$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft File: o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft (raw, json) Hash identifier: yWCnEVqsUq9AuBbF6mRN9MnDZsSmyoGQccPgueb7maQ= Subject key identifier: 40:C8:9B:9D:A0:70:3B:CD:7E:FB:20:B0:6B:F2:E6:ED:96:B6:B5:BB Authority key identifier: A3:8D:48:7B:D5:D9:A8:A8:94:80:27:4F:E6:F7:C0:61:C6:24:BC:C0 Certificate issuer: /CN=A91FEF3B/serialNumber=A38D487BD5D9A8A89480274FE6F7C061C624BCC0 Certificate serial: 66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o41Ie9XZqKiUgCdP5vfAYcYkvMA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft Manifest number: 64 Signing time: Sat 23 Aug 2025 07:16:21 +0000 Manifest this update: Sat 23 Aug 2025 07:16:20 +0000 Manifest next update: Sat 30 Aug 2025 07:16:20 +0000 Files and hashes: 1: o41Ie9XZqKiUgCdP5vfAYcYkvMA.crl (hash: voVgNdC44Q/bBN1FWrSCv/H10v1/eJ7u1GjXtmHxMEE=) 2: 10800248E9C711EFA1589312C4F9AE02.roa (hash: NgHWuWasRdq7/Tb6jtbOAPkZk5G59CnEADx3vts0M7Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.crl rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o41Ie9XZqKiUgCdP5vfAYcYkvMA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:16:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 102 (0x66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEF3B, serialNumber=A38D487BD5D9A8A89480274FE6F7C061C624BCC0 Validity Not Before: Aug 23 07:16:20 2025 GMT Not After : Aug 30 07:16:20 2025 GMT Subject: CN=68a96ac5-86b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:01:27:68:c8:56:a8:3d:14:48:ee:21:c2:c9: ac:a5:ff:79:b8:30:50:df:14:b2:3a:a0:4c:d7:35: e6:17:e8:0e:92:87:7d:e9:4e:45:81:7f:29:d8:c3: cc:f6:ad:ac:bd:50:bb:cb:d0:a7:2b:4b:1d:db:0d: d6:c6:12:dc:8a:d3:c3:af:39:e6:99:52:de:85:46: 14:6f:36:86:bd:3e:5f:1d:8b:50:bd:41:7b:c0:f8: fa:11:a7:b4:a7:22:fe:99:26:68:c0:95:d3:19:de: d5:6c:67:45:19:f6:af:ab:de:f4:ab:56:82:14:f0: be:a7:5c:7e:ca:dd:3e:b0:56:f7:33:f4:9c:b8:ff: e4:96:78:52:90:07:c6:59:4b:7b:e1:15:66:25:77: 91:91:2c:40:90:a5:5b:73:95:af:77:48:f7:7a:d0: 4d:9e:21:1e:72:a4:fb:d2:3d:03:1b:0d:50:fd:fd: cb:1a:44:94:9d:c3:62:c1:4a:8b:b3:78:b7:0d:57: 8d:f3:46:ed:1a:b1:ff:14:31:db:18:a1:31:14:b6: 21:58:6b:01:9c:ad:89:5f:7b:36:7f:e4:6e:9b:8e: 3e:5b:57:69:3f:7a:4f:f3:68:2e:76:5d:cb:2d:13: 8a:b6:cc:32:2b:2b:00:d3:02:d1:87:61:98:18:4a: e6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:C8:9B:9D:A0:70:3B:CD:7E:FB:20:B0:6B:F2:E6:ED:96:B6:B5:BB X509v3 Authority Key Identifier: keyid:A3:8D:48:7B:D5:D9:A8:A8:94:80:27:4F:E6:F7:C0:61:C6:24:BC:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o41Ie9XZqKiUgCdP5vfAYcYkvMA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:87:ec:bc:5d:4f:a0:ca:12:2f:55:ea:6e:2c:25:95:56:1e: d2:f3:f5:78:10:91:da:3b:92:fe:0a:1d:04:a9:7f:c0:d1:92: 2c:49:33:00:07:1e:d0:77:e6:b5:be:39:52:c5:d1:31:4f:69: 9d:56:41:4e:49:9d:9f:4e:d4:c0:99:11:8a:3a:00:b4:7c:3b: 91:c8:27:97:bb:1c:28:40:0b:52:1b:bc:c2:9c:5b:63:3a:6e: 38:25:6e:d4:42:f5:cf:fd:29:87:a0:0d:97:61:d0:e4:a2:30: 3e:c4:33:0a:34:eb:25:78:d9:1d:7b:f9:4b:b8:25:51:6b:e3: b7:66:9c:29:44:5e:cd:77:2b:0d:e6:76:a5:34:a6:30:80:67: 4e:57:fa:72:bb:19:f5:b2:95:fc:f9:fe:db:79:19:d0:f8:7e: f9:f8:e5:59:21:53:04:5c:7e:7e:27:1a:3a:6e:63:53:3c:25: 5a:9c:3d:83:9c:c1:29:06:fb:ca:0d:87:d0:02:96:65:84:f5: 7a:d3:f0:b9:49:29:9d:c4:1d:2b:32:d8:05:38:38:a8:70:b7: 54:39:30:bc:b3:c7:61:fa:d0:2b:aa:2b:07:ee:31:d9:4c:89: c5:51:b2:39:3c:f5:59:8b:81:4d:91:ca:30:01:2f:2e:f7:17: 62:ee:d9:51 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RUYzQjExMC8GA1UEBRMoQTM4RDQ4N0JENUQ5QThBODk0ODAyNzRGRTZGN0MwNjFD NjI0QkNDMDAeFw0yNTA4MjMwNzE2MjBaFw0yNTA4MzAwNzE2MjBaMBgxFjAUBgNV BAMTDTY4YTk2YWM1LTg2YjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbASdoyFaoPRRI7iHCyayl/3m4MFDfFLI6oEzXNeYX6A6Sh33pTkWBfynYw8z2 ray9ULvL0KcrSx3bDdbGEtyK08OvOeaZUt6FRhRvNoa9Pl8di1C9QXvA+PoRp7Sn Iv6ZJmjAldMZ3tVsZ0UZ9q+r3vSrVoIU8L6nXH7K3T6wVvcz9Jy4/+SWeFKQB8ZZ S3vhFWYld5GRLECQpVtzla93SPd60E2eIR5ypPvSPQMbDVD9/csaRJSdw2LBSouz eLcNV43zRu0asf8UMdsYoTEUtiFYawGcrYlfezZ/5G6bjj5bV2k/ek/zaC52Xcst E4q2zDIrKwDTAtGHYZgYSuY5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQMibnaBw O81++yCwa/Lm7Za2tbswHwYDVR0jBBgwFoAUo41Ie9XZqKiUgCdP5vfAYcYkvMAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFRjNCL0FDNzYyMjAwRTlD NjExRUY5RkExNzcxMUM0RjlBRTAyL280MUllOVhacUtpVWdDZFA1dmZBWWNZa3ZN QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbzQxSWU5WFpxS2lVZ0NkUDV2ZkFZY1lrdk1BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZF RjNCL0FDNzYyMjAwRTlDNjExRUY5RkExNzcxMUM0RjlBRTAyL280MUllOVhacUtp VWdDZFA1dmZBWWNZa3ZNQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFiH7LxdT6DKEi9V6m4sJZVWHtLz9XgQkdo7kv4KHQSpf8DRkixJMwAH HtB35rW+OVLF0TFPaZ1WQU5JnZ9O1MCZEYo6ALR8O5HIJ5e7HChAC1IbvMKcW2M6 bjglbtRC9c/9KYegDZdh0OSiMD7EMwo06yV42R17+Uu4JVFr47dmnClEXs13Kw3m dqU0pjCAZ05X+nK7GfWylfz5/tt5GdD4fvn45VkhUwRcfn4nGjpuY1M8JVqcPYOc wSkG+8oNh9AClmWE9XrT8LlJKZ3EHSsy2AU4OKhwt1Q5MLyzx2H60CuqKwfuMdlM icVRsjk89VmLgU2RyjABLy73F2Lu2VE= -----END CERTIFICATE-----Generated at Sun Aug 24 05:14:51 2025 by rpki-client