$ rpki-client -vvf rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft File: 1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft (raw, json) Hash identifier: SUmYey3WowPeD8tRsnd1rhOnciT5iI2OkrRTKLQfnQA= Subject key identifier: 31:9A:0D:62:80:E4:42:6F:AE:02:C5:D9:F2:7B:4B:A4:FC:64:26:EF Authority key identifier: D6:C8:0C:5D:38:AA:3F:10:D1:EB:0E:13:9B:9E:49:4E:BF:6C:64:21 Certificate issuer: /CN=A91F495C/serialNumber=D6C80C5D38AA3F10D1EB0E139B9E494EBF6C6421 Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft Manifest number: DF Signing time: Wed 17 Sep 2025 06:07:11 +0000 Manifest this update: Wed 17 Sep 2025 06:07:11 +0000 Manifest next update: Wed 24 Sep 2025 06:07:11 +0000 Files and hashes: 1: 1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl (hash: evq7tQ46mjNYIYGTUH7b0dE6PJydamawW6TxLXPgLlU=) 2: 084D41C6407111EFB0944C40C4F9AE02.roa (hash: Jb/5el+254tvWTwmxgE5e2fworHZ6IC6eYTkaaOmWbo=) 3: 08FDDCFC407111EFB0944C40C4F9AE02.roa (hash: 5j1mJUsKsqLJqbWxCLNYcCoMJnOjUallWOckNeSTW7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 06:07:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F495C, serialNumber=D6C80C5D38AA3F10D1EB0E139B9E494EBF6C6421 Validity Not Before: Sep 17 06:07:11 2025 GMT Not After : Sep 24 06:07:11 2025 GMT Subject: CN=68ca500f-bc59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:05:08:9d:86:4d:ca:66:8d:fa:44:d4:68:e6: f0:79:09:a2:ba:1b:74:5b:ce:34:3c:0d:5c:73:7e: d5:24:98:ac:68:37:19:b6:18:de:61:7a:c0:68:c0: 9b:31:0d:63:e8:c8:e0:d7:bf:91:b2:1b:3f:1c:86: 70:93:51:d2:1a:d5:ac:af:f0:1c:66:35:1e:68:29: dd:6c:4f:d6:6c:8d:74:a0:d8:f6:7d:19:35:b8:75: 0b:c3:18:d8:06:0a:50:18:7e:f0:07:2b:07:89:f6: f8:cb:76:06:f9:97:97:29:c0:d3:74:6f:5e:82:5b: 53:d6:89:4c:7d:2e:97:60:74:88:67:73:31:7e:1a: 7f:36:48:b7:3e:71:86:6f:1e:a0:b6:b6:2e:7a:3b: 9e:69:20:c3:c9:cb:d5:81:b0:90:f6:9e:65:49:2f: ed:73:ff:78:b4:ed:43:3c:04:97:21:bc:9c:95:34: 01:f3:36:67:58:de:f5:f7:1c:fa:58:2a:28:13:56: fe:74:54:18:3a:ca:a0:2f:41:35:8d:31:7c:31:d9: 6e:87:af:fb:48:9e:73:24:ec:22:08:a2:06:dc:ee: 90:36:76:7f:26:ce:c6:ee:fe:2a:8f:1b:0e:ae:c5: a5:db:0f:3c:22:04:1c:10:76:74:dd:02:0d:4d:aa: 8c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:9A:0D:62:80:E4:42:6F:AE:02:C5:D9:F2:7B:4B:A4:FC:64:26:EF X509v3 Authority Key Identifier: keyid:D6:C8:0C:5D:38:AA:3F:10:D1:EB:0E:13:9B:9E:49:4E:BF:6C:64:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:e6:05:2f:c4:3a:66:d8:29:3e:13:ba:45:c1:b5:71:f3:81: 