$ rpki-client -vvf rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft File: grTScd4hLgYzXAtF5mUXtQi4NRY.mft (raw, json) Hash identifier: rQjjNP7OKQKaEUmG4KmzP8xa1FPvFfp/qYyK8TjgEoA= Subject key identifier: E7:8F:E4:77:C1:23:45:58:67:B9:C5:3D:8B:A4:DD:B7:95:64:C6:57 Authority key identifier: 82:B4:D2:71:DE:21:2E:06:33:5C:0B:45:E6:65:17:B5:08:B8:35:16 Certificate issuer: /CN=A91E379F/serialNumber=82B4D271DE212E06335C0B45E66517B508B83516 Certificate serial: E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grTScd4hLgYzXAtF5mUXtQi4NRY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft Manifest number: E4 Signing time: Fri 19 Sep 2025 06:03:57 +0000 Manifest this update: Fri 19 Sep 2025 06:03:56 +0000 Manifest next update: Fri 26 Sep 2025 06:03:56 +0000 Files and hashes: 1: grTScd4hLgYzXAtF5mUXtQi4NRY.crl (hash: m+7oRhf9GMMWaA6+ob5Q+t1vmMhTZ5++VRv9d25556s=) 2: 621428CE3CFB11EFB0BF040BC4F9AE02.roa (hash: cLX/NcpRBUgL7nqhk0rMjH0omx3nN9XKcz3vUbvy2EE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.crl rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grTScd4hLgYzXAtF5mUXtQi4NRY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 06:03:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 231 (0xe7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E379F, serialNumber=82B4D271DE212E06335C0B45E66517B508B83516 Validity Not Before: Sep 19 06:03:56 2025 GMT Not After : Sep 26 06:03:56 2025 GMT Subject: CN=68ccf24d-e67c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:9b:88:3a:84:69:80:89:8f:43:33:27:42:19: a0:ab:1c:56:eb:73:50:96:6b:ed:af:df:70:78:95: b6:5e:fc:94:62:fc:74:46:88:a4:72:16:46:cf:fb: f1:34:cf:d8:89:5c:e4:7f:e3:56:16:2c:98:32:63: 19:c8:0d:5e:a9:3e:d9:20:2f:db:38:45:cd:40:e0: 03:6a:af:cc:dc:a0:4e:f1:fc:b2:82:77:7b:3f:e5: dd:7b:68:d2:a9:45:4f:73:41:0d:cb:da:e4:ae:61: 65:eb:cb:d6:33:26:05:d3:86:dc:66:fe:f1:85:63: 26:5e:79:ac:3f:9b:43:3d:f1:ce:bd:80:62:ef:09: f1:db:16:40:d3:c9:01:fa:94:c9:1d:63:b3:e3:da: 65:5e:f2:77:d6:81:10:dc:aa:bc:66:c1:dc:2a:4b: c6:c4:af:76:5d:f9:c8:ee:23:00:fb:9a:7e:06:8a: d3:a8:fb:ee:0a:35:14:b4:da:c0:89:0b:2a:73:74: bd:65:00:37:f0:2e:4d:aa:c9:73:2c:ed:be:4a:d3: 37:6a:4c:98:6e:ba:ee:7e:05:67:0f:6c:3b:92:b2: 4b:97:ef:e6:03:19:ca:aa:25:f7:c4:77:ad:dc:8f: 2d:54:68:75:c6:ae:23:57:18:7a:97:32:b5:f8:c4: 3a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:8F:E4:77:C1:23:45:58:67:B9:C5:3D:8B:A4:DD:B7:95:64:C6:57 X509v3 Authority Key Identifier: keyid:82:B4:D2:71:DE:21:2E:06:33:5C:0B:45:E6:65:17:B5:08:B8:35:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grTScd4hLgYzXAtF5mUXtQi4NRY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:1a:98:7a:f8:38:f6:2e:a2:83:2d:02:4b:9e:9f:f0:12:ce: 62:ce:86:57:49:05:e7:9c:3d:ea:9a:8a:16:2a:01:40:2a:37: 73:51:47:cf:73:72:1a:81:da:42:bc:50:d4:8c:e5:0c:35:c5: 3b:81:2f:df:0b:ec:90:fe:b0:5d:d1:0f:2c:c7:00:10:2d:c9: c6:e2:47:da:88:4a:99:57:97:f2:84:e6:9d:33:b5:f7:ab:80: 42:7a:64:38:d9:b5:da:63:4b:bc:14:d3:cf:2b:a8:ff:47:56: 0e:4b:1c:06:80:85:7a:4b:24:63:4b:1e:29:48:76:61:18:30: 21:25:8e:0a:8d:a9:cb:72:ac:6f:32:3e:54:74:ed:17:10:cc: 4f:3d:23:38:58:a3:5f:97:69:1f:0c:60:14:3c:d5:84:3a:85: 15:f7:cd:02:de:6b:e0:60:bf:da:d6:b4:fb:27:e4:f5:82:8d: 6a:af:94:2f:07:92:64:78:66:d7:ab:6e:56:c6:c0:d1:d2:2b: cb:75:19:dc:62:7b:92:c8:9a:ce:ad:00:83:a9:33:5a:68:b6: cf:e1:33:35:4f:02:d7:2c:f2:7b:67:c1:14:93:2e:8e:8c:58: 90:30:14:a5:fd:40:e3:9b:b6:6d:d8:94:46:3d:e0:9b:71:d4: cc:ac:b3:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM3OUYxMTAvBgNVBAUTKDgyQjREMjcxREUyMTJFMDYzMzVDMEI0NUU2NjUxN0I1 MDhCODM1MTYwHhcNMjUwOTE5MDYwMzU2WhcNMjUwOTI2MDYwMzU2WjAYMRYwFAYD VQQDEw02OGNjZjI0ZC1lNjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9ZuIOoRpgImPQzMnQhmgqxxW63NQlmvtr99weJW2XvyUYvx0RoikchZGz/vx NM/YiVzkf+NWFiyYMmMZyA1eqT7ZIC/bOEXNQOADaq/M3KBO8fyygnd7P+Xde2jS qUVPc0ENy9rkrmFl68vWMyYF04bcZv7xhWMmXnmsP5tDPfHOvYBi7wnx2xZA08kB +pTJHWOz49plXvJ31oEQ3Kq8ZsHcKkvGxK92XfnI7iMA+5p+BorTqPvuCjUUtNrA iQsqc3S9ZQA38C5NqslzLO2+StM3akyYbrrufgVnD2w7krJLl+/mAxnKqiX3xHet 3I8tVGh1xq4jVxh6lzK1+MQ6BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOeP5HfB I0VYZ7nFPYuk3beVZMZXMB8GA1UdIwQYMBaAFIK00nHeIS4GM1wLReZlF7UIuDUW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzc5Ri82Rjk5RDRGMDND RjkxMUVGQTBBMDZGODZDNEY5QUUwMi9nclRTY2Q0aExnWXpYQXRGNW1VWHRRaTRO UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dyVFNjZDRoTGdZelhBdEY1bVVYdFFpNE5SWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Mzc5Ri82Rjk5RDRGMDNDRjkxMUVGQTBBMDZGODZDNEY5QUUwMi9nclRTY2Q0aExn WXpYQXRGNW1VWHRRaTROUlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6Gph6+Dj2LqKDLQJLnp/wEs5izoZXSQXnnD3qmooWKgFAKjdzUUfP c3IagdpCvFDUjOUMNcU7gS/fC+yQ/rBd0Q8sxwAQLcnG4kfaiEqZV5fyhOadM7X3 q4BCemQ42bXaY0u8FNPPK6j/R1YOSxwGgIV6SyRjSx4pSHZhGDAhJY4KjanLcqxv Mj5UdO0XEMxPPSM4WKNfl2kfDGAUPNWEOoUV980C3mvgYL/a1rT7J+T1go1qr5Qv B5JkeGbXq25WxsDR0ivLdRncYnuSyJrOrQCDqTNaaLbP4TM1TwLXLPJ7Z8EUky6O jFiQMBSl/UDjm7Zt2JRGPeCbcdTMrLN9 -----END CERTIFICATE-----Generated at Fri Sep 19 15:11:06 2025 by rpki-client