$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft File: 9AFXH04P6PgNV80CfNnuFdc4jyQ.mft (raw, json) Hash identifier: 1Ek0dhf9tSWS9DV4ZEHoPDBQw2i3/YrzH3uSFptTakU= Subject key identifier: 28:22:F8:EA:5B:D5:C7:3A:55:D7:20:2F:EA:F6:CA:99:F7:C2:B5:B7 Authority key identifier: F4:01:57:1F:4E:0F:E8:F8:0D:57:CD:02:7C:D9:EE:15:D7:38:8F:24 Certificate issuer: /CN=A91EA54A/serialNumber=F401571F4E0FE8F80D57CD027CD9EE15D7388F24 Certificate serial: B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft Manifest number: B2 Signing time: Sat 23 Aug 2025 06:16:50 +0000 Manifest this update: Sat 23 Aug 2025 06:16:49 +0000 Manifest next update: Sat 30 Aug 2025 06:16:49 +0000 Files and hashes: 1: 9AFXH04P6PgNV80CfNnuFdc4jyQ.crl (hash: BuCRDF+h4pqlSpcMBI/1wM4FW3YeADIng5xt8qNLTYk=) 2: 8D52A23871A611EF8F5B9755C4F9AE02.roa (hash: qE9tjMsEAm5+y32itfsH2PJPM2TbnYvfRnIFB/pK9/U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.crl rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:16:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 180 (0xb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA54A, serialNumber=F401571F4E0FE8F80D57CD027CD9EE15D7388F24 Validity Not Before: Aug 23 06:16:49 2025 GMT Not After : Aug 30 06:16:49 2025 GMT Subject: CN=68a95cd1-b38a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:97:dc:c5:8d:c0:04:b0:bc:5a:0d:0e:d0:3d: 46:29:ea:74:a0:30:7f:bc:2e:12:af:ff:32:8b:bd: ee:89:31:46:73:c1:d9:f0:89:1c:13:d0:2c:5c:e6: 6d:94:4e:83:7c:6e:2c:39:ea:ac:81:6a:d9:6b:6f: a0:db:77:81:a8:bc:fc:28:0b:34:a0:5f:a2:42:db: 38:84:ae:ac:18:19:b7:96:99:f4:e7:27:21:43:b4: 9d:57:b7:fc:99:4d:a3:d0:92:0a:d6:ef:81:c8:be: d7:bb:1a:59:2c:c9:2c:f8:e0:97:c2:8e:a4:b5:57: 26:a6:f0:a6:8b:1c:6d:fd:aa:61:0e:97:8d:13:fb: 2e:2b:a2:43:98:a4:ba:d9:3b:f5:d3:2c:19:f5:f8: af:64:81:f0:4d:8c:20:be:08:22:78:e6:b2:ba:91: b8:00:69:69:d6:3e:16:62:c8:a5:4c:c7:f1:2d:21: c2:02:75:89:82:b6:c3:ed:0f:29:86:6c:b8:c8:f8: 37:09:00:4a:7a:a5:b5:a1:58:88:41:8f:68:99:34: b8:8e:6f:57:9f:e5:f1:fc:7b:b3:3e:ab:34:b9:e0: 7c:34:69:cf:60:79:0b:d2:96:6f:98:4f:bf:6f:44: 91:92:bb:b8:d1:b7:d5:cb:8b:f2:f0:8e:eb:72:b2: 11:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:22:F8:EA:5B:D5:C7:3A:55:D7:20:2F:EA:F6:CA:99:F7:C2:B5:B7 X509v3 Authority Key Identifier: keyid:F4:01:57:1F:4E:0F:E8:F8:0D:57:CD:02:7C:D9:EE:15:D7:38:8F:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:7c:f2:83:10:0c:fd:b8:27:e9:44:38:d3:03:64:a4:8e:67: d1:da:3e:9e:da:bc:f8:5a:9b:c6:fa:0a:f0:6d:c6:f9:97:03: 77:e0:ad:18:1c:8a:dd:cc:01:fe:96:67:43:c7:4a:47:11:e9: 8b:2b:6b:bf:5c:93:e2:0f:60:fe:72:4e:8c:e9:10:8d:49:22: 49:c5:be:8d:2e:4a:73:5e:8e:41:b6:6c:1f:5f:a9:24:97:c1: ec:0c:72:d6:ed:44:0f:4d:0b:9f:9a:ec:a0:a2:ee:31:f8:4b: 3b:8a:ca:e8:49:aa:66:81:1b:56:e5:5e:fb:cf:80:f9:51:1c: 9f:85:ce:90:cd:2f:60:55:85:d4:f3:e0:a5:61:98:99:66:97: 8b:88:05:74:20:da:12:51:9e:07:71:0f:10:11:9f:75:f7:e9: b6:d8:29:1b:b0:83:e6:52:95:e6:56:e5:fc:f7:7e:92:fc:ea: 1c:d6:ea:bd:97:26:03:b4:c0:92:1a:ae:59:9f:aa:03:4e:ca: e6:95:c7:29:88:c6:bb:96:01:1b:6d:a2:02:d0:72:da:ed:dc: 4d:56:5f:1b:8e:c7:bd:6c:97:7e:96:e3:3c:22:93:9d:f1:61: 24:3a:df:0a:28:55:ce:ae:ee:63:fa:3e:b2:e7:f2:62:80:89: 0c:3f:b8:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE1NEExMTAvBgNVBAUTKEY0MDE1NzFGNEUwRkU4RjgwRDU3Q0QwMjdDRDlFRTE1 RDczODhGMjQwHhcNMjUwODIzMDYxNjQ5WhcNMjUwODMwMDYxNjQ5WjAYMRYwFAYD VQQDEw02OGE5NWNkMS1iMzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ZfcxY3ABLC8Wg0O0D1GKep0oDB/vC4Sr/8yi73uiTFGc8HZ8IkcE9AsXOZt lE6DfG4sOeqsgWrZa2+g23eBqLz8KAs0oF+iQts4hK6sGBm3lpn05ychQ7SdV7f8 mU2j0JIK1u+ByL7XuxpZLMks+OCXwo6ktVcmpvCmixxt/aphDpeNE/suK6JDmKS6 2Tv10ywZ9fivZIHwTYwgvggieOayupG4AGlp1j4WYsilTMfxLSHCAnWJgrbD7Q8p hmy4yPg3CQBKeqW1oViIQY9omTS4jm9Xn+Xx/HuzPqs0ueB8NGnPYHkL0pZvmE+/ b0SRkru40bfVy4vy8I7rcrIRrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCgi+Opb 1cc6VdcgL+r2ypn3wrW3MB8GA1UdIwQYMBaAFPQBVx9OD+j4DVfNAnzZ7hXXOI8k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTU0QS9CRTg0QTgyMDcx QTUxMUVGOEQ4MDVDNzhDNEY5QUUwMi85QUZYSDA0UDZQZ05WODBDZk5udUZkYzRq eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlBRlhIMDRQNlBnTlY4MENmTm51RmRjNGp5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTU0QS9CRTg0QTgyMDcxQTUxMUVGOEQ4MDVDNzhDNEY5QUUwMi85QUZYSDA0UDZQ Z05WODBDZk5udUZkYzRqeVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZfPKDEAz9uCfpRDjTA2SkjmfR2j6e2rz4WpvG+grwbcb5lwN34K0Y HIrdzAH+lmdDx0pHEemLK2u/XJPiD2D+ck6M6RCNSSJJxb6NLkpzXo5BtmwfX6kk l8HsDHLW7UQPTQufmuygou4x+Es7isroSapmgRtW5V77z4D5URyfhc6QzS9gVYXU 8+ClYZiZZpeLiAV0INoSUZ4HcQ8QEZ919+m22CkbsIPmUpXmVuX8936S/Ooc1uq9 lyYDtMCSGq5Zn6oDTsrmlccpiMa7lgEbbaIC0HLa7dxNVl8bjse9bJd+luM8IpOd 8WEkOt8KKFXOru5j+j6y5/JigIkMP7gp -----END CERTIFICATE-----Generated at Sat Aug 23 16:38:36 2025 by rpki-client