$ rpki-client -vvf rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft File: PurfFFrim0gkCj-6OvvZSajxU10.mft (raw, json) Hash identifier: VMYBXeYP6UruqIm8HucPpI+AMzj3z9ySMJFaFPmhq9A= Subject key identifier: 3A:D9:50:E6:BF:E7:AF:29:A2:37:B7:E1:36:5A:95:81:27:CF:F2:E0 Authority key identifier: 3E:EA:DF:14:5A:E2:9B:48:24:0A:3F:BA:3A:FB:D9:49:A8:F1:53:5D Certificate issuer: /CN=A91F823E/serialNumber=3EEADF145AE29B48240A3FBA3AFBD949A8F1535D Certificate serial: 0334 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft Manifest number: 0330 Signing time: Sat 23 Aug 2025 01:21:14 +0000 Manifest this update: Sat 23 Aug 2025 01:21:14 +0000 Manifest next update: Sat 30 Aug 2025 01:21:14 +0000 Files and hashes: 1: PurfFFrim0gkCj-6OvvZSajxU10.crl (hash: c9nxTJZeHnBqULk5UaE8sQ0Rwd1uncyum9BZciOb/LM=) 2: B3481ED4D5B611ECA61EEC28C4F9AE02.roa (hash: 7bYPkVMZrrnunuEV97KsBcLOn5jOLNiIR6VQXBJQwkA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.crl rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:21:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 820 (0x334) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F823E, serialNumber=3EEADF145AE29B48240A3FBA3AFBD949A8F1535D Validity Not Before: Aug 23 01:21:14 2025 GMT Not After : Aug 30 01:21:14 2025 GMT Subject: CN=68a9178a-2cda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b3:d8:3f:fb:be:71:fe:b5:fa:c5:39:7c:53: 3a:69:fd:89:40:b8:5b:32:70:fb:bd:00:34:58:2f: af:0f:84:2e:f5:72:79:b0:1d:f5:bb:38:d3:a7:59: 57:4c:da:70:84:8c:30:2f:1d:ef:61:ed:4c:95:a2: 07:29:d1:11:dc:c6:de:da:7b:96:7f:dc:fd:72:de: 00:3b:60:9e:14:44:1d:20:1d:4a:b1:6b:1a:e8:78: e3:9e:a5:85:ab:12:b8:bb:3d:2b:24:4a:8f:98:9d: 29:84:a7:f7:05:37:23:62:07:38:27:8b:a0:26:81: 8c:9e:13:c3:59:d4:a3:f9:da:7a:9e:a8:ef:b2:99: 8e:4f:23:f8:da:2e:99:86:28:f6:3e:7d:b6:4c:d3: 4c:97:49:c3:75:3a:72:ac:65:80:be:dc:de:38:e3: 62:16:3c:fe:68:3f:93:b8:09:76:79:5c:23:25:ca: 8a:a2:7d:ed:1b:f5:57:16:4b:4d:d5:40:cf:16:27: 1d:67:56:27:26:f6:6b:ba:7a:80:21:b6:11:59:a5: d5:8f:26:67:f4:a1:5b:a2:45:a9:03:d2:f3:93:42: fc:02:76:76:66:a9:a3:29:1b:5a:8f:bd:3f:3b:e1: 5d:71:06:e0:29:6a:6d:ac:2f:93:ed:1e:25:85:2c: 23:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D9:50:E6:BF:E7:AF:29:A2:37:B7:E1:36:5A:95:81:27:CF:F2:E0 X509v3 Authority Key Identifier: keyid:3E:EA:DF:14:5A:E2:9B:48:24:0A:3F:BA:3A:FB:D9:49:A8:F1:53:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:d8:81:f5:f5:98:47:6d:dd:bf:dc:5e:2a:14:60:ae:1f:6c: 