$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft File: pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft (raw, json) Hash identifier: 8v/dDKZXJK+eVIInKUMVKvzthZJ6inWDB+EUX7OyN9U= Subject key identifier: 9D:7B:FF:26:B1:A0:76:F4:23:42:6A:17:BF:07:A7:EE:4A:CF:D3:12 Authority key identifier: A4:8C:9B:D4:A5:DB:11:9E:15:43:32:41:36:E0:2E:EA:4B:CA:AF:38 Certificate issuer: /CN=A91A8475/serialNumber=A48C9BD4A5DB119E1543324136E02EEA4BCAAF38 Certificate serial: 0229 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft Manifest number: 0222 Signing time: Wed 13 Aug 2025 02:31:52 +0000 Manifest this update: Wed 13 Aug 2025 02:31:52 +0000 Manifest next update: Wed 20 Aug 2025 02:31:51 +0000 Files and hashes: 1: pIyb1KXbEZ4VQzJBNuAu6kvKrzg.crl (hash: CBQE4KYjzFjSXv3ZCLVDhlgjfuvVXyaFyF0neznzdAc=) 2: A4E607B6B1C511EDA095B220C4F9AE02.roa (hash: IaOYa65tPNoGSKOth9OBnqEo5IgGVd7ufuneStp8ah8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.crl rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Aug 2025 02:31:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 553 (0x229) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8475, serialNumber=A48C9BD4A5DB119E1543324136E02EEA4BCAAF38 Validity Not Before: Aug 13 02:31:52 2025 GMT Not After : Aug 20 02:31:51 2025 GMT Subject: CN=689bf918-fb6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ae:4e:28:c6:9a:23:07:53:21:c4:c6:8e:9c: 9e:fd:9d:33:d4:ab:b2:af:d0:11:5e:a6:19:d0:80: a7:5e:19:be:47:97:62:fb:b2:38:e6:2e:4d:b4:d2: 24:0e:9c:be:72:52:19:81:62:42:cf:e4:5e:a8:6f: 24:2d:ee:41:52:59:73:6e:81:a7:92:47:5d:b7:d9: 91:54:b9:6c:e1:96:e3:fd:5d:99:af:66:ef:0e:86: 12:ea:b2:00:e4:65:9f:17:b9:05:d6:15:45:a6:4d: 58:a2:3c:c3:c5:b6:e7:c9:14:7e:fb:2f:84:83:f0: 41:1c:71:20:b9:06:0f:77:f4:68:60:63:33:a7:28: 75:dd:76:14:e4:86:ee:10:89:d8:ac:d4:68:0b:3a: 86:eb:dd:0d:9d:06:a6:82:e1:9b:68:00:3b:3c:96: 6f:18:d4:f9:3e:dc:bc:1a:14:3f:74:cf:be:a6:8b: ed:74:08:08:b1:a4:6c:5b:72:b9:9e:cc:17:5b:ff: a2:a5:69:a1:00:61:17:2f:38:f9:a8:44:f5:3d:32: d8:31:6f:d5:09:37:63:ef:02:4b:80:32:cc:23:15: df:1a:2a:54:55:6e:17:32:77:dd:b2:bd:ad:d4:72: bc:c4:0d:d2:f9:61:d5:43:cd:65:48:75:96:c3:eb: c2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:7B:FF:26:B1:A0:76:F4:23:42:6A:17:BF:07:A7:EE:4A:CF:D3:12 X509v3 Authority Key Identifier: keyid:A4:8C:9B:D4:A5:DB:11:9E:15:43:32:41:36:E0:2E:EA:4B:CA:AF:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:46:3f:e6:a4:a9:07:fa:de:55:72:1c:6a:ec:3e:41:f8:7e: 