$ rpki-client -vvf rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft File: sxnfFFXYouFJjNxdSRVpgxxa_aE.mft (raw, json) Hash identifier: 6SSi/sBM1E9eAlArh040XoN04hKbz5hoFz+d/k7wh5I= Subject key identifier: 45:04:3C:13:9D:BC:37:7F:38:F9:1A:AB:8C:41:37:FD:3C:09:A5:3D Authority key identifier: B3:19:DF:14:55:D8:A2:E1:49:8C:DC:5D:49:15:69:83:1C:5A:FD:A1 Certificate issuer: /CN=A91F87BB/serialNumber=B319DF1455D8A2E1498CDC5D491569831C5AFDA1 Certificate serial: 0419 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft Manifest number: 040C Signing time: Tue 29 Jul 2025 01:01:35 +0000 Manifest this update: Tue 29 Jul 2025 01:01:35 +0000 Manifest next update: Tue 05 Aug 2025 01:01:35 +0000 Files and hashes: 1: sxnfFFXYouFJjNxdSRVpgxxa_aE.crl (hash: krlY1WF5JJO0J8o/QP8rfReGJf23mv4GBckCQ8RupnY=) 2: 88B3F0026E9F11EEB03D9582C4F9AE02.roa (hash: OnZeTeaYB5z7AJuz8oi6jGvWEckKykDi+qBUmv+U0QM=) 3: DDCB6B02D9D311EEBB3BDF10C4F9AE02.roa (hash: NYRjezFURAIZr5dfzYcgObUcS0k2GZmBPMzd9N07gUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.crl rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 05 Aug 2025 01:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1049 (0x419) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F87BB, serialNumber=B319DF1455D8A2E1498CDC5D491569831C5AFDA1 Validity Not Before: Jul 29 01:01:35 2025 GMT Not After : Aug 5 01:01:35 2025 GMT Subject: CN=68881d6f-14d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b1:65:e4:8b:4d:b4:b7:0d:da:af:e6:c7:08: 10:24:28:c6:fc:aa:9c:e8:2d:b8:9e:b2:c1:cd:d4: 60:81:cc:fa:23:5e:0d:c5:75:9a:b3:e2:ee:6e:17: 9b:b7:22:6d:64:7e:ec:3b:95:c5:d4:3a:13:1b:53: 2b:13:4c:82:53:8d:9a:5c:50:2f:0e:9b:11:ca:5f: 9f:81:01:31:f7:51:d1:93:f2:ef:71:17:3c:f8:dc: c1:e1:74:72:a3:c3:aa:ce:7e:1b:8d:0c:09:92:44: f5:62:1a:dd:a2:89:41:c1:81:e0:47:f5:18:d0:c3: ee:35:b2:67:34:08:c2:7b:42:91:83:02:f8:2d:34: c5:4d:94:47:d8:ca:b8:d1:f4:e3:07:1c:fa:42:98: 21:13:9b:30:5a:58:d8:48:44:19:be:af:98:53:0c: 99:17:c1:96:46:07:be:f0:0b:a0:fc:12:42:61:e2: 7a:43:1d:e9:d8:18:12:d7:e7:0b:61:f4:90:30:b9: 07:07:dc:07:bc:57:a5:4c:e2:09:92:0b:a4:81:02: 19:7f:c4:8d:5f:68:15:3c:9f:8e:05:00:a2:2b:d5: 6e:d5:4d:a7:5f:81:02:ca:9a:3e:3b:b0:b9:5d:29: bc:87:d0:e4:79:29:a3:1c:09:1d:c3:25:58:db:07: ec:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:04:3C:13:9D:BC:37:7F:38:F9:1A:AB:8C:41:37:FD:3C:09:A5:3D X509v3 Authority Key Identifier: keyid:B3:19:DF:14:55:D8:A2:E1:49:8C:DC:5D:49:15:69:83:1C:5A:FD:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:a1:1a:67:8e:1b:e1:59:0d:cb:54:6e:fe:ab:de:06:57:77: 71:b3:63:92:2a:e5:da:dc:88:c1:f7:9e:94:82:6b:f2:0a:f1: 14:98:9d:6f:89:fc:b9:14:a1:d1:57:53:30:d2:a6:34:62:57: 6a:85:3d:ea:78:d6:be:6b:25:82:b5:0b:86:74:86:71:b7:e1: 64:a5:d8:6a:56:34:9d:50:c3:39:8f:6d:f6:fb:49:1b:1c:d4: c1:8d:de:a6:f9:ab:9b:09:5a:b3:6f:0e:69:d2:7e:02:2f:e0: 1e:a2:d7:79:45:ff:c8:e6:42:60:65:0f:4a:b1:2d:b7:bd:a2: 7d:fa:bf:90:f7:d9:62:1b:fb:59:d8:20:9a:5b:2d:6e:59:4a: 51:2a:cd:34:15:5a:38:ec:02:dc:1c:f5:82:09:f5:5d:a3:70: 16:de:be:eb:a4:47:a1:22:f7:d7:77:5b:d3:54:ea:d0:30:17: 2c:94:e7:22:10:be:56:cd:6e:04:df:dc:22:64:ac:3d:f3:71: 08:b3:c0:83:85:bd:1e:87:4a:70:0e:18:5c:8e:a9:64:ce:00: 5e:e0:0c:a9:19:62:b8:f9:26:10:39:13:e1:d5:b4:65:4b:bb: fd:1f:dd:2d:47:2c:ed:47:12:cb:ed:1d:20:5b:34:cf:89:f3: 8d:8b:d3:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg3QkIxMTAvBgNVBAUTKEIzMTlERjE0NTVEOEEyRTE0OThDREM1RDQ5MTU2OTgz MUM1QUZEQTEwHhcNMjUwNzI5MDEwMTM1WhcNMjUwODA1MDEwMTM1WjAYMRYwFAYD VQQDEw02ODg4MWQ2Zi0xNGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz7Fl5ItNtLcN2q/mxwgQJCjG/Kqc6C24nrLBzdRggcz6I14NxXWas+Lubheb tyJtZH7sO5XF1DoTG1MrE0yCU42aXFAvDpsRyl+fgQEx91HRk/LvcRc8+NzB4XRy o8Oqzn4bjQwJkkT1YhrdoolBwYHgR/UY0MPuNbJnNAjCe0KRgwL4LTTFTZRH2Mq4 0fTjBxz6QpghE5swWljYSEQZvq+YUwyZF8GWRge+8Aug/BJCYeJ6Qx3p2BgS1+cL YfSQMLkHB9wHvFelTOIJkgukgQIZf8SNX2gVPJ+OBQCiK9Vu1U2nX4ECypo+O7C5 XSm8h9DkeSmjHAkdwyVY2wfsHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEUEPBOd vDd/OPkaq4xBN/08CaU9MB8GA1UdIwQYMBaAFLMZ3xRV2KLhSYzcXUkVaYMcWv2h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODdCQi85REYwREZCRTdE RTkxMUVDQkVBMDhFMEZDNEY5QUUwMi9zeG5mRkZYWW91RkpqTnhkU1JWcGd4eGFf YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N4bmZGRlhZb3VGSmpOeGRTUlZwZ3h4YV9hRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODdCQi85REYwREZCRTdERTkxMUVDQkVBMDhFMEZDNEY5QUUwMi9zeG5mRkZYWW91 RkpqTnhkU1JWcGd4eGFfYUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKoRpnjhvhWQ3LVG7+q94GV3dxs2OSKuXa3IjB956UgmvyCvEUmJ1v ify5FKHRV1Mw0qY0YldqhT3qeNa+ayWCtQuGdIZxt+FkpdhqVjSdUMM5j232+0kb HNTBjd6m+aubCVqzbw5p0n4CL+Aeotd5Rf/I5kJgZQ9KsS23vaJ9+r+Q99liG/tZ 2CCaWy1uWUpRKs00FVo47ALcHPWCCfVdo3AW3r7rpEehIvfXd1vTVOrQMBcslOci EL5WzW4E39wiZKw983EIs8CDhb0eh0pwDhhcjqlkzgBe4AypGWK4+SYQORPh1bRl S7v9H90tRyztRxLL7R0gWzTPifONi9PZ -----END CERTIFICATE-----Generated at Tue Jul 29 07:51:43 2025 by rpki-client