80:1c:3b:20:07:66:7c:97:a7:7d:d9:dc:c1:72:b1:87:4d:be: 34:31:c8:b6:e4:ba:70:8f:89:60:3b:b0:4d:ca:ed:fa:87:cf: 99:5e:6e:61:8a:72:2c:05:3e:06:3a:8d:0f:0c:3d:99:7f:a0: 3f:5d:20:28:80:1f:72:10:a2:d3:18:6c:bd:05:43:8a:38:49: ce:e1:f9:af:28:23:e3:03:f4:1f:b8:d4:3c:c9:0c:6f:3a:19: f6:52:b6:93:2d:7c:d2:78:49:54:bb:c2:c9:67:24:94:d4:39: 76:6a:7d:90:8f:ab:ec:7a:a1:d3:14:31:b8:99:32:e8:4f:94: ea:76:26:11:e3:2b:fd:cd:1f:e1:cc:4d:b7:1b:ee:50:b4:c1: 33:dd:b2:11:f1:34:ef:03:e0:92:2f:65:4c:14:eb:70:ff:d4: 90:4c:63:a3:1d:47:6d:ed:b4:d6:ee:66:ad:28:0f:4a:5e:c0: 0a:75:78:00:5b:90:28:7c:b4:82:ee:e0:0f:65:36:d4:fc:1d: 7d:cc:87:74:5d:53:4d:ba:2f:f9:69:b7:d0:21:63:c2:3d:6f: 0a:98:26:7d:82:91:17:9b:dd:55:a5:0e:0f:a4:51:32:47:f2: f0:39:9d:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ5NUMxMTAvBgNVBAUTKEQ2QzgwQzVEMzhBQTNGMTBEMUVCMEUxMzlCOUU0OTRF QkY2QzY0MjEwHhcNMjUwOTE3MDYwNzExWhcNMjUwOTI0MDYwNzExWjAYMRYwFAYD VQQDEw02OGNhNTAwZi1iYzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArQUInYZNymaN+kTUaObweQmiuht0W840PA1cc37VJJisaDcZthjeYXrAaMCb MQ1j6Mjg17+Rshs/HIZwk1HSGtWsr/AcZjUeaCndbE/WbI10oNj2fRk1uHULwxjY BgpQGH7wBysHifb4y3YG+ZeXKcDTdG9egltT1olMfS6XYHSIZ3Mxfhp/Nki3PnGG bx6gtrYuejueaSDDycvVgbCQ9p5lSS/tc/94tO1DPASXIbyclTQB8zZnWN719xz6 WCooE1b+dFQYOsqgL0E1jTF8Mdluh6/7SJ5zJOwiCKIG3O6QNnZ/Js7G7v4qjxsO rsWl2w88IgQcEHZ03QINTaqM0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDGaDWKA 5EJvrgLF2fJ7S6T8ZCbvMB8GA1UdIwQYMBaAFNbIDF04qj8Q0esOE5ueSU6/bGQh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDk1Qy81QkM2M0VGNDQw NjUxMUVGODU2QzlFMjlDNEY5QUUwMi8xc2dNWFRpcVB4RFI2dzRUbTU1SlRyOXNa Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFzZ01YVGlxUHhEUjZ3NFRtNTVKVHI5c1pDRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDk1Qy81QkM2M0VGNDQwNjUxMUVGODU2QzlFMjlDNEY5QUUwMi8xc2dNWFRpcVB4 RFI2dzRUbTU1SlRyOXNaQ0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAO5gUvxDpm2Ck+E7pFwbVx84GAHDsgB2Z8l6d92dzBcrGHTb40Mci2 5Lpwj4lgO7BNyu36h8+ZXm5hinIsBT4GOo0PDD2Zf6A/XSAogB9yEKLTGGy9BUOK OEnO4fmvKCPjA/QfuNQ8yQxvOhn2UraTLXzSeElUu8LJZySU1Dl2an2Qj6vseqHT FDG4mTLoT5TqdiYR4yv9zR/hzE23G+5QtMEz3bIR8TTvA+CSL2VMFOtw/9SQTGOj HUdt7bTW7matKA9KXsAKdXgAW5AofLSC7uAPZTbU/B19zId0XVNNui/5abfQIWPC PW8KmCZ9gpEXm91VpQ4PpFEyR/LwOZ2O -----END CERTIFICATE-----Generated at Thu Sep 18 23:10:27 2025 by rpki-client