$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft File: 0m38xFnFMcUEmANsxs5nBrgGF1I.mft (raw, json) Hash identifier: YqB/w2eKHbIxWmW7miLXN5BNHqZiMoBZ/2ey7SEV8Vk= Subject key identifier: 46:C2:97:76:4B:54:6D:07:D0:20:78:8C:AF:FA:B1:9C:34:66:A7:64 Authority key identifier: D2:6D:FC:C4:59:C5:31:C5:04:98:03:6C:C6:CE:67:06:B8:06:17:52 Certificate issuer: /CN=A91C1DA6/serialNumber=D26DFCC459C531C50498036CC6CE6706B8061752 Certificate serial: 0D3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft Manifest number: 0D32 Signing time: Sun 10 Aug 2025 18:02:07 +0000 Manifest this update: Sun 10 Aug 2025 18:02:07 +0000 Manifest next update: Sun 17 Aug 2025 18:02:07 +0000 Files and hashes: 1: 0m38xFnFMcUEmANsxs5nBrgGF1I.crl (hash: Hm+jfNr97sVf5QM/Bqt7u7LRcpwITwxs2MGay9GMd3I=) 2: 5563895C378911EABB08EC0EC4F9AE02.roa (hash: WnvG/G2ljF/bLCjnLck6amfr8nqRxURnaP7xF6JQcoo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.crl rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3388 (0xd3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1DA6, serialNumber=D26DFCC459C531C50498036CC6CE6706B8061752 Validity Not Before: Aug 10 18:02:07 2025 GMT Not After : Aug 17 18:02:07 2025 GMT Subject: CN=6898de9f-2e67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7a:a5:4c:4a:af:76:7c:8a:14:2e:e3:51:da: c7:8e:62:a0:67:d9:b8:d5:c6:d1:ad:e1:90:d1:60: 70:3d:2f:b8:51:13:d6:b5:73:c9:25:73:05:7c:c4: 3d:02:92:0e:d6:9a:0b:18:3a:52:c3:99:d7:f0:f7: 31:f5:6c:7a:e5:aa:a7:49:44:b0:75:2a:69:60:f8: bb:db:7b:6e:42:f0:d0:50:df:77:fb:f3:94:ee:33: 53:68:36:22:b5:6a:5a:58:6c:c4:68:d2:1f:d4:84: 07:6d:2a:1a:49:18:ea:e0:d9:6d:c4:28:00:82:d5: 1b:02:87:6a:7b:ab:fc:33:90:20:79:8b:c4:5d:26: a0:4e:10:b9:9b:08:15:d1:e1:5e:f7:c0:3c:df:1f: bb:38:a4:60:6e:1c:43:1a:62:4c:fe:ff:14:e4:46: 05:66:84:8d:a7:66:51:38:90:de:27:c9:74:04:b0: 55:95:39:88:1b:c9:d9:1a:b6:82:4a:82:8d:cc:8b: 3d:cf:ea:fa:99:0c:1b:40:7e:8a:7b:ee:be:26:13: 9a:3a:ed:b8:49:ad:74:6e:70:e7:b8:58:36:0b:cb: 9a:cd:4b:e8:16:ed:b4:62:1b:66:d4:62:28:5a:50: 9e:e1:00:7c:d9:07:3c:40:82:3a:67:7c:38:d9:43: 01:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:C2:97:76:4B:54:6D:07:D0:20:78:8C:AF:FA:B1:9C:34:66:A7:64 X509v3 Authority Key Identifier: keyid:D2:6D:FC:C4:59:C5:31:C5:04:98:03:6C:C6:CE:67:06:B8:06:17:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:d9:d2:4b:6f:75:7e:a2:05:b6:20:c0:84:d7:71:d6:d6:c2: 