$ rpki-client -vvf rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft File: 1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft (raw, json) Hash identifier: dp7qFbkBMsfOWd9GLyxapuY5CYuqz2ptMFrFoxLrYhs= Subject key identifier: CC:EC:CB:10:9D:D9:DC:58:72:55:7C:8A:85:C7:7E:17:71:F8:B3:BD Authority key identifier: D6:C8:0C:5D:38:AA:3F:10:D1:EB:0E:13:9B:9E:49:4E:BF:6C:64:21 Certificate issuer: /CN=A91F495C/serialNumber=D6C80C5D38AA3F10D1EB0E139B9E494EBF6C6421 Certificate serial: D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft Manifest number: D2 Signing time: Sat 23 Aug 2025 05:48:00 +0000 Manifest this update: Sat 23 Aug 2025 05:47:59 +0000 Manifest next update: Sat 30 Aug 2025 05:47:59 +0000 Files and hashes: 1: 1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl (hash: sHY0PRhlC0ofTYBmwjl2Af1iR+VvlhZLeRBBQM7Ej9c=) 2: 084D41C6407111EFB0944C40C4F9AE02.roa (hash: Jb/5el+254tvWTwmxgE5e2fworHZ6IC6eYTkaaOmWbo=) 3: 08FDDCFC407111EFB0944C40C4F9AE02.roa (hash: 5j1mJUsKsqLJqbWxCLNYcCoMJnOjUallWOckNeSTW7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:47:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 214 (0xd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F495C, serialNumber=D6C80C5D38AA3F10D1EB0E139B9E494EBF6C6421 Validity Not Before: Aug 23 05:47:59 2025 GMT Not After : Aug 30 05:47:59 2025 GMT Subject: CN=68a95610-ef9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:78:22:b8:a6:bd:63:6a:97:06:79:7c:35:0c: 67:c8:51:00:a2:a9:a0:ed:07:27:63:ac:40:63:da: b0:94:37:cf:7a:a0:4c:40:83:2b:9d:e2:17:f6:ea: 58:81:13:90:10:bc:28:9d:e1:dd:e5:2e:98:81:0a: 47:4c:16:ae:d5:e8:d2:e7:11:c5:c5:01:18:d9:40: 1c:08:64:a6:81:4b:84:e3:a8:50:1f:64:d2:0b:16: 63:56:03:8d:0c:bf:d0:f5:27:f3:ca:6f:4c:96:ce: ee:41:96:c1:38:95:1b:21:76:6d:70:a1:14:69:35: 15:6a:95:4e:72:10:da:e4:07:c4:2e:ec:6b:80:d9: 77:fd:47:64:ae:9f:8f:11:92:e9:2b:6d:e3:cd:2d: e7:d4:2d:6b:5e:96:4b:db:c2:1a:ed:04:2f:26:14: be:f4:88:55:03:bd:d1:1e:9f:be:6e:73:6d:4b:cb: 14:06:a4:0a:9c:58:0f:1e:5f:44:db:68:26:dc:16: 01:37:15:70:aa:b8:b9:cc:58:0c:9a:1e:85:c4:cf: 87:68:79:2b:67:03:3d:93:e6:01:e6:6e:6f:1d:30: de:f6:27:c1:3c:9a:70:a0:63:af:17:f1:a2:cc:84: 82:90:78:bf:b9:a1:6b:f9:66:b2:78:eb:73:87:99: cd:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:EC:CB:10:9D:D9:DC:58:72:55:7C:8A:85:C7:7E:17:71:F8:B3:BD X509v3 Authority Key Identifier: