$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft File: SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft (raw, json) Hash identifier: /0XmXZUHsAwhq8L+2QpZkTDlzUNh8JAEONlFNiI97OA= Subject key identifier: 2B:EA:BB:AB:D5:A3:92:32:96:2F:85:30:EE:84:56:CC:68:54:06:34 Authority key identifier: 4A:57:5F:2B:F3:31:24:62:F8:56:46:1A:E9:DD:D0:A3:84:4A:BD:2F Certificate issuer: /CN=A91E01A9/serialNumber=4A575F2BF3312462F856461AE9DDD0A3844ABD2F Certificate serial: 1FEF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SldfK_MxJGL4VkYa6d3Qo4RKvS8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft Manifest number: 1FE3 Signing time: Sun 10 Aug 2025 15:56:35 +0000 Manifest this update: Sun 10 Aug 2025 15:56:35 +0000 Manifest next update: Sun 17 Aug 2025 15:56:35 +0000 Files and hashes: 1: SldfK_MxJGL4VkYa6d3Qo4RKvS8.crl (hash: 2CwwGv8wiEHUvxlxTZrBZDEt5dTLC+YQvy+EmVfqTsA=) 2: A212A64854F611E79DF7E643C4F9AE02.roa (hash: Tkmf4L8GEt+Ymff0VMzuLeDCbIi7tjYtfIPQH26ZWWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.crl rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SldfK_MxJGL4VkYa6d3Qo4RKvS8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8175 (0x1fef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E01A9, serialNumber=4A575F2BF3312462F856461AE9DDD0A3844ABD2F Validity Not Before: Aug 10 15:56:35 2025 GMT Not After : Aug 17 15:56:35 2025 GMT Subject: CN=6898c133-d9a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7d:1e:37:e4:c8:c4:21:81:1d:07:db:c0:0b: da:e2:9e:bf:c9:de:5a:ed:ab:e3:1b:c6:cc:f1:22: f5:6c:d5:1c:d4:f5:0b:13:11:b4:88:e0:25:09:ea: ef:db:d4:1f:2c:14:65:30:a0:92:cc:3c:b4:bc:6a: 11:57:05:61:f4:c1:8a:e6:1e:bd:06:bd:c2:9a:33: e1:d0:f0:29:66:48:46:b3:8e:60:5a:b0:fb:77:5b: 4d:02:3a:fb:7d:1f:09:ba:d9:e7:e6:76:b5:bb:32: 84:dc:dd:8e:81:b3:ac:d5:91:1c:b3:8a:5b:c7:78: 2a:ef:52:ae:bd:79:6b:05:c7:cc:44:74:dd:58:3e: d6:6c:22:0b:7f:75:1d:36:c1:88:ea:ad:dd:09:45: fc:de:4a:40:df:17:bd:36:42:3a:bb:27:36:35:a2: 62:c9:22:3c:18:3e:ca:51:58:2c:a1:6d:b1:15:60: 92:09:cd:59:4c:ac:a6:4c:29:ea:db:ed:c5:19:3d: 8a:c2:00:f2:6d:bb:ed:49:8e:ac:7e:34:8e:0c:68: e4:71:8e:cc:51:f4:af:65:63:3b:6d:a7:65:13:10: 61:3a:25:3b:70:91:b9:28:34:9c:24:9e:dc:6d:6b: 9b:e9:01:2d:f7:5b:f6:de:c6:84:41:18:66:a6:30: 4d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:EA:BB:AB:D5:A3:92:32:96:2F:85:30:EE:84:56:CC:68:54:06:34 X509v3 Authority Key Identifier: