$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft File: vDqLsM3Qi243IbLB0hqBcUw7IUI.mft (raw, json) Hash identifier: Mhni7Dc+rt8df3aM7FAty6rKqxE4ZGap2OhiBz+87hg= Subject key identifier: 0C:40:55:BB:E2:83:CA:0C:4F:86:CF:7B:4A:BA:8C:39:83:98:66:CB Authority key identifier: BC:3A:8B:B0:CD:D0:8B:6E:37:21:B2:C1:D2:1A:81:71:4C:3B:21:42 Certificate issuer: /CN=A91E3731/serialNumber=BC3A8BB0CDD08B6E3721B2C1D21A81714C3B2142 Certificate serial: 03AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft Manifest number: 0390 Signing time: Tue 09 Sep 2025 00:57:58 +0000 Manifest this update: Tue 09 Sep 2025 00:57:58 +0000 Manifest next update: Tue 16 Sep 2025 00:57:58 +0000 Files and hashes: 1: vDqLsM3Qi243IbLB0hqBcUw7IUI.crl (hash: cVB6cEKCp9mXZ9ouqpLgeXiPlj1sKziPWfw3AL5Kkf0=) 2: 83CA50563C2311F0AEBA313AC4F9AE02.roa (hash: 8dEWz6BA19noWs2zWuUBCRCZchx4qTK4G3VWLV+hIMw=) 3: B7E47C68C02511EC93BB8865C4F9AE02.roa (hash: 8/pe/NkCfmi8GQHtZeDvbdeiM83VXVuijM5zx0eXnx8=) 4: 2998A0E0F99011EF89B2363DC4F9AE02.roa (hash: KstFse9DL+Lpk2UJhsRfTukB1/IV52HFgYreP0UKdGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.crl rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 00:57:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 939 (0x3ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3731, serialNumber=BC3A8BB0CDD08B6E3721B2C1D21A81714C3B2142 Validity Not Before: Sep 9 00:57:58 2025 GMT Not After : Sep 16 00:57:58 2025 GMT Subject: CN=68bf7b96-36cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c8:f7:0c:6d:d8:45:87:79:ed:8b:af:02:2a: b1:7a:6a:47:ea:40:f4:80:bf:a0:3d:0d:48:be:f4: 62:b2:da:a3:0d:18:3d:84:02:bf:a3:c4:9f:90:d5: e3:41:12:e6:76:6f:e7:b6:dc:c0:39:4e:48:af:d5: f0:7d:bc:8e:30:e7:dc:f0:21:20:6c:31:e0:85:06: b0:e7:29:d3:a4:b1:7e:29:b2:9b:c7:6e:44:1a:99: 7b:47:ba:11:1c:82:1f:55:37:93:24:f8:26:19:38: 24:57:69:81:ae:72:a6:75:f3:f2:56:06:3e:15:d9: 54:94:50:3f:51:c0:d2:3e:c8:2b:51:35:ac:a7:8a: 22:57:02:be:5d:42:60:36:2b:90:7d:67:e6:97:47: 2c:7e:67:05:0b:3f:14:56:3c:5d:74:5b:bb:4f:75: a1:b1:f5:2e:02:e5:1d:ad:43:87:c2:74:43:b1:c3: e3:44:83:ef:ec:75:03:a8:1a:29:ca:7e:2e:19:54: 50:78:ab:f6:66:7f:3b:98:08:4a:f4:09:c7:c4:07: a6:0b:3c:a2:5b:f5:e7:4c:ca:7b:24:de:b0:36:c1: c7:43:a4:7c:76:9d:74:ed:71:fc:64:f9:66:fe:8a: 39:6a:c4:52:68:c4:75:cc:25:fb:ba:94:3c:b3:8c: 9d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:40:55:BB:E2:83:CA:0C:4F:86:CF:7B:4A:BA:8C:39:83:98:66:CB X509v3 Authority Key Identifier: keyid:BC:3A:8B:B0:CD:D0:8B:6E:37:21:B2:C1:D2:1A:81:71:4C:3B:21:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:97:99:b0:54:1e:2d:c2:c5:16:a3:17:c9:ce:97:58:6c:df: b2:42:d5:ea:3c:16:20:39:26:18:b4:b5:36:c6:22:4a:3e:46: 9f:bc:9c:e0:7b:ac:74:13:b2:48:cf:ab:b7:57:aa:04:8e:eb: bb:71:27:5f:21:31:90:c7:89:20:5b:40:49:d1:2a:7e:d7:7d: c3:2b:4f:e0:c6:fe:a0:92:19:ff:23:93:c0:3c:ff:ee:a1:7a: 22:4b:1f:6a:e3:b7:1e:b0:fd:cc:a0:0d:bd:51:ea:49:90:f4: ec:0d:f9:99:16:e2:d1:1a:37:0a:b7:ec:7e:96:6f:af:77:1f: 3e:d8:59:cc:da:d7:49:93:36:dc:77:62:ec:39:b5:2d:41:3e: 1e:79:7c:c8:c6:a3:8e:13:bc:28:cb:d8:30:5e:f7:8f:df:3f: c4:0b:8c:a8:19:ae:a5:1d:9a:f8:62:17:4a:77:82:44:bc:c8: fe:08:aa:48:83:dc:89:4f:07:01:9d:fa:3d:11:50:ae:9d:41: f2:b8:0a:48:1f:ad:ee:31:e7:4d:a1:34:b8:8a:8b:25:58:cf: dd:66:b8:5e:65:c5:c4:22:5f:04:0f:63:a4:17:64:cd:c0:e8: 16:26:91:b2:2a:01:20:c0:7a:df:78:e5:9f:fc:2e:f1:de:d3: f8:7e:b7:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM3MzExMTAvBgNVBAUTKEJDM0E4QkIwQ0REMDhCNkUzNzIxQjJDMUQyMUE4MTcx NEMzQjIxNDIwHhcNMjUwOTA5MDA1NzU4WhcNMjUwOTE2MDA1NzU4WjAYMRYwFAYD VQQDEw02OGJmN2I5Ni0zNmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlsj3DG3YRYd57YuvAiqxempH6kD0gL+gPQ1IvvRistqjDRg9hAK/o8SfkNXj QRLmdm/nttzAOU5Ir9XwfbyOMOfc8CEgbDHghQaw5ynTpLF+KbKbx25EGpl7R7oR HIIfVTeTJPgmGTgkV2mBrnKmdfPyVgY+FdlUlFA/UcDSPsgrUTWsp4oiVwK+XUJg NiuQfWfml0csfmcFCz8UVjxddFu7T3WhsfUuAuUdrUOHwnRDscPjRIPv7HUDqBop yn4uGVRQeKv2Zn87mAhK9AnHxAemCzyiW/XnTMp7JN6wNsHHQ6R8dp107XH8ZPlm /oo5asRSaMR1zCX7upQ8s4ydzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAxAVbvi g8oMT4bPe0q6jDmDmGbLMB8GA1UdIwQYMBaAFLw6i7DN0ItuNyGywdIagXFMOyFC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzczMS81NUIyMjNFQUMw MjIxMUVDOTI2NURBNURDNEY5QUUwMi92RHFMc00zUWkyNDNJYkxCMGhxQmNVdzdJ VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZEcUxzTTNRaTI0M0liTEIwaHFCY1V3N0lVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzczMS81NUIyMjNFQUMwMjIxMUVDOTI2NURBNURDNEY5QUUwMi92RHFMc00zUWky NDNJYkxCMGhxQmNVdzdJVUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpl5mwVB4twsUWoxfJzpdYbN+yQtXqPBYgOSYYtLU2xiJKPkafvJzg e6x0E7JIz6u3V6oEjuu7cSdfITGQx4kgW0BJ0Sp+133DK0/gxv6gkhn/I5PAPP/u oXoiSx9q47cesP3MoA29UepJkPTsDfmZFuLRGjcKt+x+lm+vdx8+2FnM2tdJkzbc d2LsObUtQT4eeXzIxqOOE7woy9gwXveP3z/EC4yoGa6lHZr4YhdKd4JEvMj+CKpI g9yJTwcBnfo9EVCunUHyuApIH63uMedNoTS4ioslWM/dZrheZcXEIl8ED2OkF2TN wOgWJpGyKgEgwHrfeOWf/C7x3tP4fret -----END CERTIFICATE-----Generated at Tue Sep 9 13:18:06 2025 by rpki-client