$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft File: -65NuTksgZMhr1EdxrK1qomYGfo.mft (raw, json) Hash identifier: dcIYQjov9lvkChqMFkxuMc/id7h0DIvLzzlgiDUrj/Y= Subject key identifier: D6:9E:53:73:67:FE:C9:21:1C:DC:32:1A:A7:87:AF:4B:21:0E:C2:C3 Authority key identifier: FB:AE:4D:B9:39:2C:81:93:21:AF:51:1D:C6:B2:B5:AA:89:98:19:FA Certificate issuer: /CN=A91F2D93/serialNumber=FBAE4DB9392C819321AF511DC6B2B5AA899819FA Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-65NuTksgZMhr1EdxrK1qomYGfo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft Manifest number: 71 Signing time: Tue 19 Aug 2025 07:23:20 +0000 Manifest this update: Tue 19 Aug 2025 07:23:20 +0000 Manifest next update: Tue 26 Aug 2025 07:23:20 +0000 Files and hashes: 1: -65NuTksgZMhr1EdxrK1qomYGfo.crl (hash: rXNB+DPSKbZCO21H1o5HFq2kG/WNZN4hRim8zMq2Zh8=) 2: 93D86AAED76611EF9C982924C4F9AE02.roa (hash: LnJzBzEfTxjLgTZtBUJIJtCnRzaftx7eCk4WGWWItX4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.crl rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-65NuTksgZMhr1EdxrK1qomYGfo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 07:23:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2D93, serialNumber=FBAE4DB9392C819321AF511DC6B2B5AA899819FA Validity Not Before: Aug 19 07:23:20 2025 GMT Not After : Aug 26 07:23:20 2025 GMT Subject: CN=68a42668-0be4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:a2:d3:c8:8f:8f:75:fe:85:14:66:9c:5e:b0: 5a:34:c3:92:47:93:fd:dc:d4:80:b5:6a:ba:ee:62: 84:b0:87:3e:78:18:4a:c4:86:2d:65:48:91:44:41: 40:41:3f:de:82:9a:6a:e8:9e:6b:b8:34:70:a1:df: b1:44:22:8b:5a:2b:2c:bf:b9:ad:13:a7:d1:fd:3e: c3:94:97:e8:5c:78:4f:90:c9:fc:b4:15:10:b8:9d: 5d:56:f9:f4:3c:f5:b3:c8:a2:3d:9f:4e:4c:27:05: f5:3a:2e:94:70:45:de:80:7f:a9:7f:03:4b:ef:b7: 47:7a:ae:d2:03:a7:1e:5d:c3:e9:7c:cb:88:97:d1: f6:98:c3:ab:1d:65:49:d4:0b:8b:ca:8f:5b:89:ce: 82:d6:67:d9:06:51:d7:da:af:4d:68:c2:aa:b8:9e: 15:f9:c3:3b:9a:cb:b6:54:2b:6c:b4:57:7f:2b:bc: 7c:9a:26:0b:eb:ea:f3:a8:18:2b:18:97:aa:0a:7e: 52:89:c9:4a:64:f0:24:e1:c7:a3:3a:b1:de:4d:b2: 8b:5a:a1:32:d4:45:bc:76:99:52:e0:df:ce:02:c4: a0:8a:95:24:6a:be:bc:8d:29:3c:3e:33:6a:44:4a: 6c:07:47:17:7d:51:6f:d3:f0:40:88:5f:f7:02:14: 1e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:9E:53:73:67:FE:C9:21:1C:DC:32:1A:A7:87:AF:4B:21:0E:C2:C3 X509v3 Authority Key Identifier: