$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft File: n4mmBPRc629oBPtTTq3CQWa9Dyk.mft (raw, json) Hash identifier: 9tRvHYLKwI4HwkpRHh4Qclnmv9Mj7FifJPIZopBxUHU= Subject key identifier: 3C:6E:73:2A:2B:FE:20:73:AD:24:01:5A:4F:FE:02:29:2C:08:E7:18 Authority key identifier: 9F:89:A6:04:F4:5C:EB:6F:68:04:FB:53:4E:AD:C2:41:66:BD:0F:29 Certificate issuer: /CN=A91FD3F6/serialNumber=9F89A604F45CEB6F6804FB534EADC24166BD0F29 Certificate serial: 5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft Manifest number: 5B Signing time: Sat 23 Aug 2025 07:23:39 +0000 Manifest this update: Sat 23 Aug 2025 07:23:39 +0000 Manifest next update: Sat 30 Aug 2025 07:23:39 +0000 Files and hashes: 1: n4mmBPRc629oBPtTTq3CQWa9Dyk.crl (hash: kmhRg5PzWQ5q3bUndvh26H/X6s6QkSOdbIKBf5OmgZ4=) 2: 27B19A58F99911EFB6B7F427C4F9AE02.roa (hash: BUhldgfxait6fPn7ddMr7oElIYN1G4FTjWGIi47OvkE=) 3: 88E11172F99A11EFA825D961C4F9AE02.roa (hash: AXOaVoqZ86dlROkyEdtuYYcAQanKRipkDbyi/sYqa94=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.crl rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:23:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD3F6, serialNumber=9F89A604F45CEB6F6804FB534EADC24166BD0F29 Validity Not Before: Aug 23 07:23:39 2025 GMT Not After : Aug 30 07:23:39 2025 GMT Subject: CN=68a96c7b-a1d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9e:8a:c1:98:68:49:e6:a3:bb:bc:5c:06:93: ee:02:e8:b8:6a:8b:40:84:0b:f8:72:d1:fb:ea:9e: 32:37:95:82:a5:5d:58:1a:d9:71:4d:1f:c0:5a:75: 62:ab:b4:09:1c:c6:de:ce:d3:61:21:41:9b:4d:8d: 86:d5:cb:ad:42:53:51:13:5a:6e:12:4d:41:d2:68: 68:1b:1f:94:d4:45:49:97:aa:a4:e9:1b:7c:72:52: 8e:3f:7c:85:b7:c4:0b:74:0d:16:8d:d0:b8:93:0e: 96:34:f1:bb:df:e6:68:a5:de:68:68:42:85:95:d7: f5:fa:7d:17:25:a5:f9:a9:9d:97:bb:94:4e:dc:0a: ce:4b:d2:d5:53:0b:f9:bd:c8:97:15:7d:d1:27:9d: f6:cf:52:08:ee:56:ee:b2:f3:d3:fd:f9:d0:68:18: 82:83:a7:59:cf:2b:9b:40:98:b3:f1:f8:34:4a:60: 17:e2:03:94:0d:72:54:88:e2:b2:84:4c:f2:32:f7: d4:9d:bd:24:72:df:e6:dc:49:10:43:8a:6b:a5:a1: 63:56:69:43:f5:3e:2e:dc:e7:e4:54:3f:a4:e1:d0: d5:5d:56:0e:f8:4a:d7:85:21:b5:27:cf:57:86:6b: cb:eb:e2:eb:14:48:91:2e:0f:b8:cd:0f:18:16:49: af:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:6E:73:2A:2B:FE:20:73:AD:24:01:5A:4F:FE:02:29:2C:08:E7:18 X509v3 Authority Key Identifier: keyid:9F:89:A6:04:F4:5C:EB:6F:68:04:FB:53:4E:AD:C2:41:66:BD:0F:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:d9:31:75:37:7a:ff:1d:0c:f2:38:81:1d:49:d2:d0:06:f3: 