$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft File: MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft (raw, json) Hash identifier: QIuTRMlPm8+6TED9XrfF9PgwdfoaghGC9jUaSOd3Bas= Subject key identifier: 09:21:37:EB:58:E6:30:42:8D:EC:EC:B6:EF:3C:41:4D:F1:C5:65:46 Authority key identifier: 31:D2:1D:5C:EE:5F:AC:DE:F3:C8:C1:C8:7D:0D:73:91:F9:F7:3A:FF Certificate issuer: /CN=A91C8203/serialNumber=31D21D5CEE5FACDEF3C8C1C87D0D7391F9F73AFF Certificate serial: 95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft Manifest number: 93 Signing time: Tue 05 Aug 2025 07:00:14 +0000 Manifest this update: Tue 05 Aug 2025 07:00:14 +0000 Manifest next update: Tue 12 Aug 2025 07:00:14 +0000 Files and hashes: 1: MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl (hash: 1OfvsOIoKgbJaFCh5t9QeQ9ewZrNOeoyphZCtGH9Xzk=) 2: BE48D4AA927D11EF9651FC4AC4F9AE02.roa (hash: izRhlY7DGrfvs8MmjLdXrrQgAeYYKtyct/uQzFPAxkk=) 3: D9BE56E2927D11EFB83ACB5CC4F9AE02.roa (hash: gD5kq8/HSPW50HYpmldu2HRZWRqRsB+3dXKbKp9PeAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 07:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8203, serialNumber=31D21D5CEE5FACDEF3C8C1C87D0D7391F9F73AFF Validity Not Before: Aug 5 07:00:14 2025 GMT Not After : Aug 12 07:00:14 2025 GMT Subject: CN=6891abfe-8f69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:6f:ee:22:56:fc:8e:1c:f4:e9:ac:35:ad:b7: cc:93:cf:a6:4a:61:40:22:e7:b1:25:a4:b8:b2:53: 2f:41:8c:0e:c0:47:b2:21:5b:75:68:2e:9d:e0:3c: 6d:f6:0b:22:f1:88:8d:f3:62:96:01:ae:5f:55:60: b2:f7:45:70:f6:98:09:f5:43:74:84:0c:f1:ac:b9: 20:07:26:34:2e:24:fd:82:d8:b4:67:5b:03:5f:3f: 94:7d:79:b0:79:7e:95:df:04:63:22:a7:62:e1:b6: 97:7b:40:fb:69:66:59:80:ad:8b:07:24:d2:f7:51: 62:6a:0f:08:0c:a7:a9:3e:88:69:90:85:ec:1a:69: 07:a9:56:bd:ea:41:b3:fe:9f:df:eb:20:c9:a4:4c: e4:5d:74:7f:f3:4d:bb:4f:8b:c6:34:66:e7:9a:86: 89:3c:b0:f7:38:b8:b6:b3:b6:5c:8a:61:12:90:40: 1a:ac:c2:06:90:a9:69:07:df:d7:38:57:6e:c0:08: 2b:4b:fa:73:a8:87:15:a1:21:97:7a:21:0a:14:7a: ee:37:ad:32:9d:98:39:fc:cf:dd:03:30:f4:78:d9: c2:21:0f:b7:cd:12:b9:60:af:ab:98:ec:c4:ff:7e: f1:0c:0c:58:85:46:f3:70:e9:0d:e5:ab:13:c6:b3: 1e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:21:37:EB:58:E6:30:42:8D:EC:EC:B6:EF:3C:41:4D:F1:C5:65:46 X509v3 Authority Key Identifier: keyid:31:D2:1D:5C:EE:5F:AC:DE:F3:C8:C1:C8:7D:0D:73:91:F9:F7:3A:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ed:4e:46:21:c1:5d:73:00:73:8d:f0:00:07:6d:0b:b9:4c: 