$ rpki-client -vvf rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft File: aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft (raw, json) Hash identifier: 7Rr9TSn+l9bFw5NwDNA1RBs/8cUcTjDia7iYRLoUjUk= Subject key identifier: 43:C9:46:99:7F:A2:9A:EB:3C:F3:47:6B:16:46:64:F4:52:E8:83:70 Authority key identifier: 69:6A:F4:FE:03:66:13:D6:51:B5:E2:9A:09:D4:FE:71:B5:55:A4:49 Certificate issuer: /CN=A91A80F9/serialNumber=696AF4FE036613D651B5E29A09D4FE71B555A449 Certificate serial: 0CC7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWr0_gNmE9ZRteKaCdT-cbVVpEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft Manifest number: 0CBF Signing time: Fri 08 Aug 2025 18:21:46 +0000 Manifest this update: Fri 08 Aug 2025 18:21:46 +0000 Manifest next update: Fri 15 Aug 2025 18:21:46 +0000 Files and hashes: 1: aWr0_gNmE9ZRteKaCdT-cbVVpEk.crl (hash: Z5AnQrm6hfgeRsqesD9HpAELbDajpazjdM3AK5I5AGM=) 2: 3EF3C6EEF8B511EAAD434755C4F9AE02.roa (hash: 2oxrZykX6FImkgj0+sEn3YTkG/5Ks+ROCEDtHP8d+xs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.crl rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWr0_gNmE9ZRteKaCdT-cbVVpEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3271 (0xcc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A80F9, serialNumber=696AF4FE036613D651B5E29A09D4FE71B555A449 Validity Not Before: Aug 8 18:21:46 2025 GMT Not After : Aug 15 18:21:46 2025 GMT Subject: CN=6896403a-20b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ad:35:8a:4d:02:ec:30:c8:e3:e7:32:d5:52: 40:ce:10:1d:96:49:14:fe:62:1f:10:71:bb:97:b0: df:31:59:e4:f4:30:10:87:b3:f2:67:79:ee:90:8f: 73:52:87:8a:31:c5:6e:be:bf:a8:5f:eb:e9:c5:c8: 27:a6:27:ce:de:ef:71:9a:c5:67:4c:93:41:e0:4c: ee:81:16:f9:9b:f3:dd:02:84:45:90:b6:f4:9c:89: d8:61:2f:83:30:23:05:45:49:d4:ca:c7:04:8b:a0: 16:fd:9f:f5:e1:7d:4b:79:13:fe:6d:c3:f4:32:e7: e8:d9:93:43:9f:aa:d5:2c:80:a7:6c:0a:fa:eb:bc: b8:cb:5f:af:cc:f8:b1:ea:c8:f9:10:91:e9:75:02: e5:5b:72:3c:12:ff:8f:2e:45:39:6a:6d:ff:2d:ca: de:fc:8b:ee:b6:98:ca:51:ab:71:e2:f2:b6:89:b7: e4:1a:4d:85:7e:46:9a:1e:41:2d:18:1c:c3:e2:75: a1:12:10:45:ab:ce:51:04:ca:7c:cf:d8:69:97:08: a5:00:bd:42:69:be:5e:57:e5:52:c0:55:21:87:4d: e2:11:3f:b0:30:11:27:1f:a5:42:93:1c:0e:98:fa: 34:da:2d:01:1e:26:cd:df:4b:ff:3c:15:ab:ac:35: c9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:C9:46:99:7F:A2:9A:EB:3C:F3:47:6B:16:46:64:F4:52:E8:83:70 X509v3 Authority Key Identifier: keyid:69:6A:F4:FE:03:66:13:D6:51:B5:E2:9A:09:D4:FE:71:B5:55:A4:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWr0_gNmE9ZRteKaCdT-cbVVpEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:ec:42:55:ba:d9:2e:bd:a9:a5:ef:37:66:f9:4b:25:05:38: 78:43:70:33:6e:f4:54:45:0a:a8:ab:20:ef:69:c8:c5:a2:4a: 22:ff:e3:13:28:70:d8:24:fc:de:02:03:dd:2a:a3:4d:31:c2: ce:5a:f2:fd:9c:11:83:2c:e7:3d:e9:f9:ed:32:fe:a7:96:47: a5:2e:0b:8a:fe:94:f8:f2:ec:08:6a:d2:7b:17:fe:15:46:4c: 41:5d:db:e7:67:10:18:17:73:87:de:ac:a9:f8:5b:98:19:9c: 28:df:bf:60:5f:1e:1d:82:7f:2a:2c:13:2f:2b:fe:fa:7c:87: 95:f8:87:77:18:bf:e1:fa:3a:ca:36:f9:70:be:7d:56:37:f5: 6a:b9:e2:92:c8:a7:28:2c:67:db:fa:9e:d5:9a:de:08:b4:53: 73:7b:7d:61:73:9a:f0:1a:d8:16:a9:d1:1b:3c:a2:59:3c:7f: f3:d3:f0:08:aa:8a:60:75:cb:ee:9d:dc:9c:c0:80:37:3f:7f: 2b:86:7a:35:4a:37:4f:d5:75:ed:70:df:03:5e:ff:74:dc:9c: 13:0b:9d:35:c1:31:45:a8:d9:72:5e:7d:b0:c4:ec:e8:e7:5a: ed:f4:0e:e8:8d:07:87:c0:f9:d1:f0:bb:44:a7:b2:9a:9f:4b: 51:1a:11:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgwRjkxMTAvBgNVBAUTKDY5NkFGNEZFMDM2NjEzRDY1MUI1RTI5QTA5RDRGRTcx QjU1NUE0NDkwHhcNMjUwODA4MTgyMTQ2WhcNMjUwODE1MTgyMTQ2WjAYMRYwFAYD VQQDEw02ODk2NDAzYS0yMGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo601ik0C7DDI4+cy1VJAzhAdlkkU/mIfEHG7l7DfMVnk9DAQh7PyZ3nukI9z UoeKMcVuvr+oX+vpxcgnpifO3u9xmsVnTJNB4EzugRb5m/PdAoRFkLb0nInYYS+D MCMFRUnUyscEi6AW/Z/14X1LeRP+bcP0Mufo2ZNDn6rVLICnbAr667y4y1+vzPix 6sj5EJHpdQLlW3I8Ev+PLkU5am3/Lcre/IvutpjKUatx4vK2ibfkGk2FfkaaHkEt GBzD4nWhEhBFq85RBMp8z9hplwilAL1Cab5eV+VSwFUhh03iET+wMBEnH6VCkxwO mPo02i0BHibN30v/PBWrrDXJyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEPJRpl/ oprrPPNHaxZGZPRS6INwMB8GA1UdIwQYMBaAFGlq9P4DZhPWUbXimgnU/nG1VaRJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODBGOS80OTc3M0FEMEY0 QTQxMUU5OENDNzVFMzdDNEY5QUUwMi9hV3IwX2dObUU5WlJ0ZUthQ2RULWNiVlZw RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FXcjBfZ05tRTlaUnRlS2FDZFQtY2JWVnBFay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODBGOS80OTc3M0FEMEY0QTQxMUU5OENDNzVFMzdDNEY5QUUwMi9hV3IwX2dObUU5 WlJ0ZUthQ2RULWNiVlZwRWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBP7EJVutkuvaml7zdm+UslBTh4Q3AzbvRURQqoqyDvacjFokoi/+MT KHDYJPzeAgPdKqNNMcLOWvL9nBGDLOc96fntMv6nlkelLguK/pT48uwIatJ7F/4V RkxBXdvnZxAYF3OH3qyp+FuYGZwo379gXx4dgn8qLBMvK/76fIeV+Id3GL/h+jrK Nvlwvn1WN/VqueKSyKcoLGfb+p7Vmt4ItFNze31hc5rwGtgWqdEbPKJZPH/z0/AI qopgdcvundycwIA3P38rhno1SjdP1XXtcN8DXv903JwTC501wTFFqNlyXn2wxOzo 51rt9A7ojQeHwPnR8LtEp7Kan0tRGhFW -----END CERTIFICATE-----Generated at Sun Aug 10 16:13:35 2025 by rpki-client