$ rpki-client -vvf rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.mft File: ROq4zxyb1totteNCtBx0fuOkUF8.mft (raw, json) Hash identifier: 0ON/Jn1x05Cc2Ub3sxiFIOcmAWYLhZLUZYdOCqB03eU= Subject key identifier: EF:DE:7D:6F:DA:5A:A4:08:CC:A0:E3:07:6B:28:A2:7C:72:1E:04:74 Authority key identifier: 44:EA:B8:CF:1C:9B:D6:DA:2D:B5:E3:42:B4:1C:74:7E:E3:A4:50:5F Certificate issuer: /CN=A91B00B6/serialNumber=44EAB8CF1C9BD6DA2DB5E342B41C747EE3A4505F Certificate serial: 0A2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROq4zxyb1totteNCtBx0fuOkUF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.mft Manifest number: 0A28 Signing time: Tue 12 Aug 2025 20:02:01 +0000 Manifest this update: Tue 12 Aug 2025 20:02:01 +0000 Manifest next update: Tue 19 Aug 2025 20:02:01 +0000 Files and hashes: 1: ROq4zxyb1totteNCtBx0fuOkUF8.crl (hash: sT8NbZ6mycYXlO3SSTjzyjL0ZKylhTB9wYqhUD1oEUs=) 2: 800EC4AE756F11EAAA2E0F6CC4F9AE02.roa (hash: yZGCclZoBxnBhfhgaEtvdMtpamiVGJaHMeM0i3edazA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.crl rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROq4zxyb1totteNCtBx0fuOkUF8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 20:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2606 (0xa2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B00B6, serialNumber=44EAB8CF1C9BD6DA2DB5E342B41C747EE3A4505F Validity Not Before: Aug 12 20:02:01 2025 GMT Not After : Aug 19 20:02:01 2025 GMT Subject: CN=689b9db9-5978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:8f:71:e5:46:d6:34:58:c2:4d:19:b6:81:63: 52:e7:7f:b5:30:9b:84:8e:24:96:01:42:b1:eb:81: 2f:da:31:62:e0:68:51:7e:c1:3f:65:28:38:a2:81: 07:27:f6:d8:d3:78:ff:2b:89:d0:25:07:27:ba:6f: ac:43:b5:d8:f0:d1:71:07:a9:0a:78:d5:3a:a4:80: 94:42:5b:49:fa:0d:c4:0b:55:26:30:cc:5f:1b:ea: a6:48:bd:e1:99:54:f6:ec:c3:e2:1d:c0:61:61:ec: 9d:78:23:05:94:7a:06:4c:dd:e7:00:6a:0f:35:5b: be:ce:ad:42:d4:8f:72:c7:bf:20:81:99:81:5a:18: b2:19:95:4b:b8:65:7e:18:7a:b7:bc:54:97:3b:44: 4f:f3:af:39:1e:59:19:ee:90:8f:d9:d0:7d:41:01: bd:45:74:f0:47:14:0b:77:35:2d:ff:97:2c:8b:ba: 86:e2:1d:b8:bf:5f:0f:9e:69:1f:b8:87:0a:73:37: 70:61:4b:26:50:f1:82:42:09:4e:ff:0f:22:36:21: 3e:95:83:a2:7e:12:75:bb:29:7d:0f:b6:20:1e:17: 3b:a8:53:c6:fd:3d:95:b9:f2:f5:26:93:79:41:d5: cf:14:b9:91:12:dc:da:6f:8a:63:d9:94:ad:80:04: b3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:DE:7D:6F:DA:5A:A4:08:CC:A0:E3:07:6B:28:A2:7C:72:1E:04:74 X509v3 Authority Key Identifier: keyid:44:EA:B8:CF:1C:9B:D6:DA:2D:B5:E3:42:B4:1C:74:7E:E3:A4:50:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROq4zxyb1totteNCtBx0fuOkUF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:8a:b5:36:fd:07:54:7a:11:ed:de:af:4b:ce:58:a9:ae:8a: cf:51:c7:b9:2a:9d:11:d4:88:15:6b:6b:a2:db:a3:47:10:46: a5:be:aa:0d:0d:a6:2f:31:c5:28:ae:66:01:ff:ee:ec:22:f2: 6b:00:26:1e:ed:91:f7:76:de:22:1d:67:4b:92:ce:22:aa:64: 60:65:3a:5a:99:b7:15:f9:be:9e:73:d5:1d:50:fe:87:7b:35: b7:8b:c6:06:ec:db:c1:ab:6c:ce:09:fe:64:fa:e8:8f:8d:5c: b5:14:cf:b8:e8:04:21:30:79:a6:69:01:d8:01:f9:e6:6b:a2: e1:3b:52:ec:89:00:1f:a5:24:0c:0c:d1:ba:21:1a:ff:6b:ec: 6a:94:59:7f:9a:6e:7d:0f:4f:56:96:49:df:e7:b9:30:97:03: fe:5f:86:ac:f1:01:95:d0:da:d6:79:e0:b2:7c:4d:48:14:f2: 0b:a6:15:7b:b9:21:43:47:92:90:e2:f5:d8:73:8e:fc:62:f6: 5d:3f:91:9c:55:99:ab:62:74:9c:c3:50:cf:2b:e2:9d:70:4a: 00:f3:ea:20:d1:7d:7d:44:09:af:6f:83:d9:37:97:a4:ab:e1: 57:db:5d:fb:9a:23:29:bb:97:0a:a0:c5:63:cc:0b:36:2b:81: d5:c2:f3:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAwQjYxMTAvBgNVBAUTKDQ0RUFCOENGMUM5QkQ2REEyREI1RTM0MkI0MUM3NDdF RTNBNDUwNUYwHhcNMjUwODEyMjAwMjAxWhcNMjUwODE5MjAwMjAxWjAYMRYwFAYD VQQDEw02ODliOWRiOS01OTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6o9x5UbWNFjCTRm2gWNS53+1MJuEjiSWAUKx64Ev2jFi4GhRfsE/ZSg4ooEH J/bY03j/K4nQJQcnum+sQ7XY8NFxB6kKeNU6pICUQltJ+g3EC1UmMMxfG+qmSL3h mVT27MPiHcBhYeydeCMFlHoGTN3nAGoPNVu+zq1C1I9yx78ggZmBWhiyGZVLuGV+ GHq3vFSXO0RP8685HlkZ7pCP2dB9QQG9RXTwRxQLdzUt/5csi7qG4h24v18Pnmkf uIcKczdwYUsmUPGCQglO/w8iNiE+lYOifhJ1uyl9D7YgHhc7qFPG/T2VufL1JpN5 QdXPFLmREtzab4pj2ZStgASzlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO/efW/a WqQIzKDjB2soonxyHgR0MB8GA1UdIwQYMBaAFETquM8cm9baLbXjQrQcdH7jpFBf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDBCNi85RjlBRjdBODc1 NkUxMUVBOTkxNDIzNkJDNEY5QUUwMi9ST3E0enh5YjF0b3R0ZU5DdEJ4MGZ1T2tV RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JPcTR6eHliMXRvdHRlTkN0QngwZnVPa1VGOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDBCNi85RjlBRjdBODc1NkUxMUVBOTkxNDIzNkJDNEY5QUUwMi9ST3E0enh5YjF0 b3R0ZU5DdEJ4MGZ1T2tVRjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfirU2/QdUehHt3q9LzliprorPUce5Kp0R1IgVa2ui26NHEEalvqoN DaYvMcUormYB/+7sIvJrACYe7ZH3dt4iHWdLks4iqmRgZTpambcV+b6ec9UdUP6H ezW3i8YG7NvBq2zOCf5k+uiPjVy1FM+46AQhMHmmaQHYAfnma6LhO1LsiQAfpSQM DNG6IRr/a+xqlFl/mm59D09Wlknf57kwlwP+X4as8QGV0NrWeeCyfE1IFPILphV7 uSFDR5KQ4vXYc478YvZdP5GcVZmrYnScw1DPK+KdcEoA8+og0X19RAmvb4PZN5ek q+FX2137miMpu5cKoMVjzAs2K4HVwvOg -----END CERTIFICATE-----Generated at Wed Aug 13 08:50:44 2025 by rpki-client