$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft File: esDADw_KR57kZeT39UXoyUmT1hw.mft (raw, json) Hash identifier: lIfeWHW30ARjckjOAIsseHGuLSQ0ccpNSnC+uzodgVM= Subject key identifier: 76:2E:85:5A:4A:D8:FA:B4:04:97:AA:B5:1C:ED:A1:5F:FD:5B:AB:2A Authority key identifier: 7A:C0:C0:0F:0F:CA:47:9E:E4:65:E4:F7:F5:45:E8:C9:49:93:D6:1C Certificate issuer: /CN=A91D1691/serialNumber=7AC0C00F0FCA479EE465E4F7F545E8C94993D61C Certificate serial: 247F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esDADw_KR57kZeT39UXoyUmT1hw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft Manifest number: 2453 Signing time: Mon 08 Sep 2025 15:47:48 +0000 Manifest this update: Mon 08 Sep 2025 15:47:47 +0000 Manifest next update: Mon 15 Sep 2025 15:47:47 +0000 Files and hashes: 1: esDADw_KR57kZeT39UXoyUmT1hw.crl (hash: fPvlpPfI/o/cDKyKDLDtKhsHvpVaJ4nbY+MpyQWl//I=) 2: E8976FF0928211EF8D2A551EC4F9AE02.roa (hash: KaXP6yLqLy6u16YQgUTkal+kksEzHmImjnWX4XyyF9s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.crl rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esDADw_KR57kZeT39UXoyUmT1hw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 15:47:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9343 (0x247f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1691, serialNumber=7AC0C00F0FCA479EE465E4F7F545E8C94993D61C Validity Not Before: Sep 8 15:47:47 2025 GMT Not After : Sep 15 15:47:47 2025 GMT Subject: CN=68befaa3-f7cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d8:f5:0b:3e:48:25:59:d4:01:2a:ae:bd:f9: a6:eb:21:94:7e:74:ac:b9:f1:a8:e2:1e:2a:79:45: 23:2a:8f:21:2c:b8:f8:8a:f0:29:e7:72:bb:41:7d: 75:99:82:38:e2:ca:fa:e4:e5:04:5a:f4:78:d3:16: c9:9f:b1:7e:6a:b0:4e:75:97:8a:02:6d:86:a8:79: 0b:a7:4f:cb:56:fd:1b:7a:77:72:68:48:c3:bb:3e: ca:63:99:76:b1:4e:07:cf:fa:e7:03:f5:31:a4:16: ed:e2:2a:e1:dd:9f:6e:7f:48:b5:a6:ec:ac:84:e4: 82:2e:27:6f:5b:6d:b9:df:f6:24:4f:f0:49:9a:8c: 7e:da:4d:18:45:1e:54:b5:38:1c:50:82:c4:99:ad: fb:bb:41:26:bc:ad:e3:c1:cf:2f:52:bd:81:4d:93: 81:8b:e6:3f:ac:3a:1d:bf:6c:de:64:fb:0a:43:85: d9:ce:e9:cb:59:38:a1:16:25:f3:3b:d4:e7:58:2b: bf:b1:d6:c7:7a:8e:b7:64:d7:40:27:81:74:16:59: 0c:ab:18:a0:ed:8f:43:72:ab:d4:8d:6d:f1:21:f9: 51:13:f2:91:ba:a5:85:01:5d:2a:9c:0a:34:54:42: cd:0e:b2:2b:aa:53:7d:04:47:90:5a:8d:67:4c:c9: 17:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:2E:85:5A:4A:D8:FA:B4:04:97:AA:B5:1C:ED:A1:5F:FD:5B:AB:2A X509v3 Authority Key Identifier: keyid:7A:C0:C0:0F:0F:CA:47:9E:E4:65:E4:F7:F5:45:E8:C9:49:93:D6:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esDADw_KR57kZeT39UXoyUmT1hw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:c6:8c:83:4b:15:55:a6:d9:8c:20:32:9a:f9:12:7e:2e:7b: 5c:31:16:f0:77:b4:aa:5d:b3:69:b2:a6:61:9f:ea:7a:8c:cc: 47:20:73:e5:aa:9b:d4:0a:10:70:4c:03:e1:ba:4a:29:32:2b: 3c:67:c5:9b:80:bb:1c:fc:2d:06:c0:90:c0:d4:2b:ef:8d:ea: bb:0f:31:27:f7:cc:6f:d1:8d:b4:74:5c:fd:96:e6:1d:81:66: e8:fa:b2:94:48:0a:2b:56:02:f9:9e:98:fe:a2:a2:a5:4f:1e: 22:33:ae:48:8d:aa:d4:b6:77:a7:8f:d9:8a:33:ad:ee:f3:38: cc:a7:70:af:0b:fb:fd:c6:4f:a6:fb:ed:b2:23:32:ee:90:c1: 4e:63:05:6b:72:29:e5:11:e2:e5:87:07:15:83:f3:a5:5c:ea: 24:44:1d:1b:85:7b:1c:ce:5c:9b:83:c7:e4:e9:60:78:88:a8: 35:1c:58:61:26:e1:f8:9f:8f:8f:dc:e5:89:eb:5c:8e:96:3c: 42:a7:45:27:ab:99:f5:8c:fd:ba:ba:a0:7a:63:ba:9e:b5:d7: 81:ac:d2:d7:34:79:af:51:ab:47:76:45:f5:64:fa:29:98:73: c4:c8:79:dd:8b:22:58:07:9c:54:31:e2:c3:36:22:0a:77:f7: 2f:3d:45:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE2OTExMTAvBgNVBAUTKDdBQzBDMDBGMEZDQTQ3OUVFNDY1RTRGN0Y1NDVFOEM5 NDk5M0Q2MUMwHhcNMjUwOTA4MTU0NzQ3WhcNMjUwOTE1MTU0NzQ3WjAYMRYwFAYD VQQDEw02OGJlZmFhMy1mN2NkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt9j1Cz5IJVnUASquvfmm6yGUfnSsufGo4h4qeUUjKo8hLLj4ivAp53K7QX11 mYI44sr65OUEWvR40xbJn7F+arBOdZeKAm2GqHkLp0/LVv0bendyaEjDuz7KY5l2 sU4Hz/rnA/UxpBbt4irh3Z9uf0i1puyshOSCLidvW2253/YkT/BJmox+2k0YRR5U tTgcUILEma37u0EmvK3jwc8vUr2BTZOBi+Y/rDodv2zeZPsKQ4XZzunLWTihFiXz O9TnWCu/sdbHeo63ZNdAJ4F0FlkMqxig7Y9DcqvUjW3xIflRE/KRuqWFAV0qnAo0 VELNDrIrqlN9BEeQWo1nTMkXSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHYuhVpK 2Pq0BJeqtRztoV/9W6sqMB8GA1UdIwQYMBaAFHrAwA8Pykee5GXk9/VF6MlJk9Yc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTY5MS81QUZDMjY5MjY1 MkIxMUU1OTdBODY4ODFDNEY5QUUwMi9lc0RBRHdfS1I1N2taZVQzOVVYb3lVbVQx aHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VzREFEd19LUjU3a1plVDM5VVhveVVtVDFody5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTY5MS81QUZDMjY5MjY1MkIxMUU1OTdBODY4ODFDNEY5QUUwMi9lc0RBRHdfS1I1 N2taZVQzOVVYb3lVbVQxaHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuxoyDSxVVptmMIDKa+RJ+LntcMRbwd7SqXbNpsqZhn+p6jMxHIHPl qpvUChBwTAPhukopMis8Z8WbgLsc/C0GwJDA1Cvvjeq7DzEn98xv0Y20dFz9luYd gWbo+rKUSAorVgL5npj+oqKlTx4iM65IjarUtnenj9mKM63u8zjMp3CvC/v9xk+m ++2yIzLukMFOYwVrcinlEeLlhwcVg/OlXOokRB0bhXsczlybg8fk6WB4iKg1HFhh JuH4n4+P3OWJ61yOljxCp0Unq5n1jP26uqB6Y7qetdeBrNLXNHmvUatHdkX1ZPop mHPEyHndiyJYB5xUMeLDNiIKd/cvPUUw -----END CERTIFICATE-----Generated at Tue Sep 9 20:20:35 2025 by rpki-client