$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft File: SrvXMBz_f7SstqBKFPCjbM6FYRw.mft (raw, json) Hash identifier: HpVfHNIjDhwZWS7NkuTKdRiXyMzKPf2dl7Maphz/NUk= Subject key identifier: F6:DE:DF:BD:96:7B:CF:51:29:03:3A:9E:75:E9:A2:6A:1E:4E:20:01 Authority key identifier: 4A:BB:D7:30:1C:FF:7F:B4:AC:B6:A0:4A:14:F0:A3:6C:CE:85:61:1C Certificate issuer: /CN=A91FA9BC/serialNumber=4ABBD7301CFF7FB4ACB6A04A14F0A36CCE85611C Certificate serial: 020B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft Manifest number: 01F4 Signing time: Sat 23 Aug 2025 02:53:51 +0000 Manifest this update: Sat 23 Aug 2025 02:53:51 +0000 Manifest next update: Sat 30 Aug 2025 02:53:51 +0000 Files and hashes: 1: SrvXMBz_f7SstqBKFPCjbM6FYRw.crl (hash: idRQLu7SZSWOsEeV5MMadP8jNK3G5q9QvNPxnQWXokQ=) 2: 106F283CB74311EDB0C38030C4F9AE02.roa (hash: hw7fn2Uz56pW/An8KSiF7/ybzu4erny13VSakUkooRo=) 3: 688B6F18355811F0AF79910EC4F9AE02.roa (hash: TCN1AZgzVPw/0NzN3SuEMukcZY6yAiASu/ppodIE8PQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.crl rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:53:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 523 (0x20b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA9BC, serialNumber=4ABBD7301CFF7FB4ACB6A04A14F0A36CCE85611C Validity Not Before: Aug 23 02:53:51 2025 GMT Not After : Aug 30 02:53:51 2025 GMT Subject: CN=68a92d3f-a57d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:47:5d:09:41:0c:a6:e4:aa:94:17:64:94:2a: db:ad:56:46:a3:59:17:aa:83:96:8f:a0:d1:b5:88: 1b:be:7b:b9:af:d7:0e:36:02:f7:ef:15:e2:11:13: 07:eb:73:61:16:c4:51:46:9f:5a:1c:95:c1:77:97: 09:3c:98:16:8d:e3:98:38:60:7b:be:b0:e3:a9:99: e2:c5:ca:40:c8:8d:09:8e:dd:f0:5d:7f:a4:f4:a2: 1a:86:e3:49:eb:54:e8:f9:f5:56:26:f2:2e:8d:1a: 6c:52:0a:39:a1:ac:b8:ec:db:e9:96:89:13:d1:9f: b5:64:86:88:f9:61:82:99:5c:66:62:7e:a1:cf:e0: 13:09:c3:69:b5:76:01:fd:23:6d:1a:9c:a6:91:d5: e7:89:0d:e6:9e:e4:67:eb:ae:79:14:a4:37:d3:85: 30:8c:70:fd:48:f9:80:24:85:ff:12:3c:7f:c2:c9: d8:e9:ed:3b:53:43:6f:5d:06:f6:68:56:0a:43:4c: bd:64:b1:5c:a7:ef:61:98:54:eb:22:93:bc:32:14: f4:55:6b:a9:00:2b:92:70:c9:d9:c3:a5:1e:a8:65: da:75:a2:c1:4c:eb:7f:3b:d8:a3:d0:4c:d2:d4:a9: 59:47:dd:11:5f:0d:93:12:b7:e6:3f:4d:f6:94:83: 52:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:DE:DF:BD:96:7B:CF:51:29:03:3A:9E:75:E9:A2:6A:1E:4E:20:01 X509v3 Authority Key Identifier: