$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.mft File: RxDk3mQVxI6LUxtZzUekHNeTRV4.mft (raw, json) Hash identifier: kX6r0xO/AzeB2o3wMEtWuDNP0+oIiymxl5zKMcICUhc= Subject key identifier: B5:FB:14:A4:1D:E7:D7:31:B4:51:9B:C0:49:26:E4:87:E8:A3:BF:23 Authority key identifier: 47:10:E4:DE:64:15:C4:8E:8B:53:1B:59:CD:47:A4:1C:D7:93:45:5E Certificate issuer: /CN=A91D9A24/serialNumber=4710E4DE6415C48E8B531B59CD47A41CD793455E Certificate serial: 0109 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxDk3mQVxI6LUxtZzUekHNeTRV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.mft Manifest number: 0104 Signing time: Thu 07 Aug 2025 05:33:53 +0000 Manifest this update: Thu 07 Aug 2025 05:33:52 +0000 Manifest next update: Thu 14 Aug 2025 05:33:52 +0000 Files and hashes: 1: RxDk3mQVxI6LUxtZzUekHNeTRV4.crl (hash: CIxckAtsBbn+GrJ9UXiQSqfEdSWb9vjybAF5QARC2p0=) 2: A18158C6E64611EE95C0CE78C4F9AE02.roa (hash: RkusyxzR0xrFJ6VFvMv+nvMkxMfB3sdBezjBg1WbNLo=) 3: FE2FF9B0E64611EEA8AE7979C4F9AE02.roa (hash: vTspr7D2Mh9Ado1Qi+7w7sbqMv4hKB0CPd1WNZ4I3co=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.crl rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxDk3mQVxI6LUxtZzUekHNeTRV4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:33:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 265 (0x109) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9A24, serialNumber=4710E4DE6415C48E8B531B59CD47A41CD793455E Validity Not Before: Aug 7 05:33:52 2025 GMT Not After : Aug 14 05:33:52 2025 GMT Subject: CN=68943ac0-aa07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b2:03:05:a9:d1:31:dd:3e:46:5d:67:87:8a: 26:4c:e9:b9:e5:12:91:36:4e:15:c3:70:0f:2d:7c: 9c:2c:05:fe:e2:10:b7:e4:64:ae:d6:1a:92:eb:c2: 2d:38:b5:5e:47:f2:1f:de:fa:33:ec:39:ae:85:f7: 9f:dd:e3:6e:1d:93:da:e3:87:a7:11:2a:a2:51:10: bb:e4:a5:24:56:96:58:63:ef:f3:0b:84:d2:dd:41: 50:ec:f7:d9:f7:92:7c:b6:5a:f3:ac:8c:5b:19:96: 69:26:85:0c:71:b4:f2:31:18:87:6a:a3:d7:46:2d: df:2d:55:44:ca:ba:78:85:db:f5:54:dc:c8:eb:13: 73:cc:7f:17:35:33:bc:ed:81:0d:98:43:5d:e4:ae: 2d:b9:a3:2e:90:9d:ce:2d:8b:9a:38:4b:8d:46:90: 59:f1:b4:88:ff:56:32:d8:90:c0:9a:ba:7a:20:0a: 74:fa:f8:56:ef:fd:31:29:72:bb:85:cb:1d:5c:5d: 99:94:e1:3b:b8:25:27:23:7a:38:11:7c:bf:9c:9a: 5a:78:4a:09:69:bf:e7:41:3e:84:d9:e1:ea:4e:46: b0:23:7e:0b:7b:dd:73:eb:dd:cf:9e:58:1c:3c:8c: 9d:b3:17:cb:64:3d:d8:35:50:52:e0:5c:68:b7:e4: 3a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:FB:14:A4:1D:E7:D7:31:B4:51:9B:C0:49:26:E4:87:E8:A3:BF:23 X509v3 Authority Key Identifier: keyid:47:10:E4:DE:64:15:C4:8E:8B:53:1B:59:CD:47:A4:1C:D7:93:45:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxDk3mQVxI6LUxtZzUekHNeTRV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:a4:35:bc:2a:5a:26:46:c1:90:0f:60:63:38:6b:5e:7d:59: a8:35:db:8b:cf:4f:48:b3:52:81:92:22:50:57:46:18:5a:11: 2a:34:73:5d:87:03:bc:03:e9:8e:e0:36:19:18:6c:83:d1:9b: b1:0e:89:d9:27:40:dc:25:03:fb:03:fe:54:72:eb:ba:14:0b: 10:18:56:35:d0:9e:bd:59:d9:09:95:27:0b:4e:b7:42:9d:23: 2b:d8:03:6c:9f:90:d1:90:27:05:13:ce:c1:49:97:9f:ac:00: 88:eb:97:ba:62:ad:1d:7a:57:1c:0b:40:8d:0b:c6:f7:26:be: 9c:71:d6:02:e8:76:04:65:0f:f9:da:2f:5f:21:a6:8a:7f:79: e1:43:87:f2:9c:c9:c9:04:e1:5e:b3:5c:2d:64:5d:1e:66:6f: d0:20:2a:e2:66:03:50:d9:30:5d:7b:ed:5c:94:48:19:49:a9: 2a:08:25:3a:2c:b9:8c:ce:31:82:c8:de:ac:04:6b:15:b7:1b: 04:e2:9f:93:48:13:f2:77:81:a0:01:e0:1f:af:ce:55:1e:d3: f8:e8:73:6a:10:23:cc:9b:64:e0:a3:42:93:a2:c4:77:d5:a4: 19:f0:9a:90:c1:c2:6a:41:d9:90:13:ca:df:93:93:cb:d7:90: f9:73:14:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlBMjQxMTAvBgNVBAUTKDQ3MTBFNERFNjQxNUM0OEU4QjUzMUI1OUNENDdBNDFD RDc5MzQ1NUUwHhcNMjUwODA3MDUzMzUyWhcNMjUwODE0MDUzMzUyWjAYMRYwFAYD VQQDEw02ODk0M2FjMC1hYTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyLIDBanRMd0+Rl1nh4omTOm55RKRNk4Vw3APLXycLAX+4hC35GSu1hqS68It OLVeR/If3voz7Dmuhfef3eNuHZPa44enESqiURC75KUkVpZYY+/zC4TS3UFQ7PfZ 95J8tlrzrIxbGZZpJoUMcbTyMRiHaqPXRi3fLVVEyrp4hdv1VNzI6xNzzH8XNTO8 7YENmENd5K4tuaMukJ3OLYuaOEuNRpBZ8bSI/1Yy2JDAmrp6IAp0+vhW7/0xKXK7 hcsdXF2ZlOE7uCUnI3o4EXy/nJpaeEoJab/nQT6E2eHqTkawI34Le91z693Pnlgc PIydsxfLZD3YNVBS4Fxot+Q6XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLX7FKQd 59cxtFGbwEkm5Ifoo78jMB8GA1UdIwQYMBaAFEcQ5N5kFcSOi1MbWc1HpBzXk0Ve MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUEyNC85Mzk4NENGMkU2 NDUxMUVFQjVBNzM1NzdDNEY5QUUwMi9SeERrM21RVnhJNkxVeHRaelVla0hOZVRS VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J4RGszbVFWeEk2TFV4dFp6VWVrSE5lVFJWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUEyNC85Mzk4NENGMkU2NDUxMUVFQjVBNzM1NzdDNEY5QUUwMi9SeERrM21RVnhJ NkxVeHRaelVla0hOZVRSVjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+pDW8KlomRsGQD2BjOGtefVmoNduLz09Is1KBkiJQV0YYWhEqNHNd hwO8A+mO4DYZGGyD0ZuxDonZJ0DcJQP7A/5Ucuu6FAsQGFY10J69WdkJlScLTrdC nSMr2ANsn5DRkCcFE87BSZefrACI65e6Yq0delccC0CNC8b3Jr6ccdYC6HYEZQ/5 2i9fIaaKf3nhQ4fynMnJBOFes1wtZF0eZm/QICriZgNQ2TBde+1clEgZSakqCCU6 LLmMzjGCyN6sBGsVtxsE4p+TSBPyd4GgAeAfr85VHtP46HNqECPMm2Tgo0KTosR3 1aQZ8JqQwcJqQdmQE8rfk5PL15D5cxQM -----END CERTIFICATE-----Generated at Thu Aug 7 11:14:44 2025 by rpki-client