$ rpki-client -vvf rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft File: S9mZS8XP-ey2aDyU3G7s1e7uDng.mft (raw, json) Hash identifier: 52U7k12ZKIs6TI4PaJJ2iVi+L+6vCy5Z7UqtGf1oMAQ= Subject key identifier: 6C:10:76:CA:A2:F0:B3:2F:A1:72:03:1C:3A:8B:DB:B5:B9:15:00:70 Authority key identifier: 4B:D9:99:4B:C5:CF:F9:EC:B6:68:3C:94:DC:6E:EC:D5:EE:EE:0E:78 Certificate issuer: /CN=A91E00FC/serialNumber=4BD9994BC5CFF9ECB6683C94DC6EECD5EEEE0E78 Certificate serial: 0A1B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft Manifest number: 0A0E Signing time: Fri 22 Aug 2025 19:59:09 +0000 Manifest this update: Fri 22 Aug 2025 19:59:08 +0000 Manifest next update: Fri 29 Aug 2025 19:59:08 +0000 Files and hashes: 1: S9mZS8XP-ey2aDyU3G7s1e7uDng.crl (hash: WIsBUhN3cFpPVMgIxN57mGnc62KpJFCdezGjrLZXNH4=) 2: CD26CAC0431611EE80B53A75C4F9AE02.roa (hash: r8n2MjMUHYmVdEJ+7Xp+vud9daXi0fU7s6dyyzC3DT4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.crl rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:59:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2587 (0xa1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E00FC, serialNumber=4BD9994BC5CFF9ECB6683C94DC6EECD5EEEE0E78 Validity Not Before: Aug 22 19:59:08 2025 GMT Not After : Aug 29 19:59:08 2025 GMT Subject: CN=68a8cc0d-86fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:35:ca:70:5b:cd:62:cd:f6:9f:ef:15:6c:61: 12:d3:5f:45:ab:2f:68:db:ab:6a:ae:15:db:03:61: a6:af:37:5d:d0:db:d6:38:cc:8e:67:f5:2f:27:14: 4a:c8:d6:3d:07:7b:dc:23:9f:8b:41:13:72:92:7e: 93:be:76:de:0c:93:44:59:25:1c:68:12:c5:8f:1d: 38:4c:57:9b:66:10:4f:2f:a8:db:36:8b:16:10:c5: c6:ae:b2:50:65:90:a2:23:9a:db:40:85:f3:3f:ab: c4:0c:7b:b5:33:e5:c6:a5:b5:91:6a:97:66:94:7e: fd:39:56:a2:35:e5:20:03:b1:2c:bb:9f:eb:50:28: f2:fc:08:1b:97:91:ea:8d:97:70:57:13:dc:da:e1: aa:a0:e3:fd:2d:9f:ef:31:f9:fc:b4:98:a0:b2:c0: 31:4e:26:92:62:91:b5:af:8f:fe:ee:64:42:b2:a6: ec:d8:ac:e1:4b:05:af:2d:76:1c:60:66:5f:34:3c: b0:62:3e:5b:85:da:64:a4:c0:04:f9:dd:86:c5:18: a3:c8:eb:4e:f9:d0:13:cd:4f:9b:2c:5d:3b:bd:68: 57:a6:2d:47:2a:c1:95:58:3c:70:ce:5d:61:95:46: 25:1a:86:90:cd:f1:26:a2:9b:cc:d6:2a:f1:f1:c1: b5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:10:76:CA:A2:F0:B3:2F:A1:72:03:1C:3A:8B:DB:B5:B9:15:00:70 X509v3 Authority Key Identifier: keyid:4B:D9:99:4B:C5:CF:F9:EC:B6:68:3C:94:DC:6E:EC:D5:EE:EE:0E:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:03:14:2e:4c:97:24:97:de:f2:db:d1:32:b6:08:14:17:24: 