$ rpki-client -vvf rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.mft File: -tyXZLIJ-Bz4KTMiagZpoypO3XI.mft (raw, json) Hash identifier: SxRr2btBW56h+47JBwq5mJeRr0lE5Qd/hxkG5xLdC+4= Subject key identifier: 89:26:77:5D:F6:1B:1F:98:D2:B2:A8:14:23:03:7A:BF:5C:77:32:9E Authority key identifier: FA:DC:97:64:B2:09:F8:1C:F8:29:33:22:6A:06:69:A3:2A:4E:DD:72 Certificate issuer: /CN=A91C53EC/serialNumber=FADC9764B209F81CF82933226A0669A32A4EDD72 Certificate serial: 0674 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tyXZLIJ-Bz4KTMiagZpoypO3XI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.mft Manifest number: 0668 Signing time: Mon 08 Sep 2025 22:36:26 +0000 Manifest this update: Mon 08 Sep 2025 22:36:25 +0000 Manifest next update: Mon 15 Sep 2025 22:36:25 +0000 Files and hashes: 1: -tyXZLIJ-Bz4KTMiagZpoypO3XI.crl (hash: e17SMvm2sricxkjagKowcQbw//J/wI5SqqzvN9/jpOY=) 2: 9DF5B38CE0D011ECAF88A30DC4F9AE02.roa (hash: mXA6CTErg0wxJdZBq3q6wmtLNI7KWR6GhtBTn2JOB3w=) 3: 03A57262CC8611EC8D238672C4F9AE02.roa (hash: QMrrsm2NHbY/NMrkR70NjsjJaabEX61v1rHn7d+lOEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.crl rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tyXZLIJ-Bz4KTMiagZpoypO3XI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 22:36:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1652 (0x674) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C53EC, serialNumber=FADC9764B209F81CF82933226A0669A32A4EDD72 Validity Not Before: Sep 8 22:36:25 2025 GMT Not After : Sep 15 22:36:25 2025 GMT Subject: CN=68bf5a6a-18d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b5:95:ec:f1:5e:44:75:98:e4:ae:15:83:ca: 08:67:fd:b7:d5:c1:47:a0:57:73:4d:ec:8e:c2:b1: 96:8a:79:18:11:48:be:e3:90:a7:4a:db:9c:0c:e3: f3:50:d1:55:df:8f:73:32:71:b1:e8:ca:15:c2:51: d1:5c:31:9b:ce:3c:d7:f1:cf:bf:26:a0:54:ec:67: 0e:46:d1:c6:66:f4:d3:bb:1f:0c:a3:19:81:2e:70: 8b:53:b4:00:d1:b7:c8:8b:0e:ac:80:6a:8b:31:8f: 6b:44:3d:b9:da:39:1f:e7:dd:3d:c8:c7:6a:45:d1: 45:cd:07:7b:ee:24:dd:47:b5:b6:47:53:a0:cd:03: bb:c8:36:4d:38:2d:4e:cb:f1:ed:02:9e:da:bf:c2: b5:73:7e:de:e3:57:43:d1:4a:2e:0f:0d:fd:e1:6d: c6:6a:55:2f:53:ee:40:bf:3d:b7:36:6a:3c:0e:c7: f8:df:84:89:37:ab:22:59:48:2c:95:46:37:05:ab: df:6e:fc:05:3c:55:87:93:3b:79:61:96:ad:eb:69: 4a:8b:b1:42:2b:ba:b9:f6:a1:5b:5f:9e:e3:b5:83: cb:d7:c3:32:f5:f4:11:ad:a8:6b:6d:de:c4:7f:46: 46:d0:57:09:af:5c:c2:25:85:ce:7c:c6:3f:38:5b: c8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:26:77:5D:F6:1B:1F:98:D2:B2:A8:14:23:03:7A:BF:5C:77:32:9E X509v3 Authority Key Identifier: keyid:FA:DC:97:64:B2:09:F8:1C:F8:29:33:22:6A:06:69:A3:2A:4E:DD:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tyXZLIJ-Bz4KTMiagZpoypO3XI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:df:00:f1:d6:aa:eb:47:34:53:11:75:93:1a:f6:0e:07:90: 73:c3:7f:36:f1:65:e0:cf:bc:4e:cd:e2:d0:4d:f0:12:b3:c3: c9:4f:e4:e2:a6:e0:f2:4b:68:5e:77:78:fc:93:73:98:7e:1f: bb:71:70:0a:23:10:45:af:24:ed:1d:fe:f8:24:b7:89:ab:1d: df:83:6c:22:52:2b:20:b6:d0:27:90:0e:e6:5f:58:09:74:3c: 0c:67:19:bf:98:5e:0d:2d:28:37:4b:fa:86:9f:e9:bd:c1:98: 35:76:1e:1e:cf:41:3a:d1:56:f2:e1:c8:3e:2d:25:b3:bf:19: 0a:fd:f4:9f:66:63:48:e9:19:b2:6c:11:4b:62:62:ba:0e:c4: 8c:92:14:b0:1c:07:28:e4:c4:35:15:9d:0b:26:ae:a8:ef:6a: b0:74:f7:8f:83:20:d0:96:36:a4:27:7f:a6:1a:78:42:8a:18: 98:6f:cb:5c:5d:66:81:b9:41:24:f0:29:9f:79:9b:f0:f7:8f: 1c:6e:53:b3:7f:7f:06:c6:6d:b2:fc:c1:a8:53:5a:44:fe:80: ca:61:8d:f9:40:79:d4:b1:0e:5f:b5:84:15:f5:04:d1:ee:e3: d4:96:d3:3f:75:45:4e:fa:fe:14:be:12:7b:95:33:6c:a0:87: e6:24:6a:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzUzRUMxMTAvBgNVBAUTKEZBREM5NzY0QjIwOUY4MUNGODI5MzMyMjZBMDY2OUEz MkE0RURENzIwHhcNMjUwOTA4MjIzNjI1WhcNMjUwOTE1MjIzNjI1WjAYMRYwFAYD VQQDEw02OGJmNWE2YS0xOGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7WV7PFeRHWY5K4Vg8oIZ/231cFHoFdzTeyOwrGWinkYEUi+45CnStucDOPz UNFV349zMnGx6MoVwlHRXDGbzjzX8c+/JqBU7GcORtHGZvTTux8MoxmBLnCLU7QA 0bfIiw6sgGqLMY9rRD252jkf5909yMdqRdFFzQd77iTdR7W2R1OgzQO7yDZNOC1O y/HtAp7av8K1c37e41dD0UouDw394W3GalUvU+5Avz23Nmo8Dsf434SJN6siWUgs lUY3BavfbvwFPFWHkzt5YZat62lKi7FCK7q59qFbX57jtYPL18My9fQRrahrbd7E f0ZG0FcJr1zCJYXOfMY/OFvIhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIkmd132 Gx+Y0rKoFCMDer9cdzKeMB8GA1UdIwQYMBaAFPrcl2SyCfgc+CkzImoGaaMqTt1y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTNFQy8yMDNDQkI2NDk2 ODcxMUVCOEFFODEzMkZDNEY5QUUwMi8tdHlYWkxJSi1CejRLVE1pYWdacG95cE8z WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy10eVhaTElKLUJ6NEtUTWlhZ1pwb3lwTzNYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTNFQy8yMDNDQkI2NDk2ODcxMUVCOEFFODEzMkZDNEY5QUUwMi8tdHlYWkxJSi1C ejRLVE1pYWdacG95cE8zWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBh3wDx1qrrRzRTEXWTGvYOB5Bzw3828WXgz7xOzeLQTfASs8PJT+Ti puDyS2hed3j8k3OYfh+7cXAKIxBFryTtHf74JLeJqx3fg2wiUisgttAnkA7mX1gJ dDwMZxm/mF4NLSg3S/qGn+m9wZg1dh4ez0E60Vby4cg+LSWzvxkK/fSfZmNI6Rmy bBFLYmK6DsSMkhSwHAco5MQ1FZ0LJq6o72qwdPePgyDQljakJ3+mGnhCihiYb8tc XWaBuUEk8CmfeZvw948cblOzf38Gxm2y/MGoU1pE/oDKYY35QHnUsQ5ftYQV9QTR 7uPUltM/dUVO+v4UvhJ7lTNsoIfmJGoX -----END CERTIFICATE-----Generated at Tue Sep 9 14:10:42 2025 by rpki-client