$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft File: xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft (raw, json) Hash identifier: KMaxSyrJaGhglxzlbX3Ewsnx/NVTMTCMBuTos4OU6ec= Subject key identifier: 7F:9B:22:8E:E8:C0:E6:61:40:70:E7:EA:17:BB:41:8C:7B:A0:AF:A2 Authority key identifier: C4:9E:51:83:EA:2F:C4:9B:8A:83:C9:20:52:BC:E2:A8:B6:57:6C:70 Certificate issuer: /CN=A91DF937/serialNumber=C49E5183EA2FC49B8A83C92052BCE2A8B6576C70 Certificate serial: 1F54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft Manifest number: 1F47 Signing time: Mon 08 Sep 2025 16:00:24 +0000 Manifest this update: Mon 08 Sep 2025 16:00:24 +0000 Manifest next update: Mon 15 Sep 2025 16:00:24 +0000 Files and hashes: 1: xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl (hash: UAc3qG5sCi0u+bn3B0wBymutxigIv50UH+3fVGa/0l4=) 2: E723101E553D11E7B552CE31C4F9AE02.roa (hash: CYv9JY9hI0P702N3lQBz+p9YJHwSjBcG7pv4fPI19/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 16:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8020 (0x1f54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF937, serialNumber=C49E5183EA2FC49B8A83C92052BCE2A8B6576C70 Validity Not Before: Sep 8 16:00:24 2025 GMT Not After : Sep 15 16:00:24 2025 GMT Subject: CN=68befd98-cbd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e4:c3:5c:25:a0:c3:35:4b:64:26:4f:e1:d4: d1:7e:36:3b:55:eb:cb:8d:41:aa:9c:7e:71:95:4d: 6f:1c:ce:0f:61:6f:bb:33:cf:b6:b8:2a:9f:b7:66: 32:9e:7f:df:58:c7:a8:21:fc:5e:fb:f9:41:c9:2e: 72:9d:a2:b4:98:3e:86:07:fd:98:74:67:07:63:ce: 86:61:d9:63:6c:ee:7f:6d:e6:86:4a:46:97:8e:50: 63:30:33:a2:dc:1c:d0:3a:4b:77:cf:0b:9f:3d:d8: 38:ee:94:51:24:d8:34:20:bc:e1:a8:d4:85:18:f4: 96:77:10:6f:4a:45:bb:2d:6a:4f:76:1d:cb:bf:47: ec:b0:5c:4f:1d:1d:dd:f2:91:95:a2:e9:1d:99:92: 7a:8f:7f:80:90:ec:0f:81:61:5b:77:64:53:7a:85: 7e:b8:a3:0e:7f:ed:63:49:56:7d:3c:8b:1e:83:e6: 02:e8:74:bd:8a:6f:37:93:4e:5d:9b:4b:63:97:d5: 2f:f7:6b:88:b1:c6:96:61:c3:97:72:5d:79:cc:c6: 28:aa:c3:27:78:34:51:e0:92:2e:d8:d5:f6:be:6a: c5:fa:10:c0:53:e8:fb:80:4f:16:46:c7:f2:ee:ef: 7e:61:0e:74:b6:3a:f5:2c:e7:00:90:6f:bb:bd:ad: b8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:9B:22:8E:E8:C0:E6:61:40:70:E7:EA:17:BB:41:8C:7B:A0:AF:A2 X509v3 Authority Key Identifier: keyid:C4:9E:51:83:EA:2F:C4:9B:8A:83:C9:20:52:BC:E2:A8:B6:57:6C:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:45:2c:b9:87:54:4c:bd:fb:eb:84:10:08:a9:cc:9d:15:c5: de:e3:65:e2:b1:8a:36:22:2f:b8:f4:03:e9:7f:de:d5:1d:20: 43:06:8d:ef:a5:9a:08:4e:cd:7a:f8:fe:bd:cd:d2:59:9f:7c: 86:da:e8:c1:46:2d:f0:97:81:78:e9:97:86:10:2d:1f:eb:ab: a9:f1:90:af:5d:7f:e2:47:16:d6:73:b4:53:ac:24:a9:87:97: 49:8a:fe:69:0c:d7:ea:87:85:54:ef:7e:f6:8f:c8:b6:a6:0a: 8b:69:e7:b6:55:7e:74:b1:cf:b0:c9:f2:ee:21:bb:ca:bd:e1: 1a:9f:95:70:b8:7d:1c:c0:0d:9b:b6:ff:a4:10:db:5b:f1:00: ee:14:aa:5d:6d:35:6b:6f:08:bc:30:c7:a4:63:9b:37:34:6a: df:d0:c9:78:90:92:0e:ad:25:39:6f:cf:c3:f0:f1:7e:dc:47: 1b:18:2f:1f:73:e1:5a:11:99:26:e6:f5:2d:9f:e1:e5:c0:d0: 2e:8f:22:51:67:00:08:7b:9d:2d:d6:3f:59:5d:7c:83:08:de: 3e:74:f0:2c:f8:fe:ff:c4:0d:d7:2e:52:bf:70:62:15:7a:6a: 40:28:fe:4e:f5:b7:3e:5a:1d:fe:43:d0:d9:ed:25:51:b1:41: 69:dd:c5:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICH1QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY5MzcxMTAvBgNVBAUTKEM0OUU1MTgzRUEyRkM0OUI4QTgzQzkyMDUyQkNFMkE4 QjY1NzZDNzAwHhcNMjUwOTA4MTYwMDI0WhcNMjUwOTE1MTYwMDI0WjAYMRYwFAYD VQQDEw02OGJlZmQ5OC1jYmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvuTDXCWgwzVLZCZP4dTRfjY7VevLjUGqnH5xlU1vHM4PYW+7M8+2uCqft2Yy nn/fWMeoIfxe+/lByS5ynaK0mD6GB/2YdGcHY86GYdljbO5/beaGSkaXjlBjMDOi 3BzQOkt3zwufPdg47pRRJNg0ILzhqNSFGPSWdxBvSkW7LWpPdh3Lv0fssFxPHR3d 8pGVoukdmZJ6j3+AkOwPgWFbd2RTeoV+uKMOf+1jSVZ9PIseg+YC6HS9im83k05d m0tjl9Uv92uIscaWYcOXcl15zMYoqsMneDRR4JIu2NX2vmrF+hDAU+j7gE8WRsfy 7u9+YQ50tjr1LOcAkG+7va24VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH+bIo7o wOZhQHDn6he7QYx7oK+iMB8GA1UdIwQYMBaAFMSeUYPqL8SbioPJIFK84qi2V2xw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjkzNy9BNDQ3QkZEQzU1 MzAxMUU2QTM2NDI3NDVDNEY5QUUwMi94SjVSZy1vdnhKdUtnOGtnVXJ6aXFMWlhi SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hKNVJnLW92eEp1S2c4a2dVcnppcUxaWGJIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjkzNy9BNDQ3QkZEQzU1MzAxMUU2QTM2NDI3NDVDNEY5QUUwMi94SjVSZy1vdnhK dUtnOGtnVXJ6aXFMWlhiSEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeRSy5h1RMvfvrhBAIqcydFcXe42XisYo2Ii+49APpf97VHSBDBo3v pZoITs16+P69zdJZn3yG2ujBRi3wl4F46ZeGEC0f66up8ZCvXX/iRxbWc7RTrCSp h5dJiv5pDNfqh4VU7372j8i2pgqLaee2VX50sc+wyfLuIbvKveEan5VwuH0cwA2b tv+kENtb8QDuFKpdbTVrbwi8MMekY5s3NGrf0Ml4kJIOrSU5b8/D8PF+3EcbGC8f c+FaEZkm5vUtn+HlwNAujyJRZwAIe50t1j9ZXXyDCN4+dPAs+P7/xA3XLlK/cGIV empAKP5O9bc+Wh3+Q9DZ7SVRsUFp3cWS -----END CERTIFICATE-----Generated at Tue Sep 9 00:45:24 2025 by rpki-client