8b:62:50:44:b0:b1:83:28:f8:6a:ab:cb:fe:46:ad:da:a9:b2: ef:8a:d2:98:ab:5f:c4:06:66:47:09:a4:ad:64:e7:57:f9:d3: 91:fa:ec:24:14:45:f3:6a:04:cd:47:b2:c0:ba:cb:cc:b8:4d: 9b:28:e9:96:4e:95:98:9a:4c:96:72:0b:d1:63:69:92:3c:b6: 19:eb:0c:21:c2:c0:04:e1:37:db:44:1c:77:28:34:89:02:46: df:81:2d:f4:ac:58:71:5f:94:5b:e5:b6:e3:4c:a0:ee:9b:4f: 94:f9:92:a5:56:6e:dd:2b:f0:c6:fb:59:fa:e6:dd:42:3c:d9: 8d:37:f6:97:c7:6c:f0:1d:fb:a4:e6:6f:62:16:ed:08:0a:f4: 9a:16:52:42:9b:34:89:aa:ee:14:6f:e8:4e:c3:3d:51:59:f9: d2:9b:54:f8:33:69:5d:6e:4c:fc:93:30:e2:11:04:4c:45:3c: 37:22:0e:56:5a:6a:ce:b7:eb:6d:82:7b:5a:4c:f6:59:5a:2e: 39:6a:9b:3d:a7:ad:2e:e1:f5:54:fd:70:19:5e:1d:95:cd:50: 91:77:07:7f:28:c3:05:72:10:7f:22:26:e8:3d:ac:17:b9:cc: 27:c9:4f:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAwRkMxMTAvBgNVBAUTKDRCRDk5OTRCQzVDRkY5RUNCNjY4M0M5NERDNkVFQ0Q1 RUVFRTBFNzgwHhcNMjUwODIyMTk1OTA4WhcNMjUwODI5MTk1OTA4WjAYMRYwFAYD VQQDEw02OGE4Y2MwZC04NmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwDXKcFvNYs32n+8VbGES019Fqy9o26tqrhXbA2Gmrzdd0NvWOMyOZ/UvJxRK yNY9B3vcI5+LQRNykn6TvnbeDJNEWSUcaBLFjx04TFebZhBPL6jbNosWEMXGrrJQ ZZCiI5rbQIXzP6vEDHu1M+XGpbWRapdmlH79OVaiNeUgA7Esu5/rUCjy/Agbl5Hq jZdwVxPc2uGqoOP9LZ/vMfn8tJigssAxTiaSYpG1r4/+7mRCsqbs2KzhSwWvLXYc YGZfNDywYj5bhdpkpMAE+d2GxRijyOtO+dATzU+bLF07vWhXpi1HKsGVWDxwzl1h lUYlGoaQzfEmopvM1irx8cG1hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGwQdsqi 8LMvoXIDHDqL27W5FQBwMB8GA1UdIwQYMBaAFEvZmUvFz/nstmg8lNxu7NXu7g54 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDBGQy81NUYyQzRDNjdG MkYxMUVBQURGNEJGNkFDNEY5QUUwMi9TOW1aUzhYUC1leTJhRHlVM0c3czFlN3VE bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1M5bVpTOFhQLWV5MmFEeVUzRzdzMWU3dURuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDBGQy81NUYyQzRDNjdGMkYxMUVBQURGNEJGNkFDNEY5QUUwMi9TOW1aUzhYUC1l eTJhRHlVM0c3czFlN3VEbmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmAxQuTJckl97y29EytggUFySLYlBEsLGDKPhqq8v+Rq3aqbLvitKY q1/EBmZHCaStZOdX+dOR+uwkFEXzagTNR7LAusvMuE2bKOmWTpWYmkyWcgvRY2mS PLYZ6wwhwsAE4TfbRBx3KDSJAkbfgS30rFhxX5Rb5bbjTKDum0+U+ZKlVm7dK/DG +1n65t1CPNmNN/aXx2zwHfuk5m9iFu0ICvSaFlJCmzSJqu4Ub+hOwz1RWfnSm1T4 M2ldbkz8kzDiEQRMRTw3Ig5WWmrOt+ttgntaTPZZWi45aps9p60u4fVU/XAZXh2V zVCRdwd/KMMFchB/IiboPawXucwnyU8f -----END CERTIFICATE-----Generated at Sat Aug 23 10:28:49 2025 by rpki-client