$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft File: _0Md-OE71_7FHntTUHtFOan5ZWY.mft (raw, json) Hash identifier: 3ozRDTxyYUiEj2vNyMmMcFY8hzFdrB/gBKfKmwsSwpI= Subject key identifier: ED:34:FD:D5:8E:F0:9F:BD:84:4D:00:40:F1:AB:99:F3:29:33:6F:12 Authority key identifier: FF:43:1D:F8:E1:3B:D7:FE:C5:1E:7B:53:50:7B:45:39:A9:F9:65:66 Certificate issuer: /CN=A91E6C4E/serialNumber=FF431DF8E13BD7FEC51E7B53507B4539A9F96566 Certificate serial: 2132 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft Manifest number: 2126 Signing time: Fri 22 Aug 2025 15:59:07 +0000 Manifest this update: Fri 22 Aug 2025 15:59:07 +0000 Manifest next update: Fri 29 Aug 2025 15:59:07 +0000 Files and hashes: 1: _0Md-OE71_7FHntTUHtFOan5ZWY.crl (hash: uxHP0NQIIwxBUC5BI0HrOivU/8ERCIWDITJG9iyzfOs=) 2: 5F0B20081CBF11EAA5FCAC86C4F9AE02.roa (hash: BjqwppR+NMle1n/1OCoqadfW2SGArIC17ShPvDamqQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.crl rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:59:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8498 (0x2132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6C4E, serialNumber=FF431DF8E13BD7FEC51E7B53507B4539A9F96566 Validity Not Before: Aug 22 15:59:07 2025 GMT Not After : Aug 29 15:59:07 2025 GMT Subject: CN=68a893cb-c361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:34:03:2d:e0:cf:1f:72:62:e2:68:c9:d5:d1: 0c:51:93:39:49:da:53:5a:da:c8:f8:24:9d:16:52: e9:ec:23:b5:e1:a3:6c:de:7b:71:2a:8e:33:50:93: 61:cd:2e:48:60:ea:62:fe:18:01:56:03:b3:44:6b: bf:69:bc:03:ec:60:6e:e2:c4:43:d9:50:bd:bd:10: 1d:78:49:a2:27:93:76:02:b7:cb:29:34:9b:71:cb: 56:00:3b:04:21:c6:af:e3:96:ad:3e:19:a3:9e:20: dd:9b:83:3e:86:15:6e:50:4e:34:15:3d:d4:89:a1: 50:eb:6a:25:cf:96:bb:f2:e7:58:f7:be:80:ad:15: 8f:f8:c6:dd:22:8d:d1:94:47:33:b6:d6:e7:d8:24: 73:5a:05:28:50:fd:31:ca:8d:ef:a2:62:35:01:2f: 8c:ee:c2:44:48:83:92:a9:33:37:da:2c:67:cf:1e: 1e:57:23:ad:75:d0:a6:94:e8:08:97:ea:37:36:63: f8:9d:69:66:29:b1:1b:56:e5:9c:df:c5:36:20:5d: ec:e5:10:59:ae:e1:03:53:29:15:e0:66:42:6a:34: d9:35:9e:68:41:72:ee:d3:aa:6c:d2:eb:fb:f3:f9: 3f:95:6f:a6:6c:36:41:fc:03:ba:18:fd:50:fa:be: e8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:34:FD:D5:8E:F0:9F:BD:84:4D:00:40:F1:AB:99:F3:29:33:6F:12 X509v3 Authority Key Identifier: keyid:FF:43:1D:F8:E1:3B:D7:FE:C5:1E:7B:53:50:7B:45:39:A9:F9:65:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:04:a1:50:35:74:8b:ad:48:50:76:f0:c3:58:fc:15:19:0b: 