$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.mft File: 30fOzFfqiK65ajhlVgufImC6mQ4.mft (raw, json) Hash identifier: NVYuuSp3uaomM+gEEI5kzL/ylRADN3ZyHZbzPC4BvHk= Subject key identifier: C2:B0:1C:38:B1:01:90:3B:A6:D3:6E:AD:C5:AC:2A:60:07:D9:2A:EB Authority key identifier: DF:47:CE:CC:57:EA:88:AE:B9:6A:38:65:56:0B:9F:22:60:BA:99:0E Certificate issuer: /CN=A91DBA5B/serialNumber=DF47CECC57EA88AEB96A3865560B9F2260BA990E Certificate serial: AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30fOzFfqiK65ajhlVgufImC6mQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.mft Manifest number: AB Signing time: Mon 11 Aug 2025 06:20:08 +0000 Manifest this update: Mon 11 Aug 2025 06:20:08 +0000 Manifest next update: Mon 18 Aug 2025 06:20:08 +0000 Files and hashes: 1: 30fOzFfqiK65ajhlVgufImC6mQ4.crl (hash: 0eNIsuNRWUucf99B541fSzjOWc3hwxmjkcYrtVs1vJY=) 2: 02389B7670E811EFA8DBE571C4F9AE02.roa (hash: AxDsA8rt+K98y/uEnY4JUiHZ0XXqFDNJTlI0IgqxxqQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.crl rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30fOzFfqiK65ajhlVgufImC6mQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 06:20:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBA5B, serialNumber=DF47CECC57EA88AEB96A3865560B9F2260BA990E Validity Not Before: Aug 11 06:20:08 2025 GMT Not After : Aug 18 06:20:08 2025 GMT Subject: CN=68998b98-1a99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:30:24:c4:3f:4c:37:f0:2d:6a:5f:f1:d5:f5: b6:a6:c7:16:d9:12:ed:51:d0:e8:db:41:72:61:aa: 40:3b:80:f3:0b:48:71:0c:ce:6c:3c:a6:c5:3a:dd: b1:78:5a:ab:f1:7a:b1:27:fa:ef:fc:44:66:56:a0: e0:54:be:da:b8:89:45:64:f2:64:20:eb:88:fd:6f: 0d:f3:12:b6:0a:3c:4f:4e:38:ad:49:01:b1:05:0d: 7e:b3:2f:f1:de:af:5b:6b:eb:72:4f:84:7f:a8:6c: 18:63:b8:5c:fb:87:93:c2:7b:e0:3f:55:d6:e5:9a: e4:36:d4:d8:7e:6b:9b:88:36:cb:d0:7e:b4:a5:32: 4c:ff:bc:7d:bb:35:13:89:30:f4:d1:02:c1:3d:5c: 98:75:d1:61:e4:a6:5d:7e:f1:fd:e1:4f:ea:33:36: 90:b6:0c:be:45:d5:53:8f:d7:e2:4b:42:fe:88:a7: cc:ed:36:fb:d3:0d:63:82:1a:fd:41:51:3b:41:da: 42:97:1f:88:9e:c8:0e:d1:e6:6f:a9:97:26:49:61: 45:5c:38:55:1e:bd:17:56:b1:3d:ad:1c:1c:ec:f2: ce:eb:c3:09:f7:2d:af:d7:ae:88:30:4d:83:9b:da: fc:9a:43:b1:ff:2f:c2:1b:46:36:95:39:5c:32:71: 2b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B0:1C:38:B1:01:90:3B:A6:D3:6E:AD:C5:AC:2A:60:07:D9:2A:EB X509v3 Authority Key Identifier: keyid:DF:47:CE:CC:57:EA:88:AE:B9:6A:38:65:56:0B:9F:22:60:BA:99:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30fOzFfqiK65ajhlVgufImC6mQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:4e:a2:c5:8f:19:1d:f7:bd:f4:cc:5c:aa:2a:c5:70:de:e7: 17:ac:bc:c0:29:8b:83:bb:53:72:ca:25:70:66:ed:3c:f0:b7: c9:6a:a9:82:a9:2c:88:9c:13:32:b9:8b:b2:73:5e:3d:e3:96: c2:a4:80:33:5b:31:7a:17:cc:0a:8a:51:2f:a7:37:14:d1:43: 42:ff:01:da:3e:42:ee:ba:71:a7:05:ea:61:27:06:ce:e5:5e: 09:86:b9:d8:55:f9:52:e0:d5:28:6a:1d:01:06:b2:ea:d2:6d: f7:ae:44:e4:4d:b6:38:cb:1e:a8:3b:99:1a:a0:36:9c:da:02: 9c:7a:9e:11:e2:2e:ec:fe:c8:c4:36:e1:56:ad:e6:48:4a:15: 66:c0:e5:ac:88:b3:8d:38:3d:69:39:fa:89:7c:30:82:97:da: 42:f1:46:70:5d:95:08:40:51:8c:ab:07:ac:2b:28:6f:31:f7: ee:b1:7d:59:73:7c:53:6f:12:8d:40:3a:f0:8b:c3:fa:f1:27: 8a:81:33:da:c4:a2:12:21:cd:29:51:31:65:78:59:8e:5f:dd: dd:42:dd:e0:9e:8c:40:82:e5:c3:ea:ed:f6:ec:0c:45:c1:c6: a1:f8:be:7c:53:73:dd:f3:d0:8e:38:84:94:d2:93:7a:d5:e2: b3:b4:19:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJBNUIxMTAvBgNVBAUTKERGNDdDRUNDNTdFQTg4QUVCOTZBMzg2NTU2MEI5RjIy NjBCQTk5MEUwHhcNMjUwODExMDYyMDA4WhcNMjUwODE4MDYyMDA4WjAYMRYwFAYD VQQDEw02ODk5OGI5OC0xYTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuTAkxD9MN/Atal/x1fW2pscW2RLtUdDo20FyYapAO4DzC0hxDM5sPKbFOt2x eFqr8XqxJ/rv/ERmVqDgVL7auIlFZPJkIOuI/W8N8xK2CjxPTjitSQGxBQ1+sy/x 3q9ba+tyT4R/qGwYY7hc+4eTwnvgP1XW5ZrkNtTYfmubiDbL0H60pTJM/7x9uzUT iTD00QLBPVyYddFh5KZdfvH94U/qMzaQtgy+RdVTj9fiS0L+iKfM7Tb70w1jghr9 QVE7QdpClx+InsgO0eZvqZcmSWFFXDhVHr0XVrE9rRwc7PLO68MJ9y2v166IME2D m9r8mkOx/y/CG0Y2lTlcMnErKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMKwHDix AZA7ptNurcWsKmAH2SrrMB8GA1UdIwQYMBaAFN9HzsxX6oiuuWo4ZVYLnyJgupkO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkE1Qi81ODAwNEFBQTcw RTcxMUVGQjQ0NEFGNzBDNEY5QUUwMi8zMGZPekZmcWlLNjVhamhsVmd1ZkltQzZt UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMwZk96RmZxaUs2NWFqaGxWZ3VmSW1DNm1RNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkE1Qi81ODAwNEFBQTcwRTcxMUVGQjQ0NEFGNzBDNEY5QUUwMi8zMGZPekZmcWlL NjVhamhsVmd1ZkltQzZtUTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFTqLFjxkd9730zFyqKsVw3ucXrLzAKYuDu1NyyiVwZu088LfJaqmC qSyInBMyuYuyc14945bCpIAzWzF6F8wKilEvpzcU0UNC/wHaPkLuunGnBephJwbO 5V4JhrnYVflS4NUoah0BBrLq0m33rkTkTbY4yx6oO5kaoDac2gKcep4R4i7s/sjE NuFWreZIShVmwOWsiLONOD1pOfqJfDCCl9pC8UZwXZUIQFGMqwesKyhvMffusX1Z c3xTbxKNQDrwi8P68SeKgTPaxKISIc0pUTFleFmOX93dQt3gnoxAguXD6u327AxF wcah+L58U3Pd89COOISU0pN61eKztBk5 -----END CERTIFICATE-----Generated at Wed Aug 13 02:17:31 2025 by rpki-client