$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft File: 9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft (raw, json) Hash identifier: 8LpbIU3cp1W4cAof/6oEz1iep+wVgEbLkLaWXoh5+1w= Subject key identifier: 29:1D:7F:65:9F:4C:7F:1E:00:08:D2:88:1D:EF:72:61:3F:E8:DC:14 Authority key identifier: F5:C9:D3:0E:9D:07:71:CD:07:E5:1B:2E:4A:52:B5:22:53:AB:D0:26 Certificate issuer: /CN=A91F8928/serialNumber=F5C9D30E9D0771CD07E51B2E4A52B52253ABD026 Certificate serial: 0C8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft Manifest number: 0C6C Signing time: Fri 22 Aug 2025 18:39:46 +0000 Manifest this update: Fri 22 Aug 2025 18:39:45 +0000 Manifest next update: Fri 29 Aug 2025 18:39:45 +0000 Files and hashes: 1: 9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl (hash: 8O0VunbwPQL7ZLxrgzHfd64qbT6AOhFwY0iBn/86x3s=) 2: 93840DE204E611ED89D3B27BC4F9AE02.roa (hash: cegor5RnBc3HGGToc+6Lymvpp6wumcl5jw4jwYNABG8=) 3: E6C1F0003C7E11F08A874435C4F9AE02.roa (hash: HGkfh3dEEIqv+3vFhSnMi2VsaDRfK/TUjKt6kaMeksE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:39:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3213 (0xc8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8928, serialNumber=F5C9D30E9D0771CD07E51B2E4A52B52253ABD026 Validity Not Before: Aug 22 18:39:45 2025 GMT Not After : Aug 29 18:39:45 2025 GMT Subject: CN=68a8b972-662c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:cc:ee:7c:31:5e:c4:dd:62:74:dd:92:d1:7f: e2:b3:bb:61:7f:cb:2b:a5:ac:22:40:91:cf:4c:10: 1c:e7:71:15:df:0a:ee:7f:26:27:1f:04:e9:cd:b3: c0:7e:4c:5f:31:61:07:81:8a:b0:16:08:af:0d:1d: ca:76:bc:b8:02:63:8e:2d:2d:af:7a:d3:f5:69:71: 22:e7:f4:11:ef:f3:a7:94:dc:4d:95:ea:58:d6:ee: 63:bf:f2:2e:5d:06:76:5c:7b:1f:32:d3:a3:d7:59: 16:2a:df:13:92:05:30:2a:c4:a2:85:94:73:ac:95: e8:be:5e:59:03:03:02:d0:15:9f:fb:fb:82:06:27: 9a:17:bd:2d:a9:48:34:cc:66:59:a1:ff:3e:57:52: 45:75:8c:34:a5:5f:9c:93:56:4c:73:5d:1f:d1:1a: 87:b1:f2:5b:72:f8:20:e3:8d:e8:a2:ce:a1:d7:b4: 44:e9:ba:19:30:84:f9:96:9d:46:bb:2e:1c:37:8b: d4:21:0c:2a:0b:65:b8:56:08:fc:80:58:5c:63:7c: 7d:91:f8:4d:6b:33:32:32:cf:6d:7f:7b:6e:57:e5: a9:5e:ea:c1:3d:75:66:5b:ee:58:5e:73:47:2e:25: 92:09:f3:96:24:ec:17:36:c3:2f:b5:66:31:fa:4f: bc:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:1D:7F:65:9F:4C:7F:1E:00:08:D2:88:1D:EF:72:61:3F:E8:DC:14 X509v3 Authority Key Identifier: