$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft File: -SrbMNtsD5zpgLXbl3FF-MGcgks.mft (raw, json) Hash identifier: Z0Y4BlB5eEXx/ENm76AavXAWTMHprqbXQgFtvurWB8g= Subject key identifier: A2:24:DF:76:06:58:12:2C:B6:3E:4A:FD:A2:92:77:2B:BF:33:75:3D Authority key identifier: F9:2A:DB:30:DB:6C:0F:9C:E9:80:B5:DB:97:71:45:F8:C1:9C:82:4B Certificate issuer: /CN=A91C0FCC/serialNumber=F92ADB30DB6C0F9CE980B5DB977145F8C19C824B Certificate serial: 094B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft Manifest number: 0944 Signing time: Sun 24 Aug 2025 20:13:16 +0000 Manifest this update: Sun 24 Aug 2025 20:13:15 +0000 Manifest next update: Sun 31 Aug 2025 20:13:15 +0000 Files and hashes: 1: -SrbMNtsD5zpgLXbl3FF-MGcgks.crl (hash: NQ1+Q6xfRr+KRNuBAR/hEWbu+c336hNwiVB5zGhySaA=) 2: A778AAF6A42111EAB3108934C4F9AE02.roa (hash: nYjWOytssQAvKUrx53OAPZHiEKpRdEsbmRx5MJFOOy4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.crl rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 19:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2379 (0x94b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0FCC, serialNumber=F92ADB30DB6C0F9CE980B5DB977145F8C19C824B Validity Not Before: Aug 24 20:13:15 2025 GMT Not After : Aug 31 20:13:15 2025 GMT Subject: CN=68ab725c-b759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:96:81:ac:2f:db:5a:fa:79:34:1a:93:e2:e6: 54:3e:7e:c4:b3:d5:24:34:eb:02:a9:31:79:f2:25: 19:c2:d5:25:d8:57:ee:b0:80:18:cf:2d:bf:0a:f0: d8:5a:a7:1a:21:67:b0:55:4b:b2:3c:ab:38:52:1a: cd:a2:a8:f2:8a:88:7e:e3:94:61:78:c7:02:86:71: b9:c4:ea:9b:21:84:a3:15:84:e5:82:2b:28:f5:f8: 74:97:08:7d:8a:d8:81:90:3a:ba:bd:41:ff:bd:d2: d2:13:bc:5c:bb:7f:22:04:d4:9c:92:53:63:bd:8e: f9:b9:12:1a:af:92:7f:10:c6:d8:c4:7d:cc:6c:e7: ba:6c:75:80:12:87:7f:0e:3c:06:51:a1:b8:5f:dc: 79:a3:a3:94:3d:f6:ee:92:84:9d:3f:dd:fa:33:73: af:7f:6a:24:8d:06:fb:6a:b8:16:6c:1f:02:25:d3: 49:38:c5:49:c7:1a:db:c5:03:c0:a7:ef:9b:8a:cf: ec:8c:6a:8d:2f:f1:58:fe:41:d5:bc:a5:6c:de:fd: 21:ea:89:0e:aa:15:70:18:c3:79:9b:d1:a2:48:1f: 5c:96:f6:ef:60:4b:3d:91:75:f3:43:40:f3:68:ef: 1a:89:0d:ba:37:8d:45:2a:0f:30:57:d9:08:f9:9d: 58:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:24:DF:76:06:58:12:2C:B6:3E:4A:FD:A2:92:77:2B:BF:33:75:3D X509v3 Authority Key Identifier: keyid:F9:2A:DB:30:DB:6C:0F:9C:E9:80:B5:DB:97:71:45:F8:C1:9C:82:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:51:15:ce:78:de:86:05:b2:10:12:00:60:a5:f8:92:85:f5: 