$ rpki-client -vvf rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.mft File: RisW0yeXLqdxImoBWItSBe_qRJY.mft (raw, json) Hash identifier: u2rH7Kki3X7XsVOkcjJBmws4/J14xya+fsuTc/mlEY4= Subject key identifier: AC:87:FD:5A:FD:E7:CD:58:7A:D1:FB:37:50:5C:8D:A8:6D:49:04:FC Authority key identifier: 46:2B:16:D3:27:97:2E:A7:71:22:6A:01:58:8B:52:05:EF:EA:44:96 Certificate issuer: /CN=A91E268B/serialNumber=462B16D327972EA771226A01588B5205EFEA4496 Certificate serial: 068F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RisW0yeXLqdxImoBWItSBe_qRJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.mft Manifest number: 067E Signing time: Fri 22 Aug 2025 22:37:35 +0000 Manifest this update: Fri 22 Aug 2025 22:37:34 +0000 Manifest next update: Fri 29 Aug 2025 22:37:34 +0000 Files and hashes: 1: RisW0yeXLqdxImoBWItSBe_qRJY.crl (hash: zvSvsucX424R1gV0Gd5SCSZg7EIgAVkRvRl0U5anWeg=) 2: 7549B6D2744A11EDA8F69509C4F9AE02.roa (hash: Qanq6NRaIr7kIyU/FtT70GBfspNN2MElYD/z614Bqk8=) 3: 3F4ECBD2744D11EDB5D08682C4F9AE02.roa (hash: g6OgdDZKbwzC3zinj7MpaUKQ1NJe0hr5+U2aIYgw2E0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.crl rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RisW0yeXLqdxImoBWItSBe_qRJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:37:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1679 (0x68f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E268B, serialNumber=462B16D327972EA771226A01588B5205EFEA4496 Validity Not Before: Aug 22 22:37:34 2025 GMT Not After : Aug 29 22:37:34 2025 GMT Subject: CN=68a8f12e-f9a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2c:7e:d0:33:71:66:2e:43:f1:9f:0b:82:bd: 0c:cc:e8:de:0a:2a:6f:af:b4:f3:4f:98:a1:5f:a5: 57:de:55:7d:a0:3c:21:2a:31:54:61:a4:9d:62:11: 42:48:15:7f:e6:d8:ce:dd:02:5c:d9:a7:4a:27:6f: 59:e0:d8:07:e0:43:17:0e:a3:82:23:10:44:24:c6: 61:92:eb:5b:12:32:05:b1:25:83:c5:21:d6:40:8d: a5:3a:6a:03:e5:4f:04:06:ec:0e:37:41:63:ce:73: 4d:72:50:85:bc:2c:ec:63:92:f9:58:10:b0:70:73: 13:04:93:22:ea:88:cd:a4:b0:ec:e9:ae:b3:d2:00: b1:0c:98:c4:00:ec:44:03:68:94:91:7f:02:b7:62: 23:7c:3f:a5:99:b3:bc:81:5f:51:dd:c1:6e:9f:0a: e7:af:88:7b:26:52:a8:3a:19:21:11:94:d6:d9:6d: 2f:d4:cb:01:db:30:50:ac:db:22:02:61:6d:36:2a: 49:d8:9a:ac:4b:e9:21:39:fc:42:2e:32:d6:b4:f5: 4e:33:83:0d:ff:fb:db:c7:18:41:dd:55:fe:da:4f: 76:cb:fd:04:b7:86:d5:3f:79:14:ef:22:01:f8:bd: 64:c1:03:50:42:08:cc:2d:4c:d3:52:fe:ab:eb:1e: aa:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:87:FD:5A:FD:E7:CD:58:7A:D1:FB:37:50:5C:8D:A8:6D:49:04:FC X509v3 Authority Key Identifier: keyid:46:2B:16:D3:27:97:2E:A7:71:22:6A:01:58:8B:52:05:EF:EA:44:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RisW0yeXLqdxImoBWItSBe_qRJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:40:c2:be:47:b2:ec:ad:72:1e:83:77:8a:da:7a:42:b2:54: 29:a0:c1:b6:d3:8f:05:dd:df:5e:6a:91:47:5d:a5:0a:e8:63: 17:76:a5:70:3b:4b:4b:f8:9d:5e:31:70:40:86:29:bd:8a:a3: 2b:78:49:57:e0:f3:85:7b:89:d2:3d:7b:b4:ad:8c:cb:a0:a4: 96:27:87:90:21:c6:0a:19:34:0b:d3:3d:a3:8f:31:ec:39:1d: 6f:bf:77:f5:18:69:e9:8a:45:5b:e2:fc:4b:1d:b9:67:d9:d4: 77:e3:94:56:e1:21:f3:17:3e:54:09:87:69:16:53:51:eb:cd: 42:54:34:8c:4d:50:84:1f:af:7f:38:1f:ca:1f:e9:35:5d:bb: 4a:c8:0d:1e:03:71:02:aa:06:7d:b5:56:41:3c:aa:c8:4d:82: 73:8b:f3:3f:1b:2b:65:5a:e8:d3:ef:20:e6:9e:cd:b2:87:75: 63:71:80:21:89:90:92:d9:6a:0e:91:5d:32:1b:bd:16:1f:6f: 67:62:6b:ad:ce:d0:8c:85:4d:0e:51:e5:41:9f:81:3e:f4:25: 3e:7b:53:11:23:c7:bf:d2:3f:c8:77:ed:64:0c:d0:3a:3d:1e: f7:55:47:b2:fb:5a:ee:bf:b4:cf:ad:62:75:5a:4d:7a:39:df: f5:bc:28:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI2OEIxMTAvBgNVBAUTKDQ2MkIxNkQzMjc5NzJFQTc3MTIyNkEwMTU4OEI1MjA1 RUZFQTQ0OTYwHhcNMjUwODIyMjIzNzM0WhcNMjUwODI5MjIzNzM0WjAYMRYwFAYD VQQDEw02OGE4ZjEyZS1mOWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Sx+0DNxZi5D8Z8Lgr0MzOjeCipvr7TzT5ihX6VX3lV9oDwhKjFUYaSdYhFC SBV/5tjO3QJc2adKJ29Z4NgH4EMXDqOCIxBEJMZhkutbEjIFsSWDxSHWQI2lOmoD 5U8EBuwON0FjznNNclCFvCzsY5L5WBCwcHMTBJMi6ojNpLDs6a6z0gCxDJjEAOxE A2iUkX8Ct2IjfD+lmbO8gV9R3cFunwrnr4h7JlKoOhkhEZTW2W0v1MsB2zBQrNsi AmFtNipJ2JqsS+khOfxCLjLWtPVOM4MN//vbxxhB3VX+2k92y/0Et4bVP3kU7yIB +L1kwQNQQgjMLUzTUv6r6x6qMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKyH/Vr9 581YetH7N1BcjahtSQT8MB8GA1UdIwQYMBaAFEYrFtMnly6ncSJqAViLUgXv6kSW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjY4Qi80MjZGNTdDMDhE MzkxMUVCQjlGNENCMTdDNEY5QUUwMi9SaXNXMHllWExxZHhJbW9CV0l0U0JlX3FS SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Jpc1cweWVYTHFkeEltb0JXSXRTQmVfcVJKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjY4Qi80MjZGNTdDMDhEMzkxMUVCQjlGNENCMTdDNEY5QUUwMi9SaXNXMHllWExx ZHhJbW9CV0l0U0JlX3FSSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlQMK+R7LsrXIeg3eK2npCslQpoMG2048F3d9eapFHXaUK6GMXdqVw O0tL+J1eMXBAhim9iqMreElX4POFe4nSPXu0rYzLoKSWJ4eQIcYKGTQL0z2jjzHs OR1vv3f1GGnpikVb4vxLHbln2dR345RW4SHzFz5UCYdpFlNR681CVDSMTVCEH69/ OB/KH+k1XbtKyA0eA3ECqgZ9tVZBPKrITYJzi/M/GytlWujT7yDmns2yh3VjcYAh iZCS2WoOkV0yG70WH29nYmutztCMhU0OUeVBn4E+9CU+e1MRI8e/0j/Id+1kDNA6 PR73VUey+1ruv7TPrWJ1Wk16Od/1vCiy -----END CERTIFICATE-----Generated at Sun Aug 24 00:48:31 2025 by rpki-client