$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft File: p_mvKNJKQySTtLK6m1Vym8CXfMg.mft (raw, json) Hash identifier: 7IomV5FaTUrGcFMUq2xGQVqlUqGyECKde7adjjwZkOE= Subject key identifier: 42:BD:A9:ED:0E:68:F9:08:5A:E8:15:CA:C3:BD:C7:6E:52:8C:25:F5 Authority key identifier: A7:F9:AF:28:D2:4A:43:24:93:B4:B2:BA:9B:55:72:9B:C0:97:7C:C8 Certificate issuer: /CN=A91AF9A1/serialNumber=A7F9AF28D24A432493B4B2BA9B55729BC0977CC8 Certificate serial: 0D82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft Manifest number: 0D75 Signing time: Sun 24 Aug 2025 17:55:23 +0000 Manifest this update: Sun 24 Aug 2025 17:55:23 +0000 Manifest next update: Sun 31 Aug 2025 17:55:23 +0000 Files and hashes: 1: p_mvKNJKQySTtLK6m1Vym8CXfMg.crl (hash: x6sNX4PGmKmcsSirN8uoOQnypbgB8yPPpZ8eisWrMkI=) 2: 6DDABFB26CD511ED9EC9CF83C4F9AE02.roa (hash: SkBXJ2Cg15YTINlEK8cWxPkVEnzJM9DWZ0n7aJtqwN0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.crl rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 17:55:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3458 (0xd82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF9A1, serialNumber=A7F9AF28D24A432493B4B2BA9B55729BC0977CC8 Validity Not Before: Aug 24 17:55:23 2025 GMT Not After : Aug 31 17:55:23 2025 GMT Subject: CN=68ab520b-ef12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:91:02:49:93:27:42:81:fa:7f:f8:a8:74:13: f1:18:d3:45:22:5e:3c:a8:30:95:35:6f:d0:ba:39: da:ad:d8:ba:dc:22:7c:f4:93:e0:32:a6:af:bb:ac: d6:dc:3b:0f:c9:95:e8:c9:43:65:ee:83:c0:a7:fe: 41:7b:23:cd:94:64:d1:a8:c1:be:2f:1a:06:08:34: 72:0c:bc:51:2a:b5:23:3d:f3:cf:32:70:50:4c:63: 1b:2c:e2:1d:b8:5d:b9:40:6f:79:87:43:2c:f0:24: 5a:5f:13:4e:f6:3c:62:70:21:1d:af:a9:2e:ad:05: 58:9b:95:60:d4:f0:aa:b5:18:28:9e:55:ee:82:27: cc:c0:cd:bb:ce:5f:da:fb:19:45:b8:3a:e3:68:49: a8:d4:34:db:b6:d0:b9:26:7f:09:1b:94:2d:10:49: ad:8e:67:a1:29:45:1b:be:1c:2f:7b:89:29:f0:65: bd:5f:68:b7:47:d2:93:1e:d6:7c:75:87:fa:d6:bc: f4:ca:ad:a1:ae:50:3d:85:59:8e:e1:a6:df:80:2b: 88:44:15:27:f6:7e:3d:d2:0b:4e:22:0b:14:29:3b: a2:6a:0f:df:7a:a4:96:88:c1:ed:b7:45:36:e6:67: 01:b0:74:9f:b9:87:9e:17:47:1b:ee:90:08:01:31: dc:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:BD:A9:ED:0E:68:F9:08:5A:E8:15:CA:C3:BD:C7:6E:52:8C:25:F5 X509v3 Authority Key Identifier: keyid:A7:F9:AF:28:D2:4A:43:24:93:B4:B2:BA:9B:55:72:9B:C0:97:7C:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:e3:33:5f:a5:11:9d:7f:91:87:8a:6d:66:91:3c:90:87:69: 