$ rpki-client -vvf rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft File: 0Q5D4Fk97x241_RMbxzRPnPC8jA.mft (raw, json) Hash identifier: AyJWO6emUV7/YQozqr3w0FfKeVN/7aDyL3wxV3uE3/k= Subject key identifier: 7A:E9:10:68:53:BD:0B:B0:30:1A:F3:2E:75:01:C4:9E:18:1A:A6:AB Authority key identifier: D1:0E:43:E0:59:3D:EF:1D:B8:D7:F4:4C:6F:1C:D1:3E:73:C2:F2:30 Certificate issuer: /CN=A91325DC/serialNumber=D10E43E0593DEF1DB8D7F44C6F1CD13E73C2F230 Certificate serial: 0B34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft Manifest number: 0B27 Signing time: Tue 12 Aug 2025 19:29:20 +0000 Manifest this update: Tue 12 Aug 2025 19:29:20 +0000 Manifest next update: Tue 19 Aug 2025 19:29:20 +0000 Files and hashes: 1: 0Q5D4Fk97x241_RMbxzRPnPC8jA.crl (hash: 52OXHyd0ufjCYMfbaGaI5dVAwSlb0JtX0ZXIaODdN0o=) 2: A2DE5B44AE1C11EAA46DAF7FC4F9AE02.roa (hash: wBezilbHgFlLqA1qqUMQVDVzvkJDksyuC7XhtfdBEgk=) 3: 3FC1B85E431811EA84E68121C4F9AE02.roa (hash: kRXthgEAoGC/b23UrIEWTh9+gf3/yFfF1cVAtff2rTg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.crl rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 19:29:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2868 (0xb34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91325DC, serialNumber=D10E43E0593DEF1DB8D7F44C6F1CD13E73C2F230 Validity Not Before: Aug 12 19:29:20 2025 GMT Not After : Aug 19 19:29:20 2025 GMT Subject: CN=689b9610-4e86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:42:27:8a:8d:52:f8:d3:cf:b3:d9:d4:7f:f4: 3b:fb:9d:da:77:92:47:41:4f:2b:af:b4:dc:ad:f9: 92:5e:91:33:87:26:b4:b7:fa:47:33:02:0c:5a:27: e4:d8:1e:2b:97:f6:be:46:d4:86:b9:3e:ce:97:44: a4:b1:bb:62:2d:51:f5:64:6f:45:91:5d:fb:18:5f: f2:b4:38:44:83:13:c7:0e:ea:79:26:57:42:8a:d6: 0d:b1:99:bd:66:9a:40:c1:9f:10:0a:7a:b3:c3:30: 4d:3d:6b:0b:fc:2a:22:23:c5:56:b2:a6:d4:ad:da: 7f:0a:27:83:b8:3d:e2:d4:4f:3f:8f:d6:f2:a9:84: d1:cd:28:c0:96:e7:97:8d:3f:7d:83:7c:3d:d3:0e: bf:e9:41:ce:d0:a7:38:62:53:ab:58:4d:ea:d6:74: 46:03:42:65:ce:ef:a8:da:4e:94:06:18:91:64:73: e1:9d:f3:10:38:d9:3d:3b:9c:55:b2:2d:4f:f1:b5: f4:ad:db:05:33:ec:1f:f8:f4:c1:9e:d7:39:3f:f1: 49:57:41:b6:89:85:ae:85:b6:de:4e:43:9a:f1:10: 43:33:1d:20:4d:51:cd:f4:d3:cc:36:a5:9e:f4:9d: 79:e8:30:67:fd:10:61:29:1c:a9:be:14:37:a3:e0: d8:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:E9:10:68:53:BD:0B:B0:30:1A:F3:2E:75:01:C4:9E:18:1A:A6:AB X509v3 Authority Key Identifier: keyid:D1:0E:43:E0:59:3D:EF:1D:B8:D7:F4:4C:6F:1C:D1:3E:73:C2:F2:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:d9:23:a9:f3:01:b4:90:0f:b1:75:8e:d5:c5:3b:45:3c:b8: 1d:ba:d6:f5:27:9f:4c:73:fd:dd:1e:de:01:77:65:79:0d:b9: 2a:80:e7:75:36:dc:9c:5a:77:4d:10:3f:c2:35:69:ff:fa:38: b6:82:54:35:9a:dd:28:84:33:18:e9:80:eb:6b:6d:94:9e:e3: be:e9:0e:68:16:91:8d:21:d6:f0:47:ec:1b:61:4a:d8:70:6f: 89:40:d4:f9:1d:83:74:a6:c6:ca:61:65:28:2b:a0:81:49:4b: ae:ba:0d:b4:82:67:b1:21:71:56:eb:29:c5:6f:2b:24:27:f8: 0d:f5:d6:7f:10:a1:74:9b:19:dd:a5:bc:cc:de:6e:03:b8:f0: a0:30:a8:03:ee:d5:0a:01:69:b7:4a:fb:68:34:fd:0a:b5:74: b2:0a:45:c7:c9:5e:7a:7a:d7:e5:eb:a0:e5:b2:e1:02:c7:6d: 1f:3d:2d:4f:c2:ab:b8:ce:ad:28:98:df:32:a1:15:41:8f:13: cf:3d:79:dc:90:7f:1c:61:af:07:7f:1b:6a:4b:a6:ce:e3:a1: 8a:e0:4b:bb:91:00:23:48:93:c6:f1:ce:6f:35:08:4c:e7:ad: 93:0a:d4:46:b6:71:7e:29:e3:f4:3f:83:e8:77:24:f1:07:9d: 60:27:df:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI1REMxMTAvBgNVBAUTKEQxMEU0M0UwNTkzREVGMURCOEQ3RjQ0QzZGMUNEMTNF NzNDMkYyMzAwHhcNMjUwODEyMTkyOTIwWhcNMjUwODE5MTkyOTIwWjAYMRYwFAYD VQQDEw02ODliOTYxMC00ZTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0Inio1S+NPPs9nUf/Q7+53ad5JHQU8rr7TcrfmSXpEzhya0t/pHMwIMWifk 2B4rl/a+RtSGuT7Ol0SksbtiLVH1ZG9FkV37GF/ytDhEgxPHDup5JldCitYNsZm9 ZppAwZ8QCnqzwzBNPWsL/CoiI8VWsqbUrdp/CieDuD3i1E8/j9byqYTRzSjAlueX jT99g3w90w6/6UHO0Kc4YlOrWE3q1nRGA0Jlzu+o2k6UBhiRZHPhnfMQONk9O5xV si1P8bX0rdsFM+wf+PTBntc5P/FJV0G2iYWuhbbeTkOa8RBDMx0gTVHN9NPMNqWe 9J156DBn/RBhKRypvhQ3o+DYawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHrpEGhT vQuwMBrzLnUBxJ4YGqarMB8GA1UdIwQYMBaAFNEOQ+BZPe8duNf0TG8c0T5zwvIw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjVEQy80NjEyRDUxRTQz MTYxMUVBQjI2Mjc4MURDNEY5QUUwMi8wUTVENEZrOTd4MjQxX1JNYnh6UlBuUEM4 akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBRNUQ0Rms5N3gyNDFfUk1ieHpSUG5QQzhqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjVEQy80NjEyRDUxRTQzMTYxMUVBQjI2Mjc4MURDNEY5QUUwMi8wUTVENEZrOTd4 MjQxX1JNYnh6UlBuUEM4akEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCy2SOp8wG0kA+xdY7VxTtFPLgdutb1J59Mc/3dHt4Bd2V5DbkqgOd1 NtycWndNED/CNWn/+ji2glQ1mt0ohDMY6YDra22UnuO+6Q5oFpGNIdbwR+wbYUrY cG+JQNT5HYN0psbKYWUoK6CBSUuuug20gmexIXFW6ynFbyskJ/gN9dZ/EKF0mxnd pbzM3m4DuPCgMKgD7tUKAWm3SvtoNP0KtXSyCkXHyV56etfl66DlsuECx20fPS1P wqu4zq0omN8yoRVBjxPPPXnckH8cYa8HfxtqS6bO46GK4Eu7kQAjSJPG8c5vNQhM 562TCtRGtnF+KeP0P4PodyTxB51gJ9/x -----END CERTIFICATE-----Generated at Wed Aug 13 02:15:28 2025 by rpki-client