$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft File: 49O0eIJzzkWSmwmYOr9ktdRNHwg.mft (raw, json) Hash identifier: NCNGYgColXavV45sRl3o8ZhVlvOSpq4K2HY8D0FF8nw= Subject key identifier: 1F:E8:2E:B0:AD:A7:C0:AF:D4:57:51:90:3F:CF:12:E1:18:C4:2F:C2 Authority key identifier: E3:D3:B4:78:82:73:CE:45:92:9B:09:98:3A:BF:64:B5:D4:4D:1F:08 Certificate issuer: /CN=A91FF634/serialNumber=E3D3B4788273CE45929B09983ABF64B5D44D1F08 Certificate serial: 1156 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/49O0eIJzzkWSmwmYOr9ktdRNHwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft Manifest number: 113F Signing time: Fri 22 Aug 2025 17:23:53 +0000 Manifest this update: Fri 22 Aug 2025 17:23:53 +0000 Manifest next update: Fri 29 Aug 2025 17:23:53 +0000 Files and hashes: 1: 49O0eIJzzkWSmwmYOr9ktdRNHwg.crl (hash: YDl6rKbHnT75l1PSAIIkc3EBmeB82gHPdIwYqljHz1Q=) 2: 97F937E440BC11EAA2B89432C4F9AE02.roa (hash: YvhnTG1A1W5kz0Vch4cPsIzgbILMaDioP1ySIyj5aeE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.crl rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/49O0eIJzzkWSmwmYOr9ktdRNHwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:23:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4438 (0x1156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF634, serialNumber=E3D3B4788273CE45929B09983ABF64B5D44D1F08 Validity Not Before: Aug 22 17:23:53 2025 GMT Not After : Aug 29 17:23:53 2025 GMT Subject: CN=68a8a7a9-68e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:08:69:07:c5:32:3a:c5:07:e0:bc:4b:1a:d8: d1:ab:77:f4:4c:07:7d:5f:8e:09:dc:b7:68:14:fc: 8a:73:95:cb:42:9b:07:7f:6e:c9:50:c8:1a:98:a7: b5:de:b3:75:50:ca:8f:22:0f:21:75:5b:8f:8d:f4: f8:fe:bb:cc:b4:9b:4b:80:b7:bb:2d:37:1c:59:10: 15:e3:59:ea:18:26:58:c4:26:3d:28:b7:21:24:5c: fa:7b:2c:13:5c:78:e8:f8:c0:c5:04:9d:f0:36:aa: bb:73:64:93:4b:a3:8b:a7:71:4f:2d:d6:09:93:f9: 23:9b:6c:b2:e3:4a:5c:6e:59:77:39:47:a6:a0:4a: 5d:e8:8c:ab:87:dc:c9:ef:04:14:bb:73:61:94:37: 2f:a1:53:b4:9b:f0:ab:cb:10:e4:5a:67:cc:33:70: 21:5f:ca:e5:bb:6b:22:ac:a6:b0:06:96:39:0d:ae: 01:8d:8c:ca:9e:0d:bb:d5:cf:37:46:12:c4:e5:41: f4:bc:53:2d:02:73:60:80:f7:15:09:73:07:aa:7e: 5f:2e:eb:35:de:9f:fc:34:c6:16:bb:0b:15:c2:61: fa:2f:41:b5:ef:d0:c7:83:90:9a:f2:21:46:0d:43: d6:75:72:c7:02:f8:66:32:56:1b:91:8e:51:ee:a0: 67:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:E8:2E:B0:AD:A7:C0:AF:D4:57:51:90:3F:CF:12:E1:18:C4:2F:C2 X509v3 Authority Key Identifier: keyid:E3:D3:B4:78:82:73:CE:45:92:9B:09:98:3A:BF:64:B5:D4:4D:1F:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/49O0eIJzzkWSmwmYOr9ktdRNHwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:74:08:a4:d9:ea:59:32:c5:7b:96:e7:6f:96:95:0e:d4:b2: 55:19:2a:ff:01:0a:59:6a:d8:15:a5:64:81:c1:b6:1b:b6:d2: 7e:ac:ed:7e:ff:d1:04:a6:58:1e:8b:cd:0c:5d:3e:5f:d7:c1: 69:bc:cc:54:9f:4b:cb:c9:29:f3:13:21:b5:84:87:6b:40:a8: 3d:3d:86:6b:29:2e:91:66:ff:db:b8:60:bb:3f:26:ca:45:29: 23:4d:78:97:31:66:27:3d:0a:e6:e6:2d:40:b0:f1:6b:85:33: 5f:0b:2d:db:c6:fc:ed:cc:b9:32:32:a2:19:7f:d9:ee:ec:eb: 08:c2:7f:d5:1b:9b:1a:fa:3a:7e:c6:4c:f2:da:ba:41:9d:bf: 1d:a9:3a:19:e7:35:15:b9:e2:01:29:8b:63:cd:4b:df:04:22: 81:24:e4:45:de:20:0a:05:21:34:d7:f7:ae:5f:01:31:bd:15: a9:84:e2:ee:ab:12:db:e9:8d:e0:6c:2f:1c:12:a8:7f:81:d1: 61:ae:05:04:67:bb:c0:4e:c6:80:ff:ed:a0:b9:1f:73:01:fb: a3:d6:1b:7c:43:31:64:85:a9:08:8a:56:11:87:e5:8f:95:27: ea:3d:78:da:79:7a:1e:27:c6:5c:8a:57:fd:e2:2e:39:6c:3b: 68:49:ac:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY2MzQxMTAvBgNVBAUTKEUzRDNCNDc4ODI3M0NFNDU5MjlCMDk5ODNBQkY2NEI1 RDQ0RDFGMDgwHhcNMjUwODIyMTcyMzUzWhcNMjUwODI5MTcyMzUzWjAYMRYwFAYD VQQDEw02OGE4YTdhOS02OGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5whpB8UyOsUH4LxLGtjRq3f0TAd9X44J3LdoFPyKc5XLQpsHf27JUMgamKe1 3rN1UMqPIg8hdVuPjfT4/rvMtJtLgLe7LTccWRAV41nqGCZYxCY9KLchJFz6eywT XHjo+MDFBJ3wNqq7c2STS6OLp3FPLdYJk/kjm2yy40pcbll3OUemoEpd6Iyrh9zJ 7wQUu3NhlDcvoVO0m/CryxDkWmfMM3AhX8rlu2sirKawBpY5Da4BjYzKng271c83 RhLE5UH0vFMtAnNggPcVCXMHqn5fLus13p/8NMYWuwsVwmH6L0G179DHg5Ca8iFG DUPWdXLHAvhmMlYbkY5R7qBnqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB/oLrCt p8Cv1FdRkD/PEuEYxC/CMB8GA1UdIwQYMBaAFOPTtHiCc85FkpsJmDq/ZLXUTR8I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjYzNC8xMzI3QTczRTE3 MjkxMUU5OEREMThFMjNDNEY5QUUwMi80OU8wZUlKenprV1Ntd21ZT3I5a3RkUk5I d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ5TzBlSUp6emtXU213bVlPcjlrdGRSTkh3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjYzNC8xMzI3QTczRTE3MjkxMUU5OEREMThFMjNDNEY5QUUwMi80OU8wZUlKenpr V1Ntd21ZT3I5a3RkUk5Id2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfdAik2epZMsV7ludvlpUO1LJVGSr/AQpZatgVpWSBwbYbttJ+rO1+ /9EEplgei80MXT5f18FpvMxUn0vLySnzEyG1hIdrQKg9PYZrKS6RZv/buGC7PybK RSkjTXiXMWYnPQrm5i1AsPFrhTNfCy3bxvztzLkyMqIZf9nu7OsIwn/VG5sa+jp+ xkzy2rpBnb8dqToZ5zUVueIBKYtjzUvfBCKBJORF3iAKBSE01/euXwExvRWphOLu qxLb6Y3gbC8cEqh/gdFhrgUEZ7vATsaA/+2guR9zAfuj1ht8QzFkhakIilYRh+WP lSfqPXjaeXoeJ8Zcilf94i45bDtoSays -----END CERTIFICATE-----Generated at Sat Aug 23 20:35:00 2025 by rpki-client