$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft File: PoReqE4RAwvCoQYTCJefeYoSET8.mft (raw, json) Hash identifier: OEFzYbqmauqn1Ruvm70+w86NvFIv8PT/UnGaJAoP0Bk= Subject key identifier: E2:7B:13:63:4D:49:19:26:EA:91:FB:EC:7A:66:CB:55:92:14:B9:86 Authority key identifier: 3E:84:5E:A8:4E:11:03:0B:C2:A1:06:13:08:97:9F:79:8A:12:11:3F Certificate issuer: /CN=A91A6BF5/serialNumber=3E845EA84E11030BC2A1061308979F798A12113F Certificate serial: 0C23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PoReqE4RAwvCoQYTCJefeYoSET8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft Manifest number: 0C1B Signing time: Sun 10 Aug 2025 18:41:54 +0000 Manifest this update: Sun 10 Aug 2025 18:41:53 +0000 Manifest next update: Sun 17 Aug 2025 18:41:53 +0000 Files and hashes: 1: PoReqE4RAwvCoQYTCJefeYoSET8.crl (hash: dJgePCywGZmC/xTJsUZN+2j7V/hUuzjRWlbGf+263cg=) 2: 03EE880413F511EA8D120C65C4F9AE02.roa (hash: RpJ/3A2zXQw9C0hNB2vN4upiPschgzxuaxvOtctAWMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.crl rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PoReqE4RAwvCoQYTCJefeYoSET8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3107 (0xc23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6BF5, serialNumber=3E845EA84E11030BC2A1061308979F798A12113F Validity Not Before: Aug 10 18:41:53 2025 GMT Not After : Aug 17 18:41:53 2025 GMT Subject: CN=6898e7f1-76cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5c:25:50:97:dc:69:fc:7b:04:45:5f:2e:de: d9:45:8c:8d:09:83:2a:79:b7:f8:7b:9e:30:e4:36: a7:46:b3:64:17:c4:2a:82:73:23:99:33:b3:b5:ae: 94:45:fc:ae:87:b5:2e:da:c8:1f:a0:5a:4d:0b:45: 67:98:2f:b5:b9:0c:d9:fa:98:ba:0f:29:aa:50:27: c3:95:93:b9:e4:ee:45:a6:e1:42:b6:2b:e3:5f:2a: c7:77:1f:5a:49:27:1e:47:9b:e0:6f:ee:da:ef:b5: 03:d1:28:54:73:80:8b:44:dd:13:77:b1:13:d8:b0: a3:f8:bf:4c:eb:cc:88:93:56:85:19:fa:77:c5:67: ab:0c:8e:c1:e0:84:89:c1:00:bd:49:73:c2:01:06: b2:ef:d0:b1:11:69:e0:c1:7a:fb:5f:05:26:0d:da: 18:c3:69:9b:bd:25:54:aa:92:29:ca:e4:c8:c0:9c: b8:19:40:d8:34:01:3b:b2:39:b5:15:39:44:30:90: 7e:c2:d8:ef:1c:c4:7b:c6:8c:b4:83:45:cd:d2:63: dd:29:17:b4:ee:a7:22:9c:87:aa:77:32:a6:29:64: 39:16:9e:04:a3:fb:0d:f8:67:9c:39:f7:59:3b:fa: b1:77:38:7f:e5:c2:d9:a1:38:ba:43:96:26:48:ab: 1d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:7B:13:63:4D:49:19:26:EA:91:FB:EC:7A:66:CB:55:92:14:B9:86 X509v3 Authority Key Identifier: keyid:3E:84:5E:A8:4E:11:03:0B:C2:A1:06:13:08:97:9F:79:8A:12:11:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PoReqE4RAwvCoQYTCJefeYoSET8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:1e:bd:08:a8:26:80:4a:df:1a:91:bd:55:94:66:b7:fa:2f: 37:be:da:d3:25:8e:ad:34:48:85:4c:14:60:a9:73:a1:cd:20: be:4a:ec:03:5f:f9:2b:79:95:7e:14:25:e6:4d:74:2f:ee:33: b2:ae:df:4f:bf:6d:31:8c:30:bc:54:11:41:88:dd:71:14:e1: 88:20:4b:a3:14:ae:f9:38:a0:63:0d:ea:74:32:33:a3:a1:fa: 4e:bb:37:c0:76:24:a7:d3:df:c9:c1:cc:b4:d0:3a:93:ef:22: b5:5b:da:f2:b6:6b:a9:d6:16:7d:f3:b1:7e:28:01:ad:dd:c8: f4:4f:91:73:84:20:33:2a:aa:5a:2b:91:2c:7b:68:0b:b3:30: d4:90:50:08:5a:7d:af:ae:e3:d4:93:ef:b9:a8:9c:34:b8:05: a6:ef:b2:32:b9:5f:d1:f8:17:c2:8c:f6:f3:48:85:aa:db:fa: 3d:1b:84:53:3f:4f:3a:e0:f8:79:a6:a7:fd:b2:cb:2d:a4:93: 11:33:ad:37:e5:85:e1:75:53:27:05:8e:0e:4e:22:9d:dd:9e: d0:85:20:98:f1:ce:d7:ba:69:6a:c9:e8:8d:72:b7:36:0a:4b: 70:0c:0c:f3:b6:c9:81:4c:e3:2a:aa:34:4f:f5:88:10:1d:8c: 6e:56:99:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZCRjUxMTAvBgNVBAUTKDNFODQ1RUE4NEUxMTAzMEJDMkExMDYxMzA4OTc5Rjc5 OEExMjExM0YwHhcNMjUwODEwMTg0MTUzWhcNMjUwODE3MTg0MTUzWjAYMRYwFAYD VQQDEw02ODk4ZTdmMS03NmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyVwlUJfcafx7BEVfLt7ZRYyNCYMqebf4e54w5DanRrNkF8QqgnMjmTOzta6U Rfyuh7Uu2sgfoFpNC0VnmC+1uQzZ+pi6DymqUCfDlZO55O5FpuFCtivjXyrHdx9a SSceR5vgb+7a77UD0ShUc4CLRN0Td7ET2LCj+L9M68yIk1aFGfp3xWerDI7B4ISJ wQC9SXPCAQay79CxEWngwXr7XwUmDdoYw2mbvSVUqpIpyuTIwJy4GUDYNAE7sjm1 FTlEMJB+wtjvHMR7xoy0g0XN0mPdKRe07qcinIeqdzKmKWQ5Fp4Eo/sN+GecOfdZ O/qxdzh/5cLZoTi6Q5YmSKsdsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOJ7E2NN SRkm6pH77Hpmy1WSFLmGMB8GA1UdIwQYMBaAFD6EXqhOEQMLwqEGEwiXn3mKEhE/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkJGNS85RDBCNDIyMjEz RjMxMUVBODBCMzc0NUZDNEY5QUUwMi9Qb1JlcUU0UkF3dkNvUVlUQ0plZmVZb1NF VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BvUmVxRTRSQXd2Q29RWVRDSmVmZVlvU0VUOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkJGNS85RDBCNDIyMjEzRjMxMUVBODBCMzc0NUZDNEY5QUUwMi9Qb1JlcUU0UkF3 dkNvUVlUQ0plZmVZb1NFVDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeHr0IqCaASt8akb1VlGa3+i83vtrTJY6tNEiFTBRgqXOhzSC+SuwD X/kreZV+FCXmTXQv7jOyrt9Pv20xjDC8VBFBiN1xFOGIIEujFK75OKBjDep0MjOj ofpOuzfAdiSn09/Jwcy00DqT7yK1W9rytmup1hZ987F+KAGt3cj0T5FzhCAzKqpa K5Ese2gLszDUkFAIWn2vruPUk++5qJw0uAWm77IyuV/R+BfCjPbzSIWq2/o9G4RT P0864Ph5pqf9ssstpJMRM6035YXhdVMnBY4OTiKd3Z7QhSCY8c7XumlqyeiNcrc2 CktwDAzztsmBTOMqqjRP9YgQHYxuVpka -----END CERTIFICATE-----Generated at Sun Aug 10 21:11:33 2025 by rpki-client