$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.mft File: 3Bs5tU9giRrHeKkxbXGwvoAGOW4.mft (raw, json) Hash identifier: LvQYiQtzyR4gqJIoUViomhlfQ7f7yomVBZnkaItpzig= Subject key identifier: AB:16:8B:24:17:71:8F:34:C9:70:76:22:6D:29:41:79:A2:55:16:88 Authority key identifier: DC:1B:39:B5:4F:60:89:1A:C7:78:A9:31:6D:71:B0:BE:80:06:39:6E Certificate issuer: /CN=A91DC4E1/serialNumber=DC1B39B54F60891AC778A9316D71B0BE8006396E Certificate serial: 1B91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bs5tU9giRrHeKkxbXGwvoAGOW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.mft Manifest number: 1B6F Signing time: Mon 08 Sep 2025 16:16:29 +0000 Manifest this update: Mon 08 Sep 2025 16:16:29 +0000 Manifest next update: Mon 15 Sep 2025 16:16:29 +0000 Files and hashes: 1: 3Bs5tU9giRrHeKkxbXGwvoAGOW4.crl (hash: CtvDISw7BcVeeu0B9lFHBn4UNHmD/I2tQaUMlVQ66CQ=) 2: D129428E25DF11E7AC03C03EC4F9AE02.roa (hash: 26Hx4AkbPRTYM9L9rQHlirDpC55IRFhPxlOYhEhXmNA=) 3: 20772F82207611E7AD8F8459C4F9AE02.roa (hash: ItkNWWq8nRtDa6uB2Q8iwUXsM5xJRUOh/lTQOL6uROM=) 4: 920126A625F011E7AB40BB69C4F9AE02.roa (hash: VGx79HjfctMAH3951trK9IBgyFBPVt62lhijc0hOVt4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.crl rsync://rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bs5tU9giRrHeKkxbXGwvoAGOW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 16:16:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7057 (0x1b91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC4E1, serialNumber=DC1B39B54F60891AC778A9316D71B0BE8006396E Validity Not Before: Sep 8 16:16:29 2025 GMT Not After : Sep 15 16:16:29 2025 GMT Subject: CN=68bf015d-c020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5b:d1:84:38:f9:dc:5f:6b:5e:3b:cd:4b:12: 62:e8:ee:0e:4c:83:c2:3e:a6:e9:15:ff:c1:82:0f: b8:fa:77:21:45:13:d7:47:c0:fa:c9:b6:98:67:34: 83:6d:fd:95:fd:ac:87:99:01:b4:bd:49:3e:53:e0: 3e:ac:e5:29:d3:64:34:bf:08:05:ce:dd:32:d4:7e: a2:e4:46:23:81:28:f6:0b:d4:17:b4:5b:32:78:5c: 6c:81:c0:4d:e6:7f:01:63:35:e1:8e:b2:f7:f5:9f: 59:de:49:44:49:c3:b7:c3:ef:15:68:af:2e:b1:66: bc:b7:fa:22:b0:8e:51:01:cb:60:80:63:7a:53:87: f2:04:17:7a:e7:65:94:bd:a6:35:11:f4:da:fa:26: e4:7f:ea:77:9e:0e:75:26:2e:10:ed:e6:16:e5:a0: 2a:e3:8b:d9:e7:79:ff:81:65:ea:b7:b0:0b:7c:04: c0:f6:17:8a:71:dd:52:15:2c:33:c5:f0:1f:ca:62: ac:0b:78:5d:83:b1:fe:ad:7d:45:5a:40:a1:c6:7c: f6:ea:79:42:fb:cd:1d:41:d9:48:8c:ed:6d:27:04: bc:5f:be:70:77:85:30:86:f8:be:a2:16:b2:35:14: b9:75:d7:32:e8:f3:b3:20:73:58:20:f1:3b:f9:d4: 61:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:16:8B:24:17:71:8F:34:C9:70:76:22:6D:29:41:79:A2:55:16:88 X509v3 Authority Key Identifier: keyid:DC:1B:39:B5:4F:60:89:1A:C7:78:A9:31:6D:71:B0:BE:80:06:39:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bs5tU9giRrHeKkxbXGwvoAGOW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:9c:e4:82:54:59:e8:f5:b3:d8:44:90:bf:03:2b:fd:2d:f1: 3f:cd:14:30:14:62:6d:cf:a0:05:34:ee:2b:12:4d:a6:21:6d: a3:35:89:8c:29:6d:27:64:20:44:04:99:0d:2a:17:a2:50:1e: 7e:1e:fc:65:97:e8:4f:cf:7a:e8:c9:9b:4a:7f:ed:d7:91:4d: 36:2a:7c:df:f5:0d:d8:1f:9c:dd:33:14:c1:14:90:e8:ff:35: 8e:6c:cb:7f:c1:50:49:a6:63:d5:bf:b1:e8:21:8e:8c:c3:b2: c8:55:68:82:96:87:d6:b9:9c:b1:c3:6c:fc:4c:78:f9:23:a3: 67:82:73:75:5b:09:fd:c9:64:74:f5:c1:94:a0:14:05:97:ea: 44:c1:66:13:e6:c2:98:da:d8:96:d5:66:f8:c2:6d:e0:71:76: 87:79:d6:9e:ff:97:13:b5:75:b3:d4:b9:8b:f9:c1:f5:f0:8e: 5f:22:bd:71:5e:c7:d9:b4:d1:23:1f:c9:54:2c:bb:7d:53:39: 4c:fc:6c:f8:08:29:2d:ac:7a:d3:59:0a:f5:a9:59:af:fa:20: 90:3d:57:dc:69:69:5d:4b:ae:ba:ec:21:bb:be:5b:c6:bf:18: 85:cd:6c:75:dd:11:84:a5:59:2d:a0:b9:65:50:11:2d:9c:52: b3:05:bd:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG5EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM0RTExMTAvBgNVBAUTKERDMUIzOUI1NEY2MDg5MUFDNzc4QTkzMTZENzFCMEJF ODAwNjM5NkUwHhcNMjUwOTA4MTYxNjI5WhcNMjUwOTE1MTYxNjI5WjAYMRYwFAYD VQQDEw02OGJmMDE1ZC1jMDIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1lvRhDj53F9rXjvNSxJi6O4OTIPCPqbpFf/Bgg+4+nchRRPXR8D6ybaYZzSD bf2V/ayHmQG0vUk+U+A+rOUp02Q0vwgFzt0y1H6i5EYjgSj2C9QXtFsyeFxsgcBN 5n8BYzXhjrL39Z9Z3klEScO3w+8VaK8usWa8t/oisI5RActggGN6U4fyBBd652WU vaY1EfTa+ibkf+p3ng51Ji4Q7eYW5aAq44vZ53n/gWXqt7ALfATA9heKcd1SFSwz xfAfymKsC3hdg7H+rX1FWkChxnz26nlC+80dQdlIjO1tJwS8X75wd4Uwhvi+ohay NRS5ddcy6POzIHNYIPE7+dRhOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKsWiyQX cY80yXB2Im0pQXmiVRaIMB8GA1UdIwQYMBaAFNwbObVPYIkax3ipMW1xsL6ABjlu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzRFMS8yMDA0RjE0NDE2 MDExMUU3QThBQzIyNURDNEY5QUUwMi8zQnM1dFU5Z2lSckhlS2t4YlhHd3ZvQUdP VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNCczV0VTlnaVJySGVLa3hiWEd3dm9BR09XNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzRFMS8yMDA0RjE0NDE2MDExMUU3QThBQzIyNURDNEY5QUUwMi8zQnM1dFU5Z2lS ckhlS2t4YlhHd3ZvQUdPVzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAynOSCVFno9bPYRJC/Ayv9LfE/zRQwFGJtz6AFNO4rEk2mIW2jNYmM KW0nZCBEBJkNKheiUB5+Hvxll+hPz3royZtKf+3XkU02Knzf9Q3YH5zdMxTBFJDo /zWObMt/wVBJpmPVv7HoIY6Mw7LIVWiClofWuZyxw2z8THj5I6NngnN1Wwn9yWR0 9cGUoBQFl+pEwWYT5sKY2tiW1Wb4wm3gcXaHedae/5cTtXWz1LmL+cH18I5fIr1x XsfZtNEjH8lULLt9UzlM/Gz4CCktrHrTWQr1qVmv+iCQPVfcaWldS6667CG7vlvG vxiFzWx13RGEpVktoLllUBEtnFKzBb2E -----END CERTIFICATE-----Generated at Tue Sep 9 18:16:19 2025 by rpki-client