$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft File: k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft (raw, json) Hash identifier: rTl4XDWw/G5MGLR0a2kAjht2Opb4j3btL4TiaJrj6Xw= Subject key identifier: 6F:D5:6C:13:E9:DB:22:18:16:9F:13:62:E9:5A:54:86:99:93:F3:4C Authority key identifier: 93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57 Certificate issuer: /CN=A91F4268/serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857 Certificate serial: 0582 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft Manifest number: 0538 Signing time: Sat 06 Sep 2025 23:59:55 +0000 Manifest this update: Sat 06 Sep 2025 23:59:55 +0000 Manifest next update: Sat 13 Sep 2025 23:59:55 +0000 Files and hashes: 1: k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl (hash: OqkM1J/4vtqQQPgilN2uxSadgCsG3NZ1nWef3QmDz5s=) 2: 7934717A3BA611EC8737B534C4F9AE02.roa (hash: w2mL/fsYRB6MmS8ED2TzYNgHT6YJdEKc1P9Mt7Z0I6E=) 3: BEDF72A076B911EF95DBF27CC4F9AE02.roa (hash: pFXUfU8J6+rawQvdZ0DzHycI68DJinKh4UA+nChrzC8=) 4: 39D8CF1893EB11EEB45D3A32C4F9AE02.roa (hash: ofRtHX/MKl5XIFnHo+xiQV/BMYeRiUmwlrnI4KBBFTU=) 5: 7879B24A3BA611EC8737B534C4F9AE02.roa (hash: HkMdZ/7Zyl8/WVPS96RNyLCvOlQjm91vFX9iVmHYTgY=) 6: B5960F8CB03111EEA45DE91DC4F9AE02.roa (hash: tO89KC6SX/YI4kYIo5r9IqXP4sUugJ5kj9ybH7Ev/Ck=) 7: 905F258E24F211EEA0863328C4F9AE02.roa (hash: JFZr5fqj2WXrU9XCj8pCx90LDWf5PYcEkCopcpVaJPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 23:59:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1410 (0x582) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4268, serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857 Validity Not Before: Sep 6 23:59:55 2025 GMT Not After : Sep 13 23:59:55 2025 GMT Subject: CN=68bccafb-acad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:13:c7:38:7f:74:b3:67:14:8e:87:40:91:ce: 5b:cc:22:6c:b8:e2:0c:d9:a0:7d:c9:40:ef:7f:8a: a5:f7:2d:10:03:85:c1:94:3f:11:bf:b3:97:7a:57: 84:7d:a0:db:e3:b9:f0:d0:fe:c5:01:d1:45:c9:6c: b6:54:e7:4d:66:23:70:8a:a0:cc:9d:aa:f7:7c:ac: 18:e0:98:1a:5e:35:4c:84:90:b3:d1:4c:d1:2b:81: 10:17:11:77:cd:95:27:eb:e2:4a:e0:ee:0b:f0:65: 2f:78:c1:75:3a:74:a9:1f:db:7f:a4:18:e0:15:5f: 98:7a:e4:b8:e1:22:6d:e1:33:cc:89:ae:04:b1:9f: e3:e6:36:18:4c:b6:64:5b:54:f6:42:f8:6d:2a:21: fa:56:52:68:eb:43:2f:b2:e7:9d:1c:0d:3d:b8:50: 16:52:33:cf:34:17:d6:ce:de:bc:c6:0c:f6:82:9f: 7f:07:78:41:78:dd:6d:b2:52:3d:cd:a7:d1:87:ec: 2f:96:a8:df:c4:67:ff:4f:29:29:29:39:08:08:f4: fd:f0:90:6b:03:fc:76:0f:36:74:47:5b:70:06:b6: 07:69:11:f9:91:80:92:39:db:aa:59:cb:3a:76:1e: 1b:33:37:a6:9a:3a:d1:f3:c7:84:47:96:b5:27:2b: eb:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:D5:6C:13:E9:DB:22:18:16:9F:13:62:E9:5A:54:86:99:93:F3:4C X509v3 Authority Key Identifier: keyid:93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:e7:e7:c4:c6:3c:aa:56:bd:5f:9f:40:09:20:83:39:31:c8: 3c:31:65:f6:00:8e:e4:4a:cc:02:c6:f6:10:89:42:54:0c:a4: 7f:3f:c0:23:32:6c:a8:d2:b3:f9:67:2d:81:5d:91:ac:a8:b8: 94:10:fe:c0:5a:8a:d5:c6:82:7c:f9:82:bf:cc:a0:eb:bc:35: e7:89:dc:92:d2:b7:5c:11:65:ae:e7:81:f1:6c:41:c0:98:4b: 7a:38:7e:fc:99:5a:be:36:b3:02:81:97:50:79:b8:84:00:a5: 9d:65:1d:e5:f0:b1:46:d7:dc:12:54:2d:a6:24:e8:9c:b7:f2: 7a:94:30:91:77:c7:cd:10:18:94:22:09:d0:f2:01:1f:e4:0d: fd:4b:96:e0:03:1b:f4:25:d5:8c:77:4d:cc:69:f9:30:d8:07: fb:f0:42:04:b5:fc:b3:fb:9c:e3:9d:4f:d7:71:50:b1:58:f4: 0a:6c:2b:3c:22:0e:bc:04:82:f7:f7:33:53:66:a8:d0:0a:fe: d6:8c:b5:a9:0d:49:c1:33:12:ff:62:6e:b3:9b:a5:49:7b:e7: 24:2e:1a:b0:c2:c6:0b:a9:e0:b6:cb:62:99:14:5c:ae:68:bc: 03:4a:55:bc:fc:5a:f1:2b:f4:35:4a:a3:4c:2a:0b:42:53:b2: 3e:11:48:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyNjgxMTAvBgNVBAUTKDkzNzMyRjNGQzMxMzU5QkJCRjhCMzc5NjI0QkY5MTM1 MUNDQUQ4NTcwHhcNMjUwOTA2MjM1OTU1WhcNMjUwOTEzMjM1OTU1WjAYMRYwFAYD VQQDEw02OGJjY2FmYi1hY2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqxPHOH90s2cUjodAkc5bzCJsuOIM2aB9yUDvf4ql9y0QA4XBlD8Rv7OXeleE faDb47nw0P7FAdFFyWy2VOdNZiNwiqDMnar3fKwY4JgaXjVMhJCz0UzRK4EQFxF3 zZUn6+JK4O4L8GUveMF1OnSpH9t/pBjgFV+YeuS44SJt4TPMia4EsZ/j5jYYTLZk W1T2QvhtKiH6VlJo60MvsuedHA09uFAWUjPPNBfWzt68xgz2gp9/B3hBeN1tslI9 zafRh+wvlqjfxGf/TykpKTkICPT98JBrA/x2DzZ0R1twBrYHaRH5kYCSOduqWcs6 dh4bMzemmjrR88eER5a1JyvrCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG/VbBPp 2yIYFp8TYulaVIaZk/NMMB8GA1UdIwQYMBaAFJNzLz/DE1m7v4s3liS/kTUcythX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI2OC9DNzhFQkNFQTIx OTMxMUVDOTAwQzU2NTNDNEY5QUUwMi9rM012UDhNVFdidV9pemVXSkwtUk5Seksy RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2szTXZQOE1UV2J1X2l6ZVdKTC1STlJ6SzJGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI2OC9DNzhFQkNFQTIxOTMxMUVDOTAwQzU2NTNDNEY5QUUwMi9rM012UDhNVFdi dV9pemVXSkwtUk5SeksyRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAr5+fExjyqVr1fn0AJIIM5Mcg8MWX2AI7kSswCxvYQiUJUDKR/P8Aj Mmyo0rP5Zy2BXZGsqLiUEP7AWorVxoJ8+YK/zKDrvDXnidyS0rdcEWWu54HxbEHA mEt6OH78mVq+NrMCgZdQebiEAKWdZR3l8LFG19wSVC2mJOict/J6lDCRd8fNEBiU IgnQ8gEf5A39S5bgAxv0JdWMd03Mafkw2Af78EIEtfyz+5zjnU/XcVCxWPQKbCs8 Ig68BIL39zNTZqjQCv7WjLWpDUnBMxL/Ym6zm6VJe+ckLhqwwsYLqeC2y2KZFFyu aLwDSlW8/FrxK/Q1SqNMKgtCU7I+EUgg -----END CERTIFICATE-----Generated at Mon Sep 8 02:50:32 2025 by rpki-client