$ rpki-client -vvf rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft File: 92dQUVu3YtGADFrmxsLbJP6VLQI.mft (raw, json) Hash identifier: 1kmDWLghw6QBrj3zmGjcScHT1tLnu4sHYtYUVhcrwzY= Subject key identifier: A2:68:20:23:9B:80:88:51:AE:38:81:A9:80:C6:8B:D4:5A:E1:52:3F Authority key identifier: F7:67:50:51:5B:B7:62:D1:80:0C:5A:E6:C6:C2:DB:24:FE:95:2D:02 Certificate issuer: /CN=A91C83EA/serialNumber=F76750515BB762D1800C5AE6C6C2DB24FE952D02 Certificate serial: 2AB3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92dQUVu3YtGADFrmxsLbJP6VLQI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft Manifest number: 2A9C Signing time: Fri 08 Aug 2025 15:37:27 +0000 Manifest this update: Fri 08 Aug 2025 15:37:27 +0000 Manifest next update: Fri 15 Aug 2025 15:37:27 +0000 Files and hashes: 1: 92dQUVu3YtGADFrmxsLbJP6VLQI.crl (hash: D8Q61AX0sx9cF1cvZvQth+U8DYBfnLHiyc6Id3nvA1Q=) 2: 2ED1150C561D11E7B003DF26C4F9AE02.roa (hash: hRXVDS2SOPtJ34LPdCH4GrMLjogwv7F/rCNwzymK5NA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.crl rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92dQUVu3YtGADFrmxsLbJP6VLQI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10931 (0x2ab3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C83EA, serialNumber=F76750515BB762D1800C5AE6C6C2DB24FE952D02 Validity Not Before: Aug 8 15:37:27 2025 GMT Not After : Aug 15 15:37:27 2025 GMT Subject: CN=689619b7-87fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:36:a4:b4:6e:b7:b6:67:23:d0:1a:0c:70:bb: a8:6a:ca:25:7c:61:f8:bb:ae:11:14:9f:4a:4e:28: 28:bd:99:a3:78:58:02:20:e1:7e:ef:93:d7:2d:4f: 6c:84:3e:9c:74:36:7f:fb:8a:2b:80:d8:dd:49:e9: bb:dc:35:b2:95:f6:87:88:a7:96:2c:4d:97:f2:2f: a1:0a:f6:fe:8c:0f:fb:da:e6:e4:98:ce:ba:65:f1: 21:e4:f4:c4:c0:53:a5:25:0d:83:4d:f4:39:9b:66: ac:32:bf:97:e4:62:0a:e4:e5:3a:65:97:db:c3:2d: 14:61:34:39:56:39:a9:0f:51:74:e9:b3:dd:fd:f8: 59:26:59:37:1f:0b:16:fc:87:ee:e5:1c:d1:69:58: df:08:f4:31:0f:e9:82:1d:c6:ad:32:e0:c1:ab:73: 58:be:b7:59:0c:69:4f:8a:e9:54:f9:06:2c:ee:9a: 04:b8:62:b9:d3:35:71:77:06:3b:e5:80:a0:a3:99: b1:19:7b:33:07:a1:c2:0e:55:37:e9:e1:68:11:ff: de:a6:7a:54:7d:0f:0a:c7:c8:71:66:5d:47:68:1d: b4:33:bb:00:5e:02:ba:bc:6a:b5:da:78:36:a5:6b: 0c:8f:bb:ac:5e:45:a3:8f:21:42:ef:2d:97:22:b1: cf:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:68:20:23:9B:80:88:51:AE:38:81:A9:80:C6:8B:D4:5A:E1:52:3F X509v3 Authority Key Identifier: keyid:F7:67:50:51:5B:B7:62:D1:80:0C:5A:E6:C6:C2:DB:24:FE:95:2D:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92dQUVu3YtGADFrmxsLbJP6VLQI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:cd:d9:57:9c:ad:5d:cd:11:ea:26:b0:c0:fc:08:b1:83:48: f6:27:5f:ea:a7:ff:04:4b:58:cd:9e:67:9e:36:15:62:bc:c5: 0f:ce:a0:05:02:1f:0b:fa:63:7b:b9:83:ff:2a:4a:20:3c:1c: 5d:51:3b:6b:a5:b8:9f:6e:c7:74:d4:f7:cb:d5:48:66:8b:b8: 66:84:67:bb:3a:6d:7a:63:c7:ac:f7:ce:de:5a:ea:7b:f2:fb: fb:49:e7:fb:9a:20:45:0f:e5:2b:a0:0d:53:b0:b6:8e:54:59: 4b:9f:dc:61:ff:d5:03:6b:49:12:41:cc:65:2b:25:a5:99:78: da:2e:9a:5b:1b:f8:81:ca:8c:bb:53:62:7a:52:4d:4a:fd:3d: c3:63:ea:6e:da:05:e7:77:6e:db:68:94:86:08:10:f2:dc:5f: 81:c1:b1:a6:59:fa:ae:ee:08:1e:ff:a0:41:08:c3:82:ca:6c: 64:6d:1a:95:db:7b:29:48:7b:60:8b:cd:c3:ca:5e:28:4e:21: d7:c2:7a:ba:d3:23:f6:7b:a7:e6:ae:b7:e5:a1:f4:3d:30:c1: e5:bc:72:6e:d0:ef:e3:d2:85:b1:9e:28:4c:7d:6c:21:b1:cc: f4:63:46:5c:1e:ab:34:b3:42:55:1b:31:d3:34:46:9e:78:ae: e7:c2:0d:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKrMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgzRUExMTAvBgNVBAUTKEY3Njc1MDUxNUJCNzYyRDE4MDBDNUFFNkM2QzJEQjI0 RkU5NTJEMDIwHhcNMjUwODA4MTUzNzI3WhcNMjUwODE1MTUzNzI3WjAYMRYwFAYD VQQDEw02ODk2MTliNy04N2ZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2zaktG63tmcj0BoMcLuoasolfGH4u64RFJ9KTigovZmjeFgCIOF+75PXLU9s hD6cdDZ/+4orgNjdSem73DWylfaHiKeWLE2X8i+hCvb+jA/72ubkmM66ZfEh5PTE wFOlJQ2DTfQ5m2asMr+X5GIK5OU6ZZfbwy0UYTQ5VjmpD1F06bPd/fhZJlk3HwsW /Ifu5RzRaVjfCPQxD+mCHcatMuDBq3NYvrdZDGlPiulU+QYs7poEuGK50zVxdwY7 5YCgo5mxGXszB6HCDlU36eFoEf/epnpUfQ8Kx8hxZl1HaB20M7sAXgK6vGq12ng2 pWsMj7usXkWjjyFC7y2XIrHPZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKJoICOb gIhRrjiBqYDGi9Ra4VI/MB8GA1UdIwQYMBaAFPdnUFFbt2LRgAxa5sbC2yT+lS0C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODNFQS9EODJDNjFFODFD NDUxMUU0OTRBNzZGMUJDNEY5QUUwMi85MmRRVVZ1M1l0R0FERnJteHNMYkpQNlZM UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkyZFFVVnUzWXRHQURGcm14c0xiSlA2VkxRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODNFQS9EODJDNjFFODFDNDUxMUU0OTRBNzZGMUJDNEY5QUUwMi85MmRRVVZ1M1l0 R0FERnJteHNMYkpQNlZMUUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9zdlXnK1dzRHqJrDA/Aixg0j2J1/qp/8ES1jNnmeeNhVivMUPzqAF Ah8L+mN7uYP/KkogPBxdUTtrpbifbsd01PfL1Uhmi7hmhGe7Om16Y8es987eWup7 8vv7Sef7miBFD+UroA1TsLaOVFlLn9xh/9UDa0kSQcxlKyWlmXjaLppbG/iByoy7 U2J6Uk1K/T3DY+pu2gXnd27baJSGCBDy3F+BwbGmWfqu7gge/6BBCMOCymxkbRqV 23spSHtgi83Dyl4oTiHXwnq60yP2e6fmrrflofQ9MMHlvHJu0O/j0oWxnihMfWwh scz0Y0ZcHqs0s0JVGzHTNEaeeK7nwg1a -----END CERTIFICATE-----Generated at Sun Aug 10 04:15:20 2025 by rpki-client