$ rpki-client -vvf rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.mft File: q47HWiojWU9vKtMnsOa7wLCrm-4.mft (raw, json) Hash identifier: h/jSaQfsnS+gPPdmNGgCLg/Oa3bIpfB+el+t6k1EufM= Subject key identifier: 8A:41:AF:C9:E5:3F:C4:16:89:58:51:F7:78:84:0B:9D:94:03:46:A8 Authority key identifier: AB:8E:C7:5A:2A:23:59:4F:6F:2A:D3:27:B0:E6:BB:C0:B0:AB:9B:EE Certificate issuer: /CN=A91F783D/serialNumber=AB8EC75A2A23594F6F2AD327B0E6BBC0B0AB9BEE Certificate serial: 0DFD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q47HWiojWU9vKtMnsOa7wLCrm-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.mft Manifest number: 0DF3 Signing time: Sun 24 Aug 2025 17:50:16 +0000 Manifest this update: Sun 24 Aug 2025 17:50:15 +0000 Manifest next update: Sun 31 Aug 2025 17:50:15 +0000 Files and hashes: 1: q47HWiojWU9vKtMnsOa7wLCrm-4.crl (hash: vbz2fiIavKspfoPHeVKe76xFF+yN73f2ey6bTY8Cmhw=) 2: E3ACB710B9B211E9A9A37254C4F9AE02.roa (hash: Jg5gZD0YmKb91aw5MXsxMT3mckkXVt61eCbJBF82oak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.crl rsync://rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q47HWiojWU9vKtMnsOa7wLCrm-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 17:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3581 (0xdfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F783D, serialNumber=AB8EC75A2A23594F6F2AD327B0E6BBC0B0AB9BEE Validity Not Before: Aug 24 17:50:15 2025 GMT Not After : Aug 31 17:50:15 2025 GMT Subject: CN=68ab50d8-7138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:8d:35:4f:ce:81:4d:f2:0b:18:bc:5e:e5:6a: c2:62:e6:0c:74:dd:f9:60:ea:45:ba:e3:23:e0:8f: cf:d3:06:4d:67:b7:4a:a0:43:7a:a8:4b:70:51:0e: 70:5d:69:c7:e4:7c:b8:9f:8f:f4:a3:13:31:1f:c7: 5f:c2:d0:c5:63:bd:d9:ff:07:13:12:99:18:0b:d1: 97:33:e7:0e:1f:9e:9d:f7:a7:a6:e7:e7:01:3a:2a: 39:05:e5:22:0f:71:23:ec:0a:74:c3:80:1e:31:59: 68:37:47:28:bc:8c:39:90:f2:cf:fb:c8:95:f7:c7: 80:2a:f2:30:43:f9:c9:01:87:7f:79:2b:78:5e:86: 19:31:33:59:ba:91:ca:81:69:c8:7a:6a:81:cc:f2: c8:10:84:a6:4e:f6:86:1f:99:66:83:38:af:cb:90: 8d:2e:95:99:ac:6b:cb:bf:24:9e:ca:de:fd:c3:1c: e5:6b:e3:c8:d9:80:ef:2b:22:8f:f0:a6:cf:e7:ba: 7e:62:db:04:39:eb:e3:25:1b:c8:4d:fb:e7:81:9c: 21:e2:5a:17:6c:95:45:ed:16:7d:2e:ee:eb:a5:74: 44:88:bb:9a:72:b3:53:92:0b:94:22:70:6b:78:58: ed:c0:f7:13:4d:1b:6a:d3:0a:c6:5b:0a:db:89:bf: 40:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:41:AF:C9:E5:3F:C4:16:89:58:51:F7:78:84:0B:9D:94:03:46:A8 X509v3 Authority Key Identifier: keyid:AB:8E:C7:5A:2A:23:59:4F:6F:2A:D3:27:B0:E6:BB:C0:B0:AB:9B:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q47HWiojWU9vKtMnsOa7wLCrm-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:0e:dc:c5:77:d2:a7:c6:58:d4:ed:6a:5f:b9:a5:30:79:fe: 51:67:d2:01:a2:97:0d:cf:0b:1f:aa:f0:a5:ed:98:4f:89:31: 4b:b6:ec:3b:b3:f8:4a:24:06:f3:6a:bd:df:e4:64:51:b7:4e: dd:af:fb:ac:b9:bd:18:a5:b1:39:d4:47:9d:40:df:ef:e3:72: a9:44:bd:55:66:2e:ab:21:8e:2c:a8:ec:58:be:c5:d2:3b:a0: e8:42:a2:63:1f:82:0a:c2:66:db:c1:53:29:28:3c:72:42:e3: 62:6a:d1:ff:f5:ab:d6:64:c8:60:45:e8:ab:8a:c2:ac:f4:79: 03:10:40:e8:ba:52:5c:03:18:a2:18:cb:45:2e:ff:4d:87:45: a4:6c:fa:79:de:dc:06:8e:11:df:8c:32:5b:90:01:95:a4:30: b5:20:71:df:42:9f:f4:39:e9:1f:2d:e0:3c:df:74:f9:14:c0: 86:68:ec:2d:b0:8c:e4:f5:b0:36:5f:47:db:77:7a:ea:2b:0b: 73:8e:f4:bf:ee:18:46:0b:9f:ee:ae:b7:86:44:8f:3b:9c:81: 15:6b:a9:db:9a:a6:d5:d4:fd:64:71:dc:3c:91:d5:a8:ba:f2: e4:7f:fb:f4:b8:21:de:81:95:aa:23:11:54:a6:2a:7f:d2:7b: 90:be:20:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc4M0QxMTAvBgNVBAUTKEFCOEVDNzVBMkEyMzU5NEY2RjJBRDMyN0IwRTZCQkMw QjBBQjlCRUUwHhcNMjUwODI0MTc1MDE1WhcNMjUwODMxMTc1MDE1WjAYMRYwFAYD VQQDEw02OGFiNTBkOC03MTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlI01T86BTfILGLxe5WrCYuYMdN35YOpFuuMj4I/P0wZNZ7dKoEN6qEtwUQ5w XWnH5Hy4n4/0oxMxH8dfwtDFY73Z/wcTEpkYC9GXM+cOH56d96em5+cBOio5BeUi D3Ej7Ap0w4AeMVloN0covIw5kPLP+8iV98eAKvIwQ/nJAYd/eSt4XoYZMTNZupHK gWnIemqBzPLIEISmTvaGH5lmgzivy5CNLpWZrGvLvySeyt79wxzla+PI2YDvKyKP 8KbP57p+YtsEOevjJRvITfvngZwh4loXbJVF7RZ9Lu7rpXREiLuacrNTkguUInBr eFjtwPcTTRtq0wrGWwrbib9AuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIpBr8nl P8QWiVhR93iEC52UA0aoMB8GA1UdIwQYMBaAFKuOx1oqI1lPbyrTJ7Dmu8Cwq5vu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzgzRC8zMURGMURFRUI5 QjExMUU5OTkwQzA4NTJDNEY5QUUwMi9xNDdIV2lvaldVOXZLdE1uc09hN3dMQ3Jt LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3E0N0hXaW9qV1U5dkt0TW5zT2E3d0xDcm0tNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzgzRC8zMURGMURFRUI5QjExMUU5OTkwQzA4NTJDNEY5QUUwMi9xNDdIV2lvaldV OXZLdE1uc09hN3dMQ3JtLTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASDtzFd9KnxljU7WpfuaUwef5RZ9IBopcNzwsfqvCl7ZhPiTFLtuw7 s/hKJAbzar3f5GRRt07dr/usub0YpbE51EedQN/v43KpRL1VZi6rIY4sqOxYvsXS O6DoQqJjH4IKwmbbwVMpKDxyQuNiatH/9avWZMhgReirisKs9HkDEEDoulJcAxii GMtFLv9Nh0WkbPp53twGjhHfjDJbkAGVpDC1IHHfQp/0OekfLeA833T5FMCGaOwt sIzk9bA2X0fbd3rqKwtzjvS/7hhGC5/urreGRI87nIEVa6nbmqbV1P1kcdw8kdWo uvLkf/v0uCHegZWqIxFUpip/0nuQviA8 -----END CERTIFICATE-----Generated at Sun Aug 24 21:38:53 2025 by rpki-client