$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft File: 3XyND0ePm-ar9znAT1tb5NyfYfg.mft (raw, json) Hash identifier: MMsv3OXteeoEE3GI88EJBBtS2XeS6kyV/E3NdIqmAVg= Subject key identifier: 94:ED:A3:04:48:66:D8:2C:56:30:5D:7D:79:8A:E4:79:C7:6B:52:54 Authority key identifier: DD:7C:8D:0F:47:8F:9B:E6:AB:F7:39:C0:4F:5B:5B:E4:DC:9F:61:F8 Certificate issuer: /CN=A91B1E55/serialNumber=DD7C8D0F478F9BE6ABF739C04F5B5BE4DC9F61F8 Certificate serial: A6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft Manifest number: A4 Signing time: Sat 09 Aug 2025 06:37:44 +0000 Manifest this update: Sat 09 Aug 2025 06:37:44 +0000 Manifest next update: Sat 16 Aug 2025 06:37:44 +0000 Files and hashes: 1: 3XyND0ePm-ar9znAT1tb5NyfYfg.crl (hash: jM/zTQO2i6V1F/esu5625jrgtslKxmU0d9RELDr2fWI=) 2: EAF1E48478FA11EF9043060AC4F9AE02.roa (hash: Y94sd9E5GlcMt+lxymyuqjd3AEApdFlcMVQYEZaGYA0=) 3: EA810E6278FA11EF9043060AC4F9AE02.roa (hash: jUEy/iUbesTw/bKzIqKbuM3aQtOsfpKNSiK5hvDoL0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.crl rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 166 (0xa6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1E55, serialNumber=DD7C8D0F478F9BE6ABF739C04F5B5BE4DC9F61F8 Validity Not Before: Aug 9 06:37:44 2025 GMT Not After : Aug 16 06:37:44 2025 GMT Subject: CN=6896ecb8-47a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:45:f4:9d:03:19:28:4e:e2:e8:ce:d5:11:c0: 45:72:63:fd:0e:ab:89:14:de:5f:18:b3:55:d5:75: 8e:ab:d3:2f:5b:31:57:98:b7:fb:68:ee:48:e0:1b: f0:d5:8f:ae:6d:5b:d9:02:5c:ad:1d:a2:4b:ec:78: 9f:d2:4e:c9:9c:13:d9:50:23:ba:b7:68:26:56:59: bf:43:0c:17:7d:fc:dd:45:fa:ee:f0:94:12:fc:40: 2d:e1:3f:d2:ff:5e:17:84:0a:4e:a2:f0:b3:b6:5d: 82:3b:0c:d3:ac:1c:9a:e6:a2:42:82:22:df:6c:71: eb:58:21:1f:80:c0:92:42:a5:43:1c:0e:45:75:89: f3:58:55:f1:9a:10:9f:8c:92:d1:44:d0:15:e7:0c: 53:fe:c0:8c:9e:78:c7:1c:f0:cd:12:0a:7e:1f:9e: 08:6c:30:e3:a4:7d:d7:24:79:40:9d:f3:3c:2d:8f: b1:87:b2:17:29:7a:46:5f:96:a7:9b:a9:45:b1:21: 35:d5:77:0b:e6:02:d9:88:23:10:b5:b1:19:0c:39: 85:37:87:78:df:5a:68:3f:69:01:57:9e:a4:ed:d1: 39:ad:71:1b:4f:5e:59:de:ed:f3:55:16:b3:a0:b7: d4:ea:f2:b7:b9:80:3a:e8:2c:fc:f5:d5:56:9e:88: 79:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:ED:A3:04:48:66:D8:2C:56:30:5D:7D:79:8A:E4:79:C7:6B:52:54 X509v3 Authority Key Identifier: keyid:DD:7C:8D:0F:47:8F:9B:E6:AB:F7:39:C0:4F:5B:5B:E4:DC:9F:61:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:51:7d:fb:99:94:fc:09:67:36:19:30:a0:7e:27:d4:7c:e2: 