$ rpki-client -vvf rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft File: M_iOrx5M4PGhh31J75fA5_7cA5o.mft (raw, json) Hash identifier: IZrQA5705ttZBPX4jrqh+/0so7qpSn/McGnec2Rv5MI= Subject key identifier: FF:B1:16:69:82:AB:AC:CA:D1:20:6E:EC:86:E4:26:63:85:E0:F2:6B Authority key identifier: 33:F8:8E:AF:1E:4C:E0:F1:A1:87:7D:49:EF:97:C0:E7:FE:DC:03:9A Certificate issuer: /CN=A91758DF/serialNumber=33F88EAF1E4CE0F1A1877D49EF97C0E7FEDC039A Certificate serial: 04C3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft Manifest number: 04B8 Signing time: Thu 04 Sep 2025 20:58:49 +0000 Manifest this update: Thu 04 Sep 2025 20:58:48 +0000 Manifest next update: Thu 11 Sep 2025 20:58:48 +0000 Files and hashes: 1: M_iOrx5M4PGhh31J75fA5_7cA5o.crl (hash: 3pdPX5jH6VwBYbuV4nFp+/OovQ0Ro95HXAaufWmXmCU=) 2: E763AA76A3E811EC8665D621C4F9AE02.roa (hash: trLJfSwyymOYXghPy0PGh0ipgzAzEgwWMLJxE/C/bWY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.crl rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 20:58:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1219 (0x4c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91758DF, serialNumber=33F88EAF1E4CE0F1A1877D49EF97C0E7FEDC039A Validity Not Before: Sep 4 20:58:48 2025 GMT Not After : Sep 11 20:58:48 2025 GMT Subject: CN=68b9fd88-36d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:32:b2:06:05:cc:64:a1:90:f7:fa:81:fc:72: fb:4e:77:80:6c:88:bb:83:09:ca:83:56:c8:a6:d7: 55:7d:fc:a1:9a:d0:51:ab:55:ad:95:d6:d3:a2:22: 63:d0:97:99:84:e3:4c:37:25:49:df:83:07:0d:a1: 94:b5:a3:2c:a2:e0:02:c8:2a:39:62:0a:61:93:25: a7:de:f7:76:1c:16:7f:20:14:97:52:14:43:37:8e: fb:80:fd:01:3a:f8:ff:41:3b:bd:3f:c0:2d:5d:58: 07:c4:51:ad:7f:d0:35:57:c3:d9:91:1c:be:8d:84: a0:39:15:fb:e5:8c:80:b3:a0:2f:46:46:85:1e:28: 9f:fa:da:19:24:3e:5c:41:39:9e:58:31:67:8a:39: e4:19:01:7a:9c:d2:80:9b:79:83:2a:62:ed:cc:50: f7:6e:f3:bf:20:a5:e4:8f:40:d0:88:fd:71:51:71: 46:dd:1b:ab:a8:c3:a4:d5:8a:4c:d1:d3:f1:05:3a: 8b:0e:70:1d:b4:0b:c1:2d:b9:ef:2a:d6:8e:a5:70: 5c:9d:5a:49:94:a3:0a:50:1c:0c:56:c0:01:0e:22: 99:e4:6e:24:9e:2c:42:68:1b:f1:6c:11:06:23:16: 9a:51:6e:9b:75:b8:ad:2d:de:f9:d3:af:45:78:4d: 8d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:B1:16:69:82:AB:AC:CA:D1:20:6E:EC:86:E4:26:63:85:E0:F2:6B X509v3 Authority Key Identifier: keyid:33:F8:8E:AF:1E:4C:E0:F1:A1:87:7D:49:EF:97:C0:E7:FE:DC:03:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:33:e3:92:fd:35:fb:ce:2e:85:96:35:45:2c:bf:99:7e:dc: ef:a7:50:96:0b:7c:65:a3:c3:62:67:56:70:da:7b:f4:b1:09: 9a:58:0a:03:56:9d:8d:3c:87:a4:7c:8a:ba:8a:dc:d2:03:5d: e1:e7:99:0e:44:37:a0:62:61:83:72:16:41:e9:04:fd:72:1f: 4c:4c:0f:3c:b6:52:f1:1a:96:99:3e:33:0c:72:20:20:66:dc: d2:10:da:8a:02:d0:80:64:88:ad:fa:c9:f3:b2:ad:eb:b5:01: fc:50:e6:8c:8c:3b:a1:94:42:e2:46:a9:f3:a4:c4:46:09:30: 73:8d:5a:86:27:39:ee:72:4a:f7:9f:54:46:66:4a:71:53:f4: ac:6d:e2:f5:b4:51:c0:66:df:17:bf:83:37:0a:d3:e6:0f:3c: 22:aa:b4:ed:5f:bf:b3:78:0a:16:53:f9:74:ca:77:ac:0b:09: 19:46:2d:98:e0:ae:78:69:4b:b7:cf:f8:b5:8e:38:10:e8:2d: f6:91:e8:3c:19:52:33:25:9a:87:d5:e6:4e:51:1d:74:21:85: 6a:ad:70:10:cf:0b:24:4f:55:5c:58:85:44:db:bb:0e:f2:9e: d6:f9:c8:5e:aa:38:45:6d:37:a2:10:09:e4:85:a5:59:73:d2: 9c:4f:15:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU4REYxMTAvBgNVBAUTKDMzRjg4RUFGMUU0Q0UwRjFBMTg3N0Q0OUVGOTdDMEU3 RkVEQzAzOUEwHhcNMjUwOTA0MjA1ODQ4WhcNMjUwOTExMjA1ODQ4WjAYMRYwFAYD VQQDEw02OGI5ZmQ4OC0zNmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwDKyBgXMZKGQ9/qB/HL7TneAbIi7gwnKg1bIptdVffyhmtBRq1WtldbToiJj 0JeZhONMNyVJ34MHDaGUtaMsouACyCo5YgphkyWn3vd2HBZ/IBSXUhRDN477gP0B Ovj/QTu9P8AtXVgHxFGtf9A1V8PZkRy+jYSgORX75YyAs6AvRkaFHiif+toZJD5c QTmeWDFnijnkGQF6nNKAm3mDKmLtzFD3bvO/IKXkj0DQiP1xUXFG3RurqMOk1YpM 0dPxBTqLDnAdtAvBLbnvKtaOpXBcnVpJlKMKUBwMVsABDiKZ5G4knixCaBvxbBEG IxaaUW6bdbitLd75069FeE2NZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP+xFmmC q6zK0SBu7IbkJmOF4PJrMB8GA1UdIwQYMBaAFDP4jq8eTODxoYd9Se+XwOf+3AOa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NThERi84NjczNjA4MDQ3 RkUxMUVDOUNERjRCMEFDNEY5QUUwMi9NX2lPcng1TTRQR2hoMzFKNzVmQTVfN2NB NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01faU9yeDVNNFBHaGgzMUo3NWZBNV83Y0E1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NThERi84NjczNjA4MDQ3RkUxMUVDOUNERjRCMEFDNEY5QUUwMi9NX2lPcng1TTRQ R2hoMzFKNzVmQTVfN2NBNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCM+OS/TX7zi6FljVFLL+Zftzvp1CWC3xlo8NiZ1Zw2nv0sQmaWAoD Vp2NPIekfIq6itzSA13h55kORDegYmGDchZB6QT9ch9MTA88tlLxGpaZPjMMciAg ZtzSENqKAtCAZIit+snzsq3rtQH8UOaMjDuhlELiRqnzpMRGCTBzjVqGJznuckr3 n1RGZkpxU/SsbeL1tFHAZt8Xv4M3CtPmDzwiqrTtX7+zeAoWU/l0ynesCwkZRi2Y 4K54aUu3z/i1jjgQ6C32keg8GVIzJZqH1eZOUR10IYVqrXAQzwskT1VcWIVE27sO 8p7W+cheqjhFbTeiEAnkhaVZc9KcTxWy -----END CERTIFICATE-----Generated at Sat Sep 6 21:13:19 2025 by rpki-client