$ rpki-client -vvf rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft File: xOTw2gEK9YY3zFlihHHpmLckPFI.mft (raw, json) Hash identifier: Z+jKUK2CP1Byg1J1EYdnieijFBbJ4NFnh8ijI07ju/Y= Subject key identifier: E5:85:FA:69:52:D6:F0:6C:A0:B6:22:C0:B5:44:36:8D:BF:E6:E2:7A Authority key identifier: C4:E4:F0:DA:01:0A:F5:86:37:CC:59:62:84:71:E9:98:B7:24:3C:52 Certificate issuer: /CN=A91D83D0/serialNumber=C4E4F0DA010AF58637CC59628471E998B7243C52 Certificate serial: 091D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xOTw2gEK9YY3zFlihHHpmLckPFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft Manifest number: 0903 Signing time: Tue 22 Jul 2025 20:36:41 +0000 Manifest this update: Tue 22 Jul 2025 20:36:40 +0000 Manifest next update: Tue 29 Jul 2025 20:36:40 +0000 Files and hashes: 1: xOTw2gEK9YY3zFlihHHpmLckPFI.crl (hash: FZF7B9+zmWfg0Emi28dAIAOfzR2t59m8WZbkxwarX+I=) 2: 5353EA28781F11EEBA05B17FC4F9AE02.roa (hash: Del+9YrkACA6yrhYJeSPVVuh01l/16gJ82iy69S9BRo=) 3: 863670328FD011EEB6FFC636C4F9AE02.roa (hash: PnqDvM4vjQdsVy80UhznbWoKhp/dlqh33E+GG+RU+dk=) 4: 03706138786411EC8624EB12C4F9AE02.roa (hash: qKXv165pzdK/WBxXfxqKy/V+953i+G1rFbe37yvanHk=) 5: F4E74AA8B99911EF9A0C3B63C4F9AE02.roa (hash: Ci305f1V47fRIRqmqjLy+EIi8DLnLoGCGpVVZ48v10E=) 6: 6A6E4770A10F11EF840C2548C4F9AE02.roa (hash: lvX9qWs0U9FJpaiKhdFBFudNcs3mWD37dbOmEs33Njk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.crl rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xOTw2gEK9YY3zFlihHHpmLckPFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 20:36:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2333 (0x91d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D83D0, serialNumber=C4E4F0DA010AF58637CC59628471E998B7243C52 Validity Not Before: Jul 22 20:36:40 2025 GMT Not After : Jul 29 20:36:40 2025 GMT Subject: CN=687ff659-e80e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f0:9a:67:8e:a5:bd:e5:7a:0c:41:58:81:18: 95:76:43:a0:70:bc:8e:b2:20:04:42:87:76:5e:5b: 51:40:c4:33:84:81:62:15:9e:76:e7:b4:f8:0a:cd: ae:e9:07:3e:6b:38:19:51:ec:5d:25:89:16:de:31: 63:e9:d5:8c:f1:35:0d:a5:86:26:a7:fa:53:d2:a7: f7:d2:28:5f:c1:71:ed:92:5f:07:b1:24:89:1a:4b: 90:ca:c0:af:af:8f:64:82:24:eb:cc:ef:27:6c:5a: 2b:4a:4c:59:da:8f:fa:d2:65:11:14:c1:2e:7b:fe: f1:0e:ad:d2:4d:fc:43:2c:54:91:da:2a:6a:85:09: 37:f6:86:32:8c:f7:23:77:a2:a2:af:22:ef:35:a1: 2e:c4:66:20:2e:4d:71:de:f0:91:09:b8:8b:98:39: 2b:d0:b5:79:ae:63:4f:2b:b2:8d:50:8e:89:ca:a6: 25:8a:90:d1:a1:9e:77:37:6c:15:b5:cc:f0:04:45: 96:46:08:a3:a8:57:f4:b4:ce:cf:2f:72:74:4e:4d: 0e:de:bc:51:3c:98:13:9b:25:42:19:f1:50:5c:03: 87:d8:a6:5f:4e:36:a7:b6:9e:50:55:b5:7d:92:7d: 17:88:08:c4:c0:99:fd:39:2b:f8:00:aa:40:9e:87: 99:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:85:FA:69:52:D6:F0:6C:A0:B6:22:C0:B5:44:36:8D:BF:E6:E2:7A X509v3 Authority Key Identifier: keyid:C4:E4:F0:DA:01:0A:F5:86:37:CC:59:62:84:71:E9:98:B7:24:3C:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xOTw2gEK9YY3zFlihHHpmLckPFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:33:19:b6:66:42:6e:36:c1:8a:0b:79:f9:72:92:e8:e8:0b: 68:e6:0d:df:5c:cf:24:55:1b:60:0c:e4:30:af:26:15:b3:87: 5a:07:af:30:62:ae:ab:08:02:38:46:a5:83:36:a0:b5:e1:dd: c8:51:f6:04:0e:23:1c:57:4f:a9:b0:6c:62:56:d9:08:79:c5: 65:32:49:6b:d7:4d:8e:a7:23:0c:2b:75:d0:c9:0c:a1:58:32: 98:41:a8:be:58:31:e7:18:e7:10:aa:e6:16:54:80:94:a2:3d: 8f:70:82:e0:81:63:fd:e1:30:96:68:c3:4d:b3:31:02:60:ff: eb:88:b3:e5:03:d5:89:bc:c5:e7:83:4d:b7:77:3a:4a:3e:29: e5:85:ce:05:f7:a3:7a:6e:7e:8d:73:26:f4:75:2a:19:e3:59: da:66:b7:a7:22:82:d8:0e:7c:11:b5:1d:d3:4b:c7:de:e6:03: 94:46:81:91:67:9e:7e:28:44:b3:79:84:57:7f:1b:72:b6:c8: d4:4f:14:2d:b3:56:d1:ef:5b:c2:b7:15:1f:01:b9:e5:8f:c4: 5b:84:02:51:db:79:03:cf:b0:df:e6:ca:bc:e1:33:84:15:5a: b7:13:63:0a:29:6c:f9:76:bb:2c:1b:4e:3d:d4:40:fc:4c:04: a8:74:eb:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgzRDAxMTAvBgNVBAUTKEM0RTRGMERBMDEwQUY1ODYzN0NDNTk2Mjg0NzFFOTk4 QjcyNDNDNTIwHhcNMjUwNzIyMjAzNjQwWhcNMjUwNzI5MjAzNjQwWjAYMRYwFAYD VQQDEw02ODdmZjY1OS1lODBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvPCaZ46lveV6DEFYgRiVdkOgcLyOsiAEQod2XltRQMQzhIFiFZ5257T4Cs2u 6Qc+azgZUexdJYkW3jFj6dWM8TUNpYYmp/pT0qf30ihfwXHtkl8HsSSJGkuQysCv r49kgiTrzO8nbForSkxZ2o/60mURFMEue/7xDq3STfxDLFSR2ipqhQk39oYyjPcj d6KiryLvNaEuxGYgLk1x3vCRCbiLmDkr0LV5rmNPK7KNUI6JyqYlipDRoZ53N2wV tczwBEWWRgijqFf0tM7PL3J0Tk0O3rxRPJgTmyVCGfFQXAOH2KZfTjantp5QVbV9 kn0XiAjEwJn9OSv4AKpAnoeZwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOWF+mlS 1vBsoLYiwLVENo2/5uJ6MB8GA1UdIwQYMBaAFMTk8NoBCvWGN8xZYoRx6Zi3JDxS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODNEMC8wQTE2MjA4QUFG QkMxMUVBQTk2MUNCODZDNEY5QUUwMi94T1R3MmdFSzlZWTN6RmxpaEhIcG1MY2tQ RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hPVHcyZ0VLOVlZM3pGbGloSEhwbUxja1BGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODNEMC8wQTE2MjA4QUFGQkMxMUVBQTk2MUNCODZDNEY5QUUwMi94T1R3MmdFSzlZ WTN6RmxpaEhIcG1MY2tQRkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCMxm2ZkJuNsGKC3n5cpLo6Ato5g3fXM8kVRtgDOQwryYVs4daB68w Yq6rCAI4RqWDNqC14d3IUfYEDiMcV0+psGxiVtkIecVlMklr102OpyMMK3XQyQyh WDKYQai+WDHnGOcQquYWVICUoj2PcILggWP94TCWaMNNszECYP/riLPlA9WJvMXn g023dzpKPinlhc4F96N6bn6Ncyb0dSoZ41naZrenIoLYDnwRtR3TS8fe5gOURoGR Z55+KESzeYRXfxtytsjUTxQts1bR71vCtxUfAbnlj8RbhAJR23kDz7Df5sq84TOE FVq3E2MKKWz5drssG0491ED8TASodOsB -----END CERTIFICATE-----Generated at Wed Jul 23 12:49:17 2025 by rpki-client