$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.mft File: kcPJZndvAR_FNQIdhfWue_utpX4.mft (raw, json) Hash identifier: PnQRlk7nO/PAv3/LmEEtKMX+H53sDEYpp+hrO740YB0= Subject key identifier: 1E:99:5B:DB:A5:B2:14:68:B2:A7:A2:B9:A7:13:01:77:74:C9:CE:FC Authority key identifier: 91:C3:C9:66:77:6F:01:1F:C5:35:02:1D:85:F5:AE:7B:FB:AD:A5:7E Certificate issuer: /CN=A91EA786/serialNumber=91C3C966776F011FC535021D85F5AE7BFBADA57E Certificate serial: 0BA6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.mft Manifest number: 0B85 Signing time: Fri 22 Aug 2025 19:11:12 +0000 Manifest this update: Fri 22 Aug 2025 19:11:12 +0000 Manifest next update: Fri 29 Aug 2025 19:11:12 +0000 Files and hashes: 1: kcPJZndvAR_FNQIdhfWue_utpX4.crl (hash: 6PUSnFxGHMjNXJ0lNPHFj3yNDqJnsTq9mJS8B5BNhkY=) 2: ACE4FD2C6D1711F085288D45C4F9AE02.roa (hash: 3byzVFFSNIGYt/y2lN2Kplw2yu43h1x0nZS5XpZza6s=) 3: 41B2F448ECE611EA882BEA79C4F9AE02.roa (hash: jfARn5Pllx6IMjPiI7FxZYgxXYW94DALaj8qH2++9WY=) 4: AD4CF94A6D1711F085288D45C4F9AE02.roa (hash: pJu8fJvPGWNBGFLFyKZvW8wCDFXLRMk1eEKwcDfxJhU=) 5: 436F1AE2ECF411EA822E8D28C4F9AE02.roa (hash: akcNDk8y+ODsfpu3oKFQYxPcSwPpaVaD8Gu1z5j+dkI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.crl rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:11:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2982 (0xba6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA786, serialNumber=91C3C966776F011FC535021D85F5AE7BFBADA57E Validity Not Before: Aug 22 19:11:12 2025 GMT Not After : Aug 29 19:11:12 2025 GMT Subject: CN=68a8c0d0-5a03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:db:5b:f9:d3:1f:20:f7:24:1a:ab:9f:7e:48: f5:93:8d:fd:b0:9a:78:b6:3a:2c:8d:e1:1d:19:87: c3:d1:a8:06:d2:4b:78:b0:10:cb:fc:83:38:03:e0: fb:0a:c1:f7:10:38:1e:25:d9:0f:ee:57:e4:51:24: de:46:5b:5c:51:4c:ab:cf:e3:e6:0e:28:d8:25:dd: 61:96:13:6d:fc:36:6f:a0:a8:e9:8f:39:72:49:be: 16:a5:79:85:b2:58:71:5d:ac:3f:c2:d4:a9:cb:98: 25:ce:02:e0:2d:71:ad:85:79:6b:05:31:7b:cb:a4: 45:33:3c:cf:e3:af:af:06:df:a5:2d:d6:d8:75:21: c8:34:5c:3b:4e:86:b5:1c:76:76:eb:0d:ad:8d:72: 8e:9e:df:dc:a1:7a:1d:71:ec:8f:ab:95:53:d2:17: 45:c8:81:82:a1:3a:a4:5d:5a:b5:32:22:78:47:fa: 66:25:ae:78:3c:5c:df:1d:e9:4f:98:09:41:0b:e4: 69:95:6a:da:d8:2d:c8:dc:81:3a:c1:a7:15:39:5d: 4b:9a:eb:ad:40:28:ca:c2:d1:f0:b1:4f:c7:bf:fc: 1e:9c:29:00:72:4e:30:00:e8:b6:2e:b0:fa:bf:e6: ad:ff:c9:d5:41:ce:61:25:02:84:7e:53:3c:f3:8d: 49:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:99:5B:DB:A5:B2:14:68:B2:A7:A2:B9:A7:13:01:77:74:C9:CE:FC