$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft File: a-rAl7V48XydcRl3ez9RFPvglxs.mft (raw, json) Hash identifier: TB0AesvaRpENVf/UAUFu/XYJncAVVZXrwMGIvETBgiE= Subject key identifier: 9A:1E:C0:D4:6A:E2:A4:FC:5E:96:6A:8B:BF:E0:C0:46:D0:E9:B3:58 Authority key identifier: 6B:EA:C0:97:B5:78:F1:7C:9D:71:19:77:7B:3F:51:14:FB:E0:97:1B Certificate issuer: /CN=A91C5A9F/serialNumber=6BEAC097B578F17C9D7119777B3F5114FBE0971B Certificate serial: 0CDB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft Manifest number: 0CC3 Signing time: Wed 20 Aug 2025 18:15:42 +0000 Manifest this update: Wed 20 Aug 2025 18:15:41 +0000 Manifest next update: Wed 27 Aug 2025 18:15:41 +0000 Files and hashes: 1: a-rAl7V48XydcRl3ez9RFPvglxs.crl (hash: MqXuQmTUAtxaCuR+KKSB2sfKEqhKpWShhRIzA7AOmqU=) 2: 498956B8FFC411EEB2369013C4F9AE02.roa (hash: Q8R6RdYUX7rY4VWbBZw5PBzAwbilsPbivqpkW+dr/Ec=) 3: 48B3316EFFC411EEB2369013C4F9AE02.roa (hash: rkTwGBJDEcILt7naFyYrumMd/+qJZboX4q6K9aobNao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.crl rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 18:15:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3291 (0xcdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5A9F, serialNumber=6BEAC097B578F17C9D7119777B3F5114FBE0971B Validity Not Before: Aug 20 18:15:41 2025 GMT Not After : Aug 27 18:15:41 2025 GMT Subject: CN=68a610cd-a0d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:65:e9:1c:3e:e0:a5:60:f7:44:de:9a:b5:fc: 72:7b:20:e7:53:76:8d:47:68:a7:ca:14:c7:54:08: bf:4e:b6:70:f2:cc:3b:e0:d6:21:11:ff:91:15:45: bf:a8:91:21:fb:8e:15:3e:3e:eb:a7:53:c4:c7:d5: a5:2b:0c:34:f8:9d:6a:e0:45:14:de:81:f0:b6:82: 36:b9:d0:89:84:ec:00:0d:de:70:ae:1a:76:1d:ac: 1a:af:d1:11:ba:19:79:fc:37:c6:ba:3d:ce:d2:d9: 7f:72:75:b1:70:ba:d5:3d:85:b3:a8:be:5a:c7:7f: cf:01:14:f6:21:c4:b3:4b:aa:b8:9d:52:a2:35:fc: e4:10:90:35:b6:3b:30:37:6e:dd:25:7c:34:f3:6d: 37:62:53:08:ac:56:ed:ce:fd:2e:4e:99:fb:4c:4a: 5c:40:a3:d4:01:2d:ed:be:65:98:bd:92:2c:08:28: e7:f3:c4:ae:30:b7:ae:32:a0:64:5d:db:3a:b2:e6: 21:38:84:d5:b9:ee:9e:6b:c8:b9:99:19:98:c9:bb: 17:43:a0:8a:12:a8:1c:90:f6:c4:7f:02:2c:c5:c0: f4:d8:2d:51:b2:47:53:bd:6d:2a:69:ad:92:64:5c: 2d:dc:fa:64:2e:c2:c1:b3:fe:bd:00:ce:d3:cc:6d: 72:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:1E:C0:D4:6A:E2:A4:FC:5E:96:6A:8B:BF:E0:C0:46:D0:E9:B3:58 X509v3 Authority Key Identifier: keyid:6B:EA:C0:97:B5:78:F1:7C:9D:71:19:77:7B:3F:51:14:FB:E0:97:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:43:3e:64:72:f5:82:6b:97:b7:c0:4a:0e:59:2b:41:3e:0a: 04:1c:40:6c:d4:34:00:31:43:2e:8c:8c:3d:e8:dd:21:f4:77: 32:07:58:d6:b9:8e:a4:41:0e:84:d5:2f:00:c3:51:fe:4a:06: 44:a4:a2:93:56:79:db:5e:55:39:3f:04:92:55:61:a9:c1:20: 28:14:de:8a:47:18:77:29:f5:4a:48:af:57:12:ec:9e:22:0d: 14:0d:a6:d4:60:5f:29:00:35:51:f3:78:2a:a2:4c:45:4a:15: 65:71:66:eb:72:16:b5:ef:cd:57:69:87:64:9f:8b:22:e8:80: 8c:b8:a2:76:00:0f:c8:db:d9:a3:a7:ac:d6:c2:5f:73:52:88: 34:af:4b:e0:ce:82:aa:9d:a1:e6:b3:bb:8e:b0:f0:51:02:d2: b0:b8:63:0d:2e:fd:ad:b0:bb:af:e1:d4:92:45:a5:62:f1:f9: e1:50:17:ad:7c:39:2a:11:bd:e4:e0:2f:06:c9:bb:bc:00:d7: b2:d6:b9:66:75:2c:77:82:a6:10:49:6b:92:4d:cd:53:37:4f: eb:6d:e9:19:66:f4:ba:8d:21:55:90:e1:24:8f:52:44:5a:a9: d6:fc:3d:e0:ee:09:03:b5:41:13:43:87:a5:28:c9:05:09:ec: a7:24:08:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVBOUYxMTAvBgNVBAUTKDZCRUFDMDk3QjU3OEYxN0M5RDcxMTk3NzdCM0Y1MTE0 RkJFMDk3MUIwHhcNMjUwODIwMTgxNTQxWhcNMjUwODI3MTgxNTQxWjAYMRYwFAYD VQQDEw02OGE2MTBjZC1hMGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2GXpHD7gpWD3RN6atfxyeyDnU3aNR2inyhTHVAi/TrZw8sw74NYhEf+RFUW/ qJEh+44VPj7rp1PEx9WlKww0+J1q4EUU3oHwtoI2udCJhOwADd5wrhp2Hawar9ER uhl5/DfGuj3O0tl/cnWxcLrVPYWzqL5ax3/PART2IcSzS6q4nVKiNfzkEJA1tjsw N27dJXw08203YlMIrFbtzv0uTpn7TEpcQKPUAS3tvmWYvZIsCCjn88SuMLeuMqBk Xds6suYhOITVue6ea8i5mRmYybsXQ6CKEqgckPbEfwIsxcD02C1RskdTvW0qaa2S ZFwt3PpkLsLBs/69AM7TzG1y9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJoewNRq 4qT8XpZqi7/gwEbQ6bNYMB8GA1UdIwQYMBaAFGvqwJe1ePF8nXEZd3s/URT74Jcb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUE5Ri8wMjFBOTYwQ0Y2 NzgxMUU5QjUyMDk2MjVDNEY5QUUwMi9hLXJBbDdWNDhYeWRjUmwzZXo5UkZQdmds eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2EtckFsN1Y0OFh5ZGNSbDNlejlSRlB2Z2x4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUE5Ri8wMjFBOTYwQ0Y2NzgxMUU5QjUyMDk2MjVDNEY5QUUwMi9hLXJBbDdWNDhY eWRjUmwzZXo5UkZQdmdseHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWQz5kcvWCa5e3wEoOWStBPgoEHEBs1DQAMUMujIw96N0h9HcyB1jW uY6kQQ6E1S8Aw1H+SgZEpKKTVnnbXlU5PwSSVWGpwSAoFN6KRxh3KfVKSK9XEuye Ig0UDabUYF8pADVR83gqokxFShVlcWbrcha1781XaYdkn4si6ICMuKJ2AA/I29mj p6zWwl9zUog0r0vgzoKqnaHms7uOsPBRAtKwuGMNLv2tsLuv4dSSRaVi8fnhUBet fDkqEb3k4C8Gybu8ANey1rlmdSx3gqYQSWuSTc1TN0/rbekZZvS6jSFVkOEkj1JE WqnW/D3g7gkDtUETQ4elKMkFCeynJAia -----END CERTIFICATE-----Generated at Fri Aug 22 16:34:36 2025 by rpki-client