keyid:F5:C9:D3:0E:9D:07:71:CD:07:E5:1B:2E:4A:52:B5:22:53:AB:D0:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:a2:1e:49:28:5a:19:72:ae:bb:d3:5a:e9:20:ed:75:13:6d: 22:b8:03:09:41:5e:92:e4:c4:a6:3e:25:58:fb:4a:d3:c9:a7: 03:8b:13:36:d2:94:27:69:ee:c9:d1:67:de:ff:92:9c:6b:0d: 31:c2:fa:42:ad:ab:3a:cd:c3:26:3d:14:d3:b0:f3:06:f2:8b: 4c:00:9b:80:1d:89:14:93:97:88:d5:12:04:3c:84:ff:f7:1a: a7:f8:5b:6d:0d:e7:fc:a4:91:3b:e8:ee:59:33:e3:ba:bf:c9: de:bc:9b:4d:92:2d:ee:41:2b:99:4f:45:e1:0d:35:25:9b:96: 7d:ad:cc:c0:1e:c3:aa:95:8e:aa:38:e8:33:fd:7d:c7:c8:80: e6:8d:f4:81:f1:00:41:c7:30:6d:57:eb:3a:08:71:44:02:97: ef:84:29:c8:cb:c6:c2:67:df:a1:f0:b7:46:52:0d:38:88:75: 5a:42:0c:61:12:bc:21:e3:20:42:27:c8:23:52:fa:ff:1b:50: 97:64:7a:83:ae:99:86:43:fd:37:c1:3a:b2:07:f0:66:b2:d2: e9:27:b4:a5:d8:a8:1b:a6:26:56:73:b7:94:06:f0:c7:c3:a3: 37:98:65:73:e9:8c:97:74:88:01:e2:f3:3d:a0:ff:7e:63:83: 44:0c:ae:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5MjgxMTAvBgNVBAUTKEY1QzlEMzBFOUQwNzcxQ0QwN0U1MUIyRTRBNTJCNTIy NTNBQkQwMjYwHhcNMjUwODIyMTgzOTQ1WhcNMjUwODI5MTgzOTQ1WjAYMRYwFAYD VQQDEw02OGE4Yjk3Mi02NjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2MzufDFexN1idN2S0X/is7thf8srpawiQJHPTBAc53EV3wrufyYnHwTpzbPA fkxfMWEHgYqwFgivDR3Kdry4AmOOLS2vetP1aXEi5/QR7/OnlNxNlepY1u5jv/Iu XQZ2XHsfMtOj11kWKt8TkgUwKsSihZRzrJXovl5ZAwMC0BWf+/uCBieaF70tqUg0 zGZZof8+V1JFdYw0pV+ck1ZMc10f0RqHsfJbcvgg443oos6h17RE6boZMIT5lp1G uy4cN4vUIQwqC2W4Vgj8gFhcY3x9kfhNazMyMs9tf3tuV+WpXurBPXVmW+5YXnNH LiWSCfOWJOwXNsMvtWYx+k+8IwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCkdf2Wf TH8eAAjSiB3vcmE/6NwUMB8GA1UdIwQYMBaAFPXJ0w6dB3HNB+UbLkpStSJTq9Am MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODkyOC80REE3QkIyMDBC NUIxMUVBQTNFQkM2NTBDNEY5QUUwMi85Y25URHAwSGNjMEg1UnN1U2xLMUlsT3Iw Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzljblREcDBIY2MwSDVSc3VTbEsxSWxPcjBDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODkyOC80REE3QkIyMDBCNUIxMUVBQTNFQkM2NTBDNEY5QUUwMi85Y25URHAwSGNj MEg1UnN1U2xLMUlsT3IwQ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSoh5JKFoZcq6701rpIO11E20iuAMJQV6S5MSmPiVY+0rTyacDixM2 0pQnae7J0Wfe/5Kcaw0xwvpCras6zcMmPRTTsPMG8otMAJuAHYkUk5eI1RIEPIT/ 9xqn+FttDef8pJE76O5ZM+O6v8nevJtNki3uQSuZT0XhDTUlm5Z9rczAHsOqlY6q OOgz/X3HyIDmjfSB8QBBxzBtV+s6CHFEApfvhCnIy8bCZ9+h8LdGUg04iHVaQgxh Erwh4yBCJ8gjUvr/G1CXZHqDrpmGQ/03wTqyB/BmstLpJ7Sl2KgbpiZWc7eUBvDH w6M3mGVz6YyXdIgB4vM9oP9+Y4NEDK7w -----END CERTIFICATE-----Generated at Sat Aug 23 21:29:43 2025 by rpki-client