$ rpki-client -vvf rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.mft File: i29QUS89IfFe7mdUeBjiY79cXRQ.mft (raw, json) Hash identifier: 97SKXNRpZ9cKZcLxSGZNxSwZwwyWCQ+sWxSS8I2AgnA= Subject key identifier: 28:D9:F6:77:03:EE:31:4D:55:C2:3A:B6:A8:9A:63:3C:DF:06:BF:2A Authority key identifier: 8B:6F:50:51:2F:3D:21:F1:5E:EE:67:54:78:18:E2:63:BF:5C:5D:14 Certificate issuer: /CN=A91E431E/serialNumber=8B6F50512F3D21F15EEE67547818E263BF5C5D14 Certificate serial: 066E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i29QUS89IfFe7mdUeBjiY79cXRQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.mft Manifest number: 0669 Signing time: Mon 04 Aug 2025 22:50:49 +0000 Manifest this update: Mon 04 Aug 2025 22:50:49 +0000 Manifest next update: Mon 11 Aug 2025 22:50:49 +0000 Files and hashes: 1: i29QUS89IfFe7mdUeBjiY79cXRQ.crl (hash: yaj85MrpaPuyKpPm3bXCMz+hGKPiGCdxXbeHVDioT1Y=) 2: 51CBE4868C6711EB98B7B279C4F9AE02.roa (hash: am0gLM47UswkhQ7d8ve9CDz5IVO8+0wgLFBI3jyuYpA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.crl rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i29QUS89IfFe7mdUeBjiY79cXRQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 22:50:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1646 (0x66e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E431E, serialNumber=8B6F50512F3D21F15EEE67547818E263BF5C5D14 Validity Not Before: Aug 4 22:50:49 2025 GMT Not After : Aug 11 22:50:49 2025 GMT Subject: CN=68913949-cbe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ff:1a:d9:b2:47:87:da:fc:d3:b2:23:f1:e8: e1:71:a5:1c:ba:81:d1:38:a6:4b:96:8d:5b:b9:3e: 0c:5d:64:02:e8:d9:09:b0:2c:d8:18:fa:cf:1b:13: b5:fe:67:7b:c1:a7:d9:84:40:fb:97:18:22:67:47: f7:65:0b:d6:6b:b2:3b:85:94:48:d7:1d:b2:17:6d: e8:23:a1:84:62:a2:d6:53:68:45:43:19:61:0d:c5: ce:90:e6:f2:0d:a7:61:0b:e4:48:85:3f:80:d0:35: e7:e7:7c:d5:cc:6f:7f:bb:c0:58:ae:25:ad:19:11: 8a:b8:99:63:fa:04:bd:f1:6a:63:e6:fa:10:e0:71: e9:52:a2:cb:64:bc:fe:fe:bc:70:a2:82:51:cc:23: bc:f5:02:3a:35:51:3c:26:13:22:8f:01:d5:15:eb: 81:77:b6:30:9a:6b:1f:f0:e3:17:aa:22:04:1f:f6: a4:4f:b2:c0:88:02:25:4d:15:dc:0a:c9:e2:bc:8c: fc:c9:c2:5d:74:88:da:a0:0e:4f:5f:bc:49:94:c7: 78:dc:48:85:dd:4f:e3:24:79:9d:00:d4:ef:77:2b: 62:e7:1c:71:87:e9:7b:76:30:8d:28:33:94:5e:56: 97:99:be:e3:bb:23:26:bb:53:9a:71:b8:d3:0a:66: 55:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:D9:F6:77:03:EE:31:4D:55:C2:3A:B6:A8:9A:63:3C:DF:06:BF:