$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9BC4/92E821F0A46011E9810A5C0BC4F9AE02/g86FOnpm6rnh8jNGcR09yX1XWXg.mft File: g86FOnpm6rnh8jNGcR09yX1XWXg.mft (raw, json) Hash identifier: Sf9dzA2lPyZvTia2BGU+oha8vhYJB2/jDJrHE79NdWQ= Subject key identifier: 78:46:A4:56:AB:22:28:CE:BC:44:24:6F:C7:DC:B1:8E:C4:B8:C2:07 Authority key identifier: 83:CE:85:3A:7A:66:EA:B9:E1:F2:33:46:71:1D:3D:C9:7D:57:59:78 Certificate issuer: /CN=A91E9BC4/serialNumber=83CE853A7A66EAB9E1F23346711D3DC97D575978 Certificate serial: 0E61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g86FOnpm6rnh8jNGcR09yX1XWXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9BC4/92E821F0A46011E9810A5C0BC4F9AE02/g86FOnpm6rnh8jNGcR09yX1XWXg.mft Manifest number: 0E57 Signing time: Fri 22 Aug 2025 17:52:19 +0000 Manifest this update: Fri 22 Aug 2025 17:52:19 +0000 Manifest next update: Fri 29 Aug 2025 17:52:19 +0000 Files and hashes: 1: g86FOnpm6rnh8jNGcR09yX1XWXg.crl (hash: ekbZV7sjZ9zSVtzuG51nFaHXQBKQEGXzCfImCVSNnpw=) 2: 3B495FFCA46211E9B730310FC4F9AE02.roa (hash: pWiGa9e3CsBZCkEfjYxSv/AY6FwzKhNWqEBfC5Rt5as=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9BC4/92E821F0A46011E9810A5C0BC4F9AE02/g86FOnpm6rnh8jNGcR09yX1XWXg.crl rsync://rpki.apnic.net/member_repository/A91E9BC4/92E821F0A46011E9810A5C0BC4F9AE02/g86FOnpm6rnh8jNGcR09yX1XWXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g86FOnpm6rnh8jNGcR09yX1XWXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3681 (0xe61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9BC4, serialNumber=83CE853A7A66EAB9E1F23346711D3DC97D575978 Validity Not Before: Aug 22 17:52:19 2025 GMT Not After : Aug 29 17:52:19 2025 GMT Subject: CN=68a8ae53-e7e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:16:15:e9:6f:fd:90:64:a8:b6:71:d1:1c:55: 85:17:95:4d:38:88:24:1a:0c:10:e5:c2:df:7b:e8: b6:f5:9a:c7:aa:58:fa:62:98:26:2c:9b:c4:8e:88: f7:27:c3:97:73:9b:f9:57:3c:dc:b6:9a:53:d3:f5: b1:32:5f:c4:24:d8:6e:f3:5f:9f:3f:13:7e:c7:4f: 34:3c:34:3a:d1:32:8e:67:e0:f5:e9:6c:54:8e:29: 2e:a1:29:3e:4e:9d:53:9d:98:ce:ab:90:eb:28:c1: 01:d4:c9:7f:64:a7:41:51:92:db:be:dc:c7:1b:84: 7a:f7:0a:f5:9f:c7:65:31:57:cc:10:85:88:77:2e: 12:36:b1:81:ff:96:44:48:0e:10:98:bf:7c:f6:1a: 42:79:9e:f3:eb:91:8c:a9:fa:b2:36:6f:40:34:69: 5c:5d:cf:45:d0:b9:c5:04:cb:0b:bf:ed:d0:4e:17: 23:82:9e:a2:d2:77:ad:ef:c8:fb:1d:55:e5:2e:2f: c8:f6:45:94:b6:f5:ed:39:cb:e7:59:92:b1:a9:d1: 38:e5:37:b1:6a:a5:71:00:0e:22:6b:bf:9a:06:0c: a6:a6:67:d3:6f:53:b9:61:64:db:ca:21:7c:19:7e: 4b:d8:4a:f9:60:5a:0f:75:9d:2c:cd:42:1d:aa:23: 32:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:46:A4:56:AB:22:28:CE:BC:44:24:6F:C7:DC:B1:8E:C4:B8:C2:07 X509v3 Authority Key Identifier: keyid:83:CE:85:3A:7A:66:EA:B9:E1:F2:33:46:71:1D:3D:C9:7D:57:59:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9BC4/92E821F0A46011E9810A5C0BC4F9AE02/g86FOnpm6rnh8jNGcR09yX1XWXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g86FOnpm6rnh8jNGcR09yX1XWXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9BC4/92E821F0A46011E9810A5C0BC4F9AE02/g86FOnpm6rnh8jNGcR09yX1XWXg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:8f:19:36:46:c5:08:81:02:51:c2:ef:0f:81:de:b3:a7:31: 3e:c0:51:6b:ba:0f:ff:3b:62:aa:93:79:bf:70:80:2b:d0:16: 05:44:ad:2b:d5:0f:25:11:e5:8c:11:13:a4:e6:c8:78:12:2c: b7:ad:82:2e:e1:9e:cc:01:69:22:09:0e:9a:74:96:9b:ba:6b: 8e:e8:a4:5b:12:89:93:7d:ad:ad:94:ff:4c:8e:c6:fa:a2:67: 88:b8:3c:95:ad:95:d2:c0:ea:69:df:fc:23:6e:99:ae:0a:39: cf:3a:b6:bc:34:a5:78:60:f1:d3:38:e6:7c:c5:92:8e:c8:df: d6:bc:2f:ec:9f:49:a1:6f:72:39:02:95:15:45:2c:82:a1:3b: dc:2e:b1:f2:57:e8:aa:ab:f4:08:36:c2:cb:fc:1d:cf:70:2f: 78:ed:21:49:68:8d:a1:7f:ed:51:8c:c8:a5:5c:e1:f3:ef:53: be:2a:aa:d4:14:df:2e:6b:57:4e:01:48:89:b9:f5:c7:70:0c: 0a:46:2b:22:1b:69:f9:12:a0:7c:59:e4:7f:d3:eb:53:1f:5c: 03:da:7b:f5:2d:54:40:9a:10:f8:cb:a4:e8:cb:48:48:c1:3f: 68:6f:78:31:7f:b0:3e:00:f6:12:44:da:1c:9a:3e:6b:c9:b1: 8d:d3:c9:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlCQzQxMTAvBgNVBAUTKDgzQ0U4NTNBN0E2NkVBQjlFMUYyMzM0NjcxMUQzREM5 N0Q1NzU5NzgwHhcNMjUwODIyMTc1MjE5WhcNMjUwODI5MTc1MjE5WjAYMRYwFAYD VQQDEw02OGE4YWU1My1lN2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAshYV6W/9kGSotnHRHFWFF5VNOIgkGgwQ5cLfe+i29ZrHqlj6YpgmLJvEjoj3 J8OXc5v5VzzctppT0/WxMl/EJNhu81+fPxN+x080PDQ60TKOZ+D16WxUjikuoSk+ Tp1TnZjOq5DrKMEB1Ml/ZKdBUZLbvtzHG4R69wr1n8dlMVfMEIWIdy4SNrGB/5ZE SA4QmL989hpCeZ7z65GMqfqyNm9ANGlcXc9F0LnFBMsLv+3QThcjgp6i0net78j7 HVXlLi/I9kWUtvXtOcvnWZKxqdE45TexaqVxAA4ia7+aBgympmfTb1O5YWTbyiF8 GX5L2Er5YFoPdZ0szUIdqiMywwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHhGpFar IijOvEQkb8fcsY7EuMIHMB8GA1UdIwQYMBaAFIPOhTp6Zuq54fIzRnEdPcl9V1l4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUJDNC85MkU4MjFGMEE0 NjAxMUU5ODEwQTVDMEJDNEY5QUUwMi9nODZGT25wbTZybmg4ak5HY1IwOXlYMVhX WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c4NkZPbnBtNnJuaDhqTkdjUjA5eVgxWFdYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUJDNC85MkU4MjFGMEE0NjAxMUU5ODEwQTVDMEJDNEY5QUUwMi9nODZGT25wbTZy bmg4ak5HY1IwOXlYMVhXWGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgjxk2RsUIgQJRwu8Pgd6zpzE+wFFrug//O2Kqk3m/cIAr0BYFRK0r 1Q8lEeWMEROk5sh4Eiy3rYIu4Z7MAWkiCQ6adJabumuO6KRbEomTfa2tlP9Mjsb6 omeIuDyVrZXSwOpp3/wjbpmuCjnPOra8NKV4YPHTOOZ8xZKOyN/WvC/sn0mhb3I5 ApUVRSyCoTvcLrHyV+iqq/QINsLL/B3PcC947SFJaI2hf+1RjMilXOHz71O+KqrU FN8ua1dOAUiJufXHcAwKRisiG2n5EqB8WeR/0+tTH1wD2nv1LVRAmhD4y6Toy0hI wT9ob3gxf7A+APYSRNocmj5rybGN08m+ -----END CERTIFICATE-----Generated at Sat Aug 23 20:44:34 2025 by rpki-client