$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.mft File: Vo0XkVJHPICaYuWF5a3JQoZr5lk.mft (raw, json) Hash identifier: gVX7O5cfM7mu4cAd2ZXR5SMIjNTI5C5ufYss4tlkvl4= Subject key identifier: 15:E3:A2:E7:CE:76:8F:D8:62:D2:7F:00:96:C4:59:CE:0E:24:32:9C Authority key identifier: 56:8D:17:91:52:47:3C:80:9A:62:E5:85:E5:AD:C9:42:86:6B:E6:59 Certificate issuer: /CN=A91E0D8B/serialNumber=568D179152473C809A62E585E5ADC942866BE659 Certificate serial: 06DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo0XkVJHPICaYuWF5a3JQoZr5lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.mft Manifest number: 06D7 Signing time: Fri 22 Aug 2025 22:12:08 +0000 Manifest this update: Fri 22 Aug 2025 22:12:07 +0000 Manifest next update: Fri 29 Aug 2025 22:12:07 +0000 Files and hashes: 1: Vo0XkVJHPICaYuWF5a3JQoZr5lk.crl (hash: +T5cgTJm61YH8I4lXktYuo1j72Yc5NavBrsZDX3Evjs=) 2: 146FD366653611EB99BE491DC4F9AE02.roa (hash: vDTtnYK0urRCnkWdVJaHunlHhYBCBiIEuZyHl4rL/x4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.crl rsync://rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo0XkVJHPICaYuWF5a3JQoZr5lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:12:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1757 (0x6dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0D8B, serialNumber=568D179152473C809A62E585E5ADC942866BE659 Validity Not Before: Aug 22 22:12:07 2025 GMT Not After : Aug 29 22:12:07 2025 GMT Subject: CN=68a8eb38-3167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f3:7d:0c:92:b4:e5:83:d7:53:41:2d:8a:2a: 42:4a:28:39:2a:64:71:21:61:67:25:95:d0:d0:19: ea:70:8b:3a:9d:50:29:4e:fa:95:a6:fc:88:7e:89: 88:10:c3:85:7f:50:67:63:7e:62:b7:58:1d:cc:d6: a5:29:b0:ed:f3:0f:e5:1a:c5:3a:49:60:e9:fe:ab: de:44:eb:3d:8b:9b:37:ec:c7:c0:27:ac:5f:51:65: 1c:e2:6d:b4:3b:b0:ee:7e:73:95:08:ed:b3:8f:f9: 66:7f:3b:e4:cc:b7:22:b6:1e:fc:7d:67:fe:ea:76: c1:5c:8d:72:0c:01:4d:7b:02:65:cc:34:7e:61:90: ca:ff:53:35:78:69:88:e0:d8:82:51:29:b5:f7:df: 06:e1:1c:9b:66:f4:c6:8c:f8:4b:37:20:70:57:96: 52:6b:0b:29:22:16:8f:5c:16:d6:6f:27:e6:8a:c8: ae:db:10:bc:55:7d:57:e6:74:95:33:c6:c4:f3:4b: 29:44:42:b8:e8:b6:7b:a5:4a:8a:8b:b5:68:22:59: fb:91:e5:05:7a:e7:ed:bb:9b:2a:cb:e0:d8:26:03: e2:e1:40:ae:e1:ad:f8:92:2c:9f:72:23:e9:bc:03: e0:2b:b0:19:68:cc:39:d5:72:08:2e:8b:35:20:6a: 93:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:E3:A2:E7:CE:76:8F:D8:62:D2:7F:00:96:C4:59:CE:0E:24:32:9C X509v3 Authority Key Identifier: keyid:56:8D:17:91:52:47:3C:80:9A:62:E5:85:E5:AD:C9:42:86:6B:E6:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo0XkVJHPICaYuWF5a3JQoZr5lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:55:96:05:2c:cb:46:b8:44:84:b3:67:97:c4:33:27:fb:2c: 18:7a:63:31:e3:6b:8b:38:02:86:df:19:30:b1:be:3d:48:de: cf:17:d1:66:ed:22:cd:c6:3e:ae:b1:e3:0f:b9:34:2e:08:ae: 4e:16:f7:a5:fe:37:d6:b8:8c:a5:bf:b4:08:1e:d3:85:78:92: 64:96:a0:f4:53:67:76:f8:6d:98:2f:14:94:f1:26:19:6f:07: bb:12:ba:60:a1:91:91:ec:49:df:41:f4:b8:d1:f0:1f:ff:9a: ce:f0:35:99:72:d2:ab:81:cc:c5:9f:fd:59:94:23:c8:6e:cd: 2d:8a:28:54:7a:b1:9c:81:52:82:b1:a7:b9:70:da:e9:69:1a: 4f:40:b0:0f:58:e8:48:78:06:11:06:96:c9:af:28:86:c9:79: eb:83:1b:b6:40:7b:3f:26:e9:da:3a:40:45:df:50:2d:0d:da: ac:65:88:0c:ea:e9:d6:a4:ab:37:1c:72:72:e8:54:22:1f:47: 9a:e1:f5:0a:55:ad:4e:8f:bb:f2:42:16:b6:b7:e7:77:99:fa: ed:a1:3e:98:24:9f:0a:c3:9f:68:94:df:c5:89:e0:09:cd:fd: 87:04:0a:3b:89:5e:97:e3:39:38:df:ca:a6:4a:97:f0:28:19: 67:f0:62:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBt0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBEOEIxMTAvBgNVBAUTKDU2OEQxNzkxNTI0NzNDODA5QTYyRTU4NUU1QURDOTQy ODY2QkU2NTkwHhcNMjUwODIyMjIxMjA3WhcNMjUwODI5MjIxMjA3WjAYMRYwFAYD VQQDEw02OGE4ZWIzOC0zMTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3vN9DJK05YPXU0EtiipCSig5KmRxIWFnJZXQ0BnqcIs6nVApTvqVpvyIfomI EMOFf1BnY35it1gdzNalKbDt8w/lGsU6SWDp/qveROs9i5s37MfAJ6xfUWUc4m20 O7DufnOVCO2zj/lmfzvkzLcith78fWf+6nbBXI1yDAFNewJlzDR+YZDK/1M1eGmI 4NiCUSm1998G4RybZvTGjPhLNyBwV5ZSawspIhaPXBbWbyfmisiu2xC8VX1X5nSV M8bE80spREK46LZ7pUqKi7VoIln7keUFeuftu5sqy+DYJgPi4UCu4a34kiyfciPp vAPgK7AZaMw51XIILos1IGqTMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBXjoufO do/YYtJ/AJbEWc4OJDKcMB8GA1UdIwQYMBaAFFaNF5FSRzyAmmLlheWtyUKGa+ZZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEQ4Qi80QTZENkMwQTY1 MzQxMUVCQjZCOEYwMTlDNEY5QUUwMi9WbzBYa1ZKSFBJQ2FZdVdGNWEzSlFvWnI1 bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZvMFhrVkpIUElDYVl1V0Y1YTNKUW9acjVsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEQ4Qi80QTZENkMwQTY1MzQxMUVCQjZCOEYwMTlDNEY5QUUwMi9WbzBYa1ZKSFBJ Q2FZdVdGNWEzSlFvWnI1bGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqVZYFLMtGuESEs2eXxDMn+ywYemMx42uLOAKG3xkwsb49SN7PF9Fm 7SLNxj6useMPuTQuCK5OFvel/jfWuIylv7QIHtOFeJJklqD0U2d2+G2YLxSU8SYZ bwe7ErpgoZGR7EnfQfS40fAf/5rO8DWZctKrgczFn/1ZlCPIbs0tiihUerGcgVKC sae5cNrpaRpPQLAPWOhIeAYRBpbJryiGyXnrgxu2QHs/JunaOkBF31AtDdqsZYgM 6unWpKs3HHJy6FQiH0ea4fUKVa1Oj7vyQha2t+d3mfrtoT6YJJ8Kw59olN/FieAJ zf2HBAo7iV6X4zk438qmSpfwKBln8GJi -----END CERTIFICATE-----Generated at Sat Aug 23 16:42:16 2025 by rpki-client