46:6f:5d:70:a8:42:c7:82:6e:86:9d:79:10:b8:ad:9d:8b:e9: dd:87:ca:e7:cf:ee:fa:2f:5d:d8:27:89:0d:8e:c0:a7:60:58: 62:ab:3e:37:10:fc:89:45:6c:7a:9a:b4:fb:91:20:dd:a4:38: f6:4b:e6:fb:08:a7:85:a8:39:0e:9d:cb:30:b4:62:ae:d7:1e: fe:91:c3:18:3b:1b:3e:54:c7:7a:4a:ab:5a:24:3b:e8:13:f0: 56:8f:e6:cc:92:1e:77:b3:59:b6:de:73:96:96:cc:e6:f4:78: e4:b0:33:46:70:4e:f8:3b:7d:57:58:c2:be:6e:11:c4:b9:55: 75:f5:f7:e1:f1:88:57:12:b7:e9:77:7f:4e:30:c4:b8:2c:07: 40:d6:ed:10:6b:42:d6:76:d9:6f:f3:33:d5:14:4e:fa:6f:52: 4f:5a:ec:6f:06:fe:25:c5:9f:46:23:74:17:bd:d6:bb:c5:07: 0a:b7:53:c7:96:bc:37:5f:e8:c9:6e:73:2a:c1:9a:c0:de:3d: e2:86:a9:1d:cd:65:56:18:e3:b8:70:ae:88:bc:d3:2c:13:8e: 26:80:ba:12:f9:16:4d:8c:2f:7e:75:19:a4:b6:93:c5:40:eb: 10:0c:33:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBGQ0MxMTAvBgNVBAUTKEY5MkFEQjMwREI2QzBGOUNFOTgwQjVEQjk3NzE0NUY4 QzE5QzgyNEIwHhcNMjUwODI0MjAxMzE1WhcNMjUwODMxMjAxMzE1WjAYMRYwFAYD VQQDEw02OGFiNzI1Yy1iNzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzZaBrC/bWvp5NBqT4uZUPn7Es9UkNOsCqTF58iUZwtUl2FfusIAYzy2/CvDY WqcaIWewVUuyPKs4UhrNoqjyioh+45RheMcChnG5xOqbIYSjFYTlgiso9fh0lwh9 itiBkDq6vUH/vdLSE7xcu38iBNScklNjvY75uRIar5J/EMbYxH3MbOe6bHWAEod/ DjwGUaG4X9x5o6OUPfbukoSdP936M3Ovf2okjQb7argWbB8CJdNJOMVJxxrbxQPA p++bis/sjGqNL/FY/kHVvKVs3v0h6okOqhVwGMN5m9GiSB9clvbvYEs9kXXzQ0Dz aO8aiQ26N41FKg8wV9kI+Z1YkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKIk33YG WBIstj5K/aKSdyu/M3U9MB8GA1UdIwQYMBaAFPkq2zDbbA+c6YC125dxRfjBnIJL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEZDQy9GNUM0MjQwOEE0 MUYxMUVBQkRDMkY1MzFDNEY5QUUwMi8tU3JiTU50c0Q1enBnTFhibDNGRi1NR2Nn a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1TcmJNTnRzRDV6cGdMWGJsM0ZGLU1HY2drcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEZDQy9GNUM0MjQwOEE0MUYxMUVBQkRDMkY1MzFDNEY5QUUwMi8tU3JiTU50c0Q1 enBnTFhibDNGRi1NR2Nna3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7URXOeN6GBbIQEgBgpfiShfVGb11wqELHgm6GnXkQuK2di+ndh8rn z+76L13YJ4kNjsCnYFhiqz43EPyJRWx6mrT7kSDdpDj2S+b7CKeFqDkOncswtGKu 1x7+kcMYOxs+VMd6SqtaJDvoE/BWj+bMkh53s1m23nOWlszm9HjksDNGcE74O31X WMK+bhHEuVV19ffh8YhXErfpd39OMMS4LAdA1u0Qa0LWdtlv8zPVFE76b1JPWuxv Bv4lxZ9GI3QXvda7xQcKt1PHlrw3X+jJbnMqwZrA3j3ihqkdzWVWGOO4cK6IvNMs E44mgLoS+RZNjC9+dRmktpPFQOsQDDPV -----END CERTIFICATE-----Generated at Sun Aug 24 22:07:02 2025 by rpki-client