$ rpki-client -vvf rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft File: AduB721jlOZtOzIxW0eevteZyTc.mft (raw, json) Hash identifier: 0lgSdop1uHRv6bAGBkL5x1TOmnVEh3HAPSUXbfrf8L4= Subject key identifier: DF:DB:47:8A:C1:0D:55:8E:55:49:F7:B1:B8:D4:4D:6B:F0:16:29:A4 Authority key identifier: 01:DB:81:EF:6D:63:94:E6:6D:3B:32:31:5B:47:9E:BE:D7:99:C9:37 Certificate issuer: /CN=A91FECDA/serialNumber=01DB81EF6D6394E66D3B32315B479EBED799C937 Certificate serial: 0F76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AduB721jlOZtOzIxW0eevteZyTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft Manifest number: 0F6D Signing time: Fri 22 Aug 2025 17:41:11 +0000 Manifest this update: Fri 22 Aug 2025 17:41:11 +0000 Manifest next update: Fri 29 Aug 2025 17:41:11 +0000 Files and hashes: 1: AduB721jlOZtOzIxW0eevteZyTc.crl (hash: zVqs06mLGX9OSKdHK/B9qnr8iSskG/K8c/jN5R/MoLM=) 2: 85B9F090F35011EFAE695322C4F9AE02.roa (hash: lww/ZRWFPgZIaev9PDmaV5kjaByxeNEFJJYVjFLwNzI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.crl rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AduB721jlOZtOzIxW0eevteZyTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:41:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3958 (0xf76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FECDA, serialNumber=01DB81EF6D6394E66D3B32315B479EBED799C937 Validity Not Before: Aug 22 17:41:11 2025 GMT Not After : Aug 29 17:41:11 2025 GMT Subject: CN=68a8abb7-11f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:93:91:0f:f3:86:59:72:6f:20:09:9c:7f:6f: 6a:17:4f:ec:d1:ed:d7:64:d4:a6:cf:69:d8:38:35: 3a:47:c9:8c:09:bf:ce:3f:35:cf:cc:80:01:5d:fb: 50:bf:fd:36:4f:c6:3f:7a:3e:61:56:e2:d8:45:19: 78:da:15:08:be:c4:78:df:b0:0d:fe:27:b6:91:75: 15:81:02:b7:23:30:33:80:48:72:b0:30:66:f5:83: d0:30:7c:41:1c:bd:d6:ec:5a:65:08:02:3c:9b:f2: 10:d5:69:68:23:eb:d6:04:94:da:fc:04:1d:e5:c3: d4:d8:62:aa:61:4b:47:18:b3:b1:f8:fe:0e:92:17: 4c:6f:f0:08:0e:38:64:be:e2:32:a1:41:c5:90:4e: 3c:47:6e:99:07:46:f8:31:81:63:f0:5c:3f:9b:15: 2e:e5:f8:21:9d:b3:fb:15:7d:19:b0:a1:65:56:7e: df:60:c7:96:ad:bc:20:6c:1c:3b:57:46:1a:c9:c3: 51:f3:e2:8f:3d:8e:35:60:9d:ba:a7:5b:4b:63:18: 5d:2d:a0:f5:74:10:a2:c4:a2:02:0e:dc:d9:1b:e6: 7f:4f:ae:56:fb:47:d2:c1:5c:27:3e:fc:5f:d5:08: 61:4b:6d:4a:37:54:cd:8e:8e:b7:37:14:d8:41:d9: da:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:DB:47:8A:C1:0D:55:8E:55:49:F7:B1:B8:D4:4D:6B:F0:16:29:A4 X509v3 Authority Key Identifier: keyid:01:DB:81:EF:6D:63:94:E6:6D:3B:32:31:5B:47:9E:BE:D7:99:C9:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AduB721jlOZtOzIxW0eevteZyTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:92:ab:24:33:fa:81:04:31:d5:e0:eb:4a:4d:3a:44:57:72: b0:65:85:c9:76:2d:ce:fd:fa:bb:ef:9a:80:ea:31:01:41:f7: a4:e3:ad:b3:0b:0d:77:ad:36:b4:59:a4:04:04:d7:24:e8:af: 70:18:e4:f8:bc:e6:79:09:11:64:fe:03:a5:ce:a4:ac:b6:e5: 0b:f3:b0:89:8d:79:22:aa:36:af:23:ea:68:88:bf:cc:fd:b4: d4:c6:59:a9:36:1e:22:9f:d2:ee:00:f0:df:37:a6:6c:a0:ed: 28:f5:75:87:a4:ea:1d:a8:dc:14:11:0e:22:02:3a:6a:1a:af: 3c:21:6c:ba:05:61:3e:af:1e:96:c4:03:a9:b3:04:b9:21:23: f2:7f:e2:e7:4c:9e:b2:38:d9:d6:c1:60:dd:4c:b9:44:5e:65: 82:9a:51:74:3e:f2:e1:26:13:a8:8c:d1:94:36:39:ab:e8:27: 95:45:cb:45:3a:2b:c7:e5:47:4a:b0:f5:9a:dd:fd:74:e3:2e: 8b:88:33:43:13:01:77:37:65:53:4f:6e:09:e5:b0:6d:74:dd: df:a1:42:d7:6f:44:d0:db:a4:32:d2:ae:6b:ea:91:87:6f:72: 66:b0:64:e4:27:93:84:f6:1a:64:12:62:99:f1:d0:d7:a5:50: 03:c6:e6:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD3YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVDREExMTAvBgNVBAUTKDAxREI4MUVGNkQ2Mzk0RTY2RDNCMzIzMTVCNDc5RUJF RDc5OUM5MzcwHhcNMjUwODIyMTc0MTExWhcNMjUwODI5MTc0MTExWjAYMRYwFAYD VQQDEw02OGE4YWJiNy0xMWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA15ORD/OGWXJvIAmcf29qF0/s0e3XZNSmz2nYODU6R8mMCb/OPzXPzIABXftQ v/02T8Y/ej5hVuLYRRl42hUIvsR437AN/ie2kXUVgQK3IzAzgEhysDBm9YPQMHxB HL3W7FplCAI8m/IQ1WloI+vWBJTa/AQd5cPU2GKqYUtHGLOx+P4OkhdMb/AIDjhk vuIyoUHFkE48R26ZB0b4MYFj8Fw/mxUu5fghnbP7FX0ZsKFlVn7fYMeWrbwgbBw7 V0YaycNR8+KPPY41YJ26p1tLYxhdLaD1dBCixKICDtzZG+Z/T65W+0fSwVwnPvxf 1QhhS21KN1TNjo63NxTYQdnaMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN/bR4rB DVWOVUn3sbjUTWvwFimkMB8GA1UdIwQYMBaAFAHbge9tY5TmbTsyMVtHnr7Xmck3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUNEQS84QTg4RjEwNDZG OUMxMUU5QTUwNzRCMkZDNEY5QUUwMi9BZHVCNzIxamxPWnRPekl4VzBlZXZ0ZVp5 VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FkdUI3MjFqbE9adE96SXhXMGVldnRlWnlUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUNEQS84QTg4RjEwNDZGOUMxMUU5QTUwNzRCMkZDNEY5QUUwMi9BZHVCNzIxamxP WnRPekl4VzBlZXZ0ZVp5VGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqkqskM/qBBDHV4OtKTTpEV3KwZYXJdi3O/fq775qA6jEBQfek462z Cw13rTa0WaQEBNck6K9wGOT4vOZ5CRFk/gOlzqSstuUL87CJjXkiqjavI+poiL/M /bTUxlmpNh4in9LuAPDfN6ZsoO0o9XWHpOodqNwUEQ4iAjpqGq88IWy6BWE+rx6W xAOpswS5ISPyf+LnTJ6yONnWwWDdTLlEXmWCmlF0PvLhJhOojNGUNjmr6CeVRctF OivH5UdKsPWa3f104y6LiDNDEwF3N2VTT24J5bBtdN3foULXb0TQ26Qy0q5r6pGH b3JmsGTkJ5OE9hpkEmKZ8dDXpVADxubm -----END CERTIFICATE-----Generated at Sat Aug 23 17:41:19 2025 by rpki-client