$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft File: SU13HlEeEgBTuwmx8nS9j1nXOqg.mft (raw, json) Hash identifier: HwDnfcdsA9qjZ2dbzw1vf8Bib7qQRLKBfa5UnMa8Bps= Subject key identifier: 3A:EF:8F:32:A5:8B:85:C3:81:32:52:8A:FE:E9:DC:A3:42:1C:0D:98 Authority key identifier: 49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8 Certificate issuer: /CN=A91C4614/serialNumber=494D771E511E120053BB09B1F274BD8F59D73AA8 Certificate serial: 0CD7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft Manifest number: 0CC6 Signing time: Sun 10 Aug 2025 18:10:09 +0000 Manifest this update: Sun 10 Aug 2025 18:10:08 +0000 Manifest next update: Sun 17 Aug 2025 18:10:08 +0000 Files and hashes: 1: SU13HlEeEgBTuwmx8nS9j1nXOqg.crl (hash: ArES0JiT70IX+fKw0pN7olo/WQEFJjC3cCb5J2jNFbg=) 2: 7A89B302E7E511EFA8BD237AC4F9AE02.roa (hash: 3cZWclJtX3V6aTw+zOu2W0FHd/b2ev4flaWcS3tJ/J0=) 3: ACEBFE04E7E511EFBC775C0EC4F9AE02.roa (hash: KypfxpsYSUZAZe6pLsx6D3j38tcpQYPu6XyVBPdIPY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.crl rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3287 (0xcd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4614, serialNumber=494D771E511E120053BB09B1F274BD8F59D73AA8 Validity Not Before: Aug 10 18:10:08 2025 GMT Not After : Aug 17 18:10:08 2025 GMT Subject: CN=6898e080-eb9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:05:4a:9c:7e:5a:c3:36:bc:8b:6b:3b:fb:86: 5c:ac:75:9e:59:e4:c9:8b:8c:d6:9e:c1:cd:b6:28: 88:28:c0:81:c0:a7:4f:c5:fa:d0:c2:1c:d1:86:b8: 30:73:45:5d:4d:dc:ba:97:02:29:10:78:09:1e:ca: 0b:3a:d1:28:d3:41:ad:c6:fa:a0:e4:42:9f:9a:31: 84:ca:99:93:8f:f7:df:20:d4:b8:d1:c0:ee:83:91: 3a:b3:25:32:23:a6:b5:a6:7f:31:50:9e:53:24:4c: 34:08:80:fb:7d:27:00:47:a6:e5:74:6e:6b:1f:ba: e7:99:65:85:1c:f2:d6:73:11:72:d0:c9:34:3f:78: 18:af:6d:1e:a3:1a:0c:a8:45:60:35:75:3f:24:fd: 6b:68:ea:b3:05:fc:9d:47:20:89:de:11:c7:dc:a3: 24:61:a8:08:fe:d4:f4:e0:70:57:3f:ae:81:75:92: 48:cb:bc:f7:ff:70:0d:0a:6d:47:b7:d7:df:c1:0b: 5a:fd:6f:71:82:32:97:79:43:d6:70:c9:e3:b6:2f: 59:6c:09:4f:e0:80:78:16:81:f2:6d:18:de:e0:42: ff:54:48:4d:18:fa:1d:eb:05:22:45:c3:54:15:4c: ae:9e:e7:79:10:b8:dd:cd:e6:b5:e5:99:d7:44:98: ae:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:EF:8F:32:A5:8B:85:C3:81:32:52:8A:FE:E9:DC:A3:42:1C:0D:98 X509v3 Authority Key Identifier: keyid:49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:97:4b:73:5f:fe:16:60:cc:4f:29:96:5c:7f:12:47:10:d0: 