$ rpki-client -vvf rpki.apnic.net/member_repository/A91876D9/9260C658061811ECBB262C5EC4F9AE02/keZpzgIVCXvU1Hehp0RrDZ0CSP8.mft File: keZpzgIVCXvU1Hehp0RrDZ0CSP8.mft (raw, json) Hash identifier: igjSJET4xqHSeL43eg/+199NbKwjgH4fI8WaXVo43As= Subject key identifier: 3F:7A:2A:1C:53:20:6E:72:E2:4D:81:6B:6B:82:87:4A:74:F1:1F:27 Authority key identifier: 91:E6:69:CE:02:15:09:7B:D4:D4:77:A1:A7:44:6B:0D:9D:02:48:FF Certificate issuer: /CN=A91876D9/serialNumber=91E669CE0215097BD4D477A1A7446B0D9D0248FF Certificate serial: 053B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZpzgIVCXvU1Hehp0RrDZ0CSP8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91876D9/9260C658061811ECBB262C5EC4F9AE02/keZpzgIVCXvU1Hehp0RrDZ0CSP8.mft Manifest number: 0535 Signing time: Wed 30 Jul 2025 23:55:44 +0000 Manifest this update: Wed 30 Jul 2025 23:55:44 +0000 Manifest next update: Wed 06 Aug 2025 23:55:44 +0000 Files and hashes: 1: keZpzgIVCXvU1Hehp0RrDZ0CSP8.crl (hash: n8NtPQXC67KisPepROd6sKE7a2xDJGOtwI8HOhcIgVA=) 2: CDFDBE10061C11ECA4633B32C4F9AE02.roa (hash: phE+adBWK7PYAI4KAosAkS6IfQBeyVMqazuKmnqaEwg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91876D9/9260C658061811ECBB262C5EC4F9AE02/keZpzgIVCXvU1Hehp0RrDZ0CSP8.crl rsync://rpki.apnic.net/member_repository/A91876D9/9260C658061811ECBB262C5EC4F9AE02/keZpzgIVCXvU1Hehp0RrDZ0CSP8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZpzgIVCXvU1Hehp0RrDZ0CSP8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 Aug 2025 23:55:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1339 (0x53b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91876D9, serialNumber=91E669CE0215097BD4D477A1A7446B0D9D0248FF Validity Not Before: Jul 30 23:55:44 2025 GMT Not After : Aug 6 23:55:44 2025 GMT Subject: CN=688ab100-dee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e6:d7:6d:28:ed:9f:4d:95:30:f9:1a:47:61: c0:f7:77:57:13:01:f1:83:d2:2d:d2:e9:85:99:a1: e2:48:05:db:54:99:f0:b1:1b:9e:a9:e8:fd:0d:06: b9:39:60:83:9e:df:7e:99:a6:fb:f0:a8:24:18:0c: b6:ba:ea:1d:ba:27:8e:48:08:11:ce:53:0c:1f:b1: 74:d1:57:a6:a0:e5:73:1a:d6:00:7e:bd:58:05:e9: 74:b2:f5:83:24:48:9c:12:01:ee:c5:6b:6c:81:2e: aa:5b:97:21:2f:0b:69:e1:87:f6:d5:dc:d0:78:15: 27:6e:de:8f:75:09:b5:af:99:72:04:76:be:e9:0a: a8:77:0c:5f:ed:76:c9:78:83:9d:3e:ca:aa:1f:69: c4:0a:47:e0:df:21:0b:30:70:96:4f:f8:56:ca:55: 1c:e7:ae:61:a4:02:09:09:5b:43:f6:eb:25:c9:f1: 2e:01:20:c2:b2:78:09:df:ee:e5:1d:99:a8:b6:f8: e1:ce:52:82:0e:81:1f:68:64:01:53:05:cd:70:32: 85:b1:2f:77:ca:7e:71:18:e7:5e:70:e0:7e:f1:84: b4:96:ca:1b:a2:b6:27:e8:52:bc:a1:77:4a:51:b7: 9a:00:fa:6a:82:e7:ea:73:65:f3:6a:3f:76:70:25: 31:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:7A:2A:1C:53:20:6E:72:E2:4D:81:6B:6B:82:87:4A:74:F1:1F:27 X509v3 Authority Key Identifier: keyid:91:E6:69:CE:02:15:09:7B:D4:D4:77:A1:A7:44:6B:0D:9D:02:48:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91876D9/9260C658061811ECBB262C5EC4F9AE02/keZpzgIVCXvU1Hehp0RrDZ0CSP8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZpzgIVCXvU1Hehp0RrDZ0CSP8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91876D9/9260C658061811ECBB262C5EC4F9AE02/keZpzgIVCXvU1Hehp0RrDZ0CSP8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:86:7d:be:08:a0:10:60:bd:bc:18:97:fe:30:1f:27:68:6a: 04:ed:10:f7:ee:2b:0b:7e:fd:32:f9:6e:94:8e:3f:cd:46:b8: db:a6:be:b1:c7:ad:41:96:c6:1a:6c:62:d8:3b:55:56:37:39: 21:01:85:72:12:20:ab:49:84:f1:24:a6:68:52:57:ae:d4:b5: a6:5e:34:eb:36:b3:a7:bc:71:8e:73:70:45:d6:ce:6a:18:9e: 39:93:04:6f:4f:35:ff:4d:e9:f3:9a:5c:f8:5a:7c:55:fc:09: 57:67:6c:89:9d:6e:3e:aa:cc:c2:1b:06:b7:43:a8:d2:d3:b7: 0d:e1:f3:2d:5b:3b:ba:4f:90:87:6b:0c:f3:aa:3d:c5:9a:62: ab:12:84:80:16:ad:f6:66:7b:5b:a7:c0:10:10:e6:2b:3e:aa: 47:f4:af:f4:8e:eb:ab:02:2b:bc:1b:4d:c3:c5:9e:23:41:f1: 60:7d:ba:57:1b:c4:7c:e3:e8:c4:e1:a7:92:d1:c8:77:43:a4: 09:c5:09:1b:0a:ca:ac:e2:39:94:19:0b:5b:ae:df:a6:b6:f4: 55:e9:f8:55:27:ce:bc:96:7f:f0:9c:8c:44:e0:5c:8e:e3:30: 87:30:43:e8:2a:df:7e:f3:07:10:fa:41:1e:15:85:a1:9a:3c: 74:c4:a3:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc2RDkxMTAvBgNVBAUTKDkxRTY2OUNFMDIxNTA5N0JENEQ0NzdBMUE3NDQ2QjBE OUQwMjQ4RkYwHhcNMjUwNzMwMjM1NTQ0WhcNMjUwODA2MjM1NTQ0WjAYMRYwFAYD VQQDEw02ODhhYjEwMC1kZWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsObXbSjtn02VMPkaR2HA93dXEwHxg9It0umFmaHiSAXbVJnwsRueqej9DQa5 OWCDnt9+mab78KgkGAy2uuoduieOSAgRzlMMH7F00VemoOVzGtYAfr1YBel0svWD JEicEgHuxWtsgS6qW5chLwtp4Yf21dzQeBUnbt6PdQm1r5lyBHa+6Qqodwxf7XbJ eIOdPsqqH2nECkfg3yELMHCWT/hWylUc565hpAIJCVtD9uslyfEuASDCsngJ3+7l HZmotvjhzlKCDoEfaGQBUwXNcDKFsS93yn5xGOdecOB+8YS0lsoborYn6FK8oXdK UbeaAPpqgufqc2Xzaj92cCUxxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD96KhxT IG5y4k2Ba2uCh0p08R8nMB8GA1UdIwQYMBaAFJHmac4CFQl71NR3oadEaw2dAkj/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzZEOS85MjYwQzY1ODA2 MTgxMUVDQkIyNjJDNUVDNEY5QUUwMi9rZVpwemdJVkNYdlUxSGVocDBSckRaMENT UDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tlWnB6Z0lWQ1h2VTFIZWhwMFJyRFowQ1NQOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzZEOS85MjYwQzY1ODA2MTgxMUVDQkIyNjJDNUVDNEY5QUUwMi9rZVpwemdJVkNY dlUxSGVocDBSckRaMENTUDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4hn2+CKAQYL28GJf+MB8naGoE7RD37isLfv0y+W6Ujj/NRrjbpr6x x61BlsYabGLYO1VWNzkhAYVyEiCrSYTxJKZoUleu1LWmXjTrNrOnvHGOc3BF1s5q GJ45kwRvTzX/Tenzmlz4WnxV/AlXZ2yJnW4+qszCGwa3Q6jS07cN4fMtWzu6T5CH awzzqj3FmmKrEoSAFq32Zntbp8AQEOYrPqpH9K/0juurAiu8G03DxZ4jQfFgfbpX G8R84+jE4aeS0ch3Q6QJxQkbCsqs4jmUGQtbrt+mtvRV6fhVJ868ln/wnIxE4FyO 4zCHMEPoKt9+8wcQ+kEeFYWhmjx0xKOM -----END CERTIFICATE-----Generated at Thu Jul 31 15:24:39 2025 by rpki-client