keyid:FB:AE:4D:B9:39:2C:81:93:21:AF:51:1D:C6:B2:B5:AA:89:98:19:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-65NuTksgZMhr1EdxrK1qomYGfo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:14:3c:87:be:0d:dd:09:aa:f2:a4:86:70:b0:e7:fd:aa:7f: b7:55:90:8b:e4:29:92:e5:a9:14:98:94:dd:2b:7a:09:f2:2c: c4:88:9d:f2:a0:20:17:7c:8f:e2:53:ef:b3:fd:06:97:72:d7: cf:8f:ed:8c:29:76:21:36:52:57:a1:4a:c0:e0:14:65:22:ab: 2c:c0:eb:f6:87:a6:32:c6:13:c1:06:8a:24:d5:1c:ff:95:20: 40:0e:a8:b2:a0:3f:59:5f:0c:43:73:ec:a4:a3:bd:b7:70:cf: 47:53:98:73:e4:12:12:ee:35:62:97:3c:30:81:ce:a7:bf:ef: f7:92:48:c5:bc:8c:66:29:06:7c:85:e4:e1:36:b7:2f:7b:0e: 41:e1:16:03:4c:f6:d4:59:7d:9e:34:6f:16:7e:eb:7e:2f:f6: 44:16:34:fe:04:69:09:ce:ed:79:9f:53:21:47:14:28:bf:39: 77:da:48:4e:bb:b5:f0:12:c2:b4:b0:d8:f5:c4:19:eb:b4:6f: 6f:3f:de:51:64:c5:1a:c1:37:c6:a5:e3:4e:60:92:5e:bd:c3: c2:6a:68:ab:7c:56:74:8b:33:39:40:ed:5f:3b:f5:83:54:6f: 33:05:b4:72:fb:29:af:2f:ab:1e:23:34:63:28:8f:77:d5:6a: 11:fe:31:17 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MkQ5MzExMC8GA1UEBRMoRkJBRTREQjkzOTJDODE5MzIxQUY1MTFEQzZCMkI1QUE4 OTk4MTlGQTAeFw0yNTA4MTkwNzIzMjBaFw0yNTA4MjYwNzIzMjBaMBgxFjAUBgNV BAMTDTY4YTQyNjY4LTBiZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD2otPIj491/oUUZpxesFo0w5JHk/3c1IC1arruYoSwhz54GErEhi1lSJFEQUBB P96Cmmronmu4NHCh37FEIotaKyy/ua0Tp9H9PsOUl+hceE+Qyfy0FRC4nV1W+fQ8 9bPIoj2fTkwnBfU6LpRwRd6Af6l/A0vvt0d6rtIDpx5dw+l8y4iX0faYw6sdZUnU C4vKj1uJzoLWZ9kGUdfar01owqq4nhX5wzuay7ZUK2y0V38rvHyaJgvr6vOoGCsY l6oKflKJyUpk8CThx6M6sd5NsotaoTLURbx2mVLg384CxKCKlSRqvryNKTw+M2pE SmwHRxd9UW/T8ECIX/cCFB7XAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1p5Tc2f+ ySEc3DIap4evSyEOwsMwHwYDVR0jBBgwFoAU+65NuTksgZMhr1EdxrK1qomYGfow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYyRDkzLzgxOEZEQjc4RDQ0 RDExRUZCMTYwMEIyOEM0RjlBRTAyLy02NU51VGtzZ1pNaHIxRWR4cksxcW9tWUdm by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLTY1TnVUa3NnWk1ocjFFZHhySzFxb21ZR2ZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYy RDkzLzgxOEZEQjc4RDQ0RDExRUZCMTYwMEIyOEM0RjlBRTAyLy02NU51VGtzZ1pN aHIxRWR4cksxcW9tWUdmby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABUUPIe+Dd0JqvKkhnCw5/2qf7dVkIvkKZLlqRSYlN0regnyLMSInfKg IBd8j+JT77P9Bpdy18+P7YwpdiE2UlehSsDgFGUiqyzA6/aHpjLGE8EGiiTVHP+V IEAOqLKgP1lfDENz7KSjvbdwz0dTmHPkEhLuNWKXPDCBzqe/7/eSSMW8jGYpBnyF 5OE2ty97DkHhFgNM9tRZfZ40bxZ+634v9kQWNP4EaQnO7XmfUyFHFCi/OXfaSE67 tfASwrSw2PXEGeu0b28/3lFkxRrBN8al405gkl69w8JqaKt8VnSLMzlA7V879YNU bzMFtHL7Ka8vqx4jNGMoj3fVahH+MRc= -----END CERTIFICATE-----Generated at Wed Aug 20 15:36:08 2025 by rpki-client