$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft File: -XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft (raw, json) Hash identifier: V4fhizyVV9dl16DepjFDDYVR7C0Tl+p/LhB7odNRy0c= Subject key identifier: 47:BF:78:BF:E7:45:3D:73:E7:C2:9F:38:04:52:05:92:2D:CE:0C:B4 Authority key identifier: F9:72:E7:5E:3D:03:E5:CE:19:01:93:0C:43:D1:6D:C4:A8:9C:47:92 Certificate issuer: /CN=A91C9484/serialNumber=F972E75E3D03E5CE1901930C43D16DC4A89C4792 Certificate serial: 34EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft Manifest number: 34D8 Signing time: Mon 08 Sep 2025 14:45:49 +0000 Manifest this update: Mon 08 Sep 2025 14:45:49 +0000 Manifest next update: Mon 15 Sep 2025 14:45:49 +0000 Files and hashes: 1: -XLnXj0D5c4ZAZMMQ9FtxKicR5I.crl (hash: 6Pvlq1T1ovWm5TsnGROH1sUuzQAZli8bOpDKamerjxY=) 2: 49036D2CB0D711E58B185E0FC4F9AE02.roa (hash: AsLmLNpdLhba6hfcYMLpd0sVqrUh2auGXL+sqK0hCjo=) 3: FFC89DF8CECD11EEA4AA6D44C4F9AE02.roa (hash: LT0aNSmVv5vvmR7dpu4yqP0BpA8hfoKsmy5XfMM5RqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.crl rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 14:45:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13551 (0x34ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9484, serialNumber=F972E75E3D03E5CE1901930C43D16DC4A89C4792 Validity Not Before: Sep 8 14:45:49 2025 GMT Not After : Sep 15 14:45:49 2025 GMT Subject: CN=68beec1d-0274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:db:67:bc:e5:e6:19:31:6c:ba:62:c8:b6:d2: 2a:cc:a0:3f:83:06:c3:6c:c2:e2:32:53:29:9d:12: 5c:20:a0:0c:73:e1:00:2c:ac:6f:cb:02:46:b0:aa: fd:32:72:00:95:47:91:22:38:e0:00:e6:d0:d8:c2: 69:f9:2b:4e:2d:0f:0d:d3:c2:62:49:9f:1c:7e:c3: 86:cd:b3:f2:d1:44:2b:e7:30:48:76:d9:1f:00:14: 78:2d:e6:f2:8b:aa:83:81:3d:21:c9:86:e7:00:31: 63:f9:b7:25:a3:6c:0c:89:86:d1:e2:05:2a:4c:c4: cd:c5:8e:3f:85:88:3e:95:1b:11:8d:68:87:bd:cb: 33:17:1d:08:27:71:fa:dd:32:9b:ac:c5:4f:fe:dc: 57:2d:83:e7:86:8d:d1:bb:ac:e0:30:ab:29:93:4d: 88:45:5d:6f:ff:67:19:9a:fa:55:05:74:ef:75:4d: 6c:b7:f3:04:95:07:d3:18:02:3b:a1:4e:65:5e:25: 15:9c:b8:49:6c:0b:70:bb:f1:30:77:73:f8:ae:5a: 60:01:52:2e:db:4a:aa:b6:82:c0:c9:87:65:84:7e: ff:1a:6a:b5:c9:f2:2c:2c:9e:8c:cf:ca:6d:ad:da: df:8a:6e:7e:3d:e2:59:6e:ce:0b:da:34:4d:b1:7c: 92:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:BF:78:BF:E7:45:3D:73:E7:C2:9F:38:04:52:05:92:2D:CE:0C:B4 X509v3 Authority Key Identifier: keyid:F9:72:E7:5E:3D:03:E5:CE:19:01:93:0C:43:D1:6D:C4:A8:9C:47:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:a1:7f:9b:bd:d4:86:49:02:b2:fe:d6:f1:be:b9:05:20:1a: 77:1f:d5:94:06:9a:70:b5:f6:bd:06:b5:15:05:ed:e0:8e:82: 51:be:8c:17:05:ec:f1:ba:9a:cd:bc:d5:53:b0:c8:2a:48:c0: ba:04:f6:e9:96:4c:68:2f:94:fd:62:fb:77:84:7b:7f:3d:a6: 4e:f6:3d:49:c5:d3:dd:f4:85:4e:0b:8f:bf:86:68:a9:ae:e2: 8f:2b:0e:cc:bf:5b:11:ab:22:08:5f:e4:e9:d0:0d:67:67:bf: 75:8b:7e:c5:35:04:d2:fb:04:1b:95:0e:18:c8:e2:07:20:f9: fe:58:31:a6:d2:8d:75:37:d3:dd:d4:d5:5b:d6:86:e2:e5:49: 75:56:16:73:3e:78:84:96:df:ff:7e:9b:62:de:a1:72:8b:f7: 5a:f9:50:51:d7:8a:cf:fe:7f:ee:0d:19:34:8a:4c:55:0b:d7: f9:7b:4d:e1:8f:7f:c7:59:02:87:85:64:07:d0:ab:47:6d:39: cf:72:33:23:aa:f8:ba:24:73:e9:f3:fa:ee:83:ae:49:d4:db: fe:51:b6:a6:8c:2d:eb:f7:5a:cc:92:4c:f4:82:b1:03:aa:29: df:a5:06:10:15:58:2d:d2:0c:45:99:cd:1d:b4:88:78:64:a8: 75:a7:00:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk0ODQxMTAvBgNVBAUTKEY5NzJFNzVFM0QwM0U1Q0UxOTAxOTMwQzQzRDE2REM0 QTg5QzQ3OTIwHhcNMjUwOTA4MTQ0NTQ5WhcNMjUwOTE1MTQ0NTQ5WjAYMRYwFAYD VQQDEw02OGJlZWMxZC0wMjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvdtnvOXmGTFsumLIttIqzKA/gwbDbMLiMlMpnRJcIKAMc+EALKxvywJGsKr9 MnIAlUeRIjjgAObQ2MJp+StOLQ8N08JiSZ8cfsOGzbPy0UQr5zBIdtkfABR4Leby i6qDgT0hyYbnADFj+bclo2wMiYbR4gUqTMTNxY4/hYg+lRsRjWiHvcszFx0IJ3H6 3TKbrMVP/txXLYPnho3Ru6zgMKspk02IRV1v/2cZmvpVBXTvdU1st/MElQfTGAI7 oU5lXiUVnLhJbAtwu/Ewd3P4rlpgAVIu20qqtoLAyYdlhH7/Gmq1yfIsLJ6Mz8pt rdrfim5+PeJZbs4L2jRNsXyS/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEe/eL/n RT1z58KfOARSBZItzgy0MB8GA1UdIwQYMBaAFPly5149A+XOGQGTDEPRbcSonEeS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTQ4NC82RkYwRERFMDFE OTQxMUUyOURFQ0I1RjgwOEIwMkNEMi8tWExuWGowRDVjNFpBWk1NUTlGdHhLaWNS NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YTG5YajBENWM0WkFaTU1ROUZ0eEtpY1I1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTQ4NC82RkYwRERFMDFEOTQxMUUyOURFQ0I1RjgwOEIwMkNEMi8tWExuWGowRDVj NFpBWk1NUTlGdHhLaWNSNUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1oX+bvdSGSQKy/tbxvrkFIBp3H9WUBppwtfa9BrUVBe3gjoJRvowX BezxuprNvNVTsMgqSMC6BPbplkxoL5T9Yvt3hHt/PaZO9j1JxdPd9IVOC4+/hmip ruKPKw7Mv1sRqyIIX+Tp0A1nZ791i37FNQTS+wQblQ4YyOIHIPn+WDGm0o11N9Pd 1NVb1obi5Ul1VhZzPniElt//fpti3qFyi/da+VBR14rP/n/uDRk0ikxVC9f5e03h j3/HWQKHhWQH0KtHbTnPcjMjqvi6JHPp8/rug65J1Nv+UbamjC3r91rMkkz0grED qinfpQYQFVgt0gxFmc0dtIh4ZKh1pwBr -----END CERTIFICATE-----Generated at Wed Sep 10 10:08:05 2025 by rpki-client