$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft File: 9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft (raw, json) Hash identifier: ls7zcXhxROmS5cLKuAUOa1ulYnYQLWByhph4XRepBPU= Subject key identifier: B7:4C:7F:10:27:A9:5E:56:CD:71:7B:A2:7A:2B:44:BB:7E:14:47:73 Authority key identifier: F4:F1:5C:67:5E:D9:A5:C2:D1:99:5B:27:FB:53:FF:60:FF:02:49:E0 Certificate issuer: /CN=A91ED571/serialNumber=F4F15C675ED9A5C2D1995B27FB53FF60FF0249E0 Certificate serial: 0D89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft Manifest number: 0D82 Signing time: Fri 22 Aug 2025 18:03:50 +0000 Manifest this update: Fri 22 Aug 2025 18:03:49 +0000 Manifest next update: Fri 29 Aug 2025 18:03:49 +0000 Files and hashes: 1: 9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl (hash: zG7w1UCdIs2iEznb6upEZk8aoreCEXznG8kIk1/9tm8=) 2: C9819022CE7011E98E86DD52C4F9AE02.roa (hash: EM624Ee5dZvup/p2NN7lZAjAZv2Q+/2EJL827rz91tU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:03:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3465 (0xd89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED571, serialNumber=F4F15C675ED9A5C2D1995B27FB53FF60FF0249E0 Validity Not Before: Aug 22 18:03:49 2025 GMT Not After : Aug 29 18:03:49 2025 GMT Subject: CN=68a8b106-9a4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:54:0b:b8:89:48:9f:18:fe:ac:4c:4d:53:75: 61:e0:4c:1b:28:ef:cb:8c:18:b7:22:f4:5d:88:ba: 9f:f9:69:71:a5:10:f6:98:4c:1f:ed:86:25:31:60: 51:11:b4:7e:32:c8:e6:1b:c8:9c:b8:47:8f:05:c9: f5:b8:38:7c:68:43:21:de:2d:7e:4c:fd:b4:9e:62: 78:3a:18:8e:46:53:ed:4f:a9:37:0a:02:c7:79:e8: bd:d8:13:0c:27:8b:d2:e9:f4:ea:13:3c:cb:86:c4: 2e:48:e8:50:f8:94:e6:58:04:f6:b5:07:c6:08:7b: 43:cd:f0:6f:c4:23:4b:ea:09:ea:62:f8:4e:9b:46: 6e:7b:1b:6b:a1:52:09:d9:25:35:4e:56:d6:ed:2a: 8f:e3:17:23:3e:f4:b8:f5:7d:b8:a6:39:07:d2:8a: 1a:32:2b:67:90:58:b0:2a:58:67:9b:97:b9:60:30: 36:38:f5:84:2e:b5:83:b6:ec:61:b8:16:18:de:33: 37:27:12:1f:4d:2b:e0:51:98:29:50:d4:e7:2c:cc: 1b:ac:22:fb:6a:aa:6c:54:d2:3d:e5:92:d3:60:02: 8f:81:b5:b6:c0:1d:48:f7:b7:92:43:49:7a:ee:47: 84:f5:f7:3d:07:d4:81:2e:56:7c:bc:af:d0:0f:58: 60:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:4C:7F:10:27:A9:5E:56:CD:71:7B:A2:7A:2B:44:BB:7E:14:47:73 X509v3 Authority Key Identifier: keyid:F4:F1:5C:67:5E:D9:A5:C2:D1:99:5B:27:FB:53:FF:60:FF:02:49:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:a3:f1:eb:c3:ae:b8:ef:52:a5:08:a5:05:f7:be:d6:1c:47: c4:a4:2e:a7:40:46:55:d6:8f:5e:cb:62:1a:c7:c4:47:67:00: 28:7a:8e:f6:13:be:55:ff:1d:50:f0:8d:62:62:30:5d:6e:a7: f1:1e:0f:f2:95:06:19:46:2d:54:8d:c3:12:db:54:d7:41:bf: b0:96:78:c9:26:fd:5e:24:8f:0a:11:72:cb:8e:5e:5c:5e:ee: 9b:72:10:fa:7a:a6:a7:9e:fd:2e:74:c5:12:68:22:99:d9:39: 03:01:3c:41:62:33:c4:e4:8c:39:c5:6f:93:ea:45:dd:ce:86: 8d:ab:0f:8b:32:ba:04:06:a6:c2:a3:65:c0:9a:8c:96:be:69: 32:d4:00:4d:ef:16:4d:e0:48:1c:7f:17:0b:c0:94:6a:65:91: 2d:9c:07:6c:66:57:de:9d:64:79:27:d6:1a:78:bb:1c:c0:f6: c7:7c:6d:4b:8f:38:c7:95:94:c8:23:32:b7:38:9d:00:ae:d7: 98:5b:d8:38:ab:ca:39:fe:a8:73:95:d0:4e:b4:99:2c:88:1a: e8:b4:e2:dc:54:44:9f:55:eb:42:c6:74:19:79:8d:52:11:41: 1a:23:df:95:37:7f:19:4c:f4:7b:fd:29:55:63:4e:8a:a3:fb: 56:d1:c7:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ1NzExMTAvBgNVBAUTKEY0RjE1QzY3NUVEOUE1QzJEMTk5NUIyN0ZCNTNGRjYw RkYwMjQ5RTAwHhcNMjUwODIyMTgwMzQ5WhcNMjUwODI5MTgwMzQ5WjAYMRYwFAYD VQQDEw02OGE4YjEwNi05YTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArlQLuIlInxj+rExNU3Vh4EwbKO/LjBi3IvRdiLqf+WlxpRD2mEwf7YYlMWBR EbR+MsjmG8icuEePBcn1uDh8aEMh3i1+TP20nmJ4OhiORlPtT6k3CgLHeei92BMM J4vS6fTqEzzLhsQuSOhQ+JTmWAT2tQfGCHtDzfBvxCNL6gnqYvhOm0ZuextroVIJ 2SU1TlbW7SqP4xcjPvS49X24pjkH0ooaMitnkFiwKlhnm5e5YDA2OPWELrWDtuxh uBYY3jM3JxIfTSvgUZgpUNTnLMwbrCL7aqpsVNI95ZLTYAKPgbW2wB1I97eSQ0l6 7keE9fc9B9SBLlZ8vK/QD1hgMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLdMfxAn qV5WzXF7onorRLt+FEdzMB8GA1UdIwQYMBaAFPTxXGde2aXC0ZlbJ/tT/2D/Akng MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDU3MS9FQ0QyREY5NkNF NkYxMUU5QTBEODZENTFDNEY5QUUwMi85UEZjWjE3WnBjTFJtVnNuLTFQX1lQOENT ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlQRmNaMTdacGNMUm1Wc24tMVBfWVA4Q1NlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDU3MS9FQ0QyREY5NkNFNkYxMUU5QTBEODZENTFDNEY5QUUwMi85UEZjWjE3WnBj TFJtVnNuLTFQX1lQOENTZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAno/Hrw66471KlCKUF977WHEfEpC6nQEZV1o9ey2Iax8RHZwAoeo72 E75V/x1Q8I1iYjBdbqfxHg/ylQYZRi1UjcMS21TXQb+wlnjJJv1eJI8KEXLLjl5c Xu6bchD6eqannv0udMUSaCKZ2TkDATxBYjPE5Iw5xW+T6kXdzoaNqw+LMroEBqbC o2XAmoyWvmky1ABN7xZN4EgcfxcLwJRqZZEtnAdsZlfenWR5J9YaeLscwPbHfG1L jzjHlZTIIzK3OJ0ArteYW9g4q8o5/qhzldBOtJksiBrotOLcVESfVetCxnQZeY1S EUEaI9+VN38ZTPR7/SlVY06Ko/tW0cco -----END CERTIFICATE-----Generated at Sat Aug 23 14:24:04 2025 by rpki-client