$ rpki-client -vvf rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft File: Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft (raw, json) Hash identifier: m0o0YxzJngjjDWjybi8GtRHmkamH6N3riYvorGjqcbk= Subject key identifier: 65:03:88:48:0F:B5:18:59:17:A3:8D:74:42:3D:EB:BB:3C:30:95:B7 Authority key identifier: 03:1E:29:F2:6E:78:32:81:B7:68:E8:91:08:53:14:4D:F1:EE:55:34 Certificate issuer: /CN=A91805BF/serialNumber=031E29F26E783281B768E8910853144DF1EE5534 Certificate serial: 07BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft Manifest number: 07B2 Signing time: Sat 06 Sep 2025 21:34:50 +0000 Manifest this update: Sat 06 Sep 2025 21:34:50 +0000 Manifest next update: Sat 13 Sep 2025 21:34:50 +0000 Files and hashes: 1: Ax4p8m54MoG3aOiRCFMUTfHuVTQ.crl (hash: 0Z7hpwHLjKg7WaVeqI4rtAzFXTvlYv2R0Z031BJyUIk=) 2: 67F4BD64519811F092842D60C4F9AE02.roa (hash: 88Jh5coMAVPJSUCnQAmSwbUiu0xU/3P6Y2QChRKwELo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.crl rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 21:34:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1979 (0x7bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91805BF, serialNumber=031E29F26E783281B768E8910853144DF1EE5534 Validity Not Before: Sep 6 21:34:50 2025 GMT Not After : Sep 13 21:34:50 2025 GMT Subject: CN=68bca8fa-ce5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:dd:cf:cf:36:6d:da:8f:2d:48:0d:8a:af:8e: 35:74:e7:10:8f:12:e4:56:6d:d3:a4:9c:4d:de:7c: 3f:67:82:2c:3a:6f:0a:23:4d:1c:cf:2e:af:e8:18: 24:97:ec:5d:49:11:34:8b:75:c9:99:0b:24:28:21: 36:7f:d2:91:5d:45:03:36:80:4b:ce:bc:a8:ca:ba: 75:c3:7e:24:2e:c4:52:96:08:bb:ed:6b:38:8a:5c: fc:32:d1:98:2a:e4:fd:bb:3a:e7:36:ff:26:9e:1a: 37:04:00:56:d7:18:d9:bf:ce:b8:5a:b4:6a:e1:61: b7:20:d2:16:1c:99:e6:88:df:f8:82:e9:7e:da:e4: 0b:bc:8d:24:06:06:a0:2c:40:0c:49:6a:67:d4:65: 43:94:90:be:17:06:2e:30:d3:9a:97:b6:83:91:4b: 8b:61:86:0f:89:b0:8c:45:84:e3:3c:44:eb:a9:a8: 64:47:73:17:b3:34:f2:63:d3:26:23:46:97:91:f5: f6:21:21:09:dd:8f:6a:83:b8:e1:b9:24:99:02:4c: f4:d3:1d:9f:9b:09:93:d4:88:a8:4a:76:68:d1:48: b0:4a:2e:c7:05:43:92:ef:8d:ad:e2:d8:0b:01:bf: 6f:31:d0:e8:df:a0:37:db:3d:18:a4:ea:b0:f1:fd: 09:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:03:88:48:0F:B5:18:59:17:A3:8D:74:42:3D:EB:BB:3C:30:95:B7 X509v3 Authority Key Identifier: keyid:03:1E:29:F2:6E:78:32:81:B7:68:E8:91:08:53:14:4D:F1:EE:55:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:57:98:3c:f8:cf:ef:50:dd:53:23:67:b6:6d:d1:10:8e:68: 0c:13:47:81:02:db:c2:83:5a:de:f5:9b:a9:46:5e:b9:de:a0: 0f:7f:de:e1:47:cc:d7:43:6d:82:e3:f5:8c:64:5c:f4:d1:43: 7b:e4:a6:88:7e:6b:53:8c:f1:a0:39:03:e5:ac:9c:9a:fc:01: 31:38:59:b0:48:10:0a:b1:60:0a:6b:be:ce:f4:97:36:98:cd: 02:78:4f:01:0a:cb:4a:a9:ab:27:5a:dc:01:9a:d9:27:2a:9a: 6b:d5:d5:06:eb:a1:2e:cb:d3:09:69:91:97:e1:90:2c:7d:8a: f8:ae:19:81:de:38:df:fe:b7:40:77:cb:18:fe:3f:51:6f:e0: d1:87:ba:67:94:c8:e6:55:00:c4:66:67:6e:b4:7e:9c:0a:28: a2:94:b5:24:e9:42:60:1b:1a:7d:07:01:9d:94:ad:48:6c:ab: 58:7f:c8:b7:b5:14:e7:19:82:b4:67:80:26:82:f6:68:19:a3: 3e:c7:95:45:3e:de:ab:69:9a:13:74:2f:ea:77:f7:3a:7a:42: 15:17:2e:dc:e6:4e:60:62:32:b9:b5:ad:5e:f3:6f:24:12:8d: c5:f0:be:a4:cd:b1:73:56:57:40:b1:c0:f3:24:b2:a6:37:0d: c7:12:eb:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA1QkYxMTAvBgNVBAUTKDAzMUUyOUYyNkU3ODMyODFCNzY4RTg5MTA4NTMxNDRE RjFFRTU1MzQwHhcNMjUwOTA2MjEzNDUwWhcNMjUwOTEzMjEzNDUwWjAYMRYwFAYD VQQDEw02OGJjYThmYS1jZTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxd3PzzZt2o8tSA2Kr441dOcQjxLkVm3TpJxN3nw/Z4IsOm8KI00czy6v6Bgk l+xdSRE0i3XJmQskKCE2f9KRXUUDNoBLzryoyrp1w34kLsRSlgi77Ws4ilz8MtGY KuT9uzrnNv8mnho3BABW1xjZv864WrRq4WG3INIWHJnmiN/4gul+2uQLvI0kBgag LEAMSWpn1GVDlJC+FwYuMNOal7aDkUuLYYYPibCMRYTjPETrqahkR3MXszTyY9Mm I0aXkfX2ISEJ3Y9qg7jhuSSZAkz00x2fmwmT1IioSnZo0UiwSi7HBUOS742t4tgL Ab9vMdDo36A32z0YpOqw8f0J4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGUDiEgP tRhZF6ONdEI967s8MJW3MB8GA1UdIwQYMBaAFAMeKfJueDKBt2jokQhTFE3x7lU0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDVCRi9GMTMzQkRBQzEz RjIxMUVCOUJFRkNENTFDNEY5QUUwMi9BeDRwOG01NE1vRzNhT2lSQ0ZNVVRmSHVW VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F4NHA4bTU0TW9HM2FPaVJDRk1VVGZIdVZUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDVCRi9GMTMzQkRBQzEzRjIxMUVCOUJFRkNENTFDNEY5QUUwMi9BeDRwOG01NE1v RzNhT2lSQ0ZNVVRmSHVWVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFV5g8+M/vUN1TI2e2bdEQjmgME0eBAtvCg1re9ZupRl653qAPf97h R8zXQ22C4/WMZFz00UN75KaIfmtTjPGgOQPlrJya/AExOFmwSBAKsWAKa77O9Jc2 mM0CeE8BCstKqasnWtwBmtknKppr1dUG66Euy9MJaZGX4ZAsfYr4rhmB3jjf/rdA d8sY/j9Rb+DRh7pnlMjmVQDEZmdutH6cCiiilLUk6UJgGxp9BwGdlK1IbKtYf8i3 tRTnGYK0Z4AmgvZoGaM+x5VFPt6raZoTdC/qd/c6ekIVFy7c5k5gYjK5ta1e828k Eo3F8L6kzbFzVldAscDzJLKmNw3HEuvd -----END CERTIFICATE-----Generated at Sun Sep 7 14:46:16 2025 by rpki-client