38:26:47:d4:28:08:c1:82:6f:57:89:1c:93:82:9c:c0:e2:c9: 2a:cf:9f:95:9e:13:6d:d3:c4:55:d5:8a:cc:9b:01:4e:e7:bd: af:f2:7e:b8:59:21:23:0c:5b:f7:26:bb:98:82:99:a7:e7:02: ed:6e:78:1a:fb:72:fe:f7:81:37:04:59:24:09:1d:51:75:af: 25:11:c3:fb:53:1e:2a:45:1d:7e:e5:45:2d:d9:69:ad:25:9c: fd:70:16:92:2c:d2:30:6e:a1:ed:52:76:ea:04:c9:1c:8f:11: 64:c4:a2:30:35:31:a2:ad:6f:d9:e7:d8:aa:17:f2:48:19:0e: 50:8f:0f:0b:97:fc:4d:c3:85:4e:fb:48:91:f1:ff:ea:df:69: 6b:41:3f:d7:08:63:b1:3c:24:5b:0e:8c:f9:5f:e1:bd:f2:18: df:c9:1f:da:94:d6:15:45:0a:30:9d:1f:66:c6:97:fb:7b:4c: 55:62:dc:de:69:f0:91:36:0a:3c:a5:aa:a2:1b:0c:28:8a:77: 31:04:71:37:95:6e:5d:70:76:2f:fb:43:b3:3e:39:5d:a9:3e: 95:50:aa:a3:f9:5e:9b:d1:d2:86:e0:76:5b:6e:21:7f:43:2c: d6:d9:d3:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgyM0UxMTAvBgNVBAUTKDNFRUFERjE0NUFFMjlCNDgyNDBBM0ZCQTNBRkJEOTQ5 QThGMTUzNUQwHhcNMjUwODIzMDEyMTE0WhcNMjUwODMwMDEyMTE0WjAYMRYwFAYD VQQDEw02OGE5MTc4YS0yY2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7PYP/u+cf61+sU5fFM6af2JQLhbMnD7vQA0WC+vD4Qu9XJ5sB31uzjTp1lX TNpwhIwwLx3vYe1MlaIHKdER3Mbe2nuWf9z9ct4AO2CeFEQdIB1KsWsa6HjjnqWF qxK4uz0rJEqPmJ0phKf3BTcjYgc4J4ugJoGMnhPDWdSj+dp6nqjvspmOTyP42i6Z hij2Pn22TNNMl0nDdTpyrGWAvtzeOONiFjz+aD+TuAl2eVwjJcqKon3tG/VXFktN 1UDPFicdZ1YnJvZrunqAIbYRWaXVjyZn9KFbokWpA9Lzk0L8AnZ2ZqmjKRtaj70/ O+FdcQbgKWptrC+T7R4lhSwjcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDrZUOa/ 568poje34TZalYEnz/LgMB8GA1UdIwQYMBaAFD7q3xRa4ptIJAo/ujr72Umo8VNd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODIzRS83RDY5QTgzQ0Q1 QjExMUVDOTM1MUU2MjBDNEY5QUUwMi9QdXJmRkZyaW0wZ2tDai02T3Z2WlNhanhV MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B1cmZGRnJpbTBna0NqLTZPdnZaU2FqeFUxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODIzRS83RDY5QTgzQ0Q1QjExMUVDOTM1MUU2MjBDNEY5QUUwMi9QdXJmRkZyaW0w Z2tDai02T3Z2WlNhanhVMTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBI2IH19ZhHbd2/3F4qFGCuH2w4JkfUKAjBgm9XiRyTgpzA4skqz5+V nhNt08RV1YrMmwFO572v8n64WSEjDFv3JruYgpmn5wLtbnga+3L+94E3BFkkCR1R da8lEcP7Ux4qRR1+5UUt2WmtJZz9cBaSLNIwbqHtUnbqBMkcjxFkxKIwNTGirW/Z 59iqF/JIGQ5Qjw8Ll/xNw4VO+0iR8f/q32lrQT/XCGOxPCRbDoz5X+G98hjfyR/a lNYVRQownR9mxpf7e0xVYtzeafCRNgo8paqiGwwoincxBHE3lW5dcHYv+0OzPjld qT6VUKqj+V6b0dKG4HZbbiF/QyzW2dOX -----END CERTIFICATE-----Generated at Sun Aug 24 09:04:26 2025 by rpki-client