$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.mft File: he6QOP_DVBq9-33Z7TPyquNy54w.mft (raw, json) Hash identifier: aebhEiE9fBwBdiT8NKI/+rYV/3kwIEy5GRB+DmDv0nQ= Subject key identifier: 81:62:13:A7:15:52:4B:DC:2A:12:A5:54:C9:72:D8:5C:FD:4D:16:63 Authority key identifier: 85:EE:90:38:FF:C3:54:1A:BD:FB:7D:D9:ED:33:F2:AA:E3:72:E7:8C Certificate issuer: /CN=A91FF5E4/serialNumber=85EE9038FFC3541ABDFB7DD9ED33F2AAE372E78C Certificate serial: 05B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6QOP_DVBq9-33Z7TPyquNy54w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.mft Manifest number: 05A2 Signing time: Fri 22 Aug 2025 23:24:01 +0000 Manifest this update: Fri 22 Aug 2025 23:24:00 +0000 Manifest next update: Fri 29 Aug 2025 23:24:00 +0000 Files and hashes: 1: he6QOP_DVBq9-33Z7TPyquNy54w.crl (hash: p+0BotIPPxmtZltgZHyYkoLde7PvlmFlRv3HaNWoffQ=) 2: 09182D38084E11EF89D29620C4F9AE02.roa (hash: Mr4cvAF99YsJ9vM3bpplyr/XjV6Oh9dCkUlGWW3glRM=) 3: A6EF097068F911F092D77151C4F9AE02.roa (hash: CVgVNZzRg+yoeNSO5TmorciwKychjnQza4bd4ni3W/0=) 4: 07FBA006084E11EF89D29620C4F9AE02.roa (hash: olIQCCewOfkMwGkHHOS/5ivD24pRNNt8XVcMGE/8pfs=) 5: 7AFCC818E38611EB8BC17765C4F9AE02.roa (hash: yhFTvnQ9OnQm5YRLzb7trt3j3jJDg72T+yloJnYuUVI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.crl rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6QOP_DVBq9-33Z7TPyquNy54w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:24:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1459 (0x5b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF5E4, serialNumber=85EE9038FFC3541ABDFB7DD9ED33F2AAE372E78C Validity Not Before: Aug 22 23:24:00 2025 GMT Not After : Aug 29 23:24:00 2025 GMT Subject: CN=68a8fc11-5439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b3:df:4a:8d:93:84:3a:b5:08:92:3d:b2:7c: 53:24:bd:af:2e:e6:0b:bd:c6:5a:5a:09:e6:e8:fb: 24:ce:c2:9f:71:24:1e:91:e5:6f:56:98:4e:51:77: a7:1d:29:19:2f:cc:fa:15:a2:8e:01:cd:6a:b2:bd: d2:50:8b:7e:1e:13:70:08:c8:0c:35:a5:14:04:0e: 69:ef:28:6d:06:b4:c3:12:09:e0:42:2f:ed:77:4d: 1b:b6:54:d8:ce:7a:f5:b0:90:92:5a:01:01:8f:cb: 4b:56:f9:ec:9d:91:89:66:a1:c5:6c:e4:60:92:35: fa:3b:f4:e0:43:a1:d3:0c:97:05:28:72:54:ac:59: 31:2b:e9:27:9b:79:04:d9:cd:68:d1:fb:fa:40:bd: 1a:b7:53:bc:19:c9:27:51:7b:a4:9f:78:02:5f:f9: 44:3e:b8:b9:e6:12:7f:df:5f:03:3d:6f:b7:7c:cd: 10:5a:22:68:60:d3:05:9f:d6:94:14:de:ec:fb:1c: 73:e1:74:cd:f9:3a:c1:9f:c1:d6:97:17:52:a2:52: 9e:a3:8a:dc:a6:5e:8a:61:2d:b6:e0:f8:f0:6c:fb: 25:cd:39:ee:db:7e:65:ad:d0:77:71:f0:1d:6b:dc: 33:a7:24:c8:2a:c7:96:7e:fb:d4:90:fa:cb:77:18: ba:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:62:13:A7:15:52:4B:DC:2A:12:A5:54:C9:72:D8:5C:FD:4D:16:63 