14:75:0a:63:e0:bc:72:cd:0f:ae:e9:43:e5:53:73:0d:6d:47: fe:17:02:83:11:ca:73:1b:1f:79:7c:07:49:1c:f0:7d:51:c8: c7:ba:7f:2f:23:15:ca:c1:41:0d:34:30:e2:87:16:24:5a:27: ac:3b:12:5b:bf:a6:05:4f:30:2f:ea:e9:35:42:70:19:19:4a: dd:37:36:8f:30:68:3d:af:4f:a6:05:3c:93:9c:1a:c8:13:66: 9e:bb:a8:c9:b3:72:57:bc:95:69:e2:98:35:67:d4:56:c8:0e: 2f:e5:f0:af:aa:2f:89:9a:87:dc:e6:4d:d1:6a:28:2a:84:a7: d5:11:eb:08:ff:ff:22:b2:a4:67:ca:0b:67:8c:a6:34:bc:f4: 48:f8:72:82:42:55:bf:5a:a7:1a:1b:11:78:3c:84:e4:63:35: d1:1c:03:32:84:fd:a7:59:01:5e:ff:34:6f:62:ca:ef:4b:3b: e1:b5:3d:9f:76:60:b6:9f:5f:0f:eb:af:c5:3a:85:73:f6:26: 21:df:ae:37:6a:ec:56:0d:e8:69:df:8d:96:2d:3d:bf:5e:e9: 48:f0:a4:da:48:24:4b:c8:23:56:04:21:08:8f:3a:51:82:a7: 58:cc:4f:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICITIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZDNEUxMTAvBgNVBAUTKEZGNDMxREY4RTEzQkQ3RkVDNTFFN0I1MzUwN0I0NTM5 QTlGOTY1NjYwHhcNMjUwODIyMTU1OTA3WhcNMjUwODI5MTU1OTA3WjAYMRYwFAYD VQQDEw02OGE4OTNjYi1jMzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2DQDLeDPH3Ji4mjJ1dEMUZM5SdpTWtrI+CSdFlLp7CO14aNs3ntxKo4zUJNh zS5IYOpi/hgBVgOzRGu/abwD7GBu4sRD2VC9vRAdeEmiJ5N2ArfLKTSbcctWADsE Icav45atPhmjniDdm4M+hhVuUE40FT3UiaFQ62olz5a78udY976ArRWP+MbdIo3R lEczttbn2CRzWgUoUP0xyo3vomI1AS+M7sJESIOSqTM32ixnzx4eVyOtddCmlOgI l+o3NmP4nWlmKbEbVuWc38U2IF3s5RBZruEDUykV4GZCajTZNZ5oQXLu06ps0uv7 8/k/lW+mbDZB/AO6GP1Q+r7oEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO00/dWO 8J+9hE0AQPGrmfMpM28SMB8GA1UdIwQYMBaAFP9DHfjhO9f+xR57U1B7RTmp+WVm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkM0RS8zNDQ4NjUyQ0Yz Q0IxMUU1QUUzNjYwNjJDNEY5QUUwMi9fME1kLU9FNzFfN0ZIbnRUVUh0Rk9hbjVa V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18wTWQtT0U3MV83RkhudFRVSHRGT2FuNVpXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkM0RS8zNDQ4NjUyQ0YzQ0IxMUU1QUUzNjYwNjJDNEY5QUUwMi9fME1kLU9FNzFf N0ZIbnRUVUh0Rk9hbjVaV1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoBKFQNXSLrUhQdvDDWPwVGQsUdQpj4LxyzQ+u6UPlU3MNbUf+FwKD EcpzGx95fAdJHPB9UcjHun8vIxXKwUENNDDihxYkWiesOxJbv6YFTzAv6uk1QnAZ GUrdNzaPMGg9r0+mBTyTnBrIE2aeu6jJs3JXvJVp4pg1Z9RWyA4v5fCvqi+Jmofc 5k3RaigqhKfVEesI//8isqRnygtnjKY0vPRI+HKCQlW/WqcaGxF4PITkYzXRHAMy hP2nWQFe/zRvYsrvSzvhtT2fdmC2n18P66/FOoVz9iYh3643auxWDehp342WLT2/ XulI8KTaSCRLyCNWBCEIjzpRgqdYzE8B -----END CERTIFICATE-----Generated at Sun Aug 24 03:36:34 2025 by rpki-client