$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft File: Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft (raw, json) Hash identifier: M0u6Bs8l0g/fKxEvK7D5AZGnARtGlEStL36h3Lz7oWo= Subject key identifier: B8:A0:95:21:F0:B1:1D:1B:01:EE:1E:45:98:C3:B1:AC:95:3F:11:8A Authority key identifier: 5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A Certificate issuer: /CN=A91D63EA/serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A Certificate serial: 015D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft Manifest number: 0152 Signing time: Sun 07 Sep 2025 04:43:00 +0000 Manifest this update: Sun 07 Sep 2025 04:43:00 +0000 Manifest next update: Sun 14 Sep 2025 04:43:00 +0000 Files and hashes: 1: Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl (hash: ZlZNeep4ehR64gl3KvyLm+QbbgvsB8kVYr8KFOUOAYM=) 2: 2B6413D4670811EF9D46FA4FC4F9AE02.roa (hash: pEMsHg7hpkICm+xaNCW+Re7HwXfnTTFuauFbRpCHC+4=) 3: 21047C70672211EF998AEF2BC4F9AE02.roa (hash: 3NZc5h6ed9BUlmgYjohUHdHLn8ZtKRYjymamcmwqc6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 04:42:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 349 (0x15d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D63EA, serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A Validity Not Before: Sep 7 04:43:00 2025 GMT Not After : Sep 14 04:43:00 2025 GMT Subject: CN=68bd0d54-02fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:93:03:2f:e4:54:f1:98:60:be:47:14:89:5d: 9f:b9:d7:bd:cd:cc:d3:c5:ee:4f:44:51:de:1b:3e: 14:69:db:78:89:41:e4:80:be:20:ad:fa:3a:68:51: 8c:1a:8c:6a:b6:74:5f:be:45:5e:a7:f5:95:e6:ba: 61:0f:b3:ab:20:3a:36:99:21:39:07:fc:04:c3:b8: 8c:68:08:47:1f:03:df:4d:02:c0:05:ce:6e:ef:e4: f6:66:5c:d0:2e:f3:29:0f:fb:83:d0:18:d4:d9:e4: 95:68:ee:ac:f5:21:77:52:e1:60:56:16:75:5e:df: 85:bd:80:8a:28:5d:98:cf:fa:f4:f4:e2:2e:9b:16: 21:b8:a9:f9:fe:25:23:56:bf:a2:9d:0c:7e:d8:75: 73:36:a0:26:73:9b:bb:69:ee:20:02:28:2f:48:36: 23:ba:b8:fa:02:1d:b9:45:fb:15:c7:c0:7c:f7:8d: a2:49:02:32:db:72:eb:02:9b:c0:52:ba:a9:02:2b: fd:35:38:2a:be:79:87:eb:ea:6d:75:13:32:90:59: 88:da:57:4a:35:a5:4f:b5:fe:88:3e:89:92:12:1c: 39:cc:c9:a1:cd:22:e7:12:21:2b:ad:79:bb:af:68: ec:e5:c4:78:79:7a:df:0a:25:56:7d:98:8e:bd:24: 42:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:A0:95:21:F0:B1:1D:1B:01:EE:1E:45:98:C3:B1:AC:95:3F:11:8A X509v3 Authority Key Identifier: keyid:5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:3d:d0:24:cc:83:99:10:93:c7:58:17:90:78:bd:10:53:ea: 94:c0:e5:12:4b:52:d6:de:05:c3:62:4c:c5:46:34:cb:6e:f8: 96:c2:6c:f0:29:55:1f:77:ab:df:b2:7d:4c:11:41:eb:08:2d: 12:59:f0:9e:7c:a1:c3:eb:12:78:9e:17:0f:a8:f7:70:d6:5c: 4d:ac:e9:7f:f0:8d:61:74:5d:12:1b:78:e2:ee:ec:12:ec:fc: 53:41:9b:3f:8b:9c:86:3d:66:d5:68:6f:f6:af:aa:7a:f3:a0: 71:27:f3:7d:4d:a4:2e:c7:c8:0e:1e:07:da:2b:bb:60:0d:70: 30:68:74:28:8e:fb:f8:87:8c:b6:ac:9f:f1:a2:92:09:70:f5: 17:39:ed:8d:8c:73:63:45:6b:40:c5:8f:bb:f3:da:63:a2:43: 05:7c:ac:0d:ce:ea:b3:7a:7c:45:08:90:f5:03:29:15:e8:b0: 86:f3:3b:67:fb:12:21:4f:35:0b:d0:30:29:96:b3:c3:d0:7c: f4:a4:2a:d3:05:a9:9e:12:1b:cd:2a:3a:f0:d7:92:8b:16:86: dd:8c:66:08:c4:2b:53:f6:da:d0:2a:5a:d8:8e:12:9d:6b:5f: 2d:a1:07:a2:ee:7b:6f:11:67:0e:1e:0a:41:9f:f8:d2:da:64: be:18:21:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYzRUExMTAvBgNVBAUTKDVFN0REMDVBOUMxQkUwNDQ0NEFDRTAzRkU0QTkyMDI2 ODA0RDRCMkEwHhcNMjUwOTA3MDQ0MzAwWhcNMjUwOTE0MDQ0MzAwWjAYMRYwFAYD VQQDEw02OGJkMGQ1NC0wMmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZMDL+RU8ZhgvkcUiV2fude9zczTxe5PRFHeGz4Uadt4iUHkgL4grfo6aFGM GoxqtnRfvkVep/WV5rphD7OrIDo2mSE5B/wEw7iMaAhHHwPfTQLABc5u7+T2ZlzQ LvMpD/uD0BjU2eSVaO6s9SF3UuFgVhZ1Xt+FvYCKKF2Yz/r09OIumxYhuKn5/iUj Vr+inQx+2HVzNqAmc5u7ae4gAigvSDYjurj6Ah25RfsVx8B8942iSQIy23LrApvA UrqpAiv9NTgqvnmH6+ptdRMykFmI2ldKNaVPtf6IPomSEhw5zMmhzSLnEiErrXm7 r2js5cR4eXrfCiVWfZiOvSRCjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLiglSHw sR0bAe4eRZjDsayVPxGKMB8GA1UdIwQYMBaAFF590FqcG+BERKzgP+SpICaATUsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjNFQS81MEE0Mjg5RTk1 RkYxMUVFQTZBNEY3MEFDNEY5QUUwMi9YbjNRV3B3YjRFUkVyT0FfNUtrZ0pvQk5T eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1huM1FXcHdiNEVSRXJPQV81S2tnSm9CTlN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjNFQS81MEE0Mjg5RTk1RkYxMUVFQTZBNEY3MEFDNEY5QUUwMi9YbjNRV3B3YjRF UkVyT0FfNUtrZ0pvQk5TeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYPdAkzIOZEJPHWBeQeL0QU+qUwOUSS1LW3gXDYkzFRjTLbviWwmzw KVUfd6vfsn1MEUHrCC0SWfCefKHD6xJ4nhcPqPdw1lxNrOl/8I1hdF0SG3ji7uwS 7PxTQZs/i5yGPWbVaG/2r6p686BxJ/N9TaQux8gOHgfaK7tgDXAwaHQojvv4h4y2 rJ/xopIJcPUXOe2NjHNjRWtAxY+789pjokMFfKwNzuqzenxFCJD1AykV6LCG8ztn +xIhTzUL0DAplrPD0Hz0pCrTBameEhvNKjrw15KLFobdjGYIxCtT9trQKlrYjhKd a18toQei7ntvEWcOHgpBn/jS2mS+GCHJ -----END CERTIFICATE-----Generated at Mon Sep 8 08:58:39 2025 by rpki-client