$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.mft File: slUrOLjFywk1yUD6YJgOpvUQz4Y.mft (raw, json) Hash identifier: 7xQP43HGw7gOxZWeI0/WGB/feoNj0kAmL6ZPgRH3aDk= Subject key identifier: 6D:D6:A0:19:C8:E0:B2:9F:1B:09:E1:0B:4C:8C:BC:4C:BC:89:9C:B6 Authority key identifier: B2:55:2B:38:B8:C5:CB:09:35:C9:40:FA:60:98:0E:A6:F5:10:CF:86 Certificate issuer: /CN=A91F5786/serialNumber=B2552B38B8C5CB0935C940FA60980EA6F510CF86 Certificate serial: CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/slUrOLjFywk1yUD6YJgOpvUQz4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.mft Manifest number: CA Signing time: Tue 09 Sep 2025 05:48:56 +0000 Manifest this update: Tue 09 Sep 2025 05:48:56 +0000 Manifest next update: Tue 16 Sep 2025 05:48:56 +0000 Files and hashes: 1: slUrOLjFywk1yUD6YJgOpvUQz4Y.crl (hash: CA7Gur/CVZ2ISpXvvnK65RW3qgBgMJIf86iKglqHw9I=) 2: 1F3782EE5AE211EF8E82D12DC4F9AE02.roa (hash: u07sFp3Yqjqw6LAiuoDt1givQlP2Rg/DNRW12Og3/70=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.crl rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/slUrOLjFywk1yUD6YJgOpvUQz4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 05:48:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 204 (0xcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5786, serialNumber=B2552B38B8C5CB0935C940FA60980EA6F510CF86 Validity Not Before: Sep 9 05:48:56 2025 GMT Not After : Sep 16 05:48:56 2025 GMT Subject: CN=68bfbfc8-dbe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b8:07:07:36:c8:0f:fc:f6:bb:26:05:e8:b5: d4:f2:7d:16:86:be:e5:a6:57:35:bd:44:7b:09:e7: 76:7b:c1:55:c2:cc:e6:9e:0d:e1:f1:4c:81:33:4a: 15:e1:f0:53:b5:b3:af:e9:5d:fc:d0:b1:59:c5:6f: ea:d1:ea:ad:61:95:b1:f9:81:6d:41:a5:dd:db:8f: 96:d0:c5:19:96:3b:26:53:a5:6f:47:84:d3:89:11: 8e:2e:1d:1a:c7:41:b7:4c:94:c3:46:31:4c:88:5c: da:68:e8:7d:d7:58:18:2b:7f:4a:dc:a1:b4:33:ea: c7:31:eb:8c:88:a5:73:8a:c2:59:54:63:40:b1:bf: b0:31:26:58:4e:b9:4a:92:0b:9f:11:ed:b8:3a:d6: 5b:53:c3:0e:b0:8f:b0:f6:0e:ae:6c:ea:d3:d8:db: 98:a2:7d:d4:69:75:b4:dc:37:7e:49:46:5d:16:aa: 31:f6:98:bf:34:6a:0e:ac:5c:24:0e:b8:0f:9e:e2: cb:91:93:53:1f:7c:0b:ee:fa:f3:e4:0e:f9:b8:96: bf:01:02:9c:8b:0a:2d:e5:fa:8b:ba:73:9b:7d:eb: 79:e5:a6:ee:8e:3f:2d:1e:54:03:64:ac:aa:b2:29: 5b:47:31:20:35:54:b6:10:3f:89:41:cb:d8:fa:13: de:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:D6:A0:19:C8:E0:B2:9F:1B:09:E1:0B:4C:8C:BC:4C:BC:89:9C:B6 X509v3 Authority Key Identifier: keyid:B2:55:2B:38:B8:C5:CB:09:35:C9:40:FA:60:98:0E:A6:F5:10:CF:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/slUrOLjFywk1yUD6YJgOpvUQz4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:90:af:f3:62:33:8e:7d:cf:55:68:36:a1:33:70:f0:40:38: 4a:f6:c2:5f:6d:60:ff:46:64:55:e9:b5:a1:d0:18:21:23:bf: e2:e0:54:f0:3c:50:25:3d:1c:f9:64:5d:06:8d:75:9e:90:f9: 73:dd:9c:7d:68:e9:de:ab:67:53:14:0d:81:c3:e0:86:1e:9f: 06:40:5e:16:58:77:40:6b:54:2f:b0:34:b5:2a:66:09:3e:e1: 2a:e0:ae:9c:a7:96:e0:41:a1:65:36:9b:34:f5:26:5b:dc:cb: df:2f:5c:98:42:35:bd:86:3e:01:58:9a:b2:41:f2:6a:27:f6: a8:d7:12:cf:44:e3:28:ea:fc:c9:34:33:d4:5a:bf:b8:8b:ef: f8:6e:6e:88:59:e9:a3:fb:ff:75:12:b8:cb:c7:a7:cf:12:35: 4c:ef:04:d9:f4:96:ca:54:13:e5:b8:d3:04:1a:b8:2c:69:bd: 93:3d:5c:ce:1c:af:23:ce:af:83:b4:3d:f8:bf:b2:11:99:b8: 7e:7e:10:7a:89:22:4c:ff:90:a9:ec:d3:59:bb:b7:d4:4d:83: 64:9c:7f:83:cd:97:28:11:d6:69:f1:4b:c9:d6:a6:f2:3f:f4: fe:e0:fe:98:00:d0:79:f1:a7:e6:08:63:bf:da:d2:55:bf:27: 8a:90:78:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU3ODYxMTAvBgNVBAUTKEIyNTUyQjM4QjhDNUNCMDkzNUM5NDBGQTYwOTgwRUE2 RjUxMENGODYwHhcNMjUwOTA5MDU0ODU2WhcNMjUwOTE2MDU0ODU2WjAYMRYwFAYD VQQDEw02OGJmYmZjOC1kYmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy7gHBzbID/z2uyYF6LXU8n0Whr7lplc1vUR7Ced2e8FVwszmng3h8UyBM0oV 4fBTtbOv6V380LFZxW/q0eqtYZWx+YFtQaXd24+W0MUZljsmU6VvR4TTiRGOLh0a x0G3TJTDRjFMiFzaaOh911gYK39K3KG0M+rHMeuMiKVzisJZVGNAsb+wMSZYTrlK kgufEe24OtZbU8MOsI+w9g6ubOrT2NuYon3UaXW03Dd+SUZdFqox9pi/NGoOrFwk DrgPnuLLkZNTH3wL7vrz5A75uJa/AQKciwot5fqLunObfet55abujj8tHlQDZKyq silbRzEgNVS2ED+JQcvY+hPeYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG3WoBnI 4LKfGwnhC0yMvEy8iZy2MB8GA1UdIwQYMBaAFLJVKzi4xcsJNclA+mCYDqb1EM+G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTc4Ni9FNTc3MTM4MDVB RTExMUVGQkI1QzU3MkRDNEY5QUUwMi9zbFVyT0xqRnl3azF5VUQ2WUpnT3B2VVF6 NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NsVXJPTGpGeXdrMXlVRDZZSmdPcHZVUXo0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTc4Ni9FNTc3MTM4MDVBRTExMUVGQkI1QzU3MkRDNEY5QUUwMi9zbFVyT0xqRnl3 azF5VUQ2WUpnT3B2VVF6NFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjkK/zYjOOfc9VaDahM3DwQDhK9sJfbWD/RmRV6bWh0BghI7/i4FTw PFAlPRz5ZF0GjXWekPlz3Zx9aOneq2dTFA2Bw+CGHp8GQF4WWHdAa1QvsDS1KmYJ PuEq4K6cp5bgQaFlNps09SZb3MvfL1yYQjW9hj4BWJqyQfJqJ/ao1xLPROMo6vzJ NDPUWr+4i+/4bm6IWemj+/91ErjLx6fPEjVM7wTZ9JbKVBPluNMEGrgsab2TPVzO HK8jzq+DtD34v7IRmbh+fhB6iSJM/5Cp7NNZu7fUTYNknH+DzZcoEdZp8UvJ1qby P/T+4P6YANB58afmCGO/2tJVvyeKkHjx -----END CERTIFICATE-----Generated at Tue Sep 9 14:10:07 2025 by rpki-client