$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft File: ll15uIln4ofmpRU6EE_BTsEYWxE.mft (raw, json) Hash identifier: bYV7WyzkQqe6mLyvMCOxEUXL/lnY2oZ5ZJ6s7+sokgs= Subject key identifier: C6:04:DA:2D:2C:E4:43:0D:E9:A7:70:49:32:1A:59:99:11:6A:ED:8D Authority key identifier: 96:5D:79:B8:89:67:E2:87:E6:A5:15:3A:10:4F:C1:4E:C1:18:5B:11 Certificate issuer: /CN=A91DF859/serialNumber=965D79B88967E287E6A5153A104FC14EC1185B11 Certificate serial: 03A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft Manifest number: 039E Signing time: Fri 05 Sep 2025 01:05:26 +0000 Manifest this update: Fri 05 Sep 2025 01:05:26 +0000 Manifest next update: Fri 12 Sep 2025 01:05:26 +0000 Files and hashes: 1: ll15uIln4ofmpRU6EE_BTsEYWxE.crl (hash: Zp2VP3sGM0PhOXKzQcy/Ai9pd0P561UWyP2FbXU8AXg=) 2: 1CDBD11CAE3711ECB61BED46C4F9AE02.roa (hash: 2gg461BffUf/xT7BkrRnrVM5ZugLJyBnhbCMdi11J1w=) 3: 1C43D57EAE3711ECB61BED46C4F9AE02.roa (hash: ZnO5JlWoEl5dNZhohsJyvbgouMlAXBiHwRW5x4khv3w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.crl rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 01:05:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 936 (0x3a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF859, serialNumber=965D79B88967E287E6A5153A104FC14EC1185B11 Validity Not Before: Sep 5 01:05:26 2025 GMT Not After : Sep 12 01:05:26 2025 GMT Subject: CN=68ba3756-0eb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:03:d9:91:72:3b:55:83:f9:75:6d:b4:dd:e8: 3d:1f:59:e9:fd:84:fd:9e:16:74:3f:b3:ac:86:c7: 3b:db:0a:5e:a2:a9:08:51:81:22:86:0f:fd:b8:fa: 5f:8a:6a:6c:39:92:89:ff:60:48:7c:99:36:aa:42: 60:79:08:16:1a:3c:44:b7:d0:cc:5a:dd:07:c8:1f: 90:2c:3f:75:cf:ad:f0:f8:64:af:fc:39:b8:fe:aa: b3:5b:ad:7f:1b:ee:8d:4c:82:e7:71:3b:e1:48:ea: 68:76:35:45:1d:8a:9a:71:8c:e4:ae:a4:70:9a:d4: b7:cd:38:e6:90:09:19:99:33:ab:e7:9f:3d:39:2b: 2d:8c:d7:1d:d8:58:95:b0:48:d5:ef:6e:f9:ca:fd: 46:8f:d9:f3:11:7e:05:f9:a3:1c:75:af:07:7f:5e: 60:6b:e4:74:70:4e:35:38:bc:37:91:16:28:c2:d3: d2:fd:14:81:08:09:8f:f4:01:31:c4:54:c0:34:5d: 5a:ef:2c:5e:44:df:44:be:31:9e:12:8c:0d:30:27: fa:d2:ef:a6:a2:04:9a:9e:e0:86:bd:cb:17:60:1e: 1c:ce:aa:11:c8:6a:77:6b:6e:14:e2:ea:50:14:50: 40:33:f1:7b:98:ac:cb:6c:e3:36:c0:fc:cf:67:16: b2:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:04:DA:2D:2C:E4:43:0D:E9:A7:70:49:32:1A:59:99:11:6A:ED:8D X509v3 Authority Key Identifier: keyid:96:5D:79:B8:89:67:E2:87:E6:A5:15:3A:10:4F:C1:4E:C1:18:5B:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:0c:e4:95:85:c9:2d:70:eb:38:87:3c:4a:18:3d:7a:00:99: c9:07:8b:d5:75:6c:75:f9:3c:77:1d:0f:d8:0e:d6:b0:32:11: 44:b9:61:0c:5f:46:a7:90:8c:77:97:c3:a9:ad:e1:51:e4:ba: a0:24:5b:ba:09:8e:ad:27:3a:d4:6e:5c:c1:dc:1e:59:f4:3e: 3c:7c:39:e4:b2:1b:2b:c2:4b:b7:4f:65:09:7f:39:d4:d0:80: 7f:d4:72:7f:56:fd:ca:0c:41:2a:e8:76:cb:39:48:72:59:cc: 07:c6:b0:56:47:e1:a7:bc:d5:8d:ee:24:a5:30:0f:69:c7:12: ca:34:2b:b1:1d:0b:46:a2:4e:1c:e3:f0:d1:eb:96:cb:dc:0d: 6c:a3:c8:75:cd:0b:3a:7c:48:ff:9a:b4:a4:43:d4:dd:67:54: 06:cd:fa:16:62:b8:b8:dc:8d:2d:fb:aa:37:6a:8c:10:63:cd: 79:da:63:70:e3:92:4d:af:5e:63:08:66:1e:21:fb:14:71:35: 94:58:05:8b:09:8e:32:64:91:8b:3e:80:51:24:b5:09:bb:30: 68:04:26:9a:69:73:25:1f:6e:f4:22:2c:42:19:e0:a7:2d:38: 65:33:4b:3f:3e:d7:9e:14:5f:e5:ee:de:b2:96:f7:41:b3:db: 49:a2:3e:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY4NTkxMTAvBgNVBAUTKDk2NUQ3OUI4ODk2N0UyODdFNkE1MTUzQTEwNEZDMTRF QzExODVCMTEwHhcNMjUwOTA1MDEwNTI2WhcNMjUwOTEyMDEwNTI2WjAYMRYwFAYD VQQDEw02OGJhMzc1Ni0wZWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwAPZkXI7VYP5dW203eg9H1np/YT9nhZ0P7Oshsc72wpeoqkIUYEihg/9uPpf impsOZKJ/2BIfJk2qkJgeQgWGjxEt9DMWt0HyB+QLD91z63w+GSv/Dm4/qqzW61/ G+6NTILncTvhSOpodjVFHYqacYzkrqRwmtS3zTjmkAkZmTOr5589OSstjNcd2FiV sEjV7275yv1Gj9nzEX4F+aMcda8Hf15ga+R0cE41OLw3kRYowtPS/RSBCAmP9AEx xFTANF1a7yxeRN9EvjGeEowNMCf60u+mogSanuCGvcsXYB4czqoRyGp3a24U4upQ FFBAM/F7mKzLbOM2wPzPZxayoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMYE2i0s 5EMN6adwSTIaWZkRau2NMB8GA1UdIwQYMBaAFJZdebiJZ+KH5qUVOhBPwU7BGFsR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjg1OS9DMTRGNTVDRUFF MzMxMUVDOUZBNjBGNDNDNEY5QUUwMi9sbDE1dUlsbjRvZm1wUlU2RUVfQlRzRVlX eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xsMTV1SWxuNG9mbXBSVTZFRV9CVHNFWVd4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Rjg1OS9DMTRGNTVDRUFFMzMxMUVDOUZBNjBGNDNDNEY5QUUwMi9sbDE1dUlsbjRv Zm1wUlU2RUVfQlRzRVlXeEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYDOSVhcktcOs4hzxKGD16AJnJB4vVdWx1+Tx3HQ/YDtawMhFEuWEM X0ankIx3l8OpreFR5LqgJFu6CY6tJzrUblzB3B5Z9D48fDnkshsrwku3T2UJfznU 0IB/1HJ/Vv3KDEEq6HbLOUhyWcwHxrBWR+GnvNWN7iSlMA9pxxLKNCuxHQtGok4c 4/DR65bL3A1so8h1zQs6fEj/mrSkQ9TdZ1QGzfoWYri43I0t+6o3aowQY8152mNw 45JNr15jCGYeIfsUcTWUWAWLCY4yZJGLPoBRJLUJuzBoBCaaaXMlH270IixCGeCn LThlM0s/PteeFF/l7t6ylvdBs9tJoj4g -----END CERTIFICATE-----Generated at Sat Sep 6 16:04:16 2025 by rpki-client