13:6f:df:a8:ce:01:68:eb:09:d9:d4:0e:bc:ce:99:91:e9:be: 55:de:34:6f:10:e7:f9:71:31:65:9c:f2:68:99:15:39:97:04: d2:88:aa:e4:1c:38:2e:d2:7e:2b:83:d2:7c:10:a9:25:57:e3: c5:95:a4:bb:0e:4a:8b:ee:a5:44:3c:66:a4:f1:ff:66:ce:5d: cd:03:19:01:f0:52:d7:64:5e:fb:46:78:d8:2a:40:27:2c:4f: 74:cc:02:5a:43:2a:f4:a5:7c:1b:ec:fa:96:af:8b:5b:0e:f1: df:fb:31:75:4e:a1:76:65:2e:6c:bf:f6:6b:59:90:01:e2:aa: 7d:f3:79:b7:65:66:e3:24:d6:ed:41:e4:c8:65:6d:36:44:26: 3d:de:0b:b0:d5:73:07:b8:9c:1e:2d:ab:a3:5c:5f:ba:8a:3c: ab:a3:40:06:a2:e2:d2:33:82:83:68:d9:25:22:8b:fd:3d:b5: 75:72:cf:94:e0:b8:82:04:cc:bc:9c:ba:f5:66:ef:ab:91:87: 0d:77:fa:b0:d4:be:6b:d9:35:c4:dc:85:c2:9e:d0:2f:75:21: cd:4c:98:42:bb:d9:8f:5d:46:dc:82:3f:29:88:54:6c:93:eb: df:ea:af:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgyMDMxMTAvBgNVBAUTKDMxRDIxRDVDRUU1RkFDREVGM0M4QzFDODdEMEQ3Mzkx RjlGNzNBRkYwHhcNMjUwODA1MDcwMDE0WhcNMjUwODEyMDcwMDE0WjAYMRYwFAYD VQQDEw02ODkxYWJmZS04ZjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2W/uIlb8jhz06aw1rbfMk8+mSmFAIuexJaS4slMvQYwOwEeyIVt1aC6d4Dxt 9gsi8YiN82KWAa5fVWCy90Vw9pgJ9UN0hAzxrLkgByY0LiT9gti0Z1sDXz+UfXmw eX6V3wRjIqdi4baXe0D7aWZZgK2LByTS91Fiag8IDKepPohpkIXsGmkHqVa96kGz /p/f6yDJpEzkXXR/8027T4vGNGbnmoaJPLD3OLi2s7ZcimESkEAarMIGkKlpB9/X OFduwAgrS/pzqIcVoSGXeiEKFHruN60ynZg5/M/dAzD0eNnCIQ+3zRK5YK+rmOzE /37xDAxYhUbzcOkN5asTxrMesQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAkhN+tY 5jBCjezstu88QU3xxWVGMB8GA1UdIwQYMBaAFDHSHVzuX6ze88jByH0Nc5H59zr/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODIwMy9CQzUxNURBQTky N0ExMUVGQjU2NDNDNEVDNEY5QUUwMi9NZElkWE81ZnJON3p5TUhJZlExemtmbjNP djguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01kSWRYTzVmck43enlNSElmUTF6a2ZuM092OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODIwMy9CQzUxNURBQTkyN0ExMUVGQjU2NDNDNEVDNEY5QUUwMi9NZElkWE81ZnJO N3p5TUhJZlExemtmbjNPdjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB67U5GIcFdcwBzjfAAB20LuUwTb9+ozgFo6wnZ1A68zpmR6b5V3jRv EOf5cTFlnPJomRU5lwTSiKrkHDgu0n4rg9J8EKklV+PFlaS7DkqL7qVEPGak8f9m zl3NAxkB8FLXZF77RnjYKkAnLE90zAJaQyr0pXwb7PqWr4tbDvHf+zF1TqF2ZS5s v/ZrWZAB4qp983m3ZWbjJNbtQeTIZW02RCY93guw1XMHuJweLaujXF+6ijyro0AG ouLSM4KDaNklIov9PbV1cs+U4LiCBMy8nLr1Zu+rkYcNd/qw1L5r2TXE3IXCntAv dSHNTJhCu9mPXUbcgj8piFRsk+vf6q8b -----END CERTIFICATE-----Generated at Thu Aug 7 01:58:19 2025 by rpki-client