$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft File: U4XhOhtYRftEzutr7Y3rTomvOCk.mft (raw, json) Hash identifier: 2YC9hjmzjqZDfYrezzNnkkW3G0h/8B5dC0kkjLEPrgM= Subject key identifier: 13:93:8C:00:8E:40:FC:FE:CF:C8:93:66:A3:50:52:91:95:89:3F:7A Authority key identifier: 53:85:E1:3A:1B:58:45:FB:44:CE:EB:6B:ED:8D:EB:4E:89:AF:38:29 Certificate issuer: /CN=A91ACFEB/serialNumber=5385E13A1B5845FB44CEEB6BED8DEB4E89AF3829 Certificate serial: 0996 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft Manifest number: 0986 Signing time: Sun 20 Jul 2025 20:13:47 +0000 Manifest this update: Sun 20 Jul 2025 20:13:47 +0000 Manifest next update: Sun 27 Jul 2025 20:13:47 +0000 Files and hashes: 1: U4XhOhtYRftEzutr7Y3rTomvOCk.crl (hash: xSu70iUhctf9peqv8UWBnwmN6pDDvyqE2+EUAevz+zs=) 2: 3636BCD2937011EA8A795583C4F9AE02.roa (hash: Xd/9pByFb2cbZ9xoUnmDVjNmjmus87X0lFOERhfsZNI=) 3: 35831FCE937011EA8A795583C4F9AE02.roa (hash: N79J5/addSjvuTRJUjHpGEDoonJ5OZtfdl2v8Aonsr8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.crl rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 19:22:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2454 (0x996) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACFEB, serialNumber=5385E13A1B5845FB44CEEB6BED8DEB4E89AF3829 Validity Not Before: Jul 20 20:13:47 2025 GMT Not After : Jul 27 20:13:47 2025 GMT Subject: CN=687d4dfb-c015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:64:d7:4e:83:b4:0c:ed:14:4f:09:27:c0:91: 3c:33:07:3c:50:27:8c:5e:c7:c6:e0:d8:8c:7c:1d: c4:bc:c8:f2:b2:75:11:21:c9:e0:5f:6c:62:e0:6e: 58:cc:b5:9c:e2:52:0c:2d:50:86:53:f9:68:15:cc: fb:55:0d:79:5b:5f:b6:90:15:e8:0a:8a:77:8a:e4: 62:e4:3d:cc:0e:cb:55:78:dc:22:87:d9:0d:13:3e: 5f:da:b7:f2:ba:44:32:51:ae:6a:07:4a:8f:20:ea: 94:d5:c0:7e:c2:ed:f5:d1:c8:48:56:ec:08:97:0e: c3:ae:50:2c:d7:76:db:8e:8e:dd:0e:12:72:b0:01: 31:9c:4f:6c:fc:e3:28:2e:6a:db:4e:e3:e3:94:3a: 53:8c:40:1f:ef:8d:7b:22:83:49:ae:f7:8b:6c:e5: 44:b3:21:46:66:49:14:dc:20:4c:38:be:9c:bb:a2: 77:d7:75:77:4f:57:01:c9:9b:2a:79:c0:62:17:ac: ce:c5:3b:30:d3:20:6b:30:b1:36:d3:a4:5c:0c:10: 52:bf:ad:11:15:3b:f5:df:f5:bd:b2:01:0c:1b:51: 6d:ce:15:47:b0:39:99:93:ff:fd:00:68:a3:3d:e2: 08:72:ee:93:84:55:16:1c:ee:4b:c6:e3:4b:ce:84: 8a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:93:8C:00:8E:40:FC:FE:CF:C8:93:66:A3:50:52:91:95:89:3F:7A X509v3 Authority Key Identifier: keyid:53:85:E1:3A:1B:58:45:FB:44:CE:EB:6B:ED:8D:EB:4E:89:AF:38:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:09:3c:f3:ff:b2:38:ef:25:31:f6:8e:10:c0:84:74:2f:ee: 20:ca:b2:27:50:c3:18:a4:94:dd:4a:6d:6b:03:14:13:f7:0c: 17:61:85:46:4e:68:9f:27:5d:92:a2:ef:34:de:16:fb:75:0b: 22:d1:38:84:d1:3e:a4:7a:e0:3d:b6:5e:c6:b4:5e:1a:d0:47: 8b:db:8e:75:3a:55:e6:4f:0e:80:26:89:b7:c5:49:c8:66:b0: 27:e4:f2:e7:10:ab:2b:10:1f:38:f5:af:27:c1:e2:b6:78:f7: 51:ac:f8:b4:ce:c8:e4:42:51:fd:ac:49:08:37:3e:80:2a:d3: 9a:a4:34:a1:70:51:09:10:53:1a:7a:34:42:e4:f5:dc:0b:a1: cb:0a:3b:a6:74:10:13:5b:d2:21:92:8e:a3:87:b6:99:bb:dc: da:70:ff:3d:d2:7a:f6:6c:43:a6:e0:d7:c4:bd:6f:45:e3:4b: a4:8f:db:e1:3d:9b:a3:84:e8:81:7c:50:76:11:bb:8a:6b:4e: 1f:bc:c7:10:42:56:c8:d9:26:f8:ba:20:af:34:7f:34:a3:ee: cc:cd:16:a5:31:9f:82:58:53:b1:14:df:69:e2:67:8f:00:15: e4:15:2f:3c:32:7b:65:94:7d:dc:3c:e3:68:3d:64:00:e7:91: 11:3e:e9:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNGRUIxMTAvBgNVBAUTKDUzODVFMTNBMUI1ODQ1RkI0NENFRUI2QkVEOERFQjRF ODlBRjM4MjkwHhcNMjUwNzIwMjAxMzQ3WhcNMjUwNzI3MjAxMzQ3WjAYMRYwFAYD VQQDEw02ODdkNGRmYi1jMDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo2TXToO0DO0UTwknwJE8Mwc8UCeMXsfG4NiMfB3EvMjysnURIcngX2xi4G5Y zLWc4lIMLVCGU/loFcz7VQ15W1+2kBXoCop3iuRi5D3MDstVeNwih9kNEz5f2rfy ukQyUa5qB0qPIOqU1cB+wu310chIVuwIlw7DrlAs13bbjo7dDhJysAExnE9s/OMo LmrbTuPjlDpTjEAf7417IoNJrveLbOVEsyFGZkkU3CBMOL6cu6J313V3T1cByZsq ecBiF6zOxTsw0yBrMLE206RcDBBSv60RFTv13/W9sgEMG1FtzhVHsDmZk//9AGij PeIIcu6ThFUWHO5LxuNLzoSKoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBOTjACO QPz+z8iTZqNQUpGViT96MB8GA1UdIwQYMBaAFFOF4TobWEX7RM7ra+2N606Jrzgp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0ZFQi9DQjJDMzNFNjkz NkUxMUVBQTVFNTZCN0VDNEY5QUUwMi9VNFhoT2h0WVJmdEV6dXRyN1kzclRvbXZP Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U0WGhPaHRZUmZ0RXp1dHI3WTNyVG9tdk9Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0ZFQi9DQjJDMzNFNjkzNkUxMUVBQTVFNTZCN0VDNEY5QUUwMi9VNFhoT2h0WVJm dEV6dXRyN1kzclRvbXZPQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPCTzz/7I47yUx9o4QwIR0L+4gyrInUMMYpJTdSm1rAxQT9wwXYYVG TmifJ12Sou803hb7dQsi0TiE0T6keuA9tl7GtF4a0EeL2451OlXmTw6AJom3xUnI ZrAn5PLnEKsrEB849a8nweK2ePdRrPi0zsjkQlH9rEkINz6AKtOapDShcFEJEFMa ejRC5PXcC6HLCjumdBATW9Ihko6jh7aZu9zacP890nr2bEOm4NfEvW9F40ukj9vh PZujhOiBfFB2EbuKa04fvMcQQlbI2Sb4uiCvNH80o+7MzRalMZ+CWFOxFN9p4meP ABXkFS88MntllH3cPONoPWQA55ERPulq -----END CERTIFICATE-----Generated at Sun Jul 20 22:43:03 2025 by rpki-client