$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft File: reE11eBNSWNwmzymv8AQttD5fK8.mft (raw, json) Hash identifier: P5WHzl2NLjlWXCk1p8JOikHvc8CiaB8BiU6UKCbo1tI= Subject key identifier: 1F:D3:77:A4:D1:9B:EC:A2:12:B1:F1:B6:03:BA:08:CF:71:C0:57:E7 Authority key identifier: AD:E1:35:D5:E0:4D:49:63:70:9B:3C:A6:BF:C0:10:B6:D0:F9:7C:AF Certificate issuer: /CN=A91B7A06/serialNumber=ADE135D5E04D4963709B3CA6BFC010B6D0F97CAF Certificate serial: 12D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft Manifest number: 12C7 Signing time: Sun 24 Aug 2025 17:01:50 +0000 Manifest this update: Sun 24 Aug 2025 17:01:49 +0000 Manifest next update: Sun 31 Aug 2025 17:01:49 +0000 Files and hashes: 1: reE11eBNSWNwmzymv8AQttD5fK8.crl (hash: oWNupVpW05zf5OMJM5fG8UC2oTueJ5ovnOoFytqNTmg=) 2: F8E415E2987F11ED9E1F4D0FC4F9AE02.roa (hash: u9nxVTI/r7lzehBnkG/r0mQCumereCzRN9vx0cIP9pw=) 3: F7B1497E987F11ED9E1F4D0FC4F9AE02.roa (hash: 19aOOHsZIBgvBeUs9wb25z5uEUWs4WLEIR4d7F8bWpc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.crl rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 17:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4825 (0x12d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7A06, serialNumber=ADE135D5E04D4963709B3CA6BFC010B6D0F97CAF Validity Not Before: Aug 24 17:01:49 2025 GMT Not After : Aug 31 17:01:49 2025 GMT Subject: CN=68ab457e-e132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:06:24:4a:f9:b4:74:f5:46:f8:16:14:f6:cb: e1:a6:82:99:43:3e:a8:2c:74:0a:b5:72:89:e2:4b: cb:04:05:ef:4d:2e:b1:62:0a:54:13:b9:47:90:b0: d0:50:0b:b7:8a:60:44:2f:69:87:03:18:a1:a7:89: 4a:5e:30:d9:8c:39:38:25:c9:d6:9b:78:36:52:49: 5a:65:bf:03:5f:f2:55:5e:d0:6f:c5:10:37:b4:59: 56:97:be:46:fe:7c:31:79:fc:93:29:81:ca:af:29: 99:6e:3a:e3:f0:f9:1d:0b:c1:69:58:00:d5:9b:2a: 1e:fe:0a:55:da:32:d9:08:4e:30:bb:7b:bd:57:74: 54:7a:bf:96:96:b8:9d:15:7a:2d:5e:1f:fe:f9:6d: da:c0:c3:5b:88:66:a5:e0:be:25:0b:b0:14:67:3f: fc:31:94:27:03:b2:f7:c9:c2:fa:66:47:70:7f:0b: 41:cb:91:f9:d9:8a:f6:13:58:59:68:af:54:d9:b6: 92:cd:00:de:1a:59:4b:bc:91:10:fb:64:99:fa:ca: df:5c:a3:cf:7e:c0:f3:cc:a0:5c:09:14:5b:aa:16: c9:35:69:cc:4b:36:43:75:bf:21:e0:b1:81:d1:6e: c0:57:d8:8a:76:40:0a:a0:0d:40:30:67:ef:2d:73: 21:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D3:77:A4:D1:9B:EC:A2:12:B1:F1:B6:03:BA:08:CF:71:C0:57:E7 X509v3 Authority Key Identifier: keyid:AD:E1:35:D5:E0:4D:49:63:70:9B:3C:A6:BF:C0:10:B6:D0:F9:7C:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:5a:68:1e:83:a2:91:33:6a:f8:c5:e0:3b:8d:45:bb:54:e0: f0:1d:c6:e2:85:e8:68:5a:5e:68:bd:b2:d1:ed:ef:69:8e:0d: 60:84:31:47:b5:2e:41:0f:2f:1f:89:f6:c6:44:49:67:a5:df: 2b:e4:6e:50:e2:ba:d6:0d:87:cc:5e:86:e7:f5:e8:43:15:0e: bf:5f:03:4d:02:ef:ad:5c:dc:6b:e3:7e:39:e1:78:be:2b:77: aa:4a:b9:77:53:c2:88:ae:b0:da:2d:e5:22:32:65:86:6c:e5: 09:e0:d4:a7:2c:18:cd:ff:2a:87:f4:70:1d:78:56:92:27:06: b0:d1:6c:71:a7:94:3f:ee:81:01:be:a4:d4:23:e6:a9:16:79: 39:2b:9f:cb:9f:9b:2e:d8:f8:7d:08:01:4c:f6:86:4c:a1:1d: 53:9d:eb:8e:e0:03:7a:72:4a:96:22:28:20:50:73:8b:a1:02: 31:10:cb:8f:b9:be:45:84:68:82:91:ec:94:e3:1b:0b:ff:ae: fa:2b:d3:44:23:20:01:15:b4:33:13:e9:8e:58:96:b5:51:7f: cc:62:c3:8c:9e:7e:e4:c1:0a:8f:1e:37:de:bc:5a:a1:b1:70: ea:db:18:ec:1c:bb:6e:64:15:c1:36:04:a9:50:ea:85:61:1c: b6:53:c2:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdBMDYxMTAvBgNVBAUTKEFERTEzNUQ1RTA0RDQ5NjM3MDlCM0NBNkJGQzAxMEI2 RDBGOTdDQUYwHhcNMjUwODI0MTcwMTQ5WhcNMjUwODMxMTcwMTQ5WjAYMRYwFAYD VQQDEw02OGFiNDU3ZS1lMTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzQYkSvm0dPVG+BYU9svhpoKZQz6oLHQKtXKJ4kvLBAXvTS6xYgpUE7lHkLDQ UAu3imBEL2mHAxihp4lKXjDZjDk4JcnWm3g2UklaZb8DX/JVXtBvxRA3tFlWl75G /nwxefyTKYHKrymZbjrj8PkdC8FpWADVmyoe/gpV2jLZCE4wu3u9V3RUer+Wlrid FXotXh/++W3awMNbiGal4L4lC7AUZz/8MZQnA7L3ycL6ZkdwfwtBy5H52Yr2E1hZ aK9U2baSzQDeGllLvJEQ+2SZ+srfXKPPfsDzzKBcCRRbqhbJNWnMSzZDdb8h4LGB 0W7AV9iKdkAKoA1AMGfvLXMhmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB/Td6TR m+yiErHxtgO6CM9xwFfnMB8GA1UdIwQYMBaAFK3hNdXgTUljcJs8pr/AELbQ+Xyv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0EwNi80OEY0RENEQUM2 QzMxMUU4OEY3MUNDNTZDNEY5QUUwMi9yZUUxMWVCTlNXTndtenltdjhBUXR0RDVm SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JlRTExZUJOU1dOd216eW12OEFRdHRENWZLOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0EwNi80OEY0RENEQUM2QzMxMUU4OEY3MUNDNTZDNEY5QUUwMi9yZUUxMWVCTlNX TndtenltdjhBUXR0RDVmSzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALWmgeg6KRM2r4xeA7jUW7VODwHcbihehoWl5ovbLR7e9pjg1ghDFH tS5BDy8fifbGRElnpd8r5G5Q4rrWDYfMXobn9ehDFQ6/XwNNAu+tXNxr43454Xi+ K3eqSrl3U8KIrrDaLeUiMmWGbOUJ4NSnLBjN/yqH9HAdeFaSJwaw0Wxxp5Q/7oEB vqTUI+apFnk5K5/Ln5su2Ph9CAFM9oZMoR1TneuO4AN6ckqWIiggUHOLoQIxEMuP ub5FhGiCkeyU4xsL/676K9NEIyABFbQzE+mOWJa1UX/MYsOMnn7kwQqPHjfevFqh sXDq2xjsHLtuZBXBNgSpUOqFYRy2U8K5 -----END CERTIFICATE-----Generated at Sun Aug 24 21:29:04 2025 by rpki-client