72:5e:26:ee:33:a6:b1:e2:ef:96:ea:06:c9:f9:e3:68:68:6a: 41:f1:26:87:ec:3a:8e:38:ee:1a:26:d3:40:86:f6:a0:94:3c: 04:d4:3f:7c:63:48:69:c8:0b:79:92:52:16:da:ae:8d:db:b7: 23:dd:cb:18:19:03:87:67:72:08:45:64:3d:45:42:d6:35:43: 34:77:51:d1:d8:2b:0d:db:e6:62:e9:4e:c5:57:a3:b5:8d:e9: b8:16:1a:fe:15:9f:96:bb:b9:d2:06:9b:75:04:85:47:9b:7f: 63:9d:cb:f1:be:e3:87:1e:87:5e:9c:84:9c:cc:b3:6b:c2:c2: 6e:e6:b2:f8:f1:c5:5b:16:43:88:ec:e3:c5:61:f1:71:1e:af: c2:9f:f9:71:b6:03:95:b2:7c:23:1e:70:60:3f:ef:2d:62:cc: 55:e4:27:d3:ec:e1:cf:f1:22:e5:ca:44:b5:6e:b5:f9:22:00: 06:1b:d9:bd:a0:62:0f:14:bc:c1:1e:9e:80:5f:6a:b0:2e:af: 86:5e:9b:bc:f8:9f:68:1b:09:12:33:44:02:9e:14:b6:8e:6f: 7d:5d:d1:d8:d9:a3:8a:3f:15:f8:18:10:97:f1:4f:7b:de:7d: d8:92:e0:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg0NzUxMTAvBgNVBAUTKEE0OEM5QkQ0QTVEQjExOUUxNTQzMzI0MTM2RTAyRUVB NEJDQUFGMzgwHhcNMjUwODEzMDIzMTUyWhcNMjUwODIwMDIzMTUxWjAYMRYwFAYD VQQDEw02ODliZjkxOC1mYjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5q5OKMaaIwdTIcTGjpye/Z0z1Kuyr9ARXqYZ0ICnXhm+R5di+7I45i5NtNIk Dpy+clIZgWJCz+ReqG8kLe5BUllzboGnkkddt9mRVLls4Zbj/V2Zr2bvDoYS6rIA 5GWfF7kF1hVFpk1YojzDxbbnyRR++y+Eg/BBHHEguQYPd/RoYGMzpyh13XYU5Ibu EInYrNRoCzqG690NnQamguGbaAA7PJZvGNT5Pty8GhQ/dM++povtdAgIsaRsW3K5 nswXW/+ipWmhAGEXLzj5qET1PTLYMW/VCTdj7wJLgDLMIxXfGipUVW4XMnfdsr2t 1HK8xA3S+WHVQ81lSHWWw+vCmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ17/yax oHb0I0JqF78Hp+5Kz9MSMB8GA1UdIwQYMBaAFKSMm9Sl2xGeFUMyQTbgLupLyq84 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODQ3NS82QjY1ODJGMjNF RjAxMUVEQTFGMzA1MUFDNEY5QUUwMi9wSXliMUtYYkVaNFZRekpCTnVBdTZrdkty emcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BJeWIxS1hiRVo0VlF6SkJOdUF1Nmt2S3J6Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODQ3NS82QjY1ODJGMjNFRjAxMUVEQTFGMzA1MUFDNEY5QUUwMi9wSXliMUtYYkVa NFZRekpCTnVBdTZrdktyemcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsRj/mpKkH+t5Vchxq7D5B+H5yXibuM6ax4u+W6gbJ+eNoaGpB8SaH 7DqOOO4aJtNAhvaglDwE1D98Y0hpyAt5klIW2q6N27cj3csYGQOHZ3IIRWQ9RULW NUM0d1HR2CsN2+Zi6U7FV6O1jem4Fhr+FZ+Wu7nSBpt1BIVHm39jncvxvuOHHode nISczLNrwsJu5rL48cVbFkOI7OPFYfFxHq/Cn/lxtgOVsnwjHnBgP+8tYsxV5CfT 7OHP8SLlykS1brX5IgAGG9m9oGIPFLzBHp6AX2qwLq+GXpu8+J9oGwkSM0QCnhS2 jm99XdHY2aOKPxX4GBCX8U973n3YkuBW -----END CERTIFICATE-----Generated at Wed Aug 13 09:49:23 2025 by rpki-client