$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft File: xE8qyrKneZlDFaqTsyPam0dce5o.mft (raw, json) Hash identifier: Wp8QvDAdfJF6pOkLOYqQ+yaa1UhlPS6RwyzuuLtCmkk= Subject key identifier: 4A:7D:4E:EC:96:CC:EC:21:DF:05:74:15:0F:CD:24:4F:28:12:79:8E Authority key identifier: C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A Certificate issuer: /CN=A91BDCF1/serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A Certificate serial: 03E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft Manifest number: 03C3 Signing time: Sat 09 Aug 2025 01:18:37 +0000 Manifest this update: Sat 09 Aug 2025 01:18:37 +0000 Manifest next update: Sat 16 Aug 2025 01:18:37 +0000 Files and hashes: 1: xE8qyrKneZlDFaqTsyPam0dce5o.crl (hash: 8ZcD/ayWS8uNqPNMUKcn20xfw5/cMr/smC6zEYdLTdI=) 2: 8982CDE0461211F09E71FC3BC4F9AE02.roa (hash: ZhmNI4CDQtOYGtaG+m8Oq5UFkWXDcLhSYd3RPtdmH64=) 3: 9ED423000B1211F08F4E1E7EC4F9AE02.roa (hash: +fAen0eLm96Uw52DW70NMmBaXk/iGot7yVNxCoQPaiI=) 4: 8EFCF04C41B811F090AB3A2EC4F9AE02.roa (hash: hDxQAVQFGFJ7nkcpsrYv8NMpIOIs9N18rujrFzA3Mbc=) 5: 25985D28EE1411EFB4908431C4F9AE02.roa (hash: GsEWcWV51pwlPsxUODRoLwLibcUDu1FJ1giEHi8eZSw=) 6: DEB112EC6BC211F09D0F2629C4F9AE02.roa (hash: yn6h5w5tWqc/+G/2zrDsQx2qIuIxGIy+QXkxWWkUIxY=) 7: 566BECC8EE1711EFB60E2F5CC4F9AE02.roa (hash: rQrRKRNqLrNVEr8ai1wfn1FM9+uxSqSSHb0bzKO5WNg=) 8: 4643A5E4703011EFA1A7CB20C4F9AE02.roa (hash: yVBPXlVIAQw/ZmFOINJVHLvyhTZymOOpSW7Tn3kbZWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 995 (0x3e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDCF1, serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A Validity Not Before: Aug 9 01:18:37 2025 GMT Not After : Aug 16 01:18:37 2025 GMT Subject: CN=6896a1ed-f357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:62:46:59:92:dd:26:b5:28:90:33:e4:52:d7: e4:75:9c:5c:66:92:a6:b7:8b:db:dd:3a:50:3a:4e: a0:de:db:ff:13:7d:04:06:80:ab:93:38:d4:98:af: 91:e6:1c:3e:b1:59:fa:4e:e4:1b:70:91:61:9a:7f: de:d1:a1:64:12:a6:f7:39:46:a8:fc:66:93:bf:bd: b6:58:d5:4f:bf:1f:9e:7e:ed:92:40:3e:1d:91:64: d6:a2:dd:c4:82:b0:d9:ee:9a:e1:b1:fa:2f:51:b0: 43:57:f5:c1:74:a7:cb:b1:20:7b:9a:69:f8:87:2b: 20:94:e8:f2:1c:ed:89:a2:15:7b:24:de:56:71:6a: d3:f3:2f:5a:e6:b4:2b:e6:44:90:3d:b9:4b:4c:e0: 5a:d5:72:f5:1d:25:76:cd:b9:17:29:88:8e:37:da: 92:e3:80:80:2d:21:ef:a0:65:24:17:09:f9:bf:37: df:3b:03:55:17:89:c7:b6:10:45:76:ea:a9:08:8b: 32:4d:53:0f:80:d6:f7:27:8d:40:00:ab:49:4f:ca: 34:32:29:52:52:fa:30:a8:a5:3a:19:34:b5:50:00: ad:17:27:46:26:8d:92:12:4b:ea:d3:98:2b:3e:1c: c9:d7:73:da:c6:77:a2:06:87:67:b5:05:de:b5:cb: ff:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:7D:4E:EC:96:CC:EC:21:DF:05:74:15:0F:CD:24:4F:28:12:79:8E X509v3 Authority Key Identifier: keyid:C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:02:88:2b:ab:65:80:8f:30:13:eb:0f:a1:ef:fd:86:2a:aa: 52:50:1e:d7:87:c4:e6:69:7c:c7:ea:82:e7:59:57:cb:bd:25: c9:c4:08:5e:40:99:e6:96:f7:16:9a:2b:6e:94:8d:64:a9:31: 1c:51:c8:20:1d:f2:24:0f:70:76:67:65:8c:29:dc:78:db:f7: 41:3d:3d:32:5d:1d:12:89:1f:3e:6c:52:94:74:6a:93:3b:ba: 75:02:e4:61:d4:af:c1:14:64:1e:c6:d6:f3:01:35:c8:62:a5: ed:45:23:05:67:7b:a1:a6:54:ab:0b:05:28:29:db:5c:67:ab: 5c:a8:8c:ca:74:c9:43:b1:70:81:28:77:35:17:bf:e4:1e:70: 09:c8:95:6a:91:c1:4e:7c:b8:8b:19:7d:d7:9f:47:9e:bd:8f: 8d:e0:7e:7c:3e:9a:15:20:db:56:cb:f0:20:ec:8f:f3:fe:b1: ca:df:fc:a0:9a:84:4d:fe:4a:a9:62:af:b4:47:36:e0:f5:df: bb:02:40:ba:ad:6e:96:08:20:b1:b6:a8:19:90:11:00:20:51: a6:68:d7:bc:b6:6d:c9:dc:97:a6:e3:70:63:ac:6c:be:3e:78: bb:f1:fc:c9:2d:86:11:fe:d7:9a:89:9f:f6:87:37:16:a4:36: 80:ef:91:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRDRjExMTAvBgNVBAUTKEM0NEYyQUNBQjJBNzc5OTk0MzE1QUE5M0IzMjNEQTlC NDc1QzdCOUEwHhcNMjUwODA5MDExODM3WhcNMjUwODE2MDExODM3WjAYMRYwFAYD VQQDEw02ODk2YTFlZC1mMzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArmJGWZLdJrUokDPkUtfkdZxcZpKmt4vb3TpQOk6g3tv/E30EBoCrkzjUmK+R 5hw+sVn6TuQbcJFhmn/e0aFkEqb3OUao/GaTv722WNVPvx+efu2SQD4dkWTWot3E grDZ7prhsfovUbBDV/XBdKfLsSB7mmn4hysglOjyHO2JohV7JN5WcWrT8y9a5rQr 5kSQPblLTOBa1XL1HSV2zbkXKYiON9qS44CALSHvoGUkFwn5vzffOwNVF4nHthBF duqpCIsyTVMPgNb3J41AAKtJT8o0MilSUvowqKU6GTS1UACtFydGJo2SEkvq05gr PhzJ13PaxneiBodntQXetcv/zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEp9TuyW zOwh3wV0FQ/NJE8oEnmOMB8GA1UdIwQYMBaAFMRPKsqyp3mZQxWqk7Mj2ptHXHua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRENGMS9FQjU5MTEyMkE4 M0MxMUVDQTNBNEYzMjVDNEY5QUUwMi94RThxeXJLbmVabERGYXFUc3lQYW0wZGNl NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hFOHF5cktuZVpsREZhcVRzeVBhbTBkY2U1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RENGMS9FQjU5MTEyMkE4M0MxMUVDQTNBNEYzMjVDNEY5QUUwMi94RThxeXJLbmVa bERGYXFUc3lQYW0wZGNlNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcAogrq2WAjzAT6w+h7/2GKqpSUB7Xh8TmaXzH6oLnWVfLvSXJxAhe QJnmlvcWmitulI1kqTEcUcggHfIkD3B2Z2WMKdx42/dBPT0yXR0SiR8+bFKUdGqT O7p1AuRh1K/BFGQextbzATXIYqXtRSMFZ3uhplSrCwUoKdtcZ6tcqIzKdMlDsXCB KHc1F7/kHnAJyJVqkcFOfLiLGX3Xn0eevY+N4H58PpoVINtWy/Ag7I/z/rHK3/yg moRN/kqpYq+0Rzbg9d+7AkC6rW6WCCCxtqgZkBEAIFGmaNe8tm3J3Jem43BjrGy+ Pni78fzJLYYR/teaiZ/2hzcWpDaA75Hi -----END CERTIFICATE-----Generated at Sun Aug 10 13:54:01 2025 by rpki-client