$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.mft File: SLmUWYf2drRs7T3hKEmoo49AaLU.mft (raw, json) Hash identifier: ClUGFIKDJ93pBcGgqHg57O/ITQeyJ7KFh2H08pUqrA4= Subject key identifier: A3:2A:27:F3:AA:2B:09:B9:04:2C:38:10:C2:5B:C2:62:00:C8:8E:B6 Authority key identifier: 48:B9:94:59:87:F6:76:B4:6C:ED:3D:E1:28:49:A8:A3:8F:40:68:B5 Certificate issuer: /CN=A91E1BAB/serialNumber=48B9945987F676B46CED3DE12849A8A38F4068B5 Certificate serial: 0813 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLmUWYf2drRs7T3hKEmoo49AaLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.mft Manifest number: 07FF Signing time: Wed 06 Aug 2025 21:20:18 +0000 Manifest this update: Wed 06 Aug 2025 21:20:18 +0000 Manifest next update: Wed 13 Aug 2025 21:20:18 +0000 Files and hashes: 1: SLmUWYf2drRs7T3hKEmoo49AaLU.crl (hash: 2rsNEUkm2WyKvF4yjMQbuYiCBNhE5y/Dugjrfxd+Hqs=) 2: 37A46070F6F211EA922F482BC4F9AE02.roa (hash: 945IwSRQpquR63B4O0BtV6nqh3ke3gGQ6coFK1lAOcs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.crl rsync://rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLmUWYf2drRs7T3hKEmoo49AaLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 21:20:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2067 (0x813) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1BAB, serialNumber=48B9945987F676B46CED3DE12849A8A38F4068B5 Validity Not Before: Aug 6 21:20:18 2025 GMT Not After : Aug 13 21:20:18 2025 GMT Subject: CN=6893c712-102a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ca:cb:bd:b3:b4:73:2b:0f:c5:21:d5:e9:a8: ea:c0:7c:75:48:6b:13:9c:01:05:a4:79:18:88:58: 0e:4c:40:72:8d:34:36:b1:d5:5a:df:23:e0:ad:fa: 91:d5:c0:29:6b:b3:75:b7:d5:1b:f4:b2:e2:ea:76: b3:f7:b8:89:fa:a2:12:48:62:06:85:29:a0:d1:11: b7:2b:36:e9:0c:28:53:32:59:f6:da:66:8e:84:d8: a3:4c:58:0e:34:5d:51:78:2f:c9:37:37:f4:c1:d2: e0:19:54:1a:9a:7b:3e:af:69:72:05:3b:2c:9c:d4: b6:1a:b4:1b:79:fe:1b:88:35:cd:5a:02:e3:1e:f9: 1c:34:3b:a4:d7:df:32:5a:eb:02:80:ff:13:05:0a: 5c:f5:9f:88:4a:41:1f:c9:48:76:79:e5:d4:54:e9: d0:34:ea:3c:e7:43:9a:38:c0:9e:bc:25:01:fd:82: 5c:0a:4c:8c:a8:82:a1:10:95:43:56:94:90:7a:48: 47:71:a6:9b:a7:0d:b8:4e:12:d8:83:ee:67:b5:98: 6c:b8:c8:81:20:9b:33:42:54:88:8f:8c:9e:96:68: 11:cf:ae:92:98:fb:6e:61:14:93:67:29:c1:be:b6: d8:81:51:4a:80:f8:c3:a7:8e:fa:2c:5f:a1:da:e1: 30:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:2A:27:F3:AA:2B:09:B9:04:2C:38:10:C2:5B:C2:62:00:C8:8E:B6 X509v3 Authority Key Identifier: keyid:48:B9:94:59:87:F6:76:B4:6C:ED:3D:E1:28:49:A8:A3:8F:40:68:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLmUWYf2drRs7T3hKEmoo49AaLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:a9:e4:2c:82:42:98:58:18:81:8a:31:47:7f:fe:c7:a7:02: 49:ad:df:d6:6c:79:38:a1:b6:15:87:3a:ff:a7:69:a1:a5:23: cc:37:18:f1:47:2d:ac:d0:9b:e9:7b:82:50:7e:82:f4:b7:d6: c7:98:57:fb:b1:5b:80:5d:8b:f1:10:ce:b8:31:6e:48:5a:82: 55:31:d9:f0:a8:34:2c:cf:e1:b4:54:85:1a:be:42:42:a7:bb: 07:fb:a8:fa:95:ea:cb:b7:f7:91:c7:45:83:00:2e:3f:f8:62: 42:f4:72:75:77:d9:c4:57:3d:8d:9c:76:bb:bd:0b:87:9c:8a: 00:70:94:cf:25:fe:72:05:1e:c1:d8:79:31:4d:e7:22:1f:c0: eb:e3:c1:12:19:4a:e2:c2:a0:9d:ee:99:f4:52:c8:6c:01:7e: 91:a2:ed:dd:d0:89:86:1a:b0:f4:6b:55:19:82:cf:d4:6e:a0: a3:3d:5e:a6:b3:48:b5:5d:0c:f8:39:d5:ab:1d:80:14:87:b4: 38:61:17:96:5a:86:3f:71:50:5e:07:75:8a:f3:ac:5d:fd:c7: a8:f8:8e:23:ec:68:a3:49:47:5a:e3:41:ee:c5:da:87:fe:c0: ed:3d:27:ed:7a:18:cd:7e:1d:0d:0b:e5:6d:26:5e:68:fc:ea: 7c:5e:9d:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFCQUIxMTAvBgNVBAUTKDQ4Qjk5NDU5ODdGNjc2QjQ2Q0VEM0RFMTI4NDlBOEEz OEY0MDY4QjUwHhcNMjUwODA2MjEyMDE4WhcNMjUwODEzMjEyMDE4WjAYMRYwFAYD VQQDEw02ODkzYzcxMi0xMDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArcrLvbO0cysPxSHV6ajqwHx1SGsTnAEFpHkYiFgOTEByjTQ2sdVa3yPgrfqR 1cApa7N1t9Ub9LLi6naz97iJ+qISSGIGhSmg0RG3KzbpDChTMln22maOhNijTFgO NF1ReC/JNzf0wdLgGVQamns+r2lyBTssnNS2GrQbef4biDXNWgLjHvkcNDuk198y WusCgP8TBQpc9Z+ISkEfyUh2eeXUVOnQNOo850OaOMCevCUB/YJcCkyMqIKhEJVD VpSQekhHcaabpw24ThLYg+5ntZhsuMiBIJszQlSIj4yelmgRz66SmPtuYRSTZynB vrbYgVFKgPjDp476LF+h2uEwNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKMqJ/Oq Kwm5BCw4EMJbwmIAyI62MB8GA1UdIwQYMBaAFEi5lFmH9na0bO094ShJqKOPQGi1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUJBQi8wQjk3NjAxQUY2 NjQxMUVBOTFDRDJBNTNDNEY5QUUwMi9TTG1VV1lmMmRyUnM3VDNoS0Vtb280OUFh TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NMbVVXWWYyZHJSczdUM2hLRW1vbzQ5QWFMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUJBQi8wQjk3NjAxQUY2NjQxMUVBOTFDRDJBNTNDNEY5QUUwMi9TTG1VV1lmMmRy UnM3VDNoS0Vtb280OUFhTFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHqeQsgkKYWBiBijFHf/7HpwJJrd/WbHk4obYVhzr/p2mhpSPMNxjx Ry2s0Jvpe4JQfoL0t9bHmFf7sVuAXYvxEM64MW5IWoJVMdnwqDQsz+G0VIUavkJC p7sH+6j6lerLt/eRx0WDAC4/+GJC9HJ1d9nEVz2NnHa7vQuHnIoAcJTPJf5yBR7B 2HkxTeciH8Dr48ESGUriwqCd7pn0UshsAX6Rou3d0ImGGrD0a1UZgs/UbqCjPV6m s0i1XQz4OdWrHYAUh7Q4YReWWoY/cVBeB3WK86xd/ceo+I4j7GijSUda40HuxdqH /sDtPSftehjNfh0NC+VtJl5o/Op8Xp0B -----END CERTIFICATE-----Generated at Fri Aug 8 13:11:45 2025 by rpki-client