$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.mft File: phNuUOlJjgSdC00vGGf6GxiRxO8.mft (raw, json) Hash identifier: Vml/E8FFJex5ROu5g5LiY/Oqy9g8FlQOsWtrKLF0W+Y= Subject key identifier: 49:9E:F6:44:81:03:47:78:FC:27:9F:CF:D1:0C:BC:E0:FF:86:A2:9E Authority key identifier: A6:13:6E:50:E9:49:8E:04:9D:0B:4D:2F:18:67:FA:1B:18:91:C4:EF Certificate issuer: /CN=A91EC5DE/serialNumber=A6136E50E9498E049D0B4D2F1867FA1B1891C4EF Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phNuUOlJjgSdC00vGGf6GxiRxO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.mft Manifest number: 0C Signing time: Sat 23 Aug 2025 08:22:13 +0000 Manifest this update: Sat 23 Aug 2025 08:22:12 +0000 Manifest next update: Sat 30 Aug 2025 08:22:12 +0000 Files and hashes: 1: phNuUOlJjgSdC00vGGf6GxiRxO8.crl (hash: AGeTYVLibzvuu2ZaO3IrXRBCocnEBSAhUJuSL5Oa7+8=) 2: 46DAB9387DF011F0A392A111C4F9AE02.roa (hash: tj++9M2lVWEa5egkhERYRXuWpoUuhAiNGmVaKo9CiAs=) 3: C3CEEDC47DF011F097DBDD12C4F9AE02.roa (hash: +oc37Txw0yf252NsUpH+dWYbAAxKeqtgsBVRzun8xVY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.crl rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phNuUOlJjgSdC00vGGf6GxiRxO8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:22:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC5DE, serialNumber=A6136E50E9498E049D0B4D2F1867FA1B1891C4EF Validity Not Before: Aug 23 08:22:12 2025 GMT Not After : Aug 30 08:22:12 2025 GMT Subject: CN=68a97a35-fd75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d1:29:75:0b:b3:40:a6:29:68:5d:b6:ee:94: ca:25:48:0c:dc:4b:24:c5:1e:2b:2f:83:f6:ba:77: b8:46:57:62:bd:dd:df:21:a0:6b:d9:1e:e1:8e:73: 22:62:ac:99:7e:11:34:cc:af:e5:5f:52:46:04:25: fe:e6:cd:be:6f:8a:51:9c:67:30:70:8c:17:7d:50: 63:5b:e4:29:25:85:43:06:28:97:87:f1:44:dc:fb: b2:4d:9c:b8:ef:b6:23:73:d5:11:85:ea:21:71:56: 27:55:ed:4d:e1:d4:f5:c9:8b:1e:13:1a:1e:2e:bd: 30:b3:94:fd:3d:43:05:c0:a3:50:86:d5:46:48:9c: 92:04:15:17:79:bc:ca:8d:1b:1d:53:85:37:9b:4f: 1a:07:94:65:54:bb:9e:c2:1e:8b:db:b1:86:0c:ac: 98:52:59:2a:1f:58:b1:56:ac:8d:7f:32:a6:4c:3c: 9f:c3:ef:6f:89:0c:be:4c:cb:47:6d:11:55:cf:97: 3a:c1:54:10:7d:ee:74:0e:92:18:1a:5f:05:98:03: b9:f1:7f:1b:6e:e1:bb:f8:1d:ca:75:73:5a:06:3b: 11:fb:99:86:af:fb:23:69:c1:71:ed:d9:0d:bd:cd: f8:75:ec:00:e8:04:b7:4d:e8:dd:dd:04:7f:77:01: e7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:9E:F6:44:81:03:47:78:FC:27:9F:CF:D1:0C:BC:E0:FF:86:A2:9E X509v3 Authority Key Identifier: keyid:A6:13:6E:50:E9:49:8E:04:9D:0B:4D:2F:18:67:FA:1B:18:91:C4:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phNuUOlJjgSdC00vGGf6GxiRxO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:b3:1f:92:69:b3:b4:0e:5f:69:f9:c0:01:e0:8f:91:8d:83: 74:c2:e1:83:49:16:a3:18:50:67:67:fa:fc:fb:23:55:7b:b8: 04:ce:40:2c:0d:de:92:80:fc:13:c9:2b:c4:ec:0a:73:95:61: f1:5a:81:6f:f8:fd:97:d6:e8:da:44:7d:0c:cc:4c:9f:eb:be: 90:05:eb:6d:d6:a1:1f:64:54:bb:3a:6b:56:cd:70:48:c8:9c: 80:e8:c1:e2:61:4e:a2:da:01:57:9e:c0:a7:fb:09:5d:80:dc: 1d:c1:f6:07:73:44:92:73:c4:ca:3c:c1:24:95:a1:4a:a8:e0: 5e:03:9f:fd:77:2a:2c:e7:ea:b7:d0:93:4c:5a:1b:91:cf:71: 84:7b:11:af:39:8e:dd:69:15:68:0f:ea:fc:52:e9:b8:40:67: 64:7a:cb:f0:e7:c3:07:a9:93:63:ab:6a:34:27:5f:cc:b4:53: 6b:7a:01:54:78:70:73:e3:d3:9e:ad:b8:6d:02:3d:ed:ab:69: a2:f4:67:77:72:1f:0b:ed:9f:66:c4:6e:64:dc:ab:5a:ce:ba: d4:c0:76:69:63:56:d9:9d:da:9b:8c:0a:76:07:44:5a:f2:2c: df:b2:37:1d:8b:26:67:50:c7:50:59:f0:1c:b1:ad:82:7e:c5: 30:3b:d1:58 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QzVERTExMC8GA1UEBRMoQTYxMzZFNTBFOTQ5OEUwNDlEMEI0RDJGMTg2N0ZBMUIx ODkxQzRFRjAeFw0yNTA4MjMwODIyMTJaFw0yNTA4MzAwODIyMTJaMBgxFjAUBgNV BAMTDTY4YTk3YTM1LWZkNzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+0Sl1C7NApiloXbbulMolSAzcSyTFHisvg/a6d7hGV2K93d8hoGvZHuGOcyJi rJl+ETTMr+VfUkYEJf7mzb5vilGcZzBwjBd9UGNb5CklhUMGKJeH8UTc+7JNnLjv tiNz1RGF6iFxVidV7U3h1PXJix4TGh4uvTCzlP09QwXAo1CG1UZInJIEFRd5vMqN Gx1ThTebTxoHlGVUu57CHovbsYYMrJhSWSofWLFWrI1/MqZMPJ/D72+JDL5My0dt EVXPlzrBVBB97nQOkhgaXwWYA7nxfxtu4bv4Hcp1c1oGOxH7mYav+yNpwXHt2Q29 zfh17ADoBLdN6N3dBH93AefRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSZ72RIED R3j8J5/P0Qy84P+Gop4wHwYDVR0jBBgwFoAUphNuUOlJjgSdC00vGGf6GxiRxO8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVDNURFLzg3NjJDRDFBNzQy MjExRjA4NzVDQUMzM0M0RjlBRTAyL3BoTnVVT2xKamdTZEMwMHZHR2Y2R3hpUnhP OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcGhOdVVPbEpqZ1NkQzAwdkdHZjZHeGlSeE84LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVD NURFLzg3NjJDRDFBNzQyMjExRjA4NzVDQUMzM0M0RjlBRTAyL3BoTnVVT2xKamdT ZEMwMHZHR2Y2R3hpUnhPOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJuzH5Jps7QOX2n5wAHgj5GNg3TC4YNJFqMYUGdn+vz7I1V7uATOQCwN 3pKA/BPJK8TsCnOVYfFagW/4/ZfW6NpEfQzMTJ/rvpAF623WoR9kVLs6a1bNcEjI nIDoweJhTqLaAVeewKf7CV2A3B3B9gdzRJJzxMo8wSSVoUqo4F4Dn/13Kizn6rfQ k0xaG5HPcYR7Ea85jt1pFWgP6vxS6bhAZ2R6y/Dnwwepk2OrajQnX8y0U2t6AVR4 cHPj056tuG0CPe2raaL0Z3dyHwvtn2bEbmTcq1rOutTAdmljVtmd2puMCnYHRFry LN+yNx2LJmdQx1BZ8ByxrYJ+xTA70Vg= -----END CERTIFICATE-----Generated at Sat Aug 23 19:38:25 2025 by rpki-client