97:80:ef:ea:81:55:c6:f7:e7:65:2e:e1:c3:f0:8e:c6:9b:3d: 4b:9c:c8:23:d1:ff:e6:17:c8:c0:e2:04:f6:3c:68:1e:b6:d7: 72:61:3e:ea:15:57:34:54:0d:88:bd:4a:0e:5e:6b:d6:fc:85: 66:bc:18:cd:86:9c:8a:00:31:cb:f9:8a:3b:2c:41:4c:19:54: b0:d8:06:09:58:9c:bb:a3:10:59:85:45:0b:64:fc:6e:85:62: 25:1e:15:60:7c:88:df:a0:8e:c3:c9:d6:43:f5:d3:47:ec:47: a1:b8:0f:ed:92:6f:82:b9:e9:aa:dc:7a:d1:57:d3:d3:af:6c: 87:16:55:7b:e2:80:4b:73:1a:fe:13:96:dd:ef:c3:6f:73:75: d5:56:df:1d:ef:c2:e5:a3:2f:f2:0d:a7:06:85:0e:3b:03:d2: 15:c3:66:dd:f1:90:08:18:fa:eb:3b:32:25:64:33:1b:a5:64: 4a:95:50:88:bf:96:59:19:f9:9e:d4:8a:eb:cf:67:e5:2e:96: cd:de:8d:20:56:4d:e9:6c:99:37:05:13:40:8f:89:7c:bc:1d: c0:e6:64:c3:05:6b:ec:79:bc:b7:50:e5:cd:2a:a7:0f:cf:56: a1:12:1f:85 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RDNGNjExMC8GA1UEBRMoOUY4OUE2MDRGNDVDRUI2RjY4MDRGQjUzNEVBREMyNDE2 NkJEMEYyOTAeFw0yNTA4MjMwNzIzMzlaFw0yNTA4MzAwNzIzMzlaMBgxFjAUBgNV BAMTDTY4YTk2YzdiLWExZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCVnorBmGhJ5qO7vFwGk+4C6Lhqi0CEC/hy0fvqnjI3lYKlXVga2XFNH8BadWKr tAkcxt7O02EhQZtNjYbVy61CU1ETWm4STUHSaGgbH5TURUmXqqTpG3xyUo4/fIW3 xAt0DRaN0LiTDpY08bvf5mil3mhoQoWV1/X6fRclpfmpnZe7lE7cCs5L0tVTC/m9 yJcVfdEnnfbPUgjuVu6y89P9+dBoGIKDp1nPK5tAmLPx+DRKYBfiA5QNclSI4rKE TPIy99SdvSRy3+bcSRBDimuloWNWaUP1Pi7c5+RUP6Th0NVdVg74SteFIbUnz1eG a8vr4usUSJEuD7jNDxgWSa+1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPG5zKiv+ IHOtJAFaT/4CKSwI5xgwHwYDVR0jBBgwFoAUn4mmBPRc629oBPtTTq3CQWa9Dykw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZEM0Y2LzM3MTY4MUZBRjhE MzExRUY5NzU4RkIwRkM0RjlBRTAyL240bW1CUFJjNjI5b0JQdFRUcTNDUVdhOUR5 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbjRtbUJQUmM2MjlvQlB0VFRxM0NRV2E5RHlrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE M0Y2LzM3MTY4MUZBRjhEMzExRUY5NzU4RkIwRkM0RjlBRTAyL240bW1CUFJjNjI5 b0JQdFRUcTNDUVdhOUR5ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAfZMXU3ev8dDPI4gR1J0tAG85eA7+qBVcb352Uu4cPwjsabPUucyCPR /+YXyMDiBPY8aB6213JhPuoVVzRUDYi9Sg5ea9b8hWa8GM2GnIoAMcv5ijssQUwZ VLDYBglYnLujEFmFRQtk/G6FYiUeFWB8iN+gjsPJ1kP100fsR6G4D+2Sb4K56arc etFX09OvbIcWVXvigEtzGv4Tlt3vw29zddVW3x3vwuWjL/INpwaFDjsD0hXDZt3x kAgY+us7MiVkMxulZEqVUIi/llkZ+Z7UiuvPZ+Uuls3ejSBWTelsmTcFE0CPiXy8 HcDmZMMFa+x5vLdQ5c0qpw/PVqESH4U= -----END CERTIFICATE-----Generated at Sat Aug 23 18:38:08 2025 by rpki-client