$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft File: xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft (raw, json) Hash identifier: SbjCFIuvtUVYxt8vFHMaStj4z/Ljn09pfHs9WApb+Oo= Subject key identifier: F2:99:E8:6D:92:E6:25:2C:83:16:8C:36:0B:EB:F4:C7:4A:E7:5B:11 Authority key identifier: C4:9E:51:83:EA:2F:C4:9B:8A:83:C9:20:52:BC:E2:A8:B6:57:6C:70 Certificate issuer: /CN=A91DF937/serialNumber=C49E5183EA2FC49B8A83C92052BCE2A8B6576C70 Certificate serial: 1F4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft Manifest number: 1F3E Signing time: Fri 22 Aug 2025 16:04:06 +0000 Manifest this update: Fri 22 Aug 2025 16:04:06 +0000 Manifest next update: Fri 29 Aug 2025 16:04:06 +0000 Files and hashes: 1: xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl (hash: 1888PO2Nw2rvvgrv+WNdqmH7p/vrm0llRCU3bwVcjZg=) 2: E723101E553D11E7B552CE31C4F9AE02.roa (hash: CYv9JY9hI0P702N3lQBz+p9YJHwSjBcG7pv4fPI19/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:04:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8011 (0x1f4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF937, serialNumber=C49E5183EA2FC49B8A83C92052BCE2A8B6576C70 Validity Not Before: Aug 22 16:04:06 2025 GMT Not After : Aug 29 16:04:06 2025 GMT Subject: CN=68a894f6-935b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f6:12:f4:8f:99:58:e9:d3:c8:49:bb:b6:d1: ca:83:f1:91:83:62:4b:d1:32:cc:16:dc:e6:f6:a2: 30:2e:71:75:81:47:b1:74:2b:2f:fc:0e:d6:0c:df: 9c:37:1f:f9:cb:ea:95:6b:8a:21:cd:02:95:46:92: 9b:5e:3c:97:b8:e2:f3:48:ad:ec:48:61:e3:47:5e: 72:71:01:b5:7b:82:5d:8f:cf:cc:8e:8d:2a:a5:51: d4:e6:41:6b:c3:4d:72:85:5a:d5:5f:68:59:8e:1e: 63:59:0f:dd:60:1d:3d:fd:f7:f2:62:0a:ca:f8:f6: 08:21:de:00:f5:b2:5d:ff:19:68:10:ae:f8:f9:db: 2e:f8:f7:c9:57:a0:bb:e3:40:35:e3:62:94:91:2f: 95:b1:42:c1:e4:ab:12:64:a6:3d:5e:a6:7c:27:52: ca:9a:2e:6a:b0:88:50:22:cf:8d:00:4d:30:4c:68: 55:42:7d:e1:f1:03:89:84:36:53:81:ff:d4:64:56: fa:6b:1f:b0:21:95:f0:2b:a8:e3:f8:ea:ae:4e:8f: 39:b2:bd:59:a9:14:3a:f6:ef:bc:c8:f2:41:ef:51: 3f:94:0a:db:fb:87:17:23:33:4b:6c:2d:2e:cb:db: e7:b6:8a:f5:52:d6:63:e8:e0:37:93:35:2b:7c:cf: f8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:99:E8:6D:92:E6:25:2C:83:16:8C:36:0B:EB:F4:C7:4A:E7:5B:11 X509v3 Authority Key Identifier: keyid:C4:9E:51:83:EA:2F:C4:9B:8A:83:C9:20:52:BC:E2:A8:B6:57:6C:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:57:28:c2:05:e4:17:79:8e:e8:af:d3:f6:02:a2:98:85:22: 