$ rpki-client -vvf rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft File: ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft (raw, json) Hash identifier: mauRG3TwFzhOpdbcqDEVuYq3mzVCqEOubbGcm8MGFwU= Subject key identifier: 98:95:3D:E8:BA:F9:54:20:3A:2F:62:C8:21:11:C5:0F:F7:71:83:59 Authority key identifier: 71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 Certificate issuer: /CN=A91128E3/serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Certificate serial: 0589 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft Manifest number: 0569 Signing time: Thu 04 Sep 2025 23:41:46 +0000 Manifest this update: Thu 04 Sep 2025 23:41:45 +0000 Manifest next update: Thu 11 Sep 2025 23:41:45 +0000 Files and hashes: 1: ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl (hash: nRIMnjtPHpe3YsP3UjKBu4FgRCCqApG7p7RUYrWyjkk=) 2: 3B2A0EE4AEBC11EF876B6A5AC4F9AE02.roa (hash: 2jt6Xm58KXfWaDCwoL1QNNF6hftEV3g4TXU+Cro75w8=) 3: EDC6896617B611F08E260814C4F9AE02.roa (hash: bppqSZ8PSCotLg3otrjVRqyexBIsOl6v9mc32VyO/nY=) 4: 3A964BE6AEBC11EF876B6A5AC4F9AE02.roa (hash: mLHQ8FPso+ZmAaHO2o/MCAMgyAvNWTYy5WsKEiwbpt0=) 5: 5F652B164A0311EC84EFD42FC4F9AE02.roa (hash: osBPg0SLfRG0eb1YC88FnRgXyZmnCWV1UAz6jQOFPa8=) 6: CE751320B9D511ED89A5B11FC4F9AE02.roa (hash: tUYKyj51w8FY5qrfQOEMkIv2L7xe24UEi8KjbC1Ydgg=) 7: 16DA3F3E784E11EC96A28137C4F9AE02.roa (hash: Px42Wf8a/plz9LcLndqURmspCg6cQtfr3BUR2GqJiJs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 23:41:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1417 (0x589) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91128E3, serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Validity Not Before: Sep 4 23:41:45 2025 GMT Not After : Sep 11 23:41:45 2025 GMT Subject: CN=68ba23ba-eeb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:45:d2:ad:75:c5:b3:74:b3:13:1c:12:30:75: 73:b8:d9:01:4f:16:5f:03:01:62:d1:28:29:6e:c1: 63:31:08:b3:1f:12:2c:1c:5a:8e:60:50:aa:ec:0a: d0:bf:c6:d9:13:af:9c:4d:85:e9:68:b8:69:b9:04: 0d:e3:2f:fa:99:18:60:4d:96:75:af:04:e9:a6:7f: 73:81:2a:3a:e3:e7:fa:f9:39:87:ee:d6:ec:fa:9b: 4f:22:ac:0e:59:cd:31:a6:78:9b:1b:45:2f:77:09: 93:0f:0e:c0:4e:ae:e4:8f:70:24:f8:a7:ba:bd:a7: df:96:3d:20:17:b1:bd:61:7c:6c:65:c6:45:40:7e: f9:3a:a6:64:4b:8a:5c:89:f2:e8:c1:00:ff:58:1b: 99:16:f5:99:93:b0:5d:18:72:62:3c:a8:53:74:f6: bd:2b:96:9f:a4:f5:0b:24:07:89:a1:67:83:04:dc: 1d:00:9d:ba:99:20:e5:34:47:e2:bc:2f:3f:dc:5d: de:37:46:44:29:ce:f1:82:0d:74:d5:81:f3:42:8c: fe:0d:6c:4a:4c:27:58:22:3f:c4:5a:c2:e1:f9:f5: 4e:85:e9:16:f5:48:6e:e2:40:6b:b0:97:fa:25:03: c9:99:9b:a9:4e:54:45:3d:ad:72:fa:f5:27:f8:b7: 