$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft File: REDuIbNImmUKYWsSDY5b5Xku4Es.mft (raw, json) Hash identifier: ZOIsLi2n3PCy5rzRAMc8a1IfKVR98XwzXt2Eytrp7BA= Subject key identifier: 20:3F:97:FF:2F:6F:AD:DC:6C:86:9B:99:A0:44:F2:0F:F5:1B:0C:10 Authority key identifier: 44:40:EE:21:B3:48:9A:65:0A:61:6B:12:0D:8E:5B:E5:79:2E:E0:4B Certificate issuer: /CN=A91CE3A3/serialNumber=4440EE21B3489A650A616B120D8E5BE5792EE04B Certificate serial: 0C7D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/REDuIbNImmUKYWsSDY5b5Xku4Es.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft Manifest number: 0C76 Signing time: Sat 06 Sep 2025 18:30:12 +0000 Manifest this update: Sat 06 Sep 2025 18:30:12 +0000 Manifest next update: Sat 13 Sep 2025 18:30:12 +0000 Files and hashes: 1: REDuIbNImmUKYWsSDY5b5Xku4Es.crl (hash: 7ZRNGuLP8DFNgEgQgxMK9CeLge6IYNYn53NYmSsjhTE=) 2: 7155C8563E5E11EAB043A522C4F9AE02.roa (hash: kzRNRyDp5yy+6xuR6mT9mG0c89/n8LtjaHr1+0MkgX4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.crl rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/REDuIbNImmUKYWsSDY5b5Xku4Es.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 18:15:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3197 (0xc7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE3A3, serialNumber=4440EE21B3489A650A616B120D8E5BE5792EE04B Validity Not Before: Sep 6 18:30:12 2025 GMT Not After : Sep 13 18:30:12 2025 GMT Subject: CN=68bc7db4-09bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:72:11:76:8d:b5:29:de:0d:e7:64:05:ab:cc: 9d:45:76:4b:ac:42:bc:c4:05:d5:08:18:47:24:3d: 75:13:38:cd:21:8f:95:e6:f1:69:dd:87:89:1a:ee: 66:d3:43:6c:b2:a6:e7:88:25:3d:b2:4a:44:5c:6f: 4d:b9:2f:b1:6a:cf:c0:eb:de:4d:31:71:d9:4d:04: 4d:d8:50:b5:7d:dd:65:aa:c0:ca:a0:57:b8:18:84: dc:cc:ea:ff:b0:7e:46:a5:44:7c:f7:a6:f7:83:d5: a9:95:fe:8d:08:08:62:59:82:64:65:6c:53:2d:26: d8:e2:bb:e9:5e:df:f6:ff:8f:ea:1e:8b:cf:3d:cd: 42:1b:85:e5:3e:0c:08:44:38:06:b1:fd:93:40:a0: 9b:4a:84:16:b3:68:d3:ef:9f:f4:18:8d:20:57:d4: 4f:85:9b:f5:48:fa:fe:94:5f:12:0d:44:00:4e:fe: f4:19:b6:b1:0d:57:cc:04:38:ea:ce:91:2f:3c:88: e3:2e:66:f6:2c:39:15:0e:c6:47:f8:e8:5b:3a:b1: 66:bd:d3:e2:23:64:9c:5a:f5:17:94:ed:92:43:2f: a9:98:f9:04:8d:12:3a:89:e7:af:32:d0:0f:13:02: 86:31:0a:38:83:53:63:1f:7d:b4:26:73:05:66:cb: 86:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:3F:97:FF:2F:6F:AD:DC:6C:86:9B:99:A0:44:F2:0F:F5:1B:0C:10 X509v3 Authority Key Identifier: keyid:44:40:EE:21:B3:48:9A:65:0A:61:6B:12:0D:8E:5B:E5:79:2E:E0:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/REDuIbNImmUKYWsSDY5b5Xku4Es.