7a:9e:92:d0:35:cc:47:b1:06:2e:2b:2a:5d:38:f5:4c:36:7a: f5:e0:6b:0d:61:3c:35:81:85:fa:b8:74:60:34:44:09:b4:5e: 52:39:5e:25:41:60:8b:8c:85:10:f7:55:27:d0:84:27:ec:78: e6:ed:65:35:9a:03:e4:f8:06:d8:7c:b2:d4:45:c1:68:10:52: 5f:aa:fe:9f:5e:22:f2:31:fe:96:27:aa:a1:c0:9c:28:c0:4e: 98:61:a9:dc:7d:9b:f3:32:f9:c1:b0:1e:ad:39:b6:1f:27:1f: d2:7d:a6:6b:46:ed:83:42:c9:e3:c8:cb:a8:1d:5e:32:82:7e: 7c:ea:fd:06:81:ad:50:08:22:68:5a:26:b3:b7:50:c9:0f:b1: 06:fd:e4:1a:e0:2e:85:44:ec:3f:ac:c2:b5:b0:4e:eb:5e:39: 72:f9:f1:d1:f8:9c:30:81:5c:b9:72:d5:ad:b2:ab:88:86:1f: 30:b6:c5:91:0a:31:d2:5f:90:31:97:82:a5:49:cd:45:4e:66: 3d:de:fc:9c:27:f0:c3:6a:de:4a:9d:b6:9a:49:14:14:c2:34: 51:19:64:62:cd:f0:f1:49:6e:da:ae:70:1b:40:f5:01:4e:2b: 11:d7:5a:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFFNTUxMTAvBgNVBAUTKEREN0M4RDBGNDc4RjlCRTZBQkY3MzlDMDRGNUI1QkU0 REM5RjYxRjgwHhcNMjUwODA5MDYzNzQ0WhcNMjUwODE2MDYzNzQ0WjAYMRYwFAYD VQQDEw02ODk2ZWNiOC00N2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5UX0nQMZKE7i6M7VEcBFcmP9DquJFN5fGLNV1XWOq9MvWzFXmLf7aO5I4Bvw 1Y+ubVvZAlytHaJL7Hif0k7JnBPZUCO6t2gmVlm/QwwXffzdRfru8JQS/EAt4T/S /14XhApOovCztl2COwzTrBya5qJCgiLfbHHrWCEfgMCSQqVDHA5FdYnzWFXxmhCf jJLRRNAV5wxT/sCMnnjHHPDNEgp+H54IbDDjpH3XJHlAnfM8LY+xh7IXKXpGX5an m6lFsSE11XcL5gLZiCMQtbEZDDmFN4d431poP2kBV56k7dE5rXEbT15Z3u3zVRaz oLfU6vK3uYA66Cz89dVWnoh5uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJTtowRI ZtgsVjBdfXmK5HnHa1JUMB8GA1UdIwQYMBaAFN18jQ9Hj5vmq/c5wE9bW+Tcn2H4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUU1NS80QzA5ODYyRTc4 RkExMUVGQTQ0RkU1ODZDNEY5QUUwMi8zWHlORDBlUG0tYXI5em5BVDF0YjVOeWZZ ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNYeU5EMGVQbS1hcjl6bkFUMXRiNU55ZllmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUU1NS80QzA5ODYyRTc4RkExMUVGQTQ0RkU1ODZDNEY5QUUwMi8zWHlORDBlUG0t YXI5em5BVDF0YjVOeWZZZmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2UX37mZT8CWc2GTCgfifUfOJ6npLQNcxHsQYuKypdOPVMNnr14GsN YTw1gYX6uHRgNEQJtF5SOV4lQWCLjIUQ91Un0IQn7Hjm7WU1mgPk+AbYfLLURcFo EFJfqv6fXiLyMf6WJ6qhwJwowE6YYancfZvzMvnBsB6tObYfJx/SfaZrRu2DQsnj yMuoHV4ygn586v0Gga1QCCJoWiazt1DJD7EG/eQa4C6FROw/rMK1sE7rXjly+fHR +JwwgVy5ctWtsquIhh8wtsWRCjHSX5Axl4KlSc1FTmY93vycJ/DDat5KnbaaSRQU wjRRGWRizfDxSW7arnAbQPUBTisR11o/ -----END CERTIFICATE-----Generated at Sun Aug 10 21:17:48 2025 by rpki-client