$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft File: 0gZrYZNOd88mep3MOL9d7iHwe6M.mft (raw, json) Hash identifier: sTfpAxBiqXeCtNQdc3cvNQDbB1Lpb7dQG69WondOkB0= Subject key identifier: 50:52:E9:C9:D0:8C:4A:FB:CC:1E:A8:D8:B1:EC:5E:72:0E:0E:0F:CE Authority key identifier: D2:06:6B:61:93:4E:77:CF:26:7A:9D:CC:38:BF:5D:EE:21:F0:7B:A3 Certificate issuer: /CN=A91EBBAF/serialNumber=D2066B61934E77CF267A9DCC38BF5DEE21F07BA3 Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0gZrYZNOd88mep3MOL9d7iHwe6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft Manifest number: 32 Signing time: Sat 23 Aug 2025 07:54:06 +0000 Manifest this update: Sat 23 Aug 2025 07:54:06 +0000 Manifest next update: Sat 30 Aug 2025 07:54:06 +0000 Files and hashes: 1: 0gZrYZNOd88mep3MOL9d7iHwe6M.crl (hash: CJH8zu9oz21pd+AoCWAd3OSFHfDID0vY9k5cDeJsb+U=) 2: C3C056A636DD11F08C82E269C4F9AE02.roa (hash: HBKXI2AjuuTAqBzBKbi8y9q49xdsPFITyMYY5p5WuOA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.crl rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0gZrYZNOd88mep3MOL9d7iHwe6M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:54:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBBAF, serialNumber=D2066B61934E77CF267A9DCC38BF5DEE21F07BA3 Validity Not Before: Aug 23 07:54:06 2025 GMT Not After : Aug 30 07:54:06 2025 GMT Subject: CN=68a9739e-d542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c7:19:f8:c5:26:5c:13:21:b9:ee:cc:45:2d: cb:74:ab:40:89:1f:ec:9f:16:c6:83:74:a4:44:23: b1:86:56:31:e6:91:e7:09:3b:f8:80:fb:7b:23:46: ee:7c:c4:ba:99:c5:98:1c:82:86:db:19:4a:5c:a0: 88:9a:95:c9:e7:76:e6:f3:13:ef:7f:4d:fe:3f:76: 13:71:e2:fc:a2:61:76:84:44:24:5c:38:b8:ee:a8: 4e:98:81:60:58:a3:56:cd:ef:7a:cf:ba:58:74:30: 02:79:85:3d:1e:f2:92:c6:0f:eb:6e:8b:ae:f5:f6: 21:d8:0c:91:e1:38:ce:0d:55:b3:ab:3a:04:89:af: 1e:fa:46:f8:93:89:fa:46:7a:73:75:68:3a:45:72: f1:44:cc:21:53:e8:ba:fe:0b:84:88:09:c5:2a:34: 7d:4f:6f:8a:8f:bc:c2:f3:e8:9c:40:6b:4d:16:ad: 4b:87:ff:14:ce:04:ae:01:0c:1b:8c:27:9b:1b:b1: 41:ca:0d:0d:7d:63:ba:b5:34:24:9a:5c:7f:0e:66: b5:cd:92:f5:e7:6d:c2:c3:2f:46:5f:96:21:43:ba: ef:50:ad:ed:56:0f:56:48:53:e6:06:88:46:1c:91: ad:58:14:f3:14:35:f9:64:9a:08:d8:ff:78:13:81: e2:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:52:E9:C9:D0:8C:4A:FB:CC:1E:A8:D8:B1:EC:5E:72:0E:0E:0F:CE X509v3 Authority Key Identifier: keyid:D2:06:6B:61:93:4E:77:CF:26:7A:9D:CC:38:BF:5D:EE:21:F0:7B:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0gZrYZNOd88mep3MOL9d7iHwe6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:9f:b7:f7:e8:52:48:2c:5b:95:12:fb:a8:42:fc:0b:22:88: 9a:a0:99:90:6b:d5:dd:65:f8:83:04:46:15:06:b6:ef:a5:42: df:87:a0:73:ed:42:d2:b7:85:41:88:ea:d7:b6:6e:dd:fc:37: 97:55:64:a7:5b:79:44:2d:19:5b:95:7f:46:2c:62:97:7e:c6: b0:82:05:0f:73:49:f4:05:c7:53:92:d8:19:e7:72:40:4b:b2: 1c:49:4c:cc:c2:94:2a:36:e3:af:d2:7d:88:cb:38:20:a6:cc: 3f:7f:a8:30:85:df:f7:06:71:08:75:b1:9b:f8:95:bd:c0:ff: 85:f6:90:34:50:de:a3:63:23:ca:f9:cf:bf:69:fc:a8:1c:33: 2f:84:b8:47:fd:ca:d5:01:65:33:16:9e:73:0c:2e:02:4c:2f: 79:c3:41:ee:19:92:9e:e0:34:57:e6:67:59:c7:d6:9c:45:22: 9e:0a:92:c0:ee:b7:bc:20:52:2a:e3:c6:11:72:b0:e9:2c:64: b5:2f:be:1c:76:93:7f:dc:14:f3:91:d4:ff:82:bc:b9:f0:88: d1:29:7b:4e:d7:e0:f3:44:55:0d:21:11:b4:89:69:6c:46:3e: 81:a1:c4:46:c9:d1:67:a1:b1:7c:88:1f:0b:af:23:b6:4a:58: a8:7f:da:78 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QkJBRjExMC8GA1UEBRMoRDIwNjZCNjE5MzRFNzdDRjI2N0E5RENDMzhCRjVERUUy MUYwN0JBMzAeFw0yNTA4MjMwNzU0MDZaFw0yNTA4MzAwNzU0MDZaMBgxFjAUBgNV BAMTDTY4YTk3MzllLWQ1NDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHxxn4xSZcEyG57sxFLct0q0CJH+yfFsaDdKREI7GGVjHmkecJO/iA+3sjRu58 xLqZxZgcgobbGUpcoIialcnndubzE+9/Tf4/dhNx4vyiYXaERCRcOLjuqE6YgWBY o1bN73rPulh0MAJ5hT0e8pLGD+tui6719iHYDJHhOM4NVbOrOgSJrx76RviTifpG enN1aDpFcvFEzCFT6Lr+C4SICcUqNH1Pb4qPvMLz6JxAa00WrUuH/xTOBK4BDBuM J5sbsUHKDQ19Y7q1NCSaXH8OZrXNkvXnbcLDL0ZfliFDuu9Qre1WD1ZIU+YGiEYc ka1YFPMUNflkmgjY/3gTgeITAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUFLpydCM SvvMHqjYsexecg4OD84wHwYDVR0jBBgwFoAU0gZrYZNOd88mep3MOL9d7iHwe6Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCQkFGLzEwQzE5RDMwMzZE RDExRjA5Njg2MjE2NkM0RjlBRTAyLzBnWnJZWk5PZDg4bWVwM01PTDlkN2lId2U2 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMGdacllaTk9kODhtZXAzTU9MOWQ3aUh3ZTZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC QkFGLzEwQzE5RDMwMzZERDExRjA5Njg2MjE2NkM0RjlBRTAyLzBnWnJZWk5PZDg4 bWVwM01PTDlkN2lId2U2TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABmft/foUkgsW5US+6hC/AsiiJqgmZBr1d1l+IMERhUGtu+lQt+HoHPt QtK3hUGI6te2bt38N5dVZKdbeUQtGVuVf0YsYpd+xrCCBQ9zSfQFx1OS2BnnckBL shxJTMzClCo246/SfYjLOCCmzD9/qDCF3/cGcQh1sZv4lb3A/4X2kDRQ3qNjI8r5 z79p/KgcMy+EuEf9ytUBZTMWnnMMLgJML3nDQe4Zkp7gNFfmZ1nH1pxFIp4KksDu t7wgUirjxhFysOksZLUvvhx2k3/cFPOR1P+CvLnwiNEpe07X4PNEVQ0hEbSJaWxG PoGhxEbJ0WehsXyIHwuvI7ZKWKh/2ng= -----END CERTIFICATE-----Generated at Sat Aug 23 12:28:10 2025 by rpki-client