4f:49:a3:55:7e:30:b1:2d:d4:50:ee:2d:e3:f5:47:ca:59:e7: 35:99:e2:91:29:4b:d1:34:74:3e:d1:41:d2:16:74:f0:1b:e7: 85:75:9f:df:fb:6b:fa:1b:bc:b3:4b:df:12:f6:ba:80:6a:92: 47:87:43:6e:e0:2f:10:03:60:2c:6e:5a:92:db:8e:72:58:74: 2b:b7:00:04:2c:b5:95:31:04:e7:52:7b:7d:c8:f0:a3:c8:fc: 19:ae:90:0f:19:cc:f6:47:e7:8a:f5:ab:e2:ad:fb:f6:1a:01: 61:e5:6b:7e:07:ed:14:b4:f2:44:a0:ab:50:b3:43:15:2e:05: aa:d8:99:ec:b3:75:fe:b6:34:8a:f1:44:34:4e:08:bd:36:62: 84:7a:b6:f6:3b:31:31:9e:72:50:69:45:f2:67:b4:b5:06:a3: f6:92:4b:f8:99:07:18:c5:ab:ca:35:38:b8:72:a7:fb:1f:ed: 2f:75:73:14:c3:4a:02:1c:b2:89:91:10:a9:4c:d5:c9:43:4e: 96:3a:69:1b:3f:ce:2c:8e:93:51:ba:44:22:08:f8:ed:ae:52: 44:5b:33:95:e9:c9:cd:da:3b:7d:ca:71:12:56:9c:1b:d5:1c: f1:fe:a0:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ2MTQxMTAvBgNVBAUTKDQ5NEQ3NzFFNTExRTEyMDA1M0JCMDlCMUYyNzRCRDhG NTlENzNBQTgwHhcNMjUwODEwMTgxMDA4WhcNMjUwODE3MTgxMDA4WjAYMRYwFAYD VQQDEw02ODk4ZTA4MC1lYjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1QVKnH5awza8i2s7+4ZcrHWeWeTJi4zWnsHNtiiIKMCBwKdPxfrQwhzRhrgw c0VdTdy6lwIpEHgJHsoLOtEo00Gtxvqg5EKfmjGEypmTj/ffINS40cDug5E6syUy I6a1pn8xUJ5TJEw0CID7fScAR6bldG5rH7rnmWWFHPLWcxFy0Mk0P3gYr20eoxoM qEVgNXU/JP1raOqzBfydRyCJ3hHH3KMkYagI/tT04HBXP66BdZJIy7z3/3ANCm1H t9ffwQta/W9xgjKXeUPWcMnjti9ZbAlP4IB4FoHybRje4EL/VEhNGPod6wUiRcNU FUyunud5ELjdzea15ZnXRJiuNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDrvjzKl i4XDgTJSiv7p3KNCHA2YMB8GA1UdIwQYMBaAFElNdx5RHhIAU7sJsfJ0vY9Z1zqo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDYxNC8xQzk0ODk5QUY0 RjAxMUU5QUMyMDJCMURDNEY5QUUwMi9TVTEzSGxFZUVnQlR1d214OG5TOWoxblhP cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NVMTNIbEVlRWdCVHV3bXg4blM5ajFuWE9xZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDYxNC8xQzk0ODk5QUY0RjAxMUU5QUMyMDJCMURDNEY5QUUwMi9TVTEzSGxFZUVn QlR1d214OG5TOWoxblhPcWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBal0tzX/4WYMxPKZZcfxJHENBPSaNVfjCxLdRQ7i3j9UfKWec1meKR KUvRNHQ+0UHSFnTwG+eFdZ/f+2v6G7yzS98S9rqAapJHh0Nu4C8QA2AsblqS245y WHQrtwAELLWVMQTnUnt9yPCjyPwZrpAPGcz2R+eK9avirfv2GgFh5Wt+B+0UtPJE oKtQs0MVLgWq2Jnss3X+tjSK8UQ0Tgi9NmKEerb2OzExnnJQaUXyZ7S1BqP2kkv4 mQcYxavKNTi4cqf7H+0vdXMUw0oCHLKJkRCpTNXJQ06WOmkbP84sjpNRukQiCPjt rlJEWzOV6cnN2jt9ynESVpwb1Rzx/qC3 -----END CERTIFICATE-----Generated at Mon Aug 11 10:45:43 2025 by rpki-client