$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.mft File: a81u0JpBbl_k7lre97FQ8syr6To.mft (raw, json) Hash identifier: 5f0w7rQWH7kKOr8mbrUqNvuCDWNqq1vKe14XcnwF9RE= Subject key identifier: CE:72:F1:39:41:B3:4F:C8:13:B3:48:8E:93:E7:8A:8C:C4:DE:4F:49 Authority key identifier: 6B:CD:6E:D0:9A:41:6E:5F:E4:EE:5A:DE:F7:B1:50:F2:CC:AB:E9:3A Certificate issuer: /CN=A91ADF12/serialNumber=6BCD6ED09A416E5FE4EE5ADEF7B150F2CCABE93A Certificate serial: 0BD2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a81u0JpBbl_k7lre97FQ8syr6To.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.mft Manifest number: 0BC4 Signing time: Mon 08 Sep 2025 18:56:51 +0000 Manifest this update: Mon 08 Sep 2025 18:56:50 +0000 Manifest next update: Mon 15 Sep 2025 18:56:50 +0000 Files and hashes: 1: a81u0JpBbl_k7lre97FQ8syr6To.crl (hash: Q/tck767xLaDd8n1yml+zt/iHxwOP533CWjoW5dGvno=) 2: 84B6E12A312911EEBE440C7FC4F9AE02.roa (hash: i5Nf027GIvkDTNfygplCNBH1Tfi56MOYYL7UyT8iFDw=) 3: 777A546212E511EFB071A31CC4F9AE02.roa (hash: yxZWVQX9GhcgWV+yYaDkt3bP+W4v1/S4wiH9fdwmAXw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.crl rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a81u0JpBbl_k7lre97FQ8syr6To.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 18:56:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3026 (0xbd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADF12, serialNumber=6BCD6ED09A416E5FE4EE5ADEF7B150F2CCABE93A Validity Not Before: Sep 8 18:56:50 2025 GMT Not After : Sep 15 18:56:50 2025 GMT Subject: CN=68bf26f2-a167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3e:f9:57:01:d4:6a:60:75:c1:0b:10:72:69: 98:60:7e:5e:b0:58:f2:00:8a:c7:af:71:3a:b1:00: ef:69:54:69:f7:e5:64:9d:99:f3:c7:1a:9c:0d:63: 2e:b6:9e:c3:69:54:75:4c:e6:e0:78:e5:2e:5a:3e: 49:00:98:e1:be:40:fe:1a:88:7e:e5:a9:4b:a4:b9: 40:8f:55:95:c0:73:bc:7c:eb:67:0b:bf:e2:5e:f4: 94:c4:4e:29:bb:2d:61:2a:64:2a:70:e0:c4:4d:b0: 5f:0a:0a:52:fa:10:f5:5d:b0:b8:b5:fb:58:75:65: 23:74:90:f6:3a:fb:cd:c6:8e:14:61:b7:ac:4f:27: 09:dc:2a:a2:44:5a:3a:2b:9a:67:f8:22:79:1b:53: 2e:ae:35:24:e5:f4:fc:b3:0d:a9:f9:a7:3b:0f:f5: 09:00:b7:63:24:29:72:03:8a:a1:dc:3d:cb:24:c5: 69:18:79:a8:e6:6c:d2:d3:44:59:78:3c:82:67:41: 6e:3f:01:af:ff:68:07:4a:b0:2f:41:4c:1d:67:32: 68:93:ce:0a:4c:05:6a:89:b3:f3:ae:42:e2:8c:12: 70:96:66:92:32:94:5a:57:75:b9:17:f8:19:e4:95: db:8d:65:69:0e:54:51:23:cc:14:e2:92:f1:e0:cb: e9:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:72:F1:39:41:B3:4F:C8:13:B3:48:8E:93:E7:8A:8C:C4:DE:4F:49 X509v3 Authority Key Identifier: keyid:6B:CD:6E:D0:9A:41:6E:5F:E4:EE:5A:DE:F7:B1:50:F2:CC:AB:E9:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a81u0JpBbl_k7lre97FQ8syr6To.