$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft File: CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft (raw, json) Hash identifier: Sot8JiOObZ5qRabWoef7W2G87TSSN4Ezh0ARE1s12Wc= Subject key identifier: 35:DA:1E:D8:39:F3:36:D3:F1:1E:35:51:72:EA:DF:F4:4C:FB:6C:B2 Authority key identifier: 09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E Certificate issuer: /CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E Certificate serial: 01F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft Manifest number: 01BB Signing time: Sat 23 Aug 2025 03:59:15 +0000 Manifest this update: Sat 23 Aug 2025 03:59:15 +0000 Manifest next update: Sat 30 Aug 2025 03:59:15 +0000 Files and hashes: 1: CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl (hash: 82Y7vY/+7yuxTgRs6QnPo1DnTpfwG22qJbCYcJmVc2M=) 2: F88F98EA55A211F0978C8774C4F9AE02.roa (hash: QNh4Gp3kB3GNMrEGFFxhGCwWm4t5z9f8382iFUZwPZ0=) 3: D0F8C1B2558E11F0AA71D85AC4F9AE02.roa (hash: oh7ui7LK3WMunAv1J2fHvn2kFRTi6Zr/uzSPr1lq2oo=) 4: FBB6EA4E558B11F082FD5637C4F9AE02.roa (hash: Kl6m9JQHHfBeMqk1Tlm1MbQi4JjMBE2qeSJnrNub/g4=) 5: E07CB68455A211F0B55F5674C4F9AE02.roa (hash: EN9le6O09Kb0iq4iN/kD7cySPcZbryI877AWUndMCII=) 6: DA6883FC0F8611F0955A002EC4F9AE02.roa (hash: o6iFpFIV0jtxY3uECfavGNZC5f2SO5jee3QS3JMuNlk=) 7: 935296A6558B11F0BB2DB436C4F9AE02.roa (hash: QdChkVX5/kDffpKHFjUpYMXDKAHSdfijGoyZP5SONNo=) 8: 94BE094C7D0B11F0BC79D46DC4F9AE02.roa (hash: iRjjH0VL4+7PEhkSOx43L1Sne21LW5Me4PTZp36WaZY=) 9: 063FA6B25B2811F09B9A3A54C4F9AE02.roa (hash: PdzatKQUNncHpwKWYwWLFeCXI+EXj5VrdThfE8iLC8o=) 10: BACC6D0A4F7411F0A8124536C4F9AE02.roa (hash: DXd58lVKAvc2UPgiS5Dl9wenDfuBudEt81twiJtKSDE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 503 (0x1f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F17AA, serialNumber=0947051EFA50429215750A48BC031ADA926EF66E Validity Not Before: Aug 23 03:59:15 2025 GMT Not After : Aug 30 03:59:15 2025 GMT Subject: CN=68a93c93-6c7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:9f:3d:44:fd:e8:fc:d6:91:04:a3:18:78:df: 9c:24:33:25:de:64:7f:12:09:e0:a8:dd:16:09:94: 07:6f:f2:5c:4e:d0:bb:e6:46:17:3d:d9:16:7d:66: 4f:47:4c:ee:fe:53:22:4d:9a:1c:30:34:62:8c:08: fc:52:85:05:76:88:50:3f:4a:b9:0f:28:f6:f0:4a: f6:7e:db:c9:1d:88:0e:d1:e5:84:84:96:1c:ab:10: 2c:dd:1b:8b:3e:b7:c4:42:ea:85:7d:29:f4:82:a2: 05:81:1a:65:84:a8:87:e8:93:7f:1f:d5:62:1e:68: ad:cc:a5:af:4e:a1:cc:f1:77:be:2a:30:36:88:96: 37:ce:61:67:04:df:2b:0f:ee:e0:c0:a6:d2:04:66: 4d:60:86:ad:82:24:8e:74:f2:05:06:7b:d1:fd:80: fb:e4:a3:a8:8c:4b:77:5c:b4:c8:6a:23:d4:56:c2: 98:80:93:4a:57:7c:e4:c9:39:7e:3f:5b:2f:0c:07: 91:25:07:a6:1b:a4:32:49:c9:7e:3b:fc:00:d9:65: 0a:66:a8:53:49:b7:50:01:be:ad:c3:0e:14:bb:af: 