keyid:4A:BB:D7:30:1C:FF:7F:B4:AC:B6:A0:4A:14:F0:A3:6C:CE:85:61:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:9d:cb:86:c5:ea:30:b9:41:f5:32:99:66:e4:93:62:6a:90: 60:4d:6f:3c:09:77:3b:8d:de:a2:30:45:7c:17:c7:78:ac:33: 00:c4:bc:91:ba:47:43:ee:e2:83:2d:b5:2f:35:ea:09:7d:0e: 34:0a:b1:37:d7:39:51:c2:32:51:8e:c9:8f:5f:88:d9:ab:4f: 90:e9:bd:ec:ee:af:91:4e:d9:55:6c:57:4d:fa:2f:6f:8c:dc: ec:8b:54:da:d2:3a:87:50:cb:d1:50:2d:5a:66:c9:b1:24:07: f7:87:d7:88:9d:03:aa:db:39:47:37:b0:43:b7:34:af:b8:af: 3e:8d:d0:3d:ef:77:36:61:7b:a2:ca:33:27:1e:24:fd:93:1d: a3:83:2b:d7:83:11:fb:75:ee:af:4c:5d:14:23:7d:25:7a:98: 9f:26:fa:0c:34:c8:dd:ed:f9:31:58:25:f4:9d:05:fc:43:a1: a7:0e:b6:d2:b4:5e:2e:39:4a:6a:b9:2a:3b:2b:db:8e:78:1b: 21:53:3c:98:46:1b:92:4a:cb:44:74:2f:6c:79:92:18:5d:ce: 48:7b:a0:1b:32:47:74:7f:47:01:3e:8e:a3:ab:a7:eb:57:bf: b3:1e:22:b2:bc:8f:3c:37:7d:4d:e7:f0:bf:a2:e8:4a:1c:62: 3b:53:29:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE5QkMxMTAvBgNVBAUTKDRBQkJENzMwMUNGRjdGQjRBQ0I2QTA0QTE0RjBBMzZD Q0U4NTYxMUMwHhcNMjUwODIzMDI1MzUxWhcNMjUwODMwMDI1MzUxWjAYMRYwFAYD VQQDEw02OGE5MmQzZi1hNTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyUddCUEMpuSqlBdklCrbrVZGo1kXqoOWj6DRtYgbvnu5r9cONgL37xXiERMH 63NhFsRRRp9aHJXBd5cJPJgWjeOYOGB7vrDjqZnixcpAyI0Jjt3wXX+k9KIahuNJ 61To+fVWJvIujRpsUgo5oay47NvplokT0Z+1ZIaI+WGCmVxmYn6hz+ATCcNptXYB /SNtGpymkdXniQ3mnuRn6655FKQ304UwjHD9SPmAJIX/Ejx/wsnY6e07U0NvXQb2 aFYKQ0y9ZLFcp+9hmFTrIpO8MhT0VWupACuScMnZw6UeqGXadaLBTOt/O9ij0EzS 1KlZR90RXw2TErfmP032lINStwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPbe372W e89RKQM6nnXpomoeTiABMB8GA1UdIwQYMBaAFEq71zAc/3+0rLagShTwo2zOhWEc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTlCQy9CRTJDRUZGMEIz QUExMUVEQUYzMTYyM0ZDNEY5QUUwMi9TcnZYTUJ6X2Y3U3N0cUJLRlBDamJNNkZZ UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NydlhNQnpfZjdTc3RxQktGUENqYk02RllSdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTlCQy9CRTJDRUZGMEIzQUExMUVEQUYzMTYyM0ZDNEY5QUUwMi9TcnZYTUJ6X2Y3 U3N0cUJLRlBDamJNNkZZUncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuncuGxeowuUH1Mplm5JNiapBgTW88CXc7jd6iMEV8F8d4rDMAxLyR ukdD7uKDLbUvNeoJfQ40CrE31zlRwjJRjsmPX4jZq0+Q6b3s7q+RTtlVbFdN+i9v jNzsi1Ta0jqHUMvRUC1aZsmxJAf3h9eInQOq2zlHN7BDtzSvuK8+jdA973c2YXui yjMnHiT9kx2jgyvXgxH7de6vTF0UI30lepifJvoMNMjd7fkxWCX0nQX8Q6GnDrbS tF4uOUpquSo7K9uOeBshUzyYRhuSSstEdC9seZIYXc5Ie6AbMkd0f0cBPo6jq6fr V7+zHiKyvI88N31N5/C/ouhKHGI7Uym4 -----END CERTIFICATE-----Generated at Sat Aug 23 14:08:48 2025 by rpki-client