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:2a:9f:44:98:e6:2f:e1:58:f2:55:1c:15:71:27:bf:66:45: d6:4b:24:32:8d:15:5b:f2:aa:e9:f0:af:bc:8f:ba:83:05:ff: ee:fa:e2:de:5d:29:c5:c1:c9:2d:0a:c0:93:72:f3:0c:f0:e5: 7e:ef:0a:5f:9f:55:ba:b6:fe:3e:77:79:3d:5a:74:fb:bb:4a: a1:e4:0e:5f:aa:97:4d:36:24:7d:56:a7:d3:62:4a:59:f2:6a: eb:9a:15:1e:29:00:52:b1:17:63:e4:5a:ec:fd:de:c5:8d:27: c1:ee:23:ae:45:22:19:3c:ea:2b:ec:f6:0e:65:b2:3e:2e:dd: 74:4a:96:1c:07:1a:13:df:42:39:a2:d1:0a:dc:67:1e:b8:eb: 11:fc:b0:7e:d1:b7:c8:de:a1:86:8d:8d:f5:bd:15:e3:bb:93: fe:ca:e7:77:c7:7c:f0:68:5f:5c:3d:da:df:e6:9b:65:53:6e: 50:93:c6:bf:40:b3:c3:29:b0:01:12:cd:ef:07:8e:17:f7:d2: bc:b8:88:b6:c3:c2:03:42:dc:32:63:5f:8e:b4:ce:06:52:54: bb:33:bc:ef:30:da:ca:6b:67:a6:94:3c:87:a1:a0:17:5b:de: 55:81:ce:ef:82:26:c6:8a:c6:5f:94:4c:2b:b1:83:81:b1:d4: f3:03:c5:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURGMTIxMTAvBgNVBAUTKDZCQ0Q2RUQwOUE0MTZFNUZFNEVFNUFERUY3QjE1MEYy Q0NBQkU5M0EwHhcNMjUwOTA4MTg1NjUwWhcNMjUwOTE1MTg1NjUwWjAYMRYwFAYD VQQDEw02OGJmMjZmMi1hMTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuD75VwHUamB1wQsQcmmYYH5esFjyAIrHr3E6sQDvaVRp9+VknZnzxxqcDWMu tp7DaVR1TObgeOUuWj5JAJjhvkD+Goh+5alLpLlAj1WVwHO8fOtnC7/iXvSUxE4p uy1hKmQqcODETbBfCgpS+hD1XbC4tftYdWUjdJD2OvvNxo4UYbesTycJ3CqiRFo6 K5pn+CJ5G1MurjUk5fT8sw2p+ac7D/UJALdjJClyA4qh3D3LJMVpGHmo5mzS00RZ eDyCZ0FuPwGv/2gHSrAvQUwdZzJok84KTAVqibPzrkLijBJwlmaSMpRaV3W5F/gZ 5JXbjWVpDlRRI8wU4pLx4MvpFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM5y8TlB s0/IE7NIjpPniozE3k9JMB8GA1UdIwQYMBaAFGvNbtCaQW5f5O5a3vexUPLMq+k6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREYxMi9DRkE1MjU5QTI4 QzAxMUVBQUFFMjRFNDhDNEY5QUUwMi9hODF1MEpwQmJsX2s3bHJlOTdGUThzeXI2 VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E4MXUwSnBCYmxfazdscmU5N0ZROHN5cjZUby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REYxMi9DRkE1MjU5QTI4QzAxMUVBQUFFMjRFNDhDNEY5QUUwMi9hODF1MEpwQmJs X2s3bHJlOTdGUThzeXI2VG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7Kp9EmOYv4VjyVRwVcSe/ZkXWSyQyjRVb8qrp8K+8j7qDBf/u+uLe XSnFwcktCsCTcvMM8OV+7wpfn1W6tv4+d3k9WnT7u0qh5A5fqpdNNiR9VqfTYkpZ 8mrrmhUeKQBSsRdj5Frs/d7FjSfB7iOuRSIZPOor7PYOZbI+Lt10SpYcBxoT30I5 otEK3GceuOsR/LB+0bfI3qGGjY31vRXju5P+yud3x3zwaF9cPdrf5ptlU25Qk8a/ QLPDKbABEs3vB44X99K8uIi2w8IDQtwyY1+OtM4GUlS7M7zvMNrKa2emlDyHoaAX W95Vgc7vgibGisZflEwrsYOBsdTzA8W0 -----END CERTIFICATE-----Generated at Tue Sep 9 17:26:40 2025 by rpki-client