keyid:D6:C8:0C:5D:38:AA:3F:10:D1:EB:0E:13:9B:9E:49:4E:BF:6C:64:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:ac:2e:e9:33:5c:47:e8:db:23:20:e7:ca:26:e8:34:60:35: 86:a9:8a:2a:6a:b1:84:29:df:15:49:c6:d8:62:2d:e8:db:38: 12:ee:b2:ac:92:3d:df:7f:56:67:ae:21:1d:8c:4a:0f:9a:3e: d4:a0:7d:8d:07:cc:99:84:c8:36:40:c0:a9:31:7c:9c:8d:94: e3:c6:af:fa:75:fe:e9:14:be:49:41:15:0b:5c:f7:0a:4f:f6: 72:4b:fb:b6:2a:a0:5c:d5:c2:4a:4e:04:88:4d:14:ab:32:dc: d6:98:0b:cb:11:26:ca:d6:22:87:60:d5:f2:72:6d:85:66:c9: 89:2b:23:a6:70:c0:22:1e:e4:96:5b:31:1e:be:78:14:2c:b8: 7d:c4:2b:26:91:a7:b8:1b:3d:51:ab:0a:7d:f3:80:2d:33:9b: 6c:12:96:55:48:03:c4:b4:17:91:e4:f6:86:2e:3b:46:2e:8e: de:b5:56:3a:bb:5c:42:22:14:ff:6c:c7:a2:c3:30:75:26:7d: b5:9a:d8:94:c6:b8:a1:83:0c:be:df:fc:1d:e2:29:3d:5e:61: a3:b3:74:9a:36:aa:c0:df:dc:b0:30:b1:bc:a3:bd:fc:0e:58: a8:9a:ae:12:23:7d:97:de:b4:d9:71:6e:d7:91:21:7b:bd:6e: 88:09:b1:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ5NUMxMTAvBgNVBAUTKEQ2QzgwQzVEMzhBQTNGMTBEMUVCMEUxMzlCOUU0OTRF QkY2QzY0MjEwHhcNMjUwODIzMDU0NzU5WhcNMjUwODMwMDU0NzU5WjAYMRYwFAYD VQQDEw02OGE5NTYxMC1lZjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApngiuKa9Y2qXBnl8NQxnyFEAoqmg7QcnY6xAY9qwlDfPeqBMQIMrneIX9upY gROQELwoneHd5S6YgQpHTBau1ejS5xHFxQEY2UAcCGSmgUuE46hQH2TSCxZjVgON DL/Q9Sfzym9Mls7uQZbBOJUbIXZtcKEUaTUVapVOchDa5AfELuxrgNl3/Udkrp+P EZLpK23jzS3n1C1rXpZL28Ia7QQvJhS+9IhVA73RHp++bnNtS8sUBqQKnFgPHl9E 22gm3BYBNxVwqri5zFgMmh6FxM+HaHkrZwM9k+YB5m5vHTDe9ifBPJpwoGOvF/Gi zISCkHi/uaFr+WayeOtzh5nNEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMzsyxCd 2dxYclV8ioXHfhdx+LO9MB8GA1UdIwQYMBaAFNbIDF04qj8Q0esOE5ueSU6/bGQh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDk1Qy81QkM2M0VGNDQw NjUxMUVGODU2QzlFMjlDNEY5QUUwMi8xc2dNWFRpcVB4RFI2dzRUbTU1SlRyOXNa Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFzZ01YVGlxUHhEUjZ3NFRtNTVKVHI5c1pDRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDk1Qy81QkM2M0VGNDQwNjUxMUVGODU2QzlFMjlDNEY5QUUwMi8xc2dNWFRpcVB4 RFI2dzRUbTU1SlRyOXNaQ0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDXrC7pM1xH6NsjIOfKJug0YDWGqYoqarGEKd8VScbYYi3o2zgS7rKs kj3ff1ZnriEdjEoPmj7UoH2NB8yZhMg2QMCpMXycjZTjxq/6df7pFL5JQRULXPcK T/ZyS/u2KqBc1cJKTgSITRSrMtzWmAvLESbK1iKHYNXycm2FZsmJKyOmcMAiHuSW WzEevngULLh9xCsmkae4Gz1Rqwp984AtM5tsEpZVSAPEtBeR5PaGLjtGLo7etVY6 u1xCIhT/bMeiwzB1Jn21mtiUxrihgwy+3/wd4ik9XmGjs3SaNqrA39ywMLG8o738 Dliomq4SI32X3rTZcW7XkSF7vW6ICbFG -----END CERTIFICATE-----Generated at Sun Aug 24 00:20:20 2025 by rpki-client