$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft File: 72Z43AzrNBQcZKGKskv4bKsvvTU.mft (raw, json) Hash identifier: fLbFPqMVjOu+UlbjUTPzD7PgfnFWAl1jg0RIfGXQPX0= Subject key identifier: 35:2A:BB:C6:7E:DE:A0:F2:A8:CA:6A:D7:55:FA:0C:7F:8E:FE:CA:18 Authority key identifier: EF:66:78:DC:0C:EB:34:14:1C:64:A1:8A:B2:4B:F8:6C:AB:2F:BD:35 Certificate issuer: /CN=A91BAE34/serialNumber=EF6678DC0CEB34141C64A18AB24BF86CAB2FBD35 Certificate serial: 04ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Z43AzrNBQcZKGKskv4bKsvvTU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft Manifest number: 04E2 Signing time: Mon 08 Sep 2025 23:49:50 +0000 Manifest this update: Mon 08 Sep 2025 23:49:49 +0000 Manifest next update: Mon 15 Sep 2025 23:49:49 +0000 Files and hashes: 1: 72Z43AzrNBQcZKGKskv4bKsvvTU.crl (hash: KNfJkl1AJQn9CIMIu9S5FMUzmrIqGYh1XxzIJy1fomw=) 2: 7AAFF88446BA11ECB8463B6AC4F9AE02.roa (hash: 99qqJ/9zYRnGxyVxwuHlA7p9+YSeHXLL4eIfJ57Oqyk=) 3: DCEF2F3CFFD611EFA348445FC4F9AE02.roa (hash: itQJmN/dVP+mV48MgGkgS4f24QJYRTaFn3QelUYBhJw=) 4: EEBE377430C411ECBC8D1E20C4F9AE02.roa (hash: gELAt9yiLPHGU77JxUo41MHMLLX1cjc6sNjKaC37Byk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.crl rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Z43AzrNBQcZKGKskv4bKsvvTU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 23:49:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1261 (0x4ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAE34, serialNumber=EF6678DC0CEB34141C64A18AB24BF86CAB2FBD35 Validity Not Before: Sep 8 23:49:49 2025 GMT Not After : Sep 15 23:49:49 2025 GMT Subject: CN=68bf6b9d-1862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:52:fb:63:fd:1d:b4:03:23:42:cb:ee:9f:4d: 41:f4:6b:cd:82:d4:24:8b:aa:59:0a:8d:ac:a9:8f: af:03:bb:5d:8d:d6:f5:68:4a:77:64:05:04:14:13: 9f:06:8e:f0:35:fa:94:e1:6e:47:90:5c:cb:62:6d: 12:6e:4d:c2:ce:f3:8d:ab:8c:c6:06:22:e1:74:12: 3e:70:68:a4:a9:a7:0e:75:2e:05:6b:40:44:d8:3b: 85:d9:37:83:4b:ee:3b:18:12:79:9f:32:f0:5c:6c: 36:af:88:12:a2:db:9e:52:65:d2:f9:20:62:5d:6f: a5:f2:61:4e:b4:b1:f9:6b:8e:19:41:67:43:ee:bd: 2c:d1:10:c5:1a:79:32:fc:20:3a:ef:1c:a1:f1:6b: 96:0e:1b:7b:5f:80:a2:bb:c1:82:ab:60:64:fa:e9: 93:d8:fd:13:e4:da:81:a6:77:03:e9:73:27:e4:63: af:6e:b4:18:c8:1c:a9:41:78:a2:f2:db:e0:5b:5f: 3e:f1:d8:26:09:50:06:6b:2c:5a:0d:9c:c8:8c:34: 18:a0:50:88:3e:b4:c9:80:62:32:2f:14:7f:be:6c: 50:87:1b:bb:7a:3f:54:c0:c4:61:08:75:1c:71:de: 6f:67:9f:a5:fd:37:1c:80:4e:08:51:b7:58:20:03: 98:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:2A:BB:C6:7E:DE:A0:F2:A8:CA:6A:D7:55:FA:0C:7F:8E:FE:CA:18 X509v3 