$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.mft File: 67Vu9aQ9Hla4rmw179-QarhdJ1U.mft (raw, json) Hash identifier: PxDu83ghH/Sk+OGzvjkUu5eNJcgHgOytFFGWR1YttIo= Subject key identifier: 54:5F:D9:9E:39:7E:F0:BC:71:D9:23:79:48:74:45:D9:1B:A7:C8:3C Authority key identifier: EB:B5:6E:F5:A4:3D:1E:56:B8:AE:6C:35:EF:DF:90:6A:B8:5D:27:55 Certificate issuer: /CN=A91DC8C8/serialNumber=EBB56EF5A43D1E56B8AE6C35EFDF906AB85D2755 Certificate serial: 0227 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67Vu9aQ9Hla4rmw179-QarhdJ1U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.mft Manifest number: 0222 Signing time: Wed 17 Sep 2025 02:29:31 +0000 Manifest this update: Wed 17 Sep 2025 02:29:31 +0000 Manifest next update: Wed 24 Sep 2025 02:29:31 +0000 Files and hashes: 1: 67Vu9aQ9Hla4rmw179-QarhdJ1U.crl (hash: M6nY103SOXCBXhrhqAPTbdQWQWNFhW0xVGSXNaPpeZg=) 2: 376CBBEA504411ED83277887C4F9AE02.roa (hash: T+4lg8d9jLKTS/9QxB/dn+qV3gmWtO4Nms49RgwAEAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.crl rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67Vu9aQ9Hla4rmw179-QarhdJ1U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 02:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 551 (0x227) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC8C8, serialNumber=EBB56EF5A43D1E56B8AE6C35EFDF906AB85D2755 Validity Not Before: Sep 17 02:29:31 2025 GMT Not After : Sep 24 02:29:31 2025 GMT Subject: CN=68ca1d0b-6e0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d8:4e:d6:1e:ba:6e:88:8d:8f:76:6a:c4:65: f3:2c:93:eb:87:00:cf:b3:65:f1:57:f6:e4:84:13: e8:b7:c8:b3:3a:9e:12:23:55:20:2e:f8:72:65:31: 36:b0:85:e6:32:3f:3a:30:69:3b:f2:d2:7b:93:29: 03:cb:31:41:7f:fd:c5:c6:27:4f:ab:88:21:18:32: 0b:73:f0:11:60:32:b6:ae:db:fa:4e:69:5d:0e:b1: 3d:34:21:71:aa:98:2b:07:e9:44:b1:fc:83:1f:94: c5:48:32:8c:a2:6d:8c:0e:c1:37:9f:c4:53:38:bb: 62:ff:05:d9:00:61:cb:55:f3:09:3e:ef:c5:e3:46: 77:c7:b8:13:8a:c7:78:f5:48:99:9e:bf:6f:97:e7: fc:cd:da:6f:bb:29:c0:d2:42:1f:27:b4:8c:44:ea: 53:be:45:9e:2a:ff:3c:6d:e6:34:76:6c:c6:dc:d5: 8d:28:a8:4f:8c:5a:93:0b:4b:76:6a:cd:86:d0:b5: ee:f6:53:61:55:c1:cb:2b:40:48:ec:80:5f:64:bf: a0:96:4f:04:54:7d:b4:41:03:05:c8:ac:c7:51:46: d6:12:3c:4e:73:fa:62:11:a5:d8:50:e7:e4:7b:06: 77:91:92:a7:e4:d4:6d:de:7b:f2:4e:e9:aa:54:01: a0:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:5F:D9:9E:39:7E:F0:BC:71:D9:23:79:48:74:45:D9:1B:A7:C8:3C X509v3 Authority Key Identifier: keyid:EB:B5:6E:F5:A4:3D:1E:56:B8:AE:6C:35:EF:DF:90:6A:B8:5D:27:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67Vu9aQ9Hla4rmw179-QarhdJ1U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:00:48:8c:bf:7a:05:5e:78:81:b5:03:a7:77:b4:5d:dc:ab: 98:5c:a6:5e:5d:96:30:73:11:aa:e5:85:04:52:7b:8b:17:58: 06:a0:fb:4b:78:ce:f8:eb:24:1a:4e:bf:00:3f:f6:a0:40:29: bb:af:b4:0b:1c:9e:45:5b:68:5a:4a:9e:70:a8:c3:45:59:e1: 46:d5:8a:d7:af:fe:bf:9e:ac:d4:83:f7:65:9d:f2:cf:ef:b9: c1:8e:7f:43:20:05:e9:db:4f:1e:0c:e0:b8:96:f4:1b:45:a6: 95:13:3d:a8:9e:0f:ec:03:7d:21:3b:93:35:9e:eb:3f:c3:45: 38:65:0a:09:b7:78:c7:96:d8:ef:82:30:c5:3e:1e:4a:12:03: 0f:75:72:8c:f2:75:9f:ec:51:7e:b4:a7:52:b4:36:41:ea:77: a7:7e:3f:cc:c5:7c:09:51:67:43:18:b4:21:ed:d1:39:14:9f: 8e:ad:9b:e3:2e:33:64:7b:2d:01:fe:69:0a:b6:cb:96:d7:6e: dd:53:85:fd:b7:3f:79:5e:1c:b7:3a:e5:d6:68:12:03:6a:ef: d3:e6:1f:82:83:8e:21:09:c5:26:30:be:a6:78:18:2a:21:21: 7f:49:6a:e4:29:bb:fc:fa:5a:64:7d:fb:fc:fc:d2:bd:f4:38: cd:71:d2:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM4QzgxMTAvBgNVBAUTKEVCQjU2RUY1QTQzRDFFNTZCOEFFNkMzNUVGREY5MDZB Qjg1RDI3NTUwHhcNMjUwOTE3MDIyOTMxWhcNMjUwOTI0MDIyOTMxWjAYMRYwFAYD VQQDEw02OGNhMWQwYi02ZTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNhO1h66boiNj3ZqxGXzLJPrhwDPs2XxV/bkhBPot8izOp4SI1UgLvhyZTE2 sIXmMj86MGk78tJ7kykDyzFBf/3FxidPq4ghGDILc/ARYDK2rtv6TmldDrE9NCFx qpgrB+lEsfyDH5TFSDKMom2MDsE3n8RTOLti/wXZAGHLVfMJPu/F40Z3x7gTisd4 9UiZnr9vl+f8zdpvuynA0kIfJ7SMROpTvkWeKv88beY0dmzG3NWNKKhPjFqTC0t2 as2G0LXu9lNhVcHLK0BI7IBfZL+glk8EVH20QQMFyKzHUUbWEjxOc/piEaXYUOfk ewZ3kZKn5NRt3nvyTumqVAGgFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFRf2Z45 fvC8cdkjeUh0Rdkbp8g8MB8GA1UdIwQYMBaAFOu1bvWkPR5WuK5sNe/fkGq4XSdV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzhDOC85OTQ1RkRBNDUw M0YxMUVEQjI1REY2NkFDNEY5QUUwMi82N1Z1OWFROUhsYTRybXcxNzktUWFyaGRK MVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY3VnU5YVE5SGxhNHJtdzE3OS1RYXJoZEoxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzhDOC85OTQ1RkRBNDUwM0YxMUVEQjI1REY2NkFDNEY5QUUwMi82N1Z1OWFROUhs YTRybXcxNzktUWFyaGRKMVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApAEiMv3oFXniBtQOnd7Rd3KuYXKZeXZYwcxGq5YUEUnuLF1gGoPtL eM746yQaTr8AP/agQCm7r7QLHJ5FW2haSp5wqMNFWeFG1YrXr/6/nqzUg/dlnfLP 77nBjn9DIAXp208eDOC4lvQbRaaVEz2ong/sA30hO5M1nus/w0U4ZQoJt3jHltjv gjDFPh5KEgMPdXKM8nWf7FF+tKdStDZB6nenfj/MxXwJUWdDGLQh7dE5FJ+OrZvj LjNkey0B/mkKtsuW127dU4X9tz95Xhy3OuXWaBIDau/T5h+Cg44hCcUmML6meBgq ISF/SWrkKbv8+lpkffv8/NK99DjNcdK/ -----END CERTIFICATE-----Generated at Thu Sep 18 20:22:49 2025 by rpki-client