$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.mft File: U4sHbgqt2PrilwyVQ-hJqQ_nN1I.mft (raw, json) Hash identifier: EKE7TX3mJkiPKDWjGvDxZUiL1Qu8IphjnnuqrZyQhYg= Subject key identifier: 67:60:51:76:D2:BA:83:67:62:BD:E4:DE:D9:F4:33:72:14:7A:B8:F1 Authority key identifier: 53:8B:07:6E:0A:AD:D8:FA:E2:97:0C:95:43:E8:49:A9:0F:E7:37:52 Certificate issuer: /CN=A91B6F47/serialNumber=538B076E0AADD8FAE2970C9543E849A90FE73752 Certificate serial: 3594 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.mft Manifest number: 3518 Signing time: Sat 06 Sep 2025 14:24:38 +0000 Manifest this update: Sat 06 Sep 2025 14:24:38 +0000 Manifest next update: Sat 13 Sep 2025 14:24:38 +0000 Files and hashes: 1: U4sHbgqt2PrilwyVQ-hJqQ_nN1I.crl (hash: K9Td6MDfjZA6xyVglQ4Dq6j7qXOr0UkNT6VtZm+HV/4=) 2: DF8602D05E5B11ED994E491CC4F9AE02.roa (hash: KKCg2NooRoQGuF3KYpzz51c9C/45UUPObnLo2e5njhU=) 3: D0886954188811EC8E86754FC4F9AE02.roa (hash: yPv2xJqSMbxdqO3CUxzFvtSmE89AHilhOo/061TH8FU=) 4: AB9889725E5E11EDB5361D3BC4F9AE02.roa (hash: nfNjfg1IXDDhMM0k16fT6xDTUZvLHRQ/C+xvVXQFUFE=) 5: 99CF729E221011ED980A6F47C4F9AE02.roa (hash: iSQxLeiRN1fYoIns2yWqQhKW9w0d7Bh4Hi7g+FcoiAo=) 6: 491E49AECDCA11ED8F57D386C4F9AE02.roa (hash: GOobL3IcAmOzxEXI8Av9eECmrglVLT+e8Yk36aU9ns8=) 7: 9F3A919468D811EFB2FE405FC4F9AE02.roa (hash: ZaxlSh3XWBv2fOJrVopMAyhJjHEvnP8TGG96c6iuXcg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.crl rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 14:24:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13716 (0x3594) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6F47, serialNumber=538B076E0AADD8FAE2970C9543E849A90FE73752 Validity Not Before: Sep 6 14:24:38 2025 GMT Not After : Sep 13 14:24:38 2025 GMT Subject: CN=68bc4426-3137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f1:66:0e:17:60:d6:6a:83:b5:c9:8b:9a:b2: 59:14:30:af:9f:3e:8c:63:b6:5d:fe:b9:22:2d:9d: 99:f2:13:94:ad:19:81:16:03:0f:8f:04:5b:5c:52: 5b:7a:cd:89:2c:97:03:88:a4:30:a1:20:02:b7:39: b1:14:54:d3:b3:62:a7:70:6d:e0:2f:b7:d9:7e:40: f8:e8:ca:a3:ce:aa:5f:43:41:42:e1:ea:88:2b:ca: 7d:cb:f2:75:e7:85:e5:4e:7f:8f:57:d9:d7:c4:69: 0c:b1:68:81:59:03:31:e6:45:a6:75:25:71:17:72: b0:43:56:57:51:24:e6:e6:3a:9f:c7:af:ef:bf:cc: 21:8e:3c:e3:10:62:32:9d:b3:d0:79:fa:10:48:5d: a2:c6:f3:9e:38:ee:76:66:c9:0d:e3:7b:dc:3a:06: ca:af:5c:5e:6f:87:d9:82:b1:cf:ce:07:36:03:44: f0:96:cb:d3:f0:53:61:4f:bd:47:45:b1:3d:47:15: 5c:5d:34:ec:eb:8f:7f:b4:0e:08:5e:81:2b:1c:b7: 88:c2:dc:84:cf:6b:a0:9f:05:99:bd:1f:3a:73:a8: 88:ce:4c:79:cd:92:5d:ec:8a:80:3e:45:ac:ec:3b: 86:80:5a:5c:13:6f:ae:88:d0:ca:5d:80:68:76:ba: 55:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:60:51:76:D2:BA:83:67:62:BD:E4:DE:D9:F4:33:72:14:7A:B8:F1 X509v3 Authority Key Identifier: keyid:53:8B:07:6E:0A:AD:D8:FA:E2:97:0C:95:43:E8:49:A9:0F:E7:37:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:d4:59:d9:4a:9a:b4:15:08:98:89:e1:8c:44:5a:c6:04:f5: be:b1:3a:65:fe:e5:fe:d5:09:45:c9:fc:58:f9:07:ff:19:f2: a0:b5:07:2b:af:42:83:a8:c8:a3:0b:18:39:0c:fc:1d:ca:bc: 75:7f:b1:88:3b:88:e2:bb:51:59:3d:d3:4b:b7:f4:53:af:37: ad:a1:f1:b5:eb:bd:12:2e:97:7a:c2:83:a7:0a:61:74:45:90: d8:77:5c:ae:f5:2c:0c:d2:2f:80:75:b2:f8:89:99:2d:a4:2c: 17:77:32:a5:45:f7:91:05:27:f4:1f:ae:d8:7b:e3:e2:23:88: eb:0d:78:95:33:14:4a:7a:36:cd:9d:e4:1c:39:fe:10:ac:e3: 8d:cd:f6:41:1d:3a:1a:79:97:d4:ba:f6:51:5d:cd:ed:a6:6d: 0e:f8:8e:e3:f9:dd:f4:8e:0c:1f:14:17:08:38:ca:7b:aa:19: fd:0b:85:5b:59:03:68:69:b1:5f:8e:25:6b:af:a6:9a:49:9e: fd:f5:ff:ba:fe:1c:62:5c:40:c6:a4:4c:f8:89:fc:ed:92:3f: 30:16:b7:25:ad:59:cc:54:57:9d:f3:81:eb:bb:ab:1e:a9:de: ca:d9:0e:d9:69:2d:26:1c:98:f4:c8:78:01:b2:c4:32:e4:97: 31:06:0e:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZGNDcxMTAvBgNVBAUTKDUzOEIwNzZFMEFBREQ4RkFFMjk3MEM5NTQzRTg0OUE5 MEZFNzM3NTIwHhcNMjUwOTA2MTQyNDM4WhcNMjUwOTEzMTQyNDM4WjAYMRYwFAYD VQQDEw02OGJjNDQyNi0zMTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/FmDhdg1mqDtcmLmrJZFDCvnz6MY7Zd/rkiLZ2Z8hOUrRmBFgMPjwRbXFJb es2JLJcDiKQwoSACtzmxFFTTs2KncG3gL7fZfkD46MqjzqpfQ0FC4eqIK8p9y/J1 54XlTn+PV9nXxGkMsWiBWQMx5kWmdSVxF3KwQ1ZXUSTm5jqfx6/vv8whjjzjEGIy nbPQefoQSF2ixvOeOO52ZskN43vcOgbKr1xeb4fZgrHPzgc2A0TwlsvT8FNhT71H RbE9RxVcXTTs649/tA4IXoErHLeIwtyEz2ugnwWZvR86c6iIzkx5zZJd7IqAPkWs 7DuGgFpcE2+uiNDKXYBodrpV5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGdgUXbS uoNnYr3k3tn0M3IUerjxMB8GA1UdIwQYMBaAFFOLB24Krdj64pcMlUPoSakP5zdS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkY0Ny9CNEE4NkMzODFE ODQxMUUyOTY5RkM1REEwOEIwMkNEMi9VNHNIYmdxdDJQcmlsd3lWUS1oSnFRX25O MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U0c0hiZ3F0MlByaWx3eVZRLWhKcVFfbk4xSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkY0Ny9CNEE4NkMzODFEODQxMUUyOTY5RkM1REEwOEIwMkNEMi9VNHNIYmdxdDJQ cmlsd3lWUS1oSnFRX25OMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAo1FnZSpq0FQiYieGMRFrGBPW+sTpl/uX+1QlFyfxY+Qf/GfKgtQcr r0KDqMijCxg5DPwdyrx1f7GIO4jiu1FZPdNLt/RTrzetofG1670SLpd6woOnCmF0 RZDYd1yu9SwM0i+AdbL4iZktpCwXdzKlRfeRBSf0H67Ye+PiI4jrDXiVMxRKejbN neQcOf4QrOONzfZBHToaeZfUuvZRXc3tpm0O+I7j+d30jgwfFBcIOMp7qhn9C4Vb WQNoabFfjiVrr6aaSZ799f+6/hxiXEDGpEz4ifztkj8wFrclrVnMVFed84Hru6se qd7K2Q7ZaS0mHJj0yHgBssQy5JcxBg5l -----END CERTIFICATE-----Generated at Sat Sep 6 16:31:46 2025 by rpki-client