$ rpki-client -vvf rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft File: XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft (raw, json) Hash identifier: vpl2aPiX8xlOMspy5bkpdZADOyN7g0wGdUFGlgG6rZs= Subject key identifier: 04:59:9A:4E:38:99:E1:06:61:30:E5:13:B2:86:FD:28:E2:4A:A0:3A Authority key identifier: 5C:36:84:39:CB:C5:F5:A4:57:15:D6:47:6B:EA:A6:68:6D:09:51:B1 Certificate issuer: /CN=A91B23B3/serialNumber=5C368439CBC5F5A45715D6476BEAA6686D0951B1 Certificate serial: 09E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft Manifest number: 09C4 Signing time: Sat 06 Sep 2025 20:12:58 +0000 Manifest this update: Sat 06 Sep 2025 20:12:58 +0000 Manifest next update: Sat 13 Sep 2025 20:12:58 +0000 Files and hashes: 1: XDaEOcvF9aRXFdZHa-qmaG0JUbE.crl (hash: Hm2IjWd8b87MU7rHK3Zja33zzzFHbV0qfd4F9Ylq3g4=) 2: 3818D9A09A9011EFB14F1729C4F9AE02.roa (hash: XjGmTLSTgsODpSCPTs5pCmUy9NRCIk0AE9Vg9MOaVdU=) 3: 2109DFF2EFBB11EC95A1FD0DC4F9AE02.roa (hash: 2XvjAuC6Hirm3HWv88SHGUEeMWi9XgXjvYQVlXNxZVI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.crl rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 20:12:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2535 (0x9e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B23B3, serialNumber=5C368439CBC5F5A45715D6476BEAA6686D0951B1 Validity Not Before: Sep 6 20:12:58 2025 GMT Not After : Sep 13 20:12:58 2025 GMT Subject: CN=68bc95ca-d6ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:95:c5:0b:89:c7:95:d9:40:c4:ba:02:6b:4f: f2:f8:1b:1b:e2:6f:c2:ca:08:6b:e3:30:46:56:fe: dd:59:7c:4a:50:a4:db:25:a3:cf:59:e4:75:0c:98: 63:28:4b:dc:f5:a7:89:22:05:08:59:dd:0c:56:cf: e6:bc:1f:c8:5f:16:c5:7e:5f:c2:6e:41:60:d6:d7: 12:f0:cf:bf:da:6b:ea:24:c9:46:93:95:04:0f:f0: 75:19:ed:45:8b:62:26:57:eb:36:90:9f:b7:5f:07: 52:41:01:05:f9:f7:2e:aa:db:9d:46:c8:bf:63:0c: 6c:12:8e:15:69:aa:9d:dc:94:bf:41:bd:09:07:64: bc:45:f8:da:17:b9:09:62:9a:46:ee:34:ab:6b:ce: 94:a6:7e:b0:b9:03:56:eb:30:b6:25:6e:f8:a3:f9: 4e:83:42:fc:2b:49:cc:c1:a9:82:63:77:62:05:ef: c0:f7:78:5a:19:8f:d0:02:f8:75:ab:1b:d4:61:98: 84:c1:01:c6:95:a5:00:bb:50:be:d4:31:f9:8a:46: c8:88:34:0d:14:91:27:01:d4:bb:7d:33:2d:a8:43: 16:9f:bc:df:77:f7:6d:8e:c0:6a:42:35:41:3f:d5: 6c:97:ab:ce:df:a7:43:92:dd:4d:2b:a5:b6:89:e0: 78:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:59:9A:4E:38:99:E1:06:61:30:E5:13:B2:86:FD:28:E2:4A:A0:3A X509v3 Authority Key Identifier: keyid:5C:36:84:39:CB:C5:F5:A4:57:15:D6:47:6B:EA:A6:68:6D:09:51:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:0f:45:f6:d2:1c:70:3a:38:a8:7f:7e:79:bf:1c:0f:d5:94: b4:a7:80:a0:ae:57:7b:c4:54:60:ae:68:66:9b:4c:be:b1:22: 15:04:61:c7:fc:d9:26:e9:1e:76:3e:93:0e:4d:56:9f:b5:be: 08:64:d5:72:e2:87:78:dd:c9:72:d6:38:c3:50:f4:3a:24:04: 08:cb:a3:31:20:f0:57:1d:d1:3b:aa:d3:c0:a2:02:74:a0:3a: b8:74:d7:df:51:2d:fc:32:f5:7d:03:7d:a5:20:4b:92:58:66: 65:55:2d:c0:a1:85:e2:81:39:49:b8:fa:26:ac:95:fd:0a:6e: 6e:bd:e0:e4:d4:ae:15:55:ae:0e:7d:65:72:f1:39:7f:02:c2: 46:b5:df:5b:ea:24:21:fd:f3:35:88:f9:4b:5a:b1:c3:d3:fb: 1c:3b:63:4c:7a:7b:03:76:15:41:5f:33:a6:9d:9c:31:dd:86: 94:d1:d0:4e:89:39:22:ec:4f:e1:77:53:2e:11:9e:89:09:b2: 86:07:71:4e:ce:ec:54:e6:cb:b6:4e:45:7c:af:29:8c:ee:06: 42:4d:6c:9e:fc:8a:c7:8b:c7:cc:e1:f8:e1:b2:3c:9f:bb:fd: f5:cd:6b:db:60:34:26:21:5f:d6:a7:82:1e:6c:c3:84:b2:4a: 22:b4:f7:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjIzQjMxMTAvBgNVBAUTKDVDMzY4NDM5Q0JDNUY1QTQ1NzE1RDY0NzZCRUFBNjY4 NkQwOTUxQjEwHhcNMjUwOTA2MjAxMjU4WhcNMjUwOTEzMjAxMjU4WjAYMRYwFAYD VQQDEw02OGJjOTVjYS1kNmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA05XFC4nHldlAxLoCa0/y+Bsb4m/Cyghr4zBGVv7dWXxKUKTbJaPPWeR1DJhj KEvc9aeJIgUIWd0MVs/mvB/IXxbFfl/CbkFg1tcS8M+/2mvqJMlGk5UED/B1Ge1F i2ImV+s2kJ+3XwdSQQEF+fcuqtudRsi/YwxsEo4Vaaqd3JS/Qb0JB2S8RfjaF7kJ YppG7jSra86Upn6wuQNW6zC2JW74o/lOg0L8K0nMwamCY3diBe/A93haGY/QAvh1 qxvUYZiEwQHGlaUAu1C+1DH5ikbIiDQNFJEnAdS7fTMtqEMWn7zfd/dtjsBqQjVB P9Vsl6vO36dDkt1NK6W2ieB4ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFARZmk44 meEGYTDlE7KG/SjiSqA6MB8GA1UdIwQYMBaAFFw2hDnLxfWkVxXWR2vqpmhtCVGx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjNCMy9FNjQ2NUExMDhF OTgxMUVBQUI1OEJEM0FDNEY5QUUwMi9YRGFFT2N2RjlhUlhGZFpIYS1xbWFHMEpV YkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hEYUVPY3ZGOWFSWEZkWkhhLXFtYUcwSlViRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjNCMy9FNjQ2NUExMDhFOTgxMUVBQUI1OEJEM0FDNEY5QUUwMi9YRGFFT2N2Rjlh UlhGZFpIYS1xbWFHMEpVYkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbD0X20hxwOjiof355vxwP1ZS0p4Cgrld7xFRgrmhmm0y+sSIVBGHH /Nkm6R52PpMOTVaftb4IZNVy4od43cly1jjDUPQ6JAQIy6MxIPBXHdE7qtPAogJ0 oDq4dNffUS38MvV9A32lIEuSWGZlVS3AoYXigTlJuPomrJX9Cm5uveDk1K4VVa4O fWVy8Tl/AsJGtd9b6iQh/fM1iPlLWrHD0/scO2NMensDdhVBXzOmnZwx3YaU0dBO iTki7E/hd1MuEZ6JCbKGB3FOzuxU5su2TkV8rymM7gZCTWye/IrHi8fM4fjhsjyf u/31zWvbYDQmIV/Wp4IebMOEskoitPf2 -----END CERTIFICATE-----Generated at Mon Sep 8 04:17:28 2025 by rpki-client