$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft File: -Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft (raw, json) Hash identifier: pO1I2CF187m6hAfr6chZUs8hI6ms8CtmGOSxYnFyKRg= Subject key identifier: EA:D7:7F:B7:3A:C3:01:69:CB:72:E4:23:5F:03:43:A6:83:F9:7E:6C Authority key identifier: F9:2A:75:0B:52:47:94:D4:FB:BF:21:88:5B:DA:F6:D0:78:F1:E8:81 Certificate issuer: /CN=A91AA053/serialNumber=F92A750B524794D4FBBF21885BDAF6D078F1E881 Certificate serial: 075E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft Manifest number: 0758 Signing time: Wed 20 Aug 2025 21:44:14 +0000 Manifest this update: Wed 20 Aug 2025 21:44:13 +0000 Manifest next update: Wed 27 Aug 2025 21:44:13 +0000 Files and hashes: 1: -Sp1C1JHlNT7vyGIW9r20Hjx6IE.crl (hash: WONBJfMCnKtwoQ6d2powvyzRf/zBSqUqPEYFPIXbcIk=) 2: AD7A378C334411EB901EBB81C4F9AE02.roa (hash: eouLcn6xbW+smuD9alEZOIdw6JtJlwl4bM7bG8MTvHk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.crl rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 21:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1886 (0x75e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA053, serialNumber=F92A750B524794D4FBBF21885BDAF6D078F1E881 Validity Not Before: Aug 20 21:44:13 2025 GMT Not After : Aug 27 21:44:13 2025 GMT Subject: CN=68a641ad-77bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:87:10:b4:60:a8:ac:00:c7:d7:fe:bb:7e:c3: 74:c2:a2:f2:73:37:eb:4e:9f:12:53:ed:c5:8e:b2: 44:54:ac:19:0f:4a:17:4c:90:aa:59:82:87:73:25: a3:be:20:32:47:51:26:82:62:af:0f:fa:41:4b:28: 91:60:3b:36:59:1a:36:3e:4e:68:a1:4e:1d:56:9f: db:5b:83:86:89:c8:38:4a:98:01:38:b1:69:4a:85: 71:d7:e8:03:6c:a9:bf:70:a2:37:f3:75:f8:a2:74: 1a:69:78:4d:fa:dd:cb:ac:bb:28:b6:cd:04:fa:ed: b1:64:02:a4:e5:1f:3f:e6:ef:ae:11:41:8b:f2:3e: 42:59:98:1a:94:27:11:e1:03:4b:d1:21:c2:ac:9e: ae:88:c3:3b:87:6b:f8:7a:0a:b6:bc:fc:39:bf:60: 70:88:6c:f0:15:be:ae:df:a1:9b:d7:b3:b6:ba:ec: 2c:b7:06:e3:1d:a8:d1:88:1d:cf:39:f6:51:98:9d: b7:25:e9:be:1a:40:c1:78:d1:22:58:26:18:73:21: e2:24:41:54:5b:4d:07:4c:d0:30:95:11:b4:4f:b0: 45:77:81:69:81:33:82:03:4d:f1:39:f4:ec:03:4e: 7d:ea:34:36:29:a4:a1:1c:30:4b:70:f5:99:16:e0: 15:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:D7:7F:B7:3A:C3:01:69:CB:72:E4:23:5F:03:43:A6:83:F9:7E:6C X509v3 Authority Key Identifier: keyid:F9:2A:75:0B:52:47:94:D4:FB:BF:21:88:5B:DA:F6:D0:78:F1:E8:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:f9:28:c6:ea:4a:41:96:3a:5b:05:0d:cf:00:91:dd:65:28: b5:ad:f8:fd:dd:2e:4f:7d:72:79:99:ad:d6:df:aa:9f:aa:e5: f9:57:3a:56:52:45:f2:07:e1:04:13:e0:af:9d:c2:24:a7:45: 0e:ad:b4:08:6c:b6:d2:06:c0:8f:c1:ce:c5:97:de:79:9e:7f: 5d:df:1e:2b:e6:6e:76:21:2c:db:c4:e6:0f:22:20:46:56:87: a2:8d:76:77:60:9e:01:af:61:60:b9:85:6e:05:9f:25:20:cf: b7:73:8e:02:64:ef:a1:2b:cc:5e:4d:a1:c2:4d:cc:59:f8:90: 50:00:2d:60:95:bc:0d:49:3b:06:64:0f:c2:8f:33:28:89:3e: ba:80:b6:d2:05:41:a6:41:be:cc:e7:6a:73:65:d5:f2:6e:69: 93:a6:41:df:e4:a3:cd:08:2f:35:c5:ce:ce:ca:74:df:1a:ec: ec:31:1c:a8:e8:f9:2b:23:d8:15:50:f7:08:55:1e:4e:24:9c: 16:a7:cd:b2:bf:c0:bf:11:d4:a7:af:46:cf:64:e9:cb:e0:4b: 88:6a:3b:66:fd:78:dd:e1:93:9a:c4:00:35:e6:e1:85:80:1d: 77:42:18:4b:8c:10:c1:18:31:35:e4:45:28:80:42:c7:88:43: a9:5e:76:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB14wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUEwNTMxMTAvBgNVBAUTKEY5MkE3NTBCNTI0Nzk0RDRGQkJGMjE4ODVCREFGNkQw NzhGMUU4ODEwHhcNMjUwODIwMjE0NDEzWhcNMjUwODI3MjE0NDEzWjAYMRYwFAYD VQQDEw02OGE2NDFhZC03N2JkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoocQtGCorADH1/67fsN0wqLyczfrTp8SU+3FjrJEVKwZD0oXTJCqWYKHcyWj viAyR1EmgmKvD/pBSyiRYDs2WRo2Pk5ooU4dVp/bW4OGicg4SpgBOLFpSoVx1+gD bKm/cKI383X4onQaaXhN+t3LrLsots0E+u2xZAKk5R8/5u+uEUGL8j5CWZgalCcR 4QNL0SHCrJ6uiMM7h2v4egq2vPw5v2BwiGzwFb6u36Gb17O2uuwstwbjHajRiB3P OfZRmJ23Jem+GkDBeNEiWCYYcyHiJEFUW00HTNAwlRG0T7BFd4FpgTOCA03xOfTs A0596jQ2KaShHDBLcPWZFuAVWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOrXf7c6 wwFpy3LkI18DQ6aD+X5sMB8GA1UdIwQYMBaAFPkqdQtSR5TU+78hiFva9tB48eiB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTA1My9BRkI2QkY3NjMz NDMxMUVCQjUzNjVFODFDNEY5QUUwMi8tU3AxQzFKSGxOVDd2eUdJVzlyMjBIang2 SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1TcDFDMUpIbE5UN3Z5R0lXOXIyMEhqeDZJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTA1My9BRkI2QkY3NjMzNDMxMUVCQjUzNjVFODFDNEY5QUUwMi8tU3AxQzFKSGxO VDd2eUdJVzlyMjBIang2SUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAc+SjG6kpBljpbBQ3PAJHdZSi1rfj93S5PfXJ5ma3W36qfquX5VzpW UkXyB+EEE+CvncIkp0UOrbQIbLbSBsCPwc7Fl955nn9d3x4r5m52ISzbxOYPIiBG VoeijXZ3YJ4Br2FguYVuBZ8lIM+3c44CZO+hK8xeTaHCTcxZ+JBQAC1glbwNSTsG ZA/CjzMoiT66gLbSBUGmQb7M52pzZdXybmmTpkHf5KPNCC81xc7OynTfGuzsMRyo 6PkrI9gVUPcIVR5OJJwWp82yv8C/EdSnr0bPZOnL4EuIajtm/Xjd4ZOaxAA15uGF gB13QhhLjBDBGDE15EUogELHiEOpXnYz -----END CERTIFICATE-----Generated at Fri Aug 22 16:36:09 2025 by rpki-client