keyid:4A:57:5F:2B:F3:31:24:62:F8:56:46:1A:E9:DD:D0:A3:84:4A:BD:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SldfK_MxJGL4VkYa6d3Qo4RKvS8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:a2:bc:6b:f2:8f:73:13:25:e0:42:5b:50:2c:de:58:8f:a8: 05:0e:e7:01:fa:0f:43:5e:d4:76:72:1b:43:11:f2:12:f4:af: b2:41:0b:50:43:04:3f:54:f0:bb:ce:0e:4d:19:30:e7:8f:ce: bc:d2:85:d0:a8:06:6f:89:e9:57:50:16:e0:6a:3a:6a:45:35: c0:f8:33:b3:26:e4:3c:ae:79:81:c9:a7:4a:14:92:41:47:5d: 74:47:1a:b2:14:0c:52:90:49:49:ad:0a:1c:94:c3:2c:63:db: 37:98:0d:63:e3:f6:63:ad:80:c0:21:44:06:54:43:20:d3:c2: 05:e5:97:b6:d5:aa:ab:e9:eb:2f:18:03:a4:05:05:a7:69:ea: 19:b4:f5:cd:46:52:8a:51:88:d6:6d:33:e7:18:50:83:31:43: 15:3d:07:16:e1:d4:9e:bf:89:e5:5f:77:f3:78:f7:6c:42:07: a4:e2:e4:4b:06:9f:05:e1:c9:5a:fd:e4:6b:08:c3:22:da:59: 11:0b:9d:78:90:ff:c5:4f:02:94:be:ca:48:36:88:89:29:b3: 60:9a:93:9e:86:62:7e:fd:59:eb:65:95:5d:ea:b7:8b:d2:43: e4:3f:5a:bf:fa:36:46:ac:9b:80:c4:3a:b0:00:85:67:58:6f: 62:4a:f5:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICH+8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAxQTkxMTAvBgNVBAUTKDRBNTc1RjJCRjMzMTI0NjJGODU2NDYxQUU5REREMEEz ODQ0QUJEMkYwHhcNMjUwODEwMTU1NjM1WhcNMjUwODE3MTU1NjM1WjAYMRYwFAYD VQQDEw02ODk4YzEzMy1kOWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz30eN+TIxCGBHQfbwAva4p6/yd5a7avjG8bM8SL1bNUc1PULExG0iOAlCerv 29QfLBRlMKCSzDy0vGoRVwVh9MGK5h69Br3CmjPh0PApZkhGs45gWrD7d1tNAjr7 fR8Jutnn5na1uzKE3N2OgbOs1ZEcs4pbx3gq71KuvXlrBcfMRHTdWD7WbCILf3Ud NsGI6q3dCUX83kpA3xe9NkI6uyc2NaJiySI8GD7KUVgsoW2xFWCSCc1ZTKymTCnq 2+3FGT2KwgDybbvtSY6sfjSODGjkcY7MUfSvZWM7badlExBhOiU7cJG5KDScJJ7c bWub6QEt91v23saEQRhmpjBNsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCvqu6vV o5Iyli+FMO6EVsxoVAY0MB8GA1UdIwQYMBaAFEpXXyvzMSRi+FZGGund0KOESr0v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDFBOS84M0MzMTEwODMz NUMxMUU2QTgwMDBGNERDNEY5QUUwMi9TbGRmS19NeEpHTDRWa1lhNmQzUW80Ukt2 UzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NsZGZLX014SkdMNFZrWWE2ZDNRbzRSS3ZTOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDFBOS84M0MzMTEwODMzNUMxMUU2QTgwMDBGNERDNEY5QUUwMi9TbGRmS19NeEpH TDRWa1lhNmQzUW80Ukt2UzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATorxr8o9zEyXgQltQLN5Yj6gFDucB+g9DXtR2chtDEfIS9K+yQQtQ QwQ/VPC7zg5NGTDnj8680oXQqAZvielXUBbgajpqRTXA+DOzJuQ8rnmByadKFJJB R110RxqyFAxSkElJrQoclMMsY9s3mA1j4/ZjrYDAIUQGVEMg08IF5Ze21aqr6esv GAOkBQWnaeoZtPXNRlKKUYjWbTPnGFCDMUMVPQcW4dSev4nlX3fzePdsQgek4uRL Bp8F4cla/eRrCMMi2lkRC514kP/FTwKUvspINoiJKbNgmpOehmJ+/VnrZZVd6reL 0kPkP1q/+jZGrJuAxDqwAIVnWG9iSvUQ -----END CERTIFICATE-----Generated at Sun Aug 10 18:56:41 2025 by rpki-client