08:51:8e:eb:ef:f8:75:d0:94:cc:3f:90:2b:77:e4:8a:89:be: c0:ef:a9:6f:d8:b6:32:ef:f1:c8:12:14:b0:bd:89:61:83:55: 83:49:80:93:56:c7:03:ef:f0:b4:87:3d:a7:f0:58:9e:1a:fe: 18:df:9d:14:a0:8d:0c:f9:f3:ca:54:e1:97:0e:75:6d:3e:3a: 09:d7:9f:2e:cd:eb:d7:29:30:eb:16:fd:91:82:af:f8:08:74: 9b:59:4f:cb:ec:7a:7c:be:d2:3a:be:44:17:5d:6c:27:6b:f3: 8f:7d:f0:85:55:0e:85:96:39:c3:49:61:78:0b:f8:4e:9f:56: c5:3b:07:5f:64:04:f7:20:e9:fd:af:7a:a2:78:e2:e8:80:61: 10:a0:ed:1c:32:de:74:7d:d0:61:54:54:08:ed:9a:58:dc:ee: af:2b:3c:58:a8:02:9b:7b:ac:50:50:25:ae:cc:99:de:af:2c: 67:c0:19:0d:80:cd:0d:1d:3c:92:45:eb:62:a8:dd:bc:50:52: f7:0a:3d:ee:09:c0:7c:ed:5f:6a:32:75:5b:2b:7c:0e:34:ef: 37:b4:7a:1f:0f:5b:e9:7e:f2:ca:b9:36:4f:2a:f1:98:48:46: 25:d6:d6:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDTwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFEQTYxMTAvBgNVBAUTKEQyNkRGQ0M0NTlDNTMxQzUwNDk4MDM2Q0M2Q0U2NzA2 QjgwNjE3NTIwHhcNMjUwODEwMTgwMjA3WhcNMjUwODE3MTgwMjA3WjAYMRYwFAYD VQQDEw02ODk4ZGU5Zi0yZTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArXqlTEqvdnyKFC7jUdrHjmKgZ9m41cbRreGQ0WBwPS+4URPWtXPJJXMFfMQ9 ApIO1poLGDpSw5nX8Pcx9Wx65aqnSUSwdSppYPi723tuQvDQUN93+/OU7jNTaDYi tWpaWGzEaNIf1IQHbSoaSRjq4NltxCgAgtUbAodqe6v8M5AgeYvEXSagThC5mwgV 0eFe98A83x+7OKRgbhxDGmJM/v8U5EYFZoSNp2ZROJDeJ8l0BLBVlTmIG8nZGraC SoKNzIs9z+r6mQwbQH6Ke+6+JhOaOu24Sa10bnDnuFg2C8uazUvoFu20Yhtm1GIo WlCe4QB82Qc8QII6Z3w42UMBFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEbCl3ZL VG0H0CB4jK/6sZw0ZqdkMB8GA1UdIwQYMBaAFNJt/MRZxTHFBJgDbMbOZwa4BhdS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMURBNi9EQjE4QjhFNkRE REYxMUU5OTkzQ0YyNjVDNEY5QUUwMi8wbTM4eEZuRk1jVUVtQU5zeHM1bkJyZ0dG MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBtMzh4Rm5GTWNVRW1BTnN4czVuQnJnR0YxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MURBNi9EQjE4QjhFNkREREYxMUU5OTkzQ0YyNjVDNEY5QUUwMi8wbTM4eEZuRk1j VUVtQU5zeHM1bkJyZ0dGMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCB2dJLb3V+ogW2IMCE13HW1sIIUY7r7/h10JTMP5Ard+SKib7A76lv 2LYy7/HIEhSwvYlhg1WDSYCTVscD7/C0hz2n8FieGv4Y350UoI0M+fPKVOGXDnVt PjoJ158uzevXKTDrFv2Rgq/4CHSbWU/L7Hp8vtI6vkQXXWwna/OPffCFVQ6FljnD SWF4C/hOn1bFOwdfZAT3IOn9r3qieOLogGEQoO0cMt50fdBhVFQI7ZpY3O6vKzxY qAKbe6xQUCWuzJneryxnwBkNgM0NHTySRetiqN28UFL3Cj3uCcB87V9qMnVbK3wO NO83tHofD1vpfvLKuTZPKvGYSEYl1tZd -----END CERTIFICATE-----Generated at Mon Aug 11 01:52:27 2025 by rpki-client