$ rpki-client -vvf rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.mft File: RxkmQvqTOGbRd55eOPq_Vscx-6c.mft (raw, json) Hash identifier: Prg7e6Ms41edt7O3MicFxv2Q1mjy+R06RE1SHcLKTEU= Subject key identifier: 9C:87:5E:EF:78:59:2A:ED:A4:CF:67:F3:EE:64:85:5D:AC:87:45:08 Authority key identifier: 47:19:26:42:FA:93:38:66:D1:77:9E:5E:38:FA:BF:56:C7:31:FB:A7 Certificate issuer: /CN=A91284F0/serialNumber=47192642FA933866D1779E5E38FABF56C731FBA7 Certificate serial: 0A4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxkmQvqTOGbRd55eOPq_Vscx-6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.mft Manifest number: 0A44 Signing time: Sun 24 Aug 2025 19:43:20 +0000 Manifest this update: Sun 24 Aug 2025 19:43:20 +0000 Manifest next update: Sun 31 Aug 2025 19:43:20 +0000 Files and hashes: 1: RxkmQvqTOGbRd55eOPq_Vscx-6c.crl (hash: 3+G4WzMrxOJsywTKiIvQNyEUcVtQfWbmAK4xyIm4eZw=) 2: 426DB414718E11EA9F6FA85CC4F9AE02.roa (hash: L7du7ZJlcmB2nN0ANGTgn5PQ8EaqXu+Bk+I6VvNhSKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.crl rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxkmQvqTOGbRd55eOPq_Vscx-6c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 19:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2634 (0xa4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91284F0, serialNumber=47192642FA933866D1779E5E38FABF56C731FBA7 Validity Not Before: Aug 24 19:43:20 2025 GMT Not After : Aug 31 19:43:20 2025 GMT Subject: CN=68ab6b58-a960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:6d:67:06:4d:40:89:96:7b:44:aa:e0:be:85: 8c:fb:cb:0a:7a:a8:5b:3f:33:c4:37:de:45:08:b6: c4:95:77:6d:bc:9d:bc:c7:9c:66:eb:92:c9:2d:b4: 3e:2e:fd:8f:4b:83:1d:65:89:3c:9d:29:2a:af:6e: 2e:d3:d1:b2:0d:5f:f3:7e:be:8a:94:95:9f:0d:08: d4:ef:47:d6:e6:10:b6:54:8b:41:69:1b:36:6a:12: 88:2c:16:2a:9e:24:8c:c0:63:8e:9e:4d:43:c2:7b: a2:e6:82:9e:75:12:2b:b6:76:85:f4:47:01:a8:40: 81:70:49:40:86:37:ac:48:f2:6d:98:eb:e6:8b:8c: 92:84:9e:2a:e0:70:28:97:3a:ba:c9:f2:d4:da:2c: 88:27:ca:80:3d:08:2b:50:cc:b3:08:5b:44:fa:0a: 3d:63:9f:fa:2d:a3:ff:16:d5:dc:e3:db:f7:bd:b5: ea:89:24:43:ba:67:8a:e6:cb:71:c2:82:69:c3:89: a8:53:eb:0d:d4:6a:dc:85:75:a2:43:83:5a:ec:20: 9e:b1:d6:2b:b9:5c:49:6f:7a:fe:e2:f1:de:33:b9: 5b:ba:d1:ae:a4:06:f9:0e:e4:78:65:08:52:2e:25: 16:6c:00:00:78:ff:7c:3c:54:23:dd:fc:c3:0b:3f: 8c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:87:5E:EF:78:59:2A:ED:A4:CF:67:F3:EE:64:85:5D:AC:87:45:08 X509v3 Authority Key Identifier: keyid:47:19:26:42:FA:93:38:66:D1:77:9E:5E:38:FA:BF:56:C7:31:FB:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxkmQvqTOGbRd55eOPq_Vscx-6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:35:74:26:16:46:a3:83:8c:25:32:fc:8b:d0:d3:4b:40:ff: c6:ca:0f:0d:c8:7e:a6:ed:e6:5c:58:3f:35:b9:53:77:80:23: 6c:84:69:60:3e:06:e6:88:5f:c0:92:7f:ca:d1:03:f7:4b:20: 04:92:c9:70:7a:06:d4:75:49:a3:90:99:d4:af:e5:3a:12:e0: b5:ae:94:1f:cb:e2:22:4c:c5:f0:5e:3b:bb:fb:4f:7e:07:64: 48:88:e9:34:ef:b5:f7:61:4c:8d:0a:e0:97:2e:34:74:8f:ba: ef:2c:da:fc:49:00:d6:5c:1a:19:b0:3d:29:50:eb:28:0b:fb: 24:52:4a:ca:92:bd:ab:f4:64:40:54:ec:45:89:d1:f0:9d:e4: c6:c5:14:29:b1:7b:c5:d6:7c:eb:32:c7:25:c1:e1:9a:1a:38: 8e:7d:ec:80:8d:68:cc:72:51:39:e4:49:e4:98:4c:21:d5:c2: 5d:ea:2d:b3:6f:48:50:db:ad:d7:7e:16:a5:57:7d:6b:01:f8: 6f:14:f5:a1:14:16:e9:6e:95:01:3a:0f:5a:b7:a2:2c:7d:7d: 4f:ec:db:c4:79:4e:83:d2:d6:6c:57:c6:f8:d5:2c:83:78:02: b6:d6:d7:e4:dd:38:fe:40:47:31:06:b8:bf:1d:a0:31:b7:08: 69:bf:46:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg0RjAxMTAvBgNVBAUTKDQ3MTkyNjQyRkE5MzM4NjZEMTc3OUU1RTM4RkFCRjU2 QzczMUZCQTcwHhcNMjUwODI0MTk0MzIwWhcNMjUwODMxMTk0MzIwWjAYMRYwFAYD VQQDEw02OGFiNmI1OC1hOTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7W1nBk1AiZZ7RKrgvoWM+8sKeqhbPzPEN95FCLbElXdtvJ28x5xm65LJLbQ+ Lv2PS4MdZYk8nSkqr24u09GyDV/zfr6KlJWfDQjU70fW5hC2VItBaRs2ahKILBYq niSMwGOOnk1Dwnui5oKedRIrtnaF9EcBqECBcElAhjesSPJtmOvmi4yShJ4q4HAo lzq6yfLU2iyIJ8qAPQgrUMyzCFtE+go9Y5/6LaP/FtXc49v3vbXqiSRDumeK5stx woJpw4moU+sN1GrchXWiQ4Na7CCesdYruVxJb3r+4vHeM7lbutGupAb5DuR4ZQhS LiUWbAAAeP98PFQj3fzDCz+MuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJyHXu94 WSrtpM9n8+5khV2sh0UIMB8GA1UdIwQYMBaAFEcZJkL6kzhm0XeeXjj6v1bHMfun MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODRGMC80NkU2N0IzMDcx OEQxMUVBQUY5MjgxNUJDNEY5QUUwMi9SeGttUXZxVE9HYlJkNTVlT1BxX1ZzY3gt NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J4a21RdnFUT0diUmQ1NWVPUHFfVnNjeC02Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODRGMC80NkU2N0IzMDcxOEQxMUVBQUY5MjgxNUJDNEY5QUUwMi9SeGttUXZxVE9H YlJkNTVlT1BxX1ZzY3gtNmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFNXQmFkajg4wlMvyL0NNLQP/Gyg8NyH6m7eZcWD81uVN3gCNshGlg PgbmiF/Akn/K0QP3SyAEkslwegbUdUmjkJnUr+U6EuC1rpQfy+IiTMXwXju7+09+ B2RIiOk077X3YUyNCuCXLjR0j7rvLNr8SQDWXBoZsD0pUOsoC/skUkrKkr2r9GRA VOxFidHwneTGxRQpsXvF1nzrMsclweGaGjiOfeyAjWjMclE55EnkmEwh1cJd6i2z b0hQ263XfhalV31rAfhvFPWhFBbpbpUBOg9at6IsfX1P7NvEeU6D0tZsV8b41SyD eAK21tfk3Tj+QEcxBri/HaAxtwhpv0Y2 -----END CERTIFICATE-----Generated at Sun Aug 24 21:33:14 2025 by rpki-client