6d:6b:3b:3b:20:6c:7d:f9:de:c6:7e:f1:35:a6:e9:fa:a6:e3: 8d:08:01:92:8b:7a:32:4c:8e:4a:7d:d8:03:c6:55:71:7a:52: 9e:b6:16:6b:3c:31:7a:c1:69:45:2a:e0:4c:c9:ee:e5:b0:ad: 42:66:11:b8:26:bf:28:d6:e2:09:63:79:a2:03:b9:26:ab:88: 28:4a:63:f0:38:5c:4d:03:f0:ac:ca:f4:f9:ff:e1:ff:e9:07: 56:e5:7c:97:02:59:ff:9e:90:91:42:aa:6a:ee:7b:2b:77:7c: be:49:27:2f:b8:f3:5d:33:6f:b8:a7:45:bf:50:4e:2c:30:ca: 16:e5:14:18:7b:ee:78:d9:24:07:48:5a:b2:7b:25:a7:a6:7b: 72:68:8e:89:87:c4:7f:bb:dc:f7:38:bc:bd:47:27:47:47:9d: 24:ed:b8:4c:6a:f9:50:e5:05:02:90:6a:94:fe:d2:f5:91:a5: e0:7d:49:bc:99:8d:ea:05:5f:55:1e:ae:95:7e:58:91:b5:57: 51:86:dd:da:6d:51:43:c4:b2:98:97:b7:d3:a5:69:e4:39:1a: 6c:89:1a:02:d0:b4:05:aa:ad:06:e5:b7:62:8b:4b:18:47:f8: 51:41:d0:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY5QTExMTAvBgNVBAUTKEE3RjlBRjI4RDI0QTQzMjQ5M0I0QjJCQTlCNTU3MjlC QzA5NzdDQzgwHhcNMjUwODI0MTc1NTIzWhcNMjUwODMxMTc1NTIzWjAYMRYwFAYD VQQDEw02OGFiNTIwYi1lZjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5ECSZMnQoH6f/iodBPxGNNFIl48qDCVNW/Qujnardi63CJ89JPgMqavu6zW 3DsPyZXoyUNl7oPAp/5BeyPNlGTRqMG+LxoGCDRyDLxRKrUjPfPPMnBQTGMbLOId uF25QG95h0Ms8CRaXxNO9jxicCEdr6kurQVYm5Vg1PCqtRgonlXugifMwM27zl/a +xlFuDrjaEmo1DTbttC5Jn8JG5QtEEmtjmehKUUbvhwve4kp8GW9X2i3R9KTHtZ8 dYf61rz0yq2hrlA9hVmO4abfgCuIRBUn9n490gtOIgsUKTuiag/feqSWiMHtt0U2 5mcBsHSfuYeeF0cb7pAIATHchQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEK9qe0O aPkIWugVysO9x25SjCX1MB8GA1UdIwQYMBaAFKf5ryjSSkMkk7SyuptVcpvAl3zI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjlBMS9EMjYwMTVDQUQz N0UxMUU5OEExOTZCNjdDNEY5QUUwMi9wX212S05KS1F5U1R0TEs2bTFWeW04Q1hm TWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BfbXZLTkpLUXlTVHRMSzZtMVZ5bThDWGZNZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjlBMS9EMjYwMTVDQUQzN0UxMUU5OEExOTZCNjdDNEY5QUUwMi9wX212S05KS1F5 U1R0TEs2bTFWeW04Q1hmTWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAi4zNfpRGdf5GHim1mkTyQh2ltazs7IGx9+d7GfvE1pun6puONCAGS i3oyTI5KfdgDxlVxelKethZrPDF6wWlFKuBMye7lsK1CZhG4Jr8o1uIJY3miA7km q4goSmPwOFxNA/CsyvT5/+H/6QdW5XyXAln/npCRQqpq7nsrd3y+SScvuPNdM2+4 p0W/UE4sMMoW5RQYe+542SQHSFqyeyWnpntyaI6Jh8R/u9z3OLy9RydHR50k7bhM avlQ5QUCkGqU/tL1kaXgfUm8mY3qBV9VHq6VfliRtVdRht3abVFDxLKYl7fTpWnk ORpsiRoC0LQFqq0G5bdii0sYR/hRQdAz -----END CERTIFICATE-----Generated at Sun Aug 24 21:38:49 2025 by rpki-client