2e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:95:3D:E8:BA:F9:54:20:3A:2F:62:C8:21:11:C5:0F:F7:71:83:59 X509v3 Authority Key Identifier: keyid:71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:e3:22:96:57:73:e1:f6:3d:e6:e7:c3:31:67:97:a3:f3:29: f6:57:3e:3d:5c:af:4e:0e:ec:9a:cb:ee:2f:ba:28:70:9b:82: 33:98:41:e5:37:c9:96:ad:84:3d:31:98:b2:c8:62:b9:4d:7d: 4a:8b:37:e6:d1:74:77:11:78:bc:1a:db:af:cd:6a:98:df:fe: 79:e2:b4:e1:c4:30:99:d6:1e:80:c3:4a:4a:4d:26:68:d9:2d: 1c:bd:b9:e6:21:db:96:a7:7a:4c:eb:34:cb:56:d2:cf:2d:fd: 38:8c:e5:0b:f7:17:af:92:6c:26:d2:f8:3c:b3:c5:e7:cb:ed: c3:7e:31:d6:f3:c4:73:b5:84:e6:6a:4c:88:80:93:24:cd:07: fb:c6:ff:b3:a6:38:a6:b4:0e:65:55:4b:7a:0e:d0:c1:70:93: db:9c:fc:ae:60:01:5b:d2:e0:aa:89:3a:81:eb:8e:ff:84:a0: 2f:db:85:84:7e:39:5f:0c:2c:eb:1b:fe:15:b2:cd:1e:ee:b1: 8b:19:d0:1a:49:54:8f:ef:46:bd:f8:41:28:7f:c0:27:c7:c1: a1:4f:f7:de:23:f9:5e:10:07:9b:ff:48:91:2e:28:20:08:0f: b7:0d:7f:76:0f:85:1b:0f:3b:df:95:0b:c3:09:b3:a2:37:87: 7f:69:13:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4RTMxMTAvBgNVBAUTKDcxQzFFOEUwNTQwNDlBQ0ZEOUFBMjE5M0FGMUQ0OEM2 RDFEMDI1RTEwHhcNMjUwOTA0MjM0MTQ1WhcNMjUwOTExMjM0MTQ1WjAYMRYwFAYD VQQDEw02OGJhMjNiYS1lZWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA80XSrXXFs3SzExwSMHVzuNkBTxZfAwFi0SgpbsFjMQizHxIsHFqOYFCq7ArQ v8bZE6+cTYXpaLhpuQQN4y/6mRhgTZZ1rwTppn9zgSo64+f6+TmH7tbs+ptPIqwO Wc0xpnibG0UvdwmTDw7ATq7kj3Ak+Ke6vafflj0gF7G9YXxsZcZFQH75OqZkS4pc ifLowQD/WBuZFvWZk7BdGHJiPKhTdPa9K5afpPULJAeJoWeDBNwdAJ26mSDlNEfi vC8/3F3eN0ZEKc7xgg101YHzQoz+DWxKTCdYIj/EWsLh+fVOhekW9Uhu4kBrsJf6 JQPJmZupTlRFPa1y+vUn+Lcu/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJiVPei6 +VQgOi9iyCERxQ/3cYNZMB8GA1UdIwQYMBaAFHHB6OBUBJrP2aohk68dSMbR0CXh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjhFMy81MzkzQzBFRTAw MjYxMUVDQTQwNjE2MTRDNEY5QUUwMi9jY0hvNEZRRW1zX1pxaUdUcngxSXh0SFFK ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NjSG80RlFFbXNfWnFpR1RyeDFJeHRIUUplRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjhFMy81MzkzQzBFRTAwMjYxMUVDQTQwNjE2MTRDNEY5QUUwMi9jY0hvNEZRRW1z X1pxaUdUcngxSXh0SFFKZUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBK4yKWV3Ph9j3m58MxZ5ej8yn2Vz49XK9ODuyay+4vuihwm4IzmEHl N8mWrYQ9MZiyyGK5TX1Kizfm0XR3EXi8GtuvzWqY3/554rThxDCZ1h6Aw0pKTSZo 2S0cvbnmIduWp3pM6zTLVtLPLf04jOUL9xevkmwm0vg8s8Xny+3DfjHW88RztYTm akyIgJMkzQf7xv+zpjimtA5lVUt6DtDBcJPbnPyuYAFb0uCqiTqB647/hKAv24WE fjlfDCzrG/4Vss0e7rGLGdAaSVSP70a9+EEof8Anx8GhT/feI/leEAeb/0iRLigg CA+3DX92D4UbDzvflQvDCbOiN4d/aRM5 -----END CERTIFICATE-----Generated at Sat Sep 6 15:09:06 2025 by rpki-client