$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft File: RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft (raw, json) Hash identifier: hWNtQglBKOrH8RJ1rsMmJsR41r68p3kqoWWrFkBb41Q= Subject key identifier: C0:77:9F:E2:A2:6D:F1:DF:DA:77:A4:3F:E7:71:98:85:15:B3:8C:8A Authority key identifier: 45:C8:08:A8:AC:DE:24:AC:96:13:E0:1A:49:59:61:00:ED:5E:8C:F1 Certificate issuer: /CN=A91C6833/serialNumber=45C808A8ACDE24AC9613E01A49596100ED5E8CF1 Certificate serial: 1E7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcgIqKzeJKyWE-AaSVlhAO1ejPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft Manifest number: 1E68 Signing time: Sun 24 Aug 2025 16:02:39 +0000 Manifest this update: Sun 24 Aug 2025 16:02:39 +0000 Manifest next update: Sun 31 Aug 2025 16:02:39 +0000 Files and hashes: 1: RcgIqKzeJKyWE-AaSVlhAO1ejPE.crl (hash: b6+5+UCcyj2fElZOCYPl9mzkH3CUN+CnqgJckRio8HI=) 2: 3F1BB7A09BC011EF995CBB11C4F9AE02.roa (hash: ppVaHDx1dLxEzXzKs4B/Bei6naIiQDjP+g7Sivk4L7g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.crl rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcgIqKzeJKyWE-AaSVlhAO1ejPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 16:02:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7805 (0x1e7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6833, serialNumber=45C808A8ACDE24AC9613E01A49596100ED5E8CF1 Validity Not Before: Aug 24 16:02:39 2025 GMT Not After : Aug 31 16:02:39 2025 GMT Subject: CN=68ab379f-2002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:48:bc:90:a1:db:c2:17:5c:44:9b:81:f5:64: c4:d5:45:cb:67:ef:f8:72:c9:e9:fb:f4:89:02:c2: e7:75:9a:76:c1:50:32:aa:48:fd:0f:83:92:0f:e4: 79:f6:e4:87:0e:43:55:99:eb:40:ad:5a:eb:06:9e: e6:af:75:e7:dc:19:af:c0:33:06:ee:a4:dd:d7:59: d1:85:94:90:d4:da:a9:b5:8d:45:ab:02:47:cd:44: f1:bd:00:c5:e8:9e:20:84:55:18:19:60:18:72:fe: 66:83:90:1b:e7:fa:26:57:37:fd:e0:98:10:a1:f0: 4a:43:5d:6a:3a:59:a2:b3:61:ee:1d:53:82:22:ae: 67:1b:43:12:0f:53:f1:b4:8d:5f:84:5c:55:0d:df: dc:d3:98:03:af:ab:b6:47:cc:d4:29:ef:8e:18:9e: 0d:7f:ac:b5:6f:44:06:b5:7f:35:78:37:60:1b:28: 7c:a2:3e:67:20:22:96:d4:7e:27:d7:11:1b:8f:f0: d1:25:8a:e3:83:bd:14:89:b5:03:57:00:45:4c:eb: 46:00:bf:92:cb:fa:e3:fa:45:31:fb:53:73:76:4e: 75:67:87:fa:b2:2a:6a:c8:41:08:52:d8:cd:41:54: ff:6d:b9:86:c7:c8:83:93:f9:5f:29:59:87:39:96: 02:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:77:9F:E2:A2:6D:F1:DF:DA:77:A4:3F:E7:71:98:85:15:B3:8C:8A X509v3 Authority Key Identifier: keyid:45:C8:08:A8:AC:DE:24:AC:96:13:E0:1A:49:59:61:00:ED:5E:8C:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcgIqKzeJKyWE-AaSVlhAO1ejPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:d1:3f:78:6c:a6:05:fb:1d:dc:00:b9:af:c6:d1:73:e1:72: 12:ff:33:fa:ef:e7:6c:e8:38:c3:1d:ca:65:6c:51:35:3a:99: 29:47:c3:6d:98:19:22:ad:ab:8b:00:ec:52:58:90:31:a2:db: 77:ed:f7:6e:30:e7:aa:f7:4e:f5:d2:86:c2:b1:f0:da:2f:6b: 78:a3:3d:00:5e:92:ec:73:dd:78:be:02:98:0a:b0:85:45:cc: 52:b8:ac:92:8e:90:00:62:4b:44:ab:2f:ad:7d:0d:a3:2c:f6: d8:c3:ca:85:20:cb:8c:58:2f:d7:46:b7:f8:e4:d5:66:35:5b: 1a:1e:ec:45:1e:2e:c2:f0:29:4a:49:8e:80:5c:4d:d5:e0:a9: b6:b1:75:8e:9c:3b:56:b3:26:46:00:9f:7b:a2:44:61:cc:72: d6:0e:c8:ce:29:72:62:eb:d0:7b:cd:0a:0c:57:f0:bb:7b:f0: 5d:4b:3b:a0:43:e7:f8:bc:5c:9d:8a:8e:b8:63:5e:e8:10:e4: cf:2e:22:af:0d:fd:81:a7:77:29:7f:69:2f:79:0b:4a:ec:2d: 3d:3d:49:dc:99:ca:3e:e3:ff:4c:86:52:51:be:25:9c:09:e6: d0:94:c9:f1:7a:a9:49:bc:eb:7d:f7:42:f4:89:50:46:13:c1: 65:80:da:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHn0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY4MzMxMTAvBgNVBAUTKDQ1QzgwOEE4QUNERTI0QUM5NjEzRTAxQTQ5NTk2MTAw RUQ1RThDRjEwHhcNMjUwODI0MTYwMjM5WhcNMjUwODMxMTYwMjM5WjAYMRYwFAYD VQQDEw02OGFiMzc5Zi0yMDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqEi8kKHbwhdcRJuB9WTE1UXLZ+/4csnp+/SJAsLndZp2wVAyqkj9D4OSD+R5 9uSHDkNVmetArVrrBp7mr3Xn3BmvwDMG7qTd11nRhZSQ1NqptY1FqwJHzUTxvQDF 6J4ghFUYGWAYcv5mg5Ab5/omVzf94JgQofBKQ11qOlmis2HuHVOCIq5nG0MSD1Px tI1fhFxVDd/c05gDr6u2R8zUKe+OGJ4Nf6y1b0QGtX81eDdgGyh8oj5nICKW1H4n 1xEbj/DRJYrjg70UibUDVwBFTOtGAL+Sy/rj+kUx+1Nzdk51Z4f6sipqyEEIUtjN QVT/bbmGx8iDk/lfKVmHOZYC/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMB3n+Ki bfHf2nekP+dxmIUVs4yKMB8GA1UdIwQYMBaAFEXICKis3iSslhPgGklZYQDtXozx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjgzMy9GM0Q0ODBFQzgz QjMxMUU2OUREODY3MzBDNEY5QUUwMi9SY2dJcUt6ZUpLeVdFLUFhU1ZsaEFPMWVq UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JjZ0lxS3plSkt5V0UtQWFTVmxoQU8xZWpQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjgzMy9GM0Q0ODBFQzgzQjMxMUU2OUREODY3MzBDNEY5QUUwMi9SY2dJcUt6ZUpL eVdFLUFhU1ZsaEFPMWVqUEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA60T94bKYF+x3cALmvxtFz4XIS/zP67+ds6DjDHcplbFE1OpkpR8Nt mBkirauLAOxSWJAxott37fduMOeq90710obCsfDaL2t4oz0AXpLsc914vgKYCrCF RcxSuKySjpAAYktEqy+tfQ2jLPbYw8qFIMuMWC/XRrf45NVmNVsaHuxFHi7C8ClK SY6AXE3V4Km2sXWOnDtWsyZGAJ97okRhzHLWDsjOKXJi69B7zQoMV/C7e/BdSzug Q+f4vFydio64Y17oEOTPLiKvDf2Bp3cpf2kveQtK7C09PUncmco+4/9MhlJRviWc CebQlMnxeqlJvOt990L0iVBGE8FlgNrb -----END CERTIFICATE-----Generated at Sun Aug 24 22:21:00 2025 by rpki-client