8c:dd:ce:43:f7:1d:d1:bf:ff:5b:d9:9e:86:38:8e: dc:c6:83:58:1b:5f:51:6c:b0:70:8d:35:18:75:f6: 0c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:DA:1E:D8:39:F3:36:D3:F1:1E:35:51:72:EA:DF:F4:4C:FB:6C:B2 X509v3 Authority Key Identifier: keyid:09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:be:9c:56:8e:5b:85:d9:06:db:34:09:cb:ca:52:c1:d7:2f: cc:ce:0b:db:33:c6:4a:6c:84:0a:a5:d4:02:00:f8:d3:24:de: f4:de:a5:7a:e5:f5:05:0a:e2:ce:11:d5:e6:fe:ac:0b:00:35: e7:79:72:8b:db:8a:5e:fe:67:af:63:53:39:b1:b8:18:1a:49: b7:2a:be:5b:93:ff:c3:65:f5:27:71:b7:bc:a0:70:20:9e:dd: 77:2d:83:25:45:6e:bb:ff:d1:d4:85:5e:4e:e8:60:95:af:90: 70:5f:47:75:77:26:0a:e8:24:e4:55:a2:53:56:a0:1e:9a:e9: b9:9d:0d:7b:c5:a5:0f:75:a3:69:06:d1:e8:e1:e4:c2:5c:f6: 1a:dc:d7:ba:a0:56:a4:12:b9:91:98:18:94:87:8c:6f:80:38: a3:11:63:c2:00:5e:9f:42:e6:a4:88:d2:7d:7c:07:73:ea:51: aa:30:06:b8:87:29:0a:39:d3:ac:bc:ca:e8:8c:30:ee:db:0d: 34:13:9d:26:2f:6d:c8:4b:b8:18:97:4f:9f:33:bd:64:aa:de: 07:61:a2:1c:9b:32:3e:eb:60:e8:0c:c4:5b:40:24:f4:ac:80: 1d:3e:5b:4e:5b:18:cf:e1:07:1c:2a:52:6b:c7:c0:85:ed:4c: dc:21:31:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE3QUExMTAvBgNVBAUTKDA5NDcwNTFFRkE1MDQyOTIxNTc1MEE0OEJDMDMxQURB OTI2RUY2NkUwHhcNMjUwODIzMDM1OTE1WhcNMjUwODMwMDM1OTE1WjAYMRYwFAYD VQQDEw02OGE5M2M5My02YzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3589RP3o/NaRBKMYeN+cJDMl3mR/EgngqN0WCZQHb/JcTtC75kYXPdkWfWZP R0zu/lMiTZocMDRijAj8UoUFdohQP0q5Dyj28Er2ftvJHYgO0eWEhJYcqxAs3RuL PrfEQuqFfSn0gqIFgRplhKiH6JN/H9ViHmitzKWvTqHM8Xe+KjA2iJY3zmFnBN8r D+7gwKbSBGZNYIatgiSOdPIFBnvR/YD75KOojEt3XLTIaiPUVsKYgJNKV3zkyTl+ P1svDAeRJQemG6QyScl+O/wA2WUKZqhTSbdQAb6tww4Uu6+M3c5D9x3Rv/9b2Z6G OI7cxoNYG19RbLBwjTUYdfYMUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDXaHtg5 8zbT8R41UXLq3/RM+2yyMB8GA1UdIwQYMBaAFAlHBR76UEKSFXUKSLwDGtqSbvZu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdBQS80MUYwRjk3RTUy QjgxMUVFOEU0MzAwMERDNEY5QUUwMi9DVWNGSHZwUVFwSVZkUXBJdkFNYTJwSnU5 bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NVY0ZIdnBRUXBJVmRRcEl2QU1hMnBKdTltNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTdBQS80MUYwRjk3RTUyQjgxMUVFOEU0MzAwMERDNEY5QUUwMi9DVWNGSHZwUVFw SVZkUXBJdkFNYTJwSnU5bTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALvpxWjluF2QbbNAnLylLB1y/MzgvbM8ZKbIQKpdQCAPjTJN703qV6 5fUFCuLOEdXm/qwLADXneXKL24pe/mevY1M5sbgYGkm3Kr5bk//DZfUncbe8oHAg nt13LYMlRW67/9HUhV5O6GCVr5BwX0d1dyYK6CTkVaJTVqAemum5nQ17xaUPdaNp BtHo4eTCXPYa3Ne6oFakErmRmBiUh4xvgDijEWPCAF6fQuakiNJ9fAdz6lGqMAa4 hykKOdOsvMrojDDu2w00E50mL23IS7gYl0+fM71kqt4HYaIcmzI+62DoDMRbQCT0 rIAdPltOWxjP4QccKlJrx8CF7UzcITEo -----END CERTIFICATE-----Generated at Sat Aug 23 16:31:52 2025 by rpki-client