X509v3 Authority Key Identifier: keyid:91:C3:C9:66:77:6F:01:1F:C5:35:02:1D:85:F5:AE:7B:FB:AD:A5:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d9:38:f0:2b:42:7b:9d:85:bd:42:e4:8e:45:40:d3:45:9f:80: 14:0c:17:d2:35:94:29:99:7e:f5:54:e6:4b:c0:ef:46:b0:1e: 42:80:10:ef:1f:e5:88:48:ac:8e:6d:86:40:e1:41:c2:fc:5e: 38:70:5a:cd:50:33:22:ba:4a:a4:19:df:39:75:b4:2a:27:c4: 81:52:95:ff:84:17:e7:6e:f1:49:ff:2a:59:13:04:de:bf:82: 6b:a6:be:40:36:ca:06:8a:ae:b4:4a:d9:be:6a:76:7b:35:1d: a5:8d:3a:92:2f:e9:fb:e4:64:b9:fe:8f:6f:3e:e0:e9:a1:41: 62:23:1d:8e:85:f8:5e:93:0a:bb:18:0c:02:ba:0f:ce:53:85: 50:28:ea:22:a2:d5:12:5b:66:2f:0e:39:0e:28:31:93:b3:d4: 42:7d:24:d7:49:f8:99:0c:bd:9e:df:82:53:a2:a9:a1:d5:b1: 71:12:f6:04:10:62:21:0e:61:d0:15:f3:39:7f:7b:69:0c:dd: 06:1c:b8:96:03:c6:47:da:8a:e6:a3:27:0f:6d:5e:b0:28:8f: cc:b1:6b:63:58:8e:5e:5f:ac:5e:26:17:89:c6:3f:69:6c:39: 5e:5a:13:39:66:a8:2f:25:17:1d:c3:a8:eb:a2:88:a2:d4:93: fa:cb:bc:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE3ODYxMTAvBgNVBAUTKDkxQzNDOTY2Nzc2RjAxMUZDNTM1MDIxRDg1RjVBRTdC RkJBREE1N0UwHhcNMjUwODIyMTkxMTEyWhcNMjUwODI5MTkxMTEyWjAYMRYwFAYD VQQDEw02OGE4YzBkMC01YTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAldtb+dMfIPckGquffkj1k439sJp4tjosjeEdGYfD0agG0kt4sBDL/IM4A+D7 CsH3EDgeJdkP7lfkUSTeRltcUUyrz+PmDijYJd1hlhNt/DZvoKjpjzlySb4WpXmF slhxXaw/wtSpy5glzgLgLXGthXlrBTF7y6RFMzzP46+vBt+lLdbYdSHINFw7Toa1 HHZ26w2tjXKOnt/coXodceyPq5VT0hdFyIGCoTqkXVq1MiJ4R/pmJa54PFzfHelP mAlBC+RplWra2C3I3IE6wacVOV1LmuutQCjKwtHwsU/Hv/wenCkAck4wAOi2LrD6 v+at/8nVQc5hJQKEflM8841JFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB6ZW9ul shRosqeiuacTAXd0yc78MB8GA1UdIwQYMBaAFJHDyWZ3bwEfxTUCHYX1rnv7raV+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTc4Ni9CMEQ3MjNFRTM1 REExMUVBQUI4ODQ4NEFDNEY5QUUwMi9rY1BKWm5kdkFSX0ZOUUlkaGZXdWVfdXRw WDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tjUEpabmR2QVJfRk5RSWRoZld1ZV91dHBYNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTc4Ni9CMEQ3MjNFRTM1REExMUVBQUI4ODQ4NEFDNEY5QUUwMi9rY1BKWm5kdkFS X0ZOUUlkaGZXdWVfdXRwWDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDZOPArQnudhb1C5I5FQNNFn4AUDBfSNZQpmX71VOZLwO9GsB5CgBDv H+WISKyObYZA4UHC/F44cFrNUDMiukqkGd85dbQqJ8SBUpX/hBfnbvFJ/ypZEwTe v4Jrpr5ANsoGiq60Stm+anZ7NR2ljTqSL+n75GS5/o9vPuDpoUFiIx2Ohfhekwq7 GAwCug/OU4VQKOoiotUSW2YvDjkOKDGTs9RCfSTXSfiZDL2e34JToqmh1bFxEvYE EGIhDmHQFfM5f3tpDN0GHLiWA8ZH2ormoycPbV6wKI/MsWtjWI5eX6xeJheJxj9p bDleWhM5ZqgvJRcdw6jrooii1JP6y7wX -----END CERTIFICATE-----Generated at Sat Aug 23 19:31:24 2025 by rpki-client