97:cf:11:e6:3d:10:24:41:6a:95:01:48:6b:ac:3b:cd:cc:e9: 7a:32:92:9f:29:5c:1b:23:21:3b:c4:07:69:8e:e1:6d:00:34: 4f:9f:6b:cd:a0:7e:62:27:2e:c4:7c:0c:5c:f1:0a:4c:54:d4: f8:07:1b:2b:d2:0e:8b:ef:5e:b5:d7:cf:04:9f:04:cd:87:de: 0a:71:cd:3d:d1:f9:99:89:41:18:78:48:9f:d7:3e:7a:c3:54: 95:86:f9:71:f6:e0:5f:b9:be:5d:fb:8f:f0:a9:e8:bb:c5:37: 74:f2:28:96:bc:1e:1d:e5:2d:fe:be:ec:a1:3d:db:8e:c6:23: 40:20:3f:f4:c9:6b:cb:a1:62:c8:3e:28:d5:c7:ce:5d:19:ab: 99:1c:21:bf:b0:c8:8a:86:d2:27:ec:fd:db:11:1b:b4:0b:87: cf:2a:f6:79:12:04:4f:e9:4f:8b:46:b4:3b:fc:85:1d:54:84: 4f:e3:a4:fc:e1:6d:af:c3:21:7f:21:da:26:6f:b2:6e:53:89: 74:1f:7c:26:1f:b5:1d:18:56:c9:fb:aa:fe:39:8c:98:ce:1a: 19:5d:7c:de:c4:0f:95:42:48:af:99:db:c7:61:11:9a:9c:01: 96:43:4f:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICH0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY5MzcxMTAvBgNVBAUTKEM0OUU1MTgzRUEyRkM0OUI4QTgzQzkyMDUyQkNFMkE4 QjY1NzZDNzAwHhcNMjUwODIyMTYwNDA2WhcNMjUwODI5MTYwNDA2WjAYMRYwFAYD VQQDEw02OGE4OTRmNi05MzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3vYS9I+ZWOnTyEm7ttHKg/GRg2JL0TLMFtzm9qIwLnF1gUexdCsv/A7WDN+c Nx/5y+qVa4ohzQKVRpKbXjyXuOLzSK3sSGHjR15ycQG1e4Jdj8/Mjo0qpVHU5kFr w01yhVrVX2hZjh5jWQ/dYB09/ffyYgrK+PYIId4A9bJd/xloEK74+dsu+PfJV6C7 40A142KUkS+VsULB5KsSZKY9XqZ8J1LKmi5qsIhQIs+NAE0wTGhVQn3h8QOJhDZT gf/UZFb6ax+wIZXwK6jj+OquTo85sr1ZqRQ69u+8yPJB71E/lArb+4cXIzNLbC0u y9vntor1UtZj6OA3kzUrfM/4jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPKZ6G2S 5iUsgxaMNgvr9MdK51sRMB8GA1UdIwQYMBaAFMSeUYPqL8SbioPJIFK84qi2V2xw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjkzNy9BNDQ3QkZEQzU1 MzAxMUU2QTM2NDI3NDVDNEY5QUUwMi94SjVSZy1vdnhKdUtnOGtnVXJ6aXFMWlhi SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hKNVJnLW92eEp1S2c4a2dVcnppcUxaWGJIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjkzNy9BNDQ3QkZEQzU1MzAxMUU2QTM2NDI3NDVDNEY5QUUwMi94SjVSZy1vdnhK dUtnOGtnVXJ6aXFMWlhiSEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtVyjCBeQXeY7or9P2AqKYhSKXzxHmPRAkQWqVAUhrrDvNzOl6MpKf KVwbIyE7xAdpjuFtADRPn2vNoH5iJy7EfAxc8QpMVNT4Bxsr0g6L7161188EnwTN h94Kcc090fmZiUEYeEif1z56w1SVhvlx9uBfub5d+4/wqei7xTd08iiWvB4d5S3+ vuyhPduOxiNAID/0yWvLoWLIPijVx85dGauZHCG/sMiKhtIn7P3bERu0C4fPKvZ5 EgRP6U+LRrQ7/IUdVIRP46T84W2vwyF/Idomb7JuU4l0H3wmH7UdGFbJ+6r+OYyY zhoZXXzexA+VQkivmdvHYRGanAGWQ08X -----END CERTIFICATE-----Generated at Sat Aug 23 19:39:55 2025 by rpki-client