$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft File: l85Wj2RoJWRz-Es4s84D6jVJ64k.mft (raw, json) Hash identifier: RL1ABvtrJdkT6fsFLKQnCVA8lH5sAPVXAOxhJKc4Pds= Subject key identifier: C7:50:B9:BD:98:C0:BD:0C:DF:3C:6A:EC:79:12:5A:6D:67:83:BF:00 Authority key identifier: 97:CE:56:8F:64:68:25:64:73:F8:4B:38:B3:CE:03:EA:35:49:EB:89 Certificate issuer: /CN=A91FCABC/serialNumber=97CE568F6468256473F84B38B3CE03EA3549EB89 Certificate serial: 01A3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l85Wj2RoJWRz-Es4s84D6jVJ64k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft Manifest number: 019F Signing time: Sat 23 Aug 2025 03:25:50 +0000 Manifest this update: Sat 23 Aug 2025 03:25:50 +0000 Manifest next update: Sat 30 Aug 2025 03:25:50 +0000 Files and hashes: 1: l85Wj2RoJWRz-Es4s84D6jVJ64k.crl (hash: NwQbCwSB/hgrU2pSkQAC3IhLS7aPmA3SO4fS2By9VxA=) 2: 35BBCFB005C111EEA3A8584CC4F9AE02.roa (hash: r5pIAbK8kOI15XkP+OMpWTYz9FMauuzr/FnyF6gxDgI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.crl rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l85Wj2RoJWRz-Es4s84D6jVJ64k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:25:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 419 (0x1a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCABC, serialNumber=97CE568F6468256473F84B38B3CE03EA3549EB89 Validity Not Before: Aug 23 03:25:50 2025 GMT Not After : Aug 30 03:25:50 2025 GMT Subject: CN=68a934be-232d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c3:4c:ee:11:31:45:21:ff:dd:ef:29:11:86: 5f:bf:74:1a:ef:89:bb:85:da:af:08:4e:a0:e2:2e: 3b:10:85:4e:b4:2b:23:d7:0a:4b:36:a9:21:72:6e: 70:46:4a:20:b3:dc:a3:a8:56:a5:dd:23:fe:12:5e: 77:10:84:86:c3:57:65:e1:2a:8b:1e:a7:88:13:18: 11:59:cf:3d:eb:fc:57:f8:3d:3f:92:62:cc:0e:6f: 2e:c4:20:63:2f:2e:b6:68:b0:04:0d:54:27:de:4e: 34:64:e1:0c:75:7a:62:f3:0c:cd:65:9a:66:2b:b9: ae:49:43:08:c4:a0:4c:10:4e:40:9b:93:f9:b0:46: cb:48:49:ca:24:8e:10:9f:af:8f:1c:3d:fa:f5:08: 7a:af:0e:0d:00:c1:2a:c1:57:7c:98:37:9c:38:de: ca:66:94:36:c2:72:e0:37:7e:22:f5:61:24:e6:4f: a1:63:94:e3:62:f4:0e:45:64:55:ef:22:36:27:36: 45:2e:61:50:58:2a:3a:65:6b:96:ba:11:ae:0c:3c: ee:66:a6:ce:61:58:d4:c2:00:e0:62:4c:c2:a2:24: 92:b5:ae:88:d9:d0:52:ae:f3:11:1b:51:92:69:a9: 39:29:51:fb:bd:90:f2:12:10:87:56:d7:91:3b:78: 82:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:50:B9:BD:98:C0:BD:0C:DF:3C:6A:EC:79:12:5A:6D:67:83:BF:00 X509v3 Authority Key Identifier: keyid:97:CE:56:8F:64:68:25:64:73:F8:4B:38:B3:CE:03:EA:35:49:EB:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l85Wj2RoJWRz-Es4s84D6jVJ64k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:27:57:ea:ae:18:46:8c:29:6e:5d:97:eb:36:52:3d:df:09: 9d:f0:8b:25:e2:56:a3:dd:26:39:43:1d:5f:69:35:a6:bc:7b: dd:97:a3:6b:5e:fc:55:c1:fa:fa:76:96:f6:b6:86:68:b6:38: cf:e4:ba:a9:2d:0f:bb:f3:32:cb:fe:09:40:72:5d:53:44:f1: ed:ee:58:48:66:a3:72:22:16:6f:06:d6:5c:88:2b:08:27:53: f6:62:1e:38:ea:39:49:e6:56:eb:fd:be:ec:fc:7c:ae:7c:d3: 01:b7:fd:aa:f6:fc:28:58:5a:a1:39:23:b3:aa:78:a9:49:50: c6:fb:97:e2:53:00:99:99:ba:13:b8:93:b7:7c:ce:32:aa:fa: 0f:be:67:c4:98:b9:57:6d:53:75:c6:fa:33:24:40:81:c6:fd: 40:81:85:ae:f0:19:9b:ca:8c:d3:86:4a:86:53:0c:50:d5:3d: d2:c4:02:a7:65:d7:b9:ef:0e:24:23:92:d0:2a:c8:8a:b6:19: 5b:a0:e3:44:d9:ef:fc:a0:bf:4b:93:3d:fe:01:b1:cd:a5:e9: dd:66:93:d8:f7:fc:31:24:bc:17:61:15:58:99:37:d7:04:46: cf:73:fa:19:47:f0:bc:03:c0:66:c5:6b:8c:c9:06:f5:56:af: bc:78:77:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNBQkMxMTAvBgNVBAUTKDk3Q0U1NjhGNjQ2ODI1NjQ3M0Y4NEIzOEIzQ0UwM0VB MzU0OUVCODkwHhcNMjUwODIzMDMyNTUwWhcNMjUwODMwMDMyNTUwWjAYMRYwFAYD VQQDEw02OGE5MzRiZS0yMzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwcNM7hExRSH/3e8pEYZfv3Qa74m7hdqvCE6g4i47EIVOtCsj1wpLNqkhcm5w Rkogs9yjqFal3SP+El53EISGw1dl4SqLHqeIExgRWc896/xX+D0/kmLMDm8uxCBj Ly62aLAEDVQn3k40ZOEMdXpi8wzNZZpmK7muSUMIxKBMEE5Am5P5sEbLSEnKJI4Q n6+PHD369Qh6rw4NAMEqwVd8mDecON7KZpQ2wnLgN34i9WEk5k+hY5TjYvQORWRV 7yI2JzZFLmFQWCo6ZWuWuhGuDDzuZqbOYVjUwgDgYkzCoiSSta6I2dBSrvMRG1GS aak5KVH7vZDyEhCHVteRO3iCIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMdQub2Y wL0M3zxq7HkSWm1ng78AMB8GA1UdIwQYMBaAFJfOVo9kaCVkc/hLOLPOA+o1SeuJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0FCQy9DNTUxNjQxMjA1 QjkxMUVFQTkxMzBCMzdDNEY5QUUwMi9sODVXajJSb0pXUnotRXM0czg0RDZqVko2 NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2w4NVdqMlJvSldSei1FczRzODRENmpWSjY0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0FCQy9DNTUxNjQxMjA1QjkxMUVFQTkxMzBCMzdDNEY5QUUwMi9sODVXajJSb0pX UnotRXM0czg0RDZqVko2NGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4J1fqrhhGjCluXZfrNlI93wmd8Isl4laj3SY5Qx1faTWmvHvdl6Nr XvxVwfr6dpb2toZotjjP5LqpLQ+78zLL/glAcl1TRPHt7lhIZqNyIhZvBtZciCsI J1P2Yh446jlJ5lbr/b7s/HyufNMBt/2q9vwoWFqhOSOzqnipSVDG+5fiUwCZmboT uJO3fM4yqvoPvmfEmLlXbVN1xvozJECBxv1AgYWu8BmbyozThkqGUwxQ1T3SxAKn Zde57w4kI5LQKsiKthlboONE2e/8oL9Lkz3+AbHNpendZpPY9/wxJLwXYRVYmTfX BEbPc/oZR/C8A8BmxWuMyQb1Vq+8eHcv -----END CERTIFICATE-----Generated at Sat Aug 23 12:42:01 2025 by rpki-client