$ rpki-client -vvf rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft File: 1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft (raw, json) Hash identifier: 2r6rz1jcHe6GL/f0+ZyUESnfOxIMKqwSvpYXsI0Jd94= Subject key identifier: 52:D1:3D:48:5F:BD:49:80:58:85:14:F6:E6:EC:79:D6:87:97:2B:D8 Authority key identifier: D5:BC:79:0A:B0:37:B8:7D:DF:63:93:D7:41:36:BF:07:7A:1D:29:9D Certificate issuer: /CN=A91174ED/serialNumber=D5BC790AB037B87DDF6393D74136BF077A1D299D Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bx5CrA3uH3fY5PXQTa_B3odKZ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft Manifest number: 28 Signing time: Wed 17 Sep 2025 08:32:06 +0000 Manifest this update: Wed 17 Sep 2025 08:32:05 +0000 Manifest next update: Wed 24 Sep 2025 08:32:05 +0000 Files and hashes: 1: 1bx5CrA3uH3fY5PXQTa_B3odKZ0.crl (hash: VSIknFOCnFKxJTPP+JIENAFHV716ILU3+Jx+2PFQAfQ=) 2: FE892768620711F0BE75F534C4F9AE02.roa (hash: lIvntJbQ3iLGqhEBLcowTkqSPPrJfP4D0bbkG1Wfg+g=) 3: E7BD97EE5D9311F0AFF08443C4F9AE02.roa (hash: 945+Vkteqw/NwLcrpePu74zLw2XjOxBSUFg1u4xLkkU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.crl rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bx5CrA3uH3fY5PXQTa_B3odKZ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:32:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91174ED, serialNumber=D5BC790AB037B87DDF6393D74136BF077A1D299D Validity Not Before: Sep 17 08:32:05 2025 GMT Not After : Sep 24 08:32:05 2025 GMT Subject: CN=68ca7206-fce1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c8:db:71:be:6c:c6:2a:44:42:ca:20:93:7a: ab:d3:78:97:6a:c9:72:81:3f:53:95:a0:08:88:a1: 74:de:10:8e:a0:24:08:15:5f:7c:2b:83:52:fd:45: 35:cb:01:68:da:0a:29:be:34:0c:38:52:60:1f:ee: e0:2d:24:77:46:1d:51:3c:57:9c:86:7a:94:e1:ff: b9:23:6b:80:14:95:9f:ca:b1:52:27:2c:8e:96:35: c1:c1:b4:1c:aa:06:33:13:7c:47:7d:a0:a8:97:8b: 2c:ec:6e:5e:c5:61:0f:a5:16:ec:3b:ea:cb:dc:25: 46:59:94:22:cc:ea:4f:28:a4:24:44:94:4d:80:d8: 63:70:a2:a5:61:11:16:71:79:87:22:6a:aa:34:55: 41:6a:64:07:e2:c2:f4:85:e6:74:15:a9:bc:e8:28: 77:98:a4:ad:16:a7:14:8d:57:72:6b:46:75:ac:4b: 7b:fc:93:3c:57:2e:ae:5a:65:cf:42:ca:ff:7c:eb: ef:89:ca:36:67:2e:e7:5f:c3:8f:f8:58:a4:7b:ca: b9:9e:e6:2b:d5:39:f0:db:0f:3a:da:a6:5c:32:c8: a1:00:c4:1e:84:ef:be:b1:b0:14:b6:23:c1:8b:f0: a7:3d:f8:06:05:b7:6b:ae:52:1a:a7:9e:be:5d:98: 07:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:D1:3D:48:5F:BD:49:80:58:85:14:F6:E6:EC:79:D6:87:97:2B:D8 X509v3 Authority Key Identifier: keyid:D5:BC:79:0A:B0:37:B8:7D:DF:63:93:D7:41:36:BF:07:7A:1D:29:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bx5CrA3uH3fY5PXQTa_B3odKZ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:f6:bf:1a:9a:ba:5f:56:f8:e0:b6:da:8e:4c:56:63:0a:ff: 2b:08:ed:ca:07:4f:21:d3:8e:ac:7f:f7:6e:3d:39:00:1f:7e: 41:33:88:6c:48:cb:aa:f9:6a:cd:14:4e:98:8f:16:bc:06:a7: 45:0d:ff:f2:25:60:2c:25:84:5c:64:b0:f1:fc:e7:61:8d:9b: 2a:29:01:f5:62:64:ab:53:51:f6:5b:8f:a6:a8:83:b6:09:d7: b1:89:0a:85:f5:ee:ea:65:86:36:9d:25:4b:a7:b0:7e:24:53: eb:ec:8a:ca:b2:a4:cf:d7:58:06:99:20:ef:c1:77:12:ae:b6: 1b:46:0c:4a:fc:06:05:0b:c4:ed:29:99:50:e4:0a:7c:e3:6b: b2:61:d7:8a:91:ee:0c:8a:48:11:87:27:6a:ff:8d:5e:cf:c7: 93:04:3b:25:d9:01:6f:2e:e7:b9:64:6e:62:0e:a4:56:60:0f: a9:29:95:bd:53:d2:5d:a1:0d:2b:7d:61:e7:0e:71:68:dd:53: a0:43:dd:ab:88:0f:eb:63:39:3a:06:08:5c:8c:ad:0f:63:17: e1:f0:b3:9d:9c:46:27:6f:b1:c5:04:ee:4b:d5:b6:72:8a:4c: cb:bf:b6:69:b8:97:9a:dc:21:a0:09:87:f4:bf:39:2c:bd:a7: cd:34:90:06 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NzRFRDExMC8GA1UEBRMoRDVCQzc5MEFCMDM3Qjg3RERGNjM5M0Q3NDEzNkJGMDc3 QTFEMjk5RDAeFw0yNTA5MTcwODMyMDVaFw0yNTA5MjQwODMyMDVaMBgxFjAUBgNV BAMTDTY4Y2E3MjA2LWZjZTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsyNtxvmzGKkRCyiCTeqvTeJdqyXKBP1OVoAiIoXTeEI6gJAgVX3wrg1L9RTXL AWjaCim+NAw4UmAf7uAtJHdGHVE8V5yGepTh/7kja4AUlZ/KsVInLI6WNcHBtByq BjMTfEd9oKiXiyzsbl7FYQ+lFuw76svcJUZZlCLM6k8opCRElE2A2GNwoqVhERZx eYciaqo0VUFqZAfiwvSF5nQVqbzoKHeYpK0WpxSNV3JrRnWsS3v8kzxXLq5aZc9C yv986++JyjZnLudfw4/4WKR7yrme5ivVOfDbDzraplwyyKEAxB6E776xsBS2I8GL 8Kc9+AYFt2uuUhqnnr5dmAebAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUtE9SF+9 SYBYhRT25ux51oeXK9gwHwYDVR0jBBgwFoAU1bx5CrA3uH3fY5PXQTa/B3odKZ0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3NEVELzE0MzU4MTYyNUQ5 MjExRjA5MERGMzgzNkM0RjlBRTAyLzFieDVDckEzdUgzZlk1UFhRVGFfQjNvZEta MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMWJ4NUNyQTN1SDNmWTVQWFFUYV9CM29kS1owLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3 NEVELzE0MzU4MTYyNUQ5MjExRjA5MERGMzgzNkM0RjlBRTAyLzFieDVDckEzdUgz Zlk1UFhRVGFfQjNvZEtaMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACT2vxqaul9W+OC22o5MVmMK/ysI7coHTyHTjqx/9249OQAffkEziGxI y6r5as0UTpiPFrwGp0UN//IlYCwlhFxksPH852GNmyopAfViZKtTUfZbj6aog7YJ 17GJCoX17uplhjadJUunsH4kU+vsisqypM/XWAaZIO/BdxKuthtGDEr8BgULxO0p mVDkCnzja7Jh14qR7gyKSBGHJ2r/jV7Px5MEOyXZAW8u57lkbmIOpFZgD6kplb1T 0l2hDSt9YecOcWjdU6BD3auID+tjOToGCFyMrQ9jF+Hws52cRidvscUE7kvVtnKK TMu/tmm4l5rcIaAJh/S/OSy9p800kAY= -----END CERTIFICATE-----Generated at Fri Sep 19 08:51:51 2025 by rpki-client