$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft File: 0gZrYZNOd88mep3MOL9d7iHwe6M.mft (raw, json) Hash identifier: JWPCdd5ZAeZAxNEXLTmDNwGtN6uqhvqBOCjCu7epSHo= Subject key identifier: 31:17:4F:13:2E:41:93:EE:75:D3:16:F2:C6:07:19:6E:79:66:99:4F Authority key identifier: D2:06:6B:61:93:4E:77:CF:26:7A:9D:CC:38:BF:5D:EE:21:F0:7B:A3 Certificate issuer: /CN=A91EBBAF/serialNumber=D2066B61934E77CF267A9DCC38BF5DEE21F07BA3 Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0gZrYZNOd88mep3MOL9d7iHwe6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft Manifest number: 39 Signing time: Fri 05 Sep 2025 08:05:10 +0000 Manifest this update: Fri 05 Sep 2025 08:05:09 +0000 Manifest next update: Fri 12 Sep 2025 08:05:09 +0000 Files and hashes: 1: 0gZrYZNOd88mep3MOL9d7iHwe6M.crl (hash: FZvMe0vU0GZHUIYHzyRyfP77Ju8M0au1R3o2Uwkyzsg=) 2: C3C056A636DD11F08C82E269C4F9AE02.roa (hash: HBKXI2AjuuTAqBzBKbi8y9q49xdsPFITyMYY5p5WuOA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.crl rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0gZrYZNOd88mep3MOL9d7iHwe6M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 08:05:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBBAF, serialNumber=D2066B61934E77CF267A9DCC38BF5DEE21F07BA3 Validity Not Before: Sep 5 08:05:09 2025 GMT Not After : Sep 12 08:05:09 2025 GMT Subject: CN=68ba99b5-846a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f7:72:d3:fe:00:ab:b2:f8:78:22:13:d5:06: 22:f6:81:c2:61:43:5c:a1:76:62:d1:5b:e0:4b:4e: d3:e5:c0:d1:45:25:88:09:54:14:19:a9:86:03:f6: b5:b5:7b:13:e5:0a:ed:0a:61:93:4d:fc:8a:75:eb: 0e:6e:8d:b7:45:b8:43:ea:0e:69:4b:ff:77:44:e3: b3:80:23:12:3a:48:82:b6:df:ee:24:55:b8:b5:0d: a0:e3:ba:37:4a:fa:55:d3:04:fb:01:0e:b8:6c:2b: 46:68:11:17:32:4f:23:f2:69:d5:12:1c:7c:b8:27: 30:ed:07:43:ca:cf:a0:a5:36:51:fe:fc:46:30:d3: 63:6c:54:b0:d8:49:a7:26:b6:b2:e0:49:53:7c:ca: 18:be:ff:db:79:05:d0:c8:e0:60:f5:da:69:6b:95: 5d:8b:75:0e:54:3b:64:af:c5:51:0e:98:ce:68:3d: 72:97:bc:72:f3:40:d7:67:68:cc:fe:0f:79:a4:81: ca:8f:12:52:df:eb:c2:a1:7a:f2:7d:ff:6b:d2:17: 1c:2e:e9:7d:9c:82:66:cf:9b:71:63:dc:85:34:23: f8:b4:99:1b:01:d9:83:10:6b:c7:24:11:f0:32:c1: d7:35:d5:ec:a8:ff:31:d2:63:2d:82:b2:7f:20:60: 6f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:17:4F:13:2E:41:93:EE:75:D3:16:F2:C6:07:19:6E:79:66:99:4F X509v3 Authority Key Identifier: keyid:D2:06:6B:61:93:4E:77:CF:26:7A:9D:CC:38:BF:5D:EE:21:F0:7B:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0gZrYZNOd88mep3MOL9d7iHwe6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:ab:82:08:d8:72:cf:a5:75:29:e3:e5:17:74:c1:c7:16:e5: 88:c4:c2:b9:16:d7:9a:32:56:57:df:7b:38:51:18:38:d5:20: 3d:74:45:ea:23:b5:3a:a3:c2:17:14:5e:8e:39:ea:b9:f7:9c: 86:96:0e:48:c0:f8:13:e8:1c:a1:2f:45:ae:d0:45:d9:06:fa: 40:79:fc:76:23:44:6a:e9:f4:e5:ad:c7:87:e2:a4:67:12:9f: 67:31:d9:de:5d:c3:64:34:80:d0:cf:08:54:d7:f5:53:8a:84: 37:8b:02:f8:1b:c9:f8:47:0c:8a:5b:95:4a:81:07:9c:5a:29: fe:93:73:78:21:94:b3:b0:62:05:01:0f:25:5d:3e:bc:1f:f0: c4:c7:bb:6b:93:a7:d4:4b:4c:31:62:42:1a:7b:3d:d7:09:4d: a9:8b:f8:34:68:76:2b:7c:96:d5:c1:0d:2b:7d:e7:5f:52:4b: 86:86:0c:7e:ad:fd:07:b3:09:b7:40:96:d9:b2:ca:c2:41:9c: 85:db:65:f3:7a:e6:d1:b1:bc:8b:41:39:ff:07:f6:c1:8f:8d: 3b:b9:b9:74:50:95:70:bd:9f:ce:82:b7:f3:c0:e3:7c:71:b9: 14:7c:25:9e:3b:2d:9d:a7:b7:e4:0e:4b:71:ea:13:78:3d:b7: 73:9e:69:47 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QkJBRjExMC8GA1UEBRMoRDIwNjZCNjE5MzRFNzdDRjI2N0E5RENDMzhCRjVERUUy MUYwN0JBMzAeFw0yNTA5MDUwODA1MDlaFw0yNTA5MTIwODA1MDlaMBgxFjAUBgNV BAMTDTY4YmE5OWI1LTg0NmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCb93LT/gCrsvh4IhPVBiL2gcJhQ1yhdmLRW+BLTtPlwNFFJYgJVBQZqYYD9rW1 exPlCu0KYZNN/Ip16w5ujbdFuEPqDmlL/3dE47OAIxI6SIK23+4kVbi1DaDjujdK +lXTBPsBDrhsK0ZoERcyTyPyadUSHHy4JzDtB0PKz6ClNlH+/EYw02NsVLDYSacm trLgSVN8yhi+/9t5BdDI4GD12mlrlV2LdQ5UO2SvxVEOmM5oPXKXvHLzQNdnaMz+ D3mkgcqPElLf68KhevJ9/2vSFxwu6X2cgmbPm3Fj3IU0I/i0mRsB2YMQa8ckEfAy wdc11eyo/zHSYy2Csn8gYG+VAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMRdPEy5B k+510xbyxgcZbnlmmU8wHwYDVR0jBBgwFoAU0gZrYZNOd88mep3MOL9d7iHwe6Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCQkFGLzEwQzE5RDMwMzZE RDExRjA5Njg2MjE2NkM0RjlBRTAyLzBnWnJZWk5PZDg4bWVwM01PTDlkN2lId2U2 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMGdacllaTk9kODhtZXAzTU9MOWQ3aUh3ZTZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC QkFGLzEwQzE5RDMwMzZERDExRjA5Njg2MjE2NkM0RjlBRTAyLzBnWnJZWk5PZDg4 bWVwM01PTDlkN2lId2U2TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD+rggjYcs+ldSnj5Rd0wccW5YjEwrkW15oyVlffezhRGDjVID10Reoj tTqjwhcUXo456rn3nIaWDkjA+BPoHKEvRa7QRdkG+kB5/HYjRGrp9OWtx4fipGcS n2cx2d5dw2Q0gNDPCFTX9VOKhDeLAvgbyfhHDIpblUqBB5xaKf6Tc3ghlLOwYgUB DyVdPrwf8MTHu2uTp9RLTDFiQhp7PdcJTamL+DRodit8ltXBDSt9519SS4aGDH6t /QezCbdAltmyysJBnIXbZfN65tGxvItBOf8H9sGPjTu5uXRQlXC9n86Ct/PA43xx uRR8JZ47LZ2nt+QOS3HqE3g9t3OeaUc= -----END CERTIFICATE-----Generated at Sat Sep 6 21:13:23 2025 by rpki-client