X509v3 Authority Key Identifier: keyid:85:EE:90:38:FF:C3:54:1A:BD:FB:7D:D9:ED:33:F2:AA:E3:72:E7:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6QOP_DVBq9-33Z7TPyquNy54w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:63:38:c4:4d:7f:7c:cc:eb:e3:19:f0:d9:d6:32:3a:f5:58: 4a:46:6a:6a:a7:1a:06:c4:e6:93:0c:88:8a:b3:6f:5c:5b:be: 0a:7c:dc:39:f7:3f:28:8a:48:35:99:65:7d:62:57:71:94:14: b3:aa:fe:a7:d8:8a:d0:e6:fd:98:6b:32:84:6f:f3:d3:7f:cc: 26:6d:d3:5f:41:fa:35:9a:19:e0:2a:6d:69:2e:b1:b4:0d:8a: 8e:89:41:a8:7f:ed:9c:8b:f5:1b:27:88:86:b9:df:8b:b5:01: 52:47:71:d9:a6:ab:9c:d2:6f:6d:18:61:15:18:32:ec:58:bb: dd:a3:fa:5d:56:65:ea:b8:fa:0d:61:fa:aa:fd:89:34:98:07: dd:88:04:d1:a9:ae:4c:36:0b:56:28:1f:25:85:78:d9:54:ed: 15:97:31:13:10:0a:76:b0:1e:28:2a:c7:fa:d2:78:4a:3e:84: 10:f8:3f:bc:64:b3:2c:05:b0:ee:77:7a:c2:9a:ee:8d:9a:9c: cc:9f:31:26:ef:31:7c:95:d3:11:39:42:bd:4d:53:83:d2:4c: 3d:a9:69:4e:6e:98:23:f9:3d:e3:d3:56:07:51:96:f6:0a:1b: f6:52:82:78:6e:45:fb:95:21:61:48:86:01:ec:82:0b:99:b3: a1:05:80:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY1RTQxMTAvBgNVBAUTKDg1RUU5MDM4RkZDMzU0MUFCREZCN0REOUVEMzNGMkFB RTM3MkU3OEMwHhcNMjUwODIyMjMyNDAwWhcNMjUwODI5MjMyNDAwWjAYMRYwFAYD VQQDEw02OGE4ZmMxMS01NDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt7PfSo2ThDq1CJI9snxTJL2vLuYLvcZaWgnm6PskzsKfcSQekeVvVphOUXen HSkZL8z6FaKOAc1qsr3SUIt+HhNwCMgMNaUUBA5p7yhtBrTDEgngQi/td00btlTY znr1sJCSWgEBj8tLVvnsnZGJZqHFbORgkjX6O/TgQ6HTDJcFKHJUrFkxK+knm3kE 2c1o0fv6QL0at1O8GcknUXukn3gCX/lEPri55hJ/318DPW+3fM0QWiJoYNMFn9aU FN7s+xxz4XTN+TrBn8HWlxdSolKeo4rcpl6KYS224PjwbPslzTnu235lrdB3cfAd a9wzpyTIKseWfvvUkPrLdxi69QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIFiE6cV UkvcKhKlVMly2Fz9TRZjMB8GA1UdIwQYMBaAFIXukDj/w1Qavft92e0z8qrjcueM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjVFNC9FRDA3OURGRUUz ODQxMUVCQTg1OTNCNjVDNEY5QUUwMi9oZTZRT1BfRFZCcTktMzNaN1RQeXF1Tnk1 NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hlNlFPUF9EVkJxOS0zM1o3VFB5cXVOeTU0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjVFNC9FRDA3OURGRUUzODQxMUVCQTg1OTNCNjVDNEY5QUUwMi9oZTZRT1BfRFZC cTktMzNaN1RQeXF1Tnk1NHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQYzjETX98zOvjGfDZ1jI69VhKRmpqpxoGxOaTDIiKs29cW74KfNw5 9z8oikg1mWV9YldxlBSzqv6n2IrQ5v2YazKEb/PTf8wmbdNfQfo1mhngKm1pLrG0 DYqOiUGof+2ci/UbJ4iGud+LtQFSR3HZpquc0m9tGGEVGDLsWLvdo/pdVmXquPoN Yfqq/Yk0mAfdiATRqa5MNgtWKB8lhXjZVO0VlzETEAp2sB4oKsf60nhKPoQQ+D+8 ZLMsBbDud3rCmu6NmpzMnzEm7zF8ldMROUK9TVOD0kw9qWlObpgj+T3j01YHUZb2 Chv2UoJ4bkX7lSFhSIYB7IILmbOhBYCX -----END CERTIFICATE-----Generated at Sat Aug 23 13:30:42 2025 by rpki-client