52:a3:bc:66:dc:dd:fc:1e:02:fa: 70:28:44:19:66:16:6a:dd:b9:f6:34:49:0b:5b:ce:e1:e9:f7: 20:96:f3:4f:17:8e:5c:98:79:69:66:c6:8c:52:63:27:40:de: 3f:29:b8:00:46:28:08:0c:39:46:3b:06:35:48:8b:03:f5:40: 61:9b:d4:d4:c8:00:79:30:d3:26:4c:54:2a:da:ba:a8:67:62: 12:43:d1:4a:8a:1c:b9:01:0c:12:1a:93:b3:fc:e0:b1:8c:4e: dc:e3:c5:b0:e8:ad:28:aa:04:39:07:9e:02:f4:d8:07:4f:18: ea:a3:d7:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERERUQxMTAvBgNVBAUTKEY3NDlGNzZGOTJBMTZEMkE4NzE0MzdGNzJDODZEMEQw NURFMjlBRDUwHhcNMjUwODIzMDI0NzI4WhcNMjUwODMwMDI0NzI4WjAYMRYwFAYD VQQDEw02OGE5MmJjMS00OTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsXJvQgAFq4hrp4ILB3PE8ROtVfTjfajAqUyri9S5/yrOlFxYIyYsF7xqRSED OzSNOrrwsGvJdn/koWgOTP0FrTro/dO7EUeacB8//9WZ1r0cUZs5932g/cjmji9E 5SZa3YyMC8m7DIgL4o57Bmi8OaYKnU7Em5c7cNlhQ5cpFaU9CYkki4KxtdtydiHD AITHNTr+jcosYNmAWZHDl5bym3Cv3T/7FgfwLz0NZ0mh8g0mqXj7qBtOiSak4hOc I7LGhHNQgD2rjcvKOTh1xu0qyt58ORbeaGLCElGw7DkE1DfdOalsxySBr55v7WQM RVhNo4LJpZ3W4HD8k9gYd+T5SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLOUHQUR vrTnfrtlVtV6mMYHpeZHMB8GA1UdIwQYMBaAFPdJ92+SoW0qhxQ39yyG0NBd4prV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERERFRC83OUNDMDE2NjlE RjIxMUVEOTU5NDlGNTdDNEY5QUUwMi85MG4zYjVLaGJTcUhGRGYzTEliUTBGM2lt dFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkwbjNiNUtoYlNxSEZEZjNMSWJRMEYzaW10VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RERFRC83OUNDMDE2NjlERjIxMUVEOTU5NDlGNTdDNEY5QUUwMi85MG4zYjVLaGJT cUhGRGYzTEliUTBGM2ltdFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9sx7RvUGY2XkWixZF8SoH/aPjaJnVIZoYktMOnMd3rd8brHfqVehT 5EKUy0XMT8PBNbFWnCcIsJkH+X6w7ZormnJtJ+DHSDqpNYMY3aRMX6MKNSwhSWB/ QM5VeIDa34c3EDJsfuD3p62KDy0g0ptSPeKPV4nbRD/k7GN4yeT/qt1GLU/eg1Kj vGbc3fweAvpwKEQZZhZq3bn2NEkLW87h6fcglvNPF45cmHlpZsaMUmMnQN4/KbgA RigIDDlGOwY1SIsD9UBhm9TUyAB5MNMmTFQq2rqoZ2ISQ9FKihy5AQwSGpOz/OCx jE7c48Ww6K0oqgQ5B54C9NgHTxjqo9cv -----END CERTIFICATE-----Generated at Sat Aug 23 14:33:41 2025 by rpki-client