$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft File: fSkuhkI7U8Czc7eZZYghkTSp5hA.mft (raw, json) Hash identifier: dpljYV/c78Haeph/+ECtrKZWaM0gGGlFKzae4f/LQJ8= Subject key identifier: 75:35:D1:A0:7D:1D:14:C5:B8:A8:26:EA:03:4D:77:B9:BD:D8:0E:B1 Authority key identifier: 7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10 Certificate issuer: /CN=A91A3430/serialNumber=7D292E86423B53C0B373B7996588219134A9E610 Certificate serial: 0D05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft Manifest number: 0CFC Signing time: Fri 08 Aug 2025 18:17:58 +0000 Manifest this update: Fri 08 Aug 2025 18:17:58 +0000 Manifest next update: Fri 15 Aug 2025 18:17:58 +0000 Files and hashes: 1: fSkuhkI7U8Czc7eZZYghkTSp5hA.crl (hash: QJDYoiln+ZqtkTYbVneoV6cUD50Z/AUqM935c8oQBuY=) 2: 7B3163F0072A11EA9E314D4CC4F9AE02.roa (hash: 8KRCIYlWeIU1RFVFOTA+MnkOIQ/xaefXlo2pRQaFi20=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.crl rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3333 (0xd05) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3430, serialNumber=7D292E86423B53C0B373B7996588219134A9E610 Validity Not Before: Aug 8 18:17:58 2025 GMT Not After : Aug 15 18:17:58 2025 GMT Subject: CN=68963f56-007e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:67:f3:a2:de:38:51:d9:02:fa:7e:2c:46:11: 92:e3:5f:f6:5d:8d:b5:3d:a2:2f:ab:0d:e6:46:66: 12:60:c8:c1:32:6c:e7:54:9f:4d:cc:78:3c:1f:9c: bb:24:22:bf:84:40:26:00:7a:6c:80:5e:12:f2:4f: 7f:d8:3e:e0:2a:7d:ef:b1:a8:a8:1f:2c:e1:fc:7b: 21:68:e0:17:db:36:83:86:42:18:bd:fd:5c:3e:30: 40:56:b9:67:92:19:e0:72:ec:dd:6f:f6:93:f7:14: 18:e1:25:d9:36:2b:69:aa:a1:3a:ca:96:0a:2b:a9: c4:d7:cd:f5:84:b8:33:a2:86:af:ed:c5:ba:a6:5e: 7d:7e:b3:97:4e:3d:ce:33:73:f3:73:ae:77:9a:b0: 40:84:28:91:a1:41:73:4c:8f:2d:3d:1c:f6:86:11: 0a:db:67:09:9c:36:6e:30:3e:de:fc:bc:2c:a9:d2: fd:96:07:02:d4:02:31:4c:88:28:b5:84:1b:7f:82: 7d:4c:b9:df:e9:5d:74:a6:25:ec:27:1b:8f:0d:5c: d2:3a:ed:75:60:a8:a4:05:ae:96:c0:4d:60:6c:4f: ae:29:86:01:df:33:b5:07:df:fa:32:12:c9:fc:61: 9d:4e:b5:5c:9d:4d:7f:b9:b1:e3:d0:dd:13:ce:79: 37:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:35:D1:A0:7D:1D:14:C5:B8:A8:26:EA:03:4D:77:B9:BD:D8:0E:B1 X509v3 Authority Key Identifier: keyid:7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:4c:41:f9:85:8f:18:94:31:24:aa:e4:7b:12:3f:b0:c9:55: bd:55:85:cc:e4:cc:84:4d:64:49:68:e0:62:31:70:4c:19:4e: 7e:f0:88:66:b9:5a:4f:fd:0a:ba:70:6a:44:5d:1a:ad:4a:f6: 56:1d:b0:49:7e:4c:e6:ef:b5:8a:bd:56:8d:23:e2:99:fc:34: 41:ab:3a:c0:c2:27:79:06:57:1e:3e:06:22:c0:16:67:1f:66: 92:7a:02:ef:21:f9:b5:5a:f0:63:3a:42:0e:50:db:e9:29:2d: 5e:e9:ee:6a:8d:82:48:b7:36:21:86:13:89:d3:af:75:a0:4f: a9:b8:b1:7c:45:46:1a:14:d9:2b:65:b8:a9:8c:30:49:9d:a4: 7f:9c:31:f4:50:fb:57:39:7c:b0:a8:5d:e3:e5:6f:2b:30:4e: df:a5:c9:d3:d6:f5:a5:95:1a:6e:3e:88:90:94:f9:42:bd:34: a5:41:b2:67:be:ec:c6:d3:e7:12:58:0d:bf:6c:cc:18:e4:85: 83:3f:b4:42:22:02:1d:b8:a3:da:87:00:94:b0:fc:fe:4f:25: 03:52:e6:4d:a6:f1:d5:ce:e8:9c:73:c8:47:99:a1:a6:e0:17: d9:29:47:85:3f:53:d4:f1:f5:70:f9:0b:42:1a:15:7b:44:f9: e4:49:ad:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM0MzAxMTAvBgNVBAUTKDdEMjkyRTg2NDIzQjUzQzBCMzczQjc5OTY1ODgyMTkx MzRBOUU2MTAwHhcNMjUwODA4MTgxNzU4WhcNMjUwODE1MTgxNzU4WjAYMRYwFAYD VQQDEw02ODk2M2Y1Ni0wMDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArWfzot44UdkC+n4sRhGS41/2XY21PaIvqw3mRmYSYMjBMmznVJ9NzHg8H5y7 JCK/hEAmAHpsgF4S8k9/2D7gKn3vsaioHyzh/HshaOAX2zaDhkIYvf1cPjBAVrln khngcuzdb/aT9xQY4SXZNitpqqE6ypYKK6nE1831hLgzooav7cW6pl59frOXTj3O M3Pzc653mrBAhCiRoUFzTI8tPRz2hhEK22cJnDZuMD7e/LwsqdL9lgcC1AIxTIgo tYQbf4J9TLnf6V10piXsJxuPDVzSOu11YKikBa6WwE1gbE+uKYYB3zO1B9/6MhLJ /GGdTrVcnU1/ubHj0N0Tznk3/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHU10aB9 HRTFuKgm6gNNd7m92A6xMB8GA1UdIwQYMBaAFH0pLoZCO1PAs3O3mWWIIZE0qeYQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzQzMC84NkFDODlEMEU4 N0IxMUU5QTFFRDVCNDdDNEY5QUUwMi9mU2t1aGtJN1U4Q3pjN2VaWllnaGtUU3A1 aEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZTa3Voa0k3VThDemM3ZVpaWWdoa1RTcDVoQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzQzMC84NkFDODlEMEU4N0IxMUU5QTFFRDVCNDdDNEY5QUUwMi9mU2t1aGtJN1U4 Q3pjN2VaWllnaGtUU3A1aEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoTEH5hY8YlDEkquR7Ej+wyVW9VYXM5MyETWRJaOBiMXBMGU5+8Ihm uVpP/Qq6cGpEXRqtSvZWHbBJfkzm77WKvVaNI+KZ/DRBqzrAwid5BlcePgYiwBZn H2aSegLvIfm1WvBjOkIOUNvpKS1e6e5qjYJItzYhhhOJ0691oE+puLF8RUYaFNkr ZbipjDBJnaR/nDH0UPtXOXywqF3j5W8rME7fpcnT1vWllRpuPoiQlPlCvTSlQbJn vuzG0+cSWA2/bMwY5IWDP7RCIgIduKPahwCUsPz+TyUDUuZNpvHVzuicc8hHmaGm 4BfZKUeFP1PU8fVw+QtCGhV7RPnkSa3P -----END CERTIFICATE-----Generated at Sun Aug 10 03:51:10 2025 by rpki-client