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:3f:0a:72:ed:4d:17:05:d0:ef:fa:8b:86:a0:df:6c:1c:ac: 88:d2:79:75:5e:30:17:68:54:e1:ec:93:74:34:e4:ed:87:ff: 64:97:4a:40:43:68:26:ff:e4:7d:11:e6:f2:9e:7e:8f:e0:d8: 6c:db:c6:5a:f1:62:fc:8f:d1:e7:22:75:6e:f7:75:79:c7:bf: 16:4a:4e:22:f1:99:30:c7:0e:ec:78:7b:5a:6e:5a:93:8f:28: 3d:30:65:54:7c:de:2a:56:62:ee:8d:3c:33:7b:08:04:84:ba: c3:05:76:18:ac:cc:7c:82:78:d6:b2:7a:51:ae:3d:a5:0b:cf: d4:5f:2a:5f:f5:9a:b7:9c:a2:f6:41:9e:28:45:06:6c:c7:b0: 62:18:01:a9:d6:98:1b:fe:d8:73:dd:ec:04:79:7d:b7:3e:74: 62:c6:c7:3f:73:7c:06:f3:d1:76:78:27:fe:3d:10:db:70:c2: 2a:2f:cb:8c:ad:24:1b:c0:0a:b3:04:fe:97:b6:54:3b:b3:a7: ed:36:a9:62:90:af:96:3c:8b:c4:c2:3f:59:5a:f4:ff:33:78: 99:02:f0:a0:9e:4f:df:bf:a1:c6:e0:60:fb:b9:08:93:ac:d6: 2c:f1:2b:5a:a3:3b:88:ab:be:d7:c4:b4:33:2a:7f:9f:73:80: 61:93:51:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDH0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzQTMxMTAvBgNVBAUTKDQ0NDBFRTIxQjM0ODlBNjUwQTYxNkIxMjBEOEU1QkU1 NzkyRUUwNEIwHhcNMjUwOTA2MTgzMDEyWhcNMjUwOTEzMTgzMDEyWjAYMRYwFAYD VQQDEw02OGJjN2RiNC0wOWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6nIRdo21Kd4N52QFq8ydRXZLrEK8xAXVCBhHJD11EzjNIY+V5vFp3YeJGu5m 00NssqbniCU9skpEXG9NuS+xas/A695NMXHZTQRN2FC1fd1lqsDKoFe4GITczOr/ sH5GpUR896b3g9Wplf6NCAhiWYJkZWxTLSbY4rvpXt/2/4/qHovPPc1CG4XlPgwI RDgGsf2TQKCbSoQWs2jT75/0GI0gV9RPhZv1SPr+lF8SDUQATv70GbaxDVfMBDjq zpEvPIjjLmb2LDkVDsZH+OhbOrFmvdPiI2ScWvUXlO2SQy+pmPkEjRI6ieevMtAP EwKGMQo4g1NjH320JnMFZsuGeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCA/l/8v b63cbIabmaBE8g/1GwwQMB8GA1UdIwQYMBaAFERA7iGzSJplCmFrEg2OW+V5LuBL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTNBMy8xODgyM0M4QzA1 MDExMUVBQkQ5QjIwMkNDNEY5QUUwMi9SRUR1SWJOSW1tVUtZV3NTRFk1YjVYa3U0 RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JFRHVJYk5JbW1VS1lXc1NEWTViNVhrdTRFcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTNBMy8xODgyM0M4QzA1MDExMUVBQkQ5QjIwMkNDNEY5QUUwMi9SRUR1SWJOSW1t VUtZV3NTRFk1YjVYa3U0RXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdPwpy7U0XBdDv+ouGoN9sHKyI0nl1XjAXaFTh7JN0NOTth/9kl0pA Q2gm/+R9Eebynn6P4Nhs28Za8WL8j9HnInVu93V5x78WSk4i8Zkwxw7seHtablqT jyg9MGVUfN4qVmLujTwzewgEhLrDBXYYrMx8gnjWsnpRrj2lC8/UXypf9Zq3nKL2 QZ4oRQZsx7BiGAGp1pgb/thz3ewEeX23PnRixsc/c3wG89F2eCf+PRDbcMIqL8uM rSQbwAqzBP6XtlQ7s6ftNqlikK+WPIvEwj9ZWvT/M3iZAvCgnk/fv6HG4GD7uQiT rNYs8StaozuIq77XxLQzKn+fc4Bhk1Ed -----END CERTIFICATE-----Generated at Sat Sep 6 21:04:32 2025 by rpki-client