Authority Key Identifier: keyid:EF:66:78:DC:0C:EB:34:14:1C:64:A1:8A:B2:4B:F8:6C:AB:2F:BD:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Z43AzrNBQcZKGKskv4bKsvvTU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:4e:e9:39:7c:a8:5d:04:d2:6f:2c:9a:54:8e:58:d7:b2:52: b1:17:b3:64:af:68:61:e2:d4:7e:46:65:f2:95:50:01:a0:8e: 5f:b3:ac:66:2c:5e:62:ff:7b:39:93:48:33:12:12:f0:e6:fc: 5e:09:7b:a9:8f:63:b9:1d:1c:b0:ed:e4:60:92:89:a5:bb:91: 9c:6d:37:f1:c1:16:e2:80:d0:aa:03:b3:88:3f:5d:3f:32:3a: 96:83:2e:f1:fc:3e:fc:66:fa:68:eb:3b:92:98:67:5d:f1:6f: 25:15:d3:58:dd:99:d9:f2:d3:32:5c:44:85:b9:6a:98:4a:36: c7:b3:92:68:09:4c:37:31:4f:f2:08:60:48:f2:d0:e7:5d:44: c4:d8:38:0f:02:05:e0:67:bc:ce:07:b6:91:eb:44:59:0c:18: da:b1:7d:4b:55:e4:13:53:1b:8f:d2:73:39:f8:b1:fb:75:33: 57:e3:67:0d:92:75:1a:87:35:41:95:e7:45:63:02:c8:d5:af: e8:b9:43:d3:6b:8d:99:d1:35:74:5d:46:8d:56:b9:cb:31:46: c0:65:df:c0:b9:60:eb:69:da:d8:74:e3:5e:4f:b4:03:8a:ac: fc:da:bc:f0:e0:12:80:59:96:29:fa:a3:0a:14:94:a6:07:46: 56:00:66:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFFMzQxMTAvBgNVBAUTKEVGNjY3OERDMENFQjM0MTQxQzY0QTE4QUIyNEJGODZD QUIyRkJEMzUwHhcNMjUwOTA4MjM0OTQ5WhcNMjUwOTE1MjM0OTQ5WjAYMRYwFAYD VQQDEw02OGJmNmI5ZC0xODYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxlL7Y/0dtAMjQsvun01B9GvNgtQki6pZCo2sqY+vA7tdjdb1aEp3ZAUEFBOf Bo7wNfqU4W5HkFzLYm0Sbk3CzvONq4zGBiLhdBI+cGikqacOdS4Fa0BE2DuF2TeD S+47GBJ5nzLwXGw2r4gSotueUmXS+SBiXW+l8mFOtLH5a44ZQWdD7r0s0RDFGnky /CA67xyh8WuWDht7X4Ciu8GCq2Bk+umT2P0T5NqBpncD6XMn5GOvbrQYyBypQXii 8tvgW18+8dgmCVAGayxaDZzIjDQYoFCIPrTJgGIyLxR/vmxQhxu7ej9UwMRhCHUc cd5vZ5+l/TccgE4IUbdYIAOY1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDUqu8Z+ 3qDyqMpq11X6DH+O/soYMB8GA1UdIwQYMBaAFO9meNwM6zQUHGShirJL+GyrL701 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUUzNC80QkVGQkVDQTMw QzIxMUVDOTFBMTcwMURDNEY5QUUwMi83Mlo0M0F6ck5CUWNaS0dLc2t2NGJLc3Z2 VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcyWjQzQXpyTkJRY1pLR0tza3Y0YktzdnZUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUUzNC80QkVGQkVDQTMwQzIxMUVDOTFBMTcwMURDNEY5QUUwMi83Mlo0M0F6ck5C UWNaS0dLc2t2NGJLc3Z2VFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDITuk5fKhdBNJvLJpUjljXslKxF7Nkr2hh4tR+RmXylVABoI5fs6xm LF5i/3s5k0gzEhLw5vxeCXupj2O5HRyw7eRgkomlu5GcbTfxwRbigNCqA7OIP10/ MjqWgy7x/D78Zvpo6zuSmGdd8W8lFdNY3ZnZ8tMyXESFuWqYSjbHs5JoCUw3MU/y CGBI8tDnXUTE2DgPAgXgZ7zOB7aR60RZDBjasX1LVeQTUxuP0nM5+LH7dTNX42cN knUahzVBledFYwLI1a/ouUPTa42Z0TV0XUaNVrnLMUbAZd/AuWDradrYdONeT7QD iqz82rzw4BKAWZYp+qMKFJSmB0ZWAGb5 -----END CERTIFICATE-----Generated at Tue Sep 9 18:27:37 2025 by rpki-client