$ rpki-client -vvf rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft File: v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft (raw, json) Hash identifier: XeORZtr6D06enBj06iQtFWpzbSL9AjXKGGjpTq/uU6E= Subject key identifier: 1A:59:D9:ED:B1:9A:A9:44:9D:50:25:4B:DA:B5:30:38:49:B9:9A:9B Authority key identifier: BF:74:E7:E6:14:D4:B2:2E:4B:7F:E4:0B:6B:EC:EF:D1:70:5A:CF:C1 Certificate issuer: /CN=A91324D4/serialNumber=BF74E7E614D4B22E4B7FE40B6BECEFD1705ACFC1 Certificate serial: 066E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft Manifest number: 0652 Signing time: Tue 16 Sep 2025 23:01:38 +0000 Manifest this update: Tue 16 Sep 2025 23:01:38 +0000 Manifest next update: Tue 23 Sep 2025 23:01:38 +0000 Files and hashes: 1: v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl (hash: iTDPsdrAZbKFdn0qQekdZyKmYOskos3BcmwH9dzJsL0=) 2: DD643EBCE00C11ED8C71C709C4F9AE02.roa (hash: tNDEmIxy5H25Y3zlO9rXFUC8hfA45BbpRsPK4rM8u7s=) 3: 8A88CCDC667911EE9D7DA167C4F9AE02.roa (hash: 9S57tdyd45wHLsInsTnI/GZly1K4hEDfcQJTNYuSOFQ=) 4: 236C6906A73F11EBA1751E33C4F9AE02.roa (hash: JyPetDHabfuANEcar/HU38MZvBtPYhC6A1gULHuakq8=) 5: 78345D00E01211ED8766DC5CC4F9AE02.roa (hash: CGANdjpj39CJWyCZVGb4EKEpCCBaXu9btf2XqDDOLY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Sep 2025 23:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1646 (0x66e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91324D4, serialNumber=BF74E7E614D4B22E4B7FE40B6BECEFD1705ACFC1 Validity Not Before: Sep 16 23:01:38 2025 GMT Not After : Sep 23 23:01:38 2025 GMT Subject: CN=68c9ec52-8263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a5:40:67:5b:e5:d3:3e:46:e9:b3:6d:e4:93: 76:eb:e6:18:b7:78:1d:eb:c5:e3:10:a4:80:ca:30: 9d:35:13:6f:0d:92:46:00:bd:8f:2d:e8:b1:2a:3a: 52:a4:22:b6:be:ee:7b:53:23:54:5e:72:28:42:9f: de:9e:18:d1:b1:db:c0:8b:80:a1:0f:8e:03:12:7b: fb:7a:97:ab:37:2a:47:e0:16:1b:3e:72:06:f7:c2: 20:0b:7b:69:60:a7:db:8e:c2:84:06:b9:24:86:9b: 1a:7c:6f:60:99:de:a1:cf:d2:22:07:5c:cb:ba:12: d9:c9:11:b2:2f:a2:40:04:67:6f:ad:a4:e4:6a:1a: 9f:f1:c1:0e:99:2f:72:9d:46:23:82:ea:1f:62:cc: 95:77:83:cc:6a:98:55:90:ba:11:04:5a:70:86:c9: 9a:3a:a4:26:8f:8c:93:25:ca:be:f5:fe:5e:4b:c2: e7:e8:bc:58:ab:94:c1:98:79:b6:60:95:77:8b:77: f7:a8:79:e5:69:eb:0b:25:e7:e9:66:98:d0:0c:b9: c3:e9:28:10:c1:d1:0f:e9:85:fb:a0:0b:ca:be:22: 89:a2:75:cd:b3:5f:f7:b5:17:67:36:c6:07:62:4c: f1:6f:e4:f6:e5:07:a7:25:81:c4:e8:52:1f:47:ab: 57:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:59:D9:ED:B1:9A:A9:44:9D:50:25:4B:DA:B5:30:38:49:B9:9A:9B X509v3 Authority Key Identifier: keyid:BF:74:E7:E6:14:D4:B2:2E:4B:7F:E4:0B:6B:EC:EF:D1:70:5A:CF:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:12:12:eb:dd:7a:8a:6a:41:4d:ea:29:5e:f3:5d:cb:af:4b: d7:48:5c:fb:13:d5:00:6d:30:52:37:9b:85:9e:57:3c:08:39: c1:d6:4d:96:4f:97:e0:ce:e8:45:c2:f9:6e:95:fc:0f:57:c1: f9:e8:82:af:6b:75:6a:43:78:92:3b:0c:91:a7:ad:df:6e:99: 81:13:56:6b:56:aa:07:3a:7e:47:92:a7:f0:ed:52:46:d5:76: 13:6d:7d:bd:d5:1b:ef:3d:e3:93:7f:e1:e2:96:b6:6c:01:c3: b4:9b:94:4a:9d:ef:66:56:5e:0d:7e:d3:95:1d:cc:56:57:02: 0e:b0:e1:d1:46:f7:88:07:b7:75:56:b9:de:f7:61:29:3d:22: 26:11:b7:26:2d:db:02:03:e7:eb:3c:5b:9b:6e:c1:86:d2:1f: 44:4c:b8:80:79:84:72:a4:84:47:3a:e4:15:f8:f1:b6:3d:4f: 41:e4:29:f5:4a:8b:f4:cc:ec:13:11:9f:f5:01:5e:c3:7a:00: 3d:ac:48:92:59:f9:66:96:75:b1:b8:0f:ee:18:46:12:83:6b: 60:5b:0f:cc:ca:06:64:f8:2f:ed:d3:9c:89:e9:34:00:c5:40: bf:51:62:fd:63:e0:32:d5:0d:ea:1a:77:e9:d9:c8:77:71:96: 7c:13:32:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI0RDQxMTAvBgNVBAUTKEJGNzRFN0U2MTRENEIyMkU0QjdGRTQwQjZCRUNFRkQx NzA1QUNGQzEwHhcNMjUwOTE2MjMwMTM4WhcNMjUwOTIzMjMwMTM4WjAYMRYwFAYD VQQDEw02OGM5ZWM1Mi04MjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxaVAZ1vl0z5G6bNt5JN26+YYt3gd68XjEKSAyjCdNRNvDZJGAL2PLeixKjpS pCK2vu57UyNUXnIoQp/enhjRsdvAi4ChD44DEnv7eperNypH4BYbPnIG98IgC3tp YKfbjsKEBrkkhpsafG9gmd6hz9IiB1zLuhLZyRGyL6JABGdvraTkahqf8cEOmS9y nUYjguofYsyVd4PMaphVkLoRBFpwhsmaOqQmj4yTJcq+9f5eS8Ln6LxYq5TBmHm2 YJV3i3f3qHnlaesLJefpZpjQDLnD6SgQwdEP6YX7oAvKviKJonXNs1/3tRdnNsYH Ykzxb+T25QenJYHE6FIfR6tXLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBpZ2e2x mqlEnVAlS9q1MDhJuZqbMB8GA1UdIwQYMBaAFL905+YU1LIuS3/kC2vs79FwWs/B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjRENC8xQTZFNzUxQ0E3 MUYxMUVCODQ4QUYwMzBDNEY5QUUwMi92M1RuNWhUVXNpNUxmLVFMYS16djBYQmF6 OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YzVG41aFRVc2k1TGYtUUxhLXp2MFhCYXo4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjRENC8xQTZFNzUxQ0E3MUYxMUVCODQ4QUYwMzBDNEY5QUUwMi92M1RuNWhUVXNp NUxmLVFMYS16djBYQmF6OEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZEhLr3XqKakFN6ile813Lr0vXSFz7E9UAbTBSN5uFnlc8CDnB1k2W T5fgzuhFwvlulfwPV8H56IKva3VqQ3iSOwyRp63fbpmBE1ZrVqoHOn5Hkqfw7VJG 1XYTbX291RvvPeOTf+HilrZsAcO0m5RKne9mVl4NftOVHcxWVwIOsOHRRveIB7d1 Vrne92EpPSImEbcmLdsCA+frPFubbsGG0h9ETLiAeYRypIRHOuQV+PG2PU9B5Cn1 Sov0zOwTEZ/1AV7DegA9rEiSWflmlnWxuA/uGEYSg2tgWw/MygZk+C/t05yJ6TQA xUC/UWL9Y+Ay1Q3qGnfp2ch3cZZ8EzLa -----END CERTIFICATE-----Generated at Thu Sep 18 20:20:30 2025 by rpki-client