$ rpki-client -vvf rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft File: DtUqdvMcJCF0oq0ZSByVcDty4jY.mft (raw, json) Hash identifier: FsnnqppnTVNeobQYBNEEOjNw1nH6e/2IQs7befoCSAw= Subject key identifier: 9E:86:5F:7B:03:0F:DA:B9:50:ED:8A:A1:D6:27:57:01:D6:F5:41:CE Authority key identifier: 0E:D5:2A:76:F3:1C:24:21:74:A2:AD:19:48:1C:95:70:3B:72:E2:36 Certificate issuer: /CN=A91E33D7/serialNumber=0ED52A76F31C242174A2AD19481C95703B72E236 Certificate serial: 0E37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft Manifest number: 0E2E Signing time: Mon 08 Sep 2025 17:50:30 +0000 Manifest this update: Mon 08 Sep 2025 17:50:29 +0000 Manifest next update: Mon 15 Sep 2025 17:50:29 +0000 Files and hashes: 1: DtUqdvMcJCF0oq0ZSByVcDty4jY.crl (hash: 4kXYsegmPZkFWDPjHJv6cKxKEWjFfxdjTYKWgiOAEtw=) 2: C26576D4F4ED11E9ACC51713C4F9AE02.roa (hash: leeMqNjzFzLxyR/PuwyeZTmIKl73aTot0VdgEtIi1fo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.crl rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 17:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3639 (0xe37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E33D7, serialNumber=0ED52A76F31C242174A2AD19481C95703B72E236 Validity Not Before: Sep 8 17:50:29 2025 GMT Not After : Sep 15 17:50:29 2025 GMT Subject: CN=68bf1765-eb9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:c2:ee:61:b4:52:55:66:fe:9b:b9:13:ea:9c: 4b:79:c7:ba:9a:0b:d7:15:92:01:3b:d2:6f:e1:4e: 69:20:97:4c:aa:78:ce:30:ea:a1:c4:95:4d:21:07: dd:b3:e3:4f:2a:89:1d:74:67:8e:1b:14:ca:68:eb: fd:c5:ac:40:58:ab:0d:9d:70:5f:f9:49:a4:c2:7e: 7d:0c:4a:e6:e5:16:fa:a6:d6:80:4d:aa:61:15:66: ab:03:5c:ca:3f:72:1b:a0:9f:a6:25:00:0a:07:e0: 8b:ce:18:ff:65:7d:58:58:7a:02:50:25:fc:b4:ff: a0:c0:ba:82:31:2b:7d:ed:47:42:c7:09:99:c9:07: c8:68:a4:78:60:6e:81:de:a3:45:1b:a5:04:8c:cd: a0:77:88:79:37:6e:15:cb:80:67:10:89:44:84:7e: bc:40:e4:df:f8:74:f1:3b:74:9a:f9:de:e6:53:76: 1b:7d:d4:d3:cf:22:61:82:2a:0f:65:f5:81:96:f4: 3f:ea:3e:ef:ff:45:37:a0:f6:a4:6e:a2:84:91:6a: cd:ea:b5:77:d7:5d:83:59:fe:e7:c3:7d:a1:c7:ea: 11:b1:1c:2b:19:9a:16:40:91:fa:d2:ec:59:7e:f0: d2:b6:5e:74:97:f5:69:01:03:d8:b3:42:e6:03:ec: 1e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:86:5F:7B:03:0F:DA:B9:50:ED:8A:A1:D6:27:57:01:D6:F5:41:CE X509v3 Authority Key Identifier: keyid:0E:D5:2A:76:F3:1C:24:21:74:A2:AD:19:48:1C:95:70:3B:72:E2:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:fb:12:af:01:06:df:1e:a9:74:b1:7b:00:21:66:c8:fe:44: 09:e8:f7:a9:c7:d8:96:b8:01:9d:2c:00:d9:f8:01:4e:ba:14: d6:c3:9d:66:48:a4:20:c7:58:77:48:e9:c2:a6:8c:b7:95:63: 17:62:fd:fa:78:dd:77:12:4b:b1:be:75:de:67:bd:57:7c:13: 0c:ae:ab:a7:7c:0f:6b:be:10:3e:8b:23:f0:5c:ee:26:d0:71: e5:22:3e:26:b4:20:65:07:14:90:77:1a:34:9e:7c:7d:a5:96: 85:29:a2:a5:f3:9e:d9:57:d1:17:29:0c:8b:9a:a1:e8:4d:4d: 78:c6:3f:67:d0:e0:a8:54:4c:c4:a4:4c:4f:72:1b:cc:2d:63: 46:6b:8c:6d:05:e4:a6:06:8b:ec:69:1e:c8:26:86:94:74:7a: ae:9a:be:86:b3:e1:6a:5e:99:0d:2e:02:1a:28:33:88:e6:67: c8:08:20:01:f0:ef:fd:59:5e:54:76:63:07:f6:18:40:86:09: 86:12:f7:3a:e6:ce:0a:43:65:3e:ca:c2:52:a5:dc:3d:1e:66: 27:ee:3a:9d:dd:95:23:ae:24:eb:9e:ff:da:54:bd:a4:38:75: 84:43:36:ab:13:e8:96:f2:9e:20:b6:08:59:c5:61:7f:c6:a4: 4c:cb:f0:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTMzRDcxMTAvBgNVBAUTKDBFRDUyQTc2RjMxQzI0MjE3NEEyQUQxOTQ4MUM5NTcw M0I3MkUyMzYwHhcNMjUwOTA4MTc1MDI5WhcNMjUwOTE1MTc1MDI5WjAYMRYwFAYD VQQDEw02OGJmMTc2NS1lYjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA88LuYbRSVWb+m7kT6pxLece6mgvXFZIBO9Jv4U5pIJdMqnjOMOqhxJVNIQfd s+NPKokddGeOGxTKaOv9xaxAWKsNnXBf+Umkwn59DErm5Rb6ptaATaphFWarA1zK P3IboJ+mJQAKB+CLzhj/ZX1YWHoCUCX8tP+gwLqCMSt97UdCxwmZyQfIaKR4YG6B 3qNFG6UEjM2gd4h5N24Vy4BnEIlEhH68QOTf+HTxO3Sa+d7mU3YbfdTTzyJhgioP ZfWBlvQ/6j7v/0U3oPakbqKEkWrN6rV3112DWf7nw32hx+oRsRwrGZoWQJH60uxZ fvDStl50l/VpAQPYs0LmA+we4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ6GX3sD D9q5UO2KodYnVwHW9UHOMB8GA1UdIwQYMBaAFA7VKnbzHCQhdKKtGUgclXA7cuI2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzNENy9EQzdEODg2NEFF QjAxMUU5OEQwOEUxM0NDNEY5QUUwMi9EdFVxZHZNY0pDRjBvcTBaU0J5VmNEdHk0 alkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R0VXFkdk1jSkNGMG9xMFpTQnlWY0R0eTRqWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzNENy9EQzdEODg2NEFFQjAxMUU5OEQwOEUxM0NDNEY5QUUwMi9EdFVxZHZNY0pD RjBvcTBaU0J5VmNEdHk0alkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAb+xKvAQbfHql0sXsAIWbI/kQJ6Pepx9iWuAGdLADZ+AFOuhTWw51m SKQgx1h3SOnCpoy3lWMXYv36eN13EkuxvnXeZ71XfBMMrqunfA9rvhA+iyPwXO4m 0HHlIj4mtCBlBxSQdxo0nnx9pZaFKaKl857ZV9EXKQyLmqHoTU14xj9n0OCoVEzE pExPchvMLWNGa4xtBeSmBovsaR7IJoaUdHqumr6Gs+FqXpkNLgIaKDOI5mfICCAB 8O/9WV5UdmMH9hhAhgmGEvc65s4KQ2U+ysJSpdw9HmYn7jqd3ZUjriTrnv/aVL2k OHWEQzarE+iW8p4gtghZxWF/xqRMy/Bs -----END CERTIFICATE-----Generated at Tue Sep 9 13:20:56 2025 by rpki-client