$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft File: aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft (raw, json) Hash identifier: rv9q/UgHXcpPLGYIZmlqocyKq4cw7gNReeywwAAjC5g= Subject key identifier: 6C:76:53:42:23:72:C6:92:B6:15:D2:49:24:5A:1D:02:31:0B:3A:E6 Authority key identifier: 69:98:D9:B5:32:7B:BF:89:4E:D5:61:97:C4:7E:C8:96:FA:E5:9E:34 Certificate issuer: /CN=A91FCF44/serialNumber=6998D9B5327BBF894ED56197C47EC896FAE59E34 Certificate serial: D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft Manifest number: CF Signing time: Sat 23 Aug 2025 06:06:10 +0000 Manifest this update: Sat 23 Aug 2025 06:06:10 +0000 Manifest next update: Sat 30 Aug 2025 06:06:10 +0000 Files and hashes: 1: aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.crl (hash: zDAm9rxtV7dzVOHAWZI9DDIMHjlswL2Jk9D3G9TxjD8=) 2: B2A0074EAD4F11EF93ECF282C4F9AE02.roa (hash: Vji2bwj5pG0AmszlyVBCPumUcxu21MvYnK8Tx2Nah1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.crl rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:06:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCF44, serialNumber=6998D9B5327BBF894ED56197C47EC896FAE59E34 Validity Not Before: Aug 23 06:06:10 2025 GMT Not After : Aug 30 06:06:10 2025 GMT Subject: CN=68a95a52-c6e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3d:b9:69:a4:09:b8:fe:42:b8:5d:fd:12:bd: 14:3a:e0:99:82:99:6c:6f:4d:3b:85:83:9c:95:e3: 97:47:02:a7:37:a8:5a:49:13:39:93:30:ce:c6:5e: d8:dc:38:72:42:99:95:2f:75:f2:d3:f9:10:ab:73: b0:bc:2c:9c:82:84:38:e0:ca:69:9c:82:92:0d:ab: ea:67:15:ce:c1:1f:2e:e6:13:e9:28:89:45:4c:47: c3:ac:29:92:07:3f:f9:18:92:1a:2e:52:ce:22:03: fb:a7:68:c0:b5:8c:7a:35:83:86:2c:95:30:00:00: b8:32:2e:58:bd:28:e2:2f:3d:39:10:e3:6d:33:06: aa:fe:7a:61:26:cd:84:27:84:54:cc:5b:54:11:4b: 63:56:2a:9d:3d:df:66:e9:a1:e0:7c:1b:f6:09:dd: db:3c:92:9a:7a:c4:ed:38:19:39:0b:3d:bc:56:fa: 86:0a:b9:dc:9f:2d:96:95:07:30:96:02:d9:f2:65: 28:0e:db:5f:7a:97:f0:38:b7:9e:50:54:72:e6:c6: 04:41:a5:60:57:a8:7f:0a:d4:ae:23:07:1d:4a:82: f6:66:40:0d:17:65:7a:ab:d2:78:70:d5:57:fe:3d: 7c:1d:8d:54:43:14:0a:bd:0e:7b:c5:6d:79:49:5d: 2f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:76:53:42:23:72:C6:92:B6:15:D2:49:24:5A:1D:02:31:0B:3A:E6 X509v3 Authority Key Identifier: keyid:69:98:D9:B5:32:7B:BF:89:4E:D5:61:97:C4:7E:C8:96:FA:E5:9E:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:5e:fe:25:ae:23:a3:be:d4:50:a6:c3:7a:0a:07:5f:d8:41: 0c:72:e4:bb:aa:57:18:e7:ba:d4:5b:50:85:ad:14:af:2a:52: 23:f8:61:b0:4e:aa:bf:40:ac:96:02:a0:c5:7f:1b:56:2a:4d: a7:0b:7a:bb:f4:70:e4:c9:64:12:fd:65:33:71:aa:ea:89:78: 02:a3:ef:3e:dd:8f:cd:04:9a:ab:bc:a1:c4:9d:cb:74:0e:50: 69:92:06:88:4d:5f:8a:1d:9e:c0:48:82:f1:87:3f:48:21:df: 72:d2:eb:6c:e9:15:49:0d:06:59:33:e6:af:07:dd:26:51:90: a0:e4:e2:5c:73:ed:8d:ef:8e:3c:9d:ab:d1:9e:24:36:b9:b1: d4:d4:e7:9a:16:aa:6a:8c:5e:bd:40:a1:1b:fe:36:bc:48:97: 31:6c:a5:5f:20:0d:0f:c9:5f:f4:07:fe:74:dc:f4:66:d5:75: ce:cf:dd:fe:c8:fb:df:0f:c2:a9:dc:98:6d:5a:16:d3:f7:40: bf:19:00:74:e3:d5:69:a2:74:79:72:4d:3d:35:b4:ac:a0:7f: d0:6b:42:cf:6a:46:b8:f4:01:e0:7c:77:a9:e0:cf:ad:10:66: 5a:8c:75:e4:48:79:fc:8a:69:31:b0:ea:c6:e3:d4:77:cd:b6: 39:5f:97:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNGNDQxMTAvBgNVBAUTKDY5OThEOUI1MzI3QkJGODk0RUQ1NjE5N0M0N0VDODk2 RkFFNTlFMzQwHhcNMjUwODIzMDYwNjEwWhcNMjUwODMwMDYwNjEwWjAYMRYwFAYD VQQDEw02OGE5NWE1Mi1jNmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArD25aaQJuP5CuF39Er0UOuCZgplsb007hYOcleOXRwKnN6haSRM5kzDOxl7Y 3DhyQpmVL3Xy0/kQq3OwvCycgoQ44MppnIKSDavqZxXOwR8u5hPpKIlFTEfDrCmS Bz/5GJIaLlLOIgP7p2jAtYx6NYOGLJUwAAC4Mi5YvSjiLz05EONtMwaq/nphJs2E J4RUzFtUEUtjViqdPd9m6aHgfBv2Cd3bPJKaesTtOBk5Cz28VvqGCrncny2WlQcw lgLZ8mUoDttfepfwOLeeUFRy5sYEQaVgV6h/CtSuIwcdSoL2ZkANF2V6q9J4cNVX /j18HY1UQxQKvQ57xW15SV0vtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGx2U0Ij csaSthXSSSRaHQIxCzrmMB8GA1UdIwQYMBaAFGmY2bUye7+JTtVhl8R+yJb65Z40 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0Y0NC85NDExMDYwNDYw MkMxMUVGOTdENzNDNUZDNEY5QUUwMi9hWmpadFRKN3Y0bE8xV0dYeEg3SWx2cmxu alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Faalp0VEo3djRsTzFXR1h4SDdJbHZybG5qUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0Y0NC85NDExMDYwNDYwMkMxMUVGOTdENzNDNUZDNEY5QUUwMi9hWmpadFRKN3Y0 bE8xV0dYeEg3SWx2cmxualEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWXv4lriOjvtRQpsN6Cgdf2EEMcuS7qlcY57rUW1CFrRSvKlIj+GGw Tqq/QKyWAqDFfxtWKk2nC3q79HDkyWQS/WUzcarqiXgCo+8+3Y/NBJqrvKHEnct0 DlBpkgaITV+KHZ7ASILxhz9IId9y0uts6RVJDQZZM+avB90mUZCg5OJcc+2N7448 navRniQ2ubHU1OeaFqpqjF69QKEb/ja8SJcxbKVfIA0PyV/0B/503PRm1XXOz93+ yPvfD8Kp3JhtWhbT90C/GQB049VponR5ck09NbSsoH/Qa0LPaka49AHgfHep4M+t EGZajHXkSHn8imkxsOrG49R3zbY5X5fA -----END CERTIFICATE-----Generated at Sun Aug 24 03:12:34 2025 by rpki-client