$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft File: dxt4h8SJvZsXs87YMWTvRNxWTvU.mft (raw, json) Hash identifier: CVZjDeCdMltBnSN4WqTkK4gOCdZtdZAkGWP1dDsTHY0= Subject key identifier: 16:42:4A:07:2C:B9:E5:BD:82:80:0C:A6:80:79:89:8B:DD:5E:82:FC Authority key identifier: 77:1B:78:87:C4:89:BD:9B:17:B3:CE:D8:31:64:EF:44:DC:56:4E:F5 Certificate issuer: /CN=A91E9641/serialNumber=771B7887C489BD9B17B3CED83164EF44DC564EF5 Certificate serial: 0198 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxt4h8SJvZsXs87YMWTvRNxWTvU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft Manifest number: 0192 Signing time: Sat 23 Aug 2025 03:33:23 +0000 Manifest this update: Sat 23 Aug 2025 03:33:23 +0000 Manifest next update: Sat 30 Aug 2025 03:33:23 +0000 Files and hashes: 1: dxt4h8SJvZsXs87YMWTvRNxWTvU.crl (hash: YZ6hOXp6q6pOFSqX96nsDCmWPRnkbnTw6C8bxKXj1lI=) 2: 5D432F98177711EEAB396D1CC4F9AE02.roa (hash: 64T0QVyxSFq/Fdklobji66MEyYuHugmocsuY/nRlqQ0=) 3: 5CB1666C177711EEAB396D1CC4F9AE02.roa (hash: i/4qbq1olZ1yrHtpcck4H45nkVfaKLB8DIL2yG7lkLw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.crl rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxt4h8SJvZsXs87YMWTvRNxWTvU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:33:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 408 (0x198) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9641, serialNumber=771B7887C489BD9B17B3CED83164EF44DC564EF5 Validity Not Before: Aug 23 03:33:23 2025 GMT Not After : Aug 30 03:33:23 2025 GMT Subject: CN=68a93683-fefe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:97:c0:8c:3e:8f:e5:14:9c:20:24:27:0a:9f: 7e:58:81:51:6e:1a:be:f1:fc:d1:ba:2c:5c:cd:7e: ab:44:4c:23:46:5f:22:1f:e4:14:17:3b:44:a5:9c: 42:ec:db:de:87:87:63:70:e6:3a:0c:2a:8b:ad:c2: cb:cb:63:c0:da:73:79:4f:be:79:be:1b:77:7f:43: 96:92:85:47:7b:75:41:43:7a:a3:4f:57:fc:90:84: 51:2a:e8:38:54:e2:a3:e7:55:ea:98:65:20:ea:b0: 6e:56:14:db:a8:52:b0:df:c3:ef:b3:b0:89:58:7f: ff:e1:51:e8:e5:fa:f5:15:01:e4:70:a7:56:68:ae: 3a:31:70:16:08:75:8f:6e:f6:cc:34:43:99:32:bc: 4a:2b:06:da:fd:8d:7b:1e:cb:12:ca:1c:1c:91:31: 7d:2f:a8:2c:99:45:ac:c7:22:69:87:59:29:a1:25: 5c:b7:17:8b:18:12:34:03:ab:00:d0:5d:38:cb:0d: 82:07:bb:c0:33:4e:45:7b:51:38:2d:f7:ed:61:55: 09:34:1c:5f:f9:50:fb:85:1f:14:8b:8a:aa:19:ea: 66:dd:38:f8:0b:f6:4a:f3:b9:15:32:7c:3a:ca:f5: 9b:f3:7c:d8:c2:d4:1b:04:c0:84:0f:9e:b5:67:cb: d1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:42:4A:07:2C:B9:E5:BD:82:80:0C:A6:80:79:89:8B:DD:5E:82:FC X509v3 Authority Key Identifier: keyid:77:1B:78:87:C4:89:BD:9B:17:B3:CE:D8:31:64:EF:44:DC:56:4E:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxt4h8SJvZsXs87YMWTvRNxWTvU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:37:28:71:0d:2b:3f:1c:87:0f:3e:9b:b9:77:7d:1a:f9:3c: ab:f0:74:79:03:db:33:1b:57:51:f2:81:dc:96:fe:31:1e:82: 9d:5a:c0:d5:89:61:d8:49:07:86:5c:4c:d0:63:aa:0b:64:77: fa:4c:60:ac:a5:8d:75:c9:8e:8e:3b:68:b2:42:5e:cb:8b:e1: cc:05:74:9a:1c:b5:4a:d5:69:42:a8:b1:15:0a:09:40:44:43: 04:a7:6d:8e:44:e4:1f:50:8f:b0:68:e0:9d:08:47:90:15:4f: c4:75:62:c6:8e:c8:57:bf:f8:67:fb:5c:64:9f:20:5f:67:64: 9a:62:e4:48:0c:bf:6e:c7:f4:b4:e3:e2:72:7c:90:27:53:cf: 03:6b:15:61:b5:94:50:f8:2d:3e:45:4d:9e:ce:15:f7:32:85: ba:a7:f2:fe:ba:a5:be:1f:94:e4:1c:e3:b0:c7:03:5d:cc:75: 91:f2:66:9e:f5:54:4b:a9:73:e1:67:16:e6:22:c4:41:bd:16: 07:6d:72:b6:87:f3:0c:11:4e:83:98:0c:68:65:df:82:ec:26: 84:44:80:84:4a:18:ca:63:c5:47:5d:96:e8:bb:e5:0e:12:c4: 91:b4:f3:15:23:23:32:d2:4b:3b:fa:26:b2:be:d3:a4:e1:6e: 75:bc:f5:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk2NDExMTAvBgNVBAUTKDc3MUI3ODg3QzQ4OUJEOUIxN0IzQ0VEODMxNjRFRjQ0 REM1NjRFRjUwHhcNMjUwODIzMDMzMzIzWhcNMjUwODMwMDMzMzIzWjAYMRYwFAYD VQQDEw02OGE5MzY4My1mZWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzJfAjD6P5RScICQnCp9+WIFRbhq+8fzRuixczX6rREwjRl8iH+QUFztEpZxC 7Nveh4djcOY6DCqLrcLLy2PA2nN5T755vht3f0OWkoVHe3VBQ3qjT1f8kIRRKug4 VOKj51XqmGUg6rBuVhTbqFKw38Pvs7CJWH//4VHo5fr1FQHkcKdWaK46MXAWCHWP bvbMNEOZMrxKKwba/Y17HssSyhwckTF9L6gsmUWsxyJph1kpoSVctxeLGBI0A6sA 0F04yw2CB7vAM05Fe1E4LfftYVUJNBxf+VD7hR8Ui4qqGepm3Tj4C/ZK87kVMnw6 yvWb83zYwtQbBMCED561Z8vRFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBZCSgcs ueW9goAMpoB5iYvdXoL8MB8GA1UdIwQYMBaAFHcbeIfEib2bF7PO2DFk70TcVk71 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTY0MS83RDAyODdFQTE3 NzAxMUVFOTQ1Q0Q4NTlDNEY5QUUwMi9keHQ0aDhTSnZac1hzODdZTVdUdlJOeFdU dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R4dDRoOFNKdlpzWHM4N1lNV1R2Uk54V1R2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTY0MS83RDAyODdFQTE3NzAxMUVFOTQ1Q0Q4NTlDNEY5QUUwMi9keHQ0aDhTSnZa c1hzODdZTVdUdlJOeFdUdlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgNyhxDSs/HIcPPpu5d30a+Tyr8HR5A9szG1dR8oHclv4xHoKdWsDV iWHYSQeGXEzQY6oLZHf6TGCspY11yY6OO2iyQl7Li+HMBXSaHLVK1WlCqLEVCglA REMEp22OROQfUI+waOCdCEeQFU/EdWLGjshXv/hn+1xknyBfZ2SaYuRIDL9ux/S0 4+JyfJAnU88DaxVhtZRQ+C0+RU2ezhX3MoW6p/L+uqW+H5TkHOOwxwNdzHWR8mae 9VRLqXPhZxbmIsRBvRYHbXK2h/MMEU6DmAxoZd+C7CaERICEShjKY8VHXZbou+UO EsSRtPMVIyMy0ks7+iayvtOk4W51vPVa -----END CERTIFICATE-----Generated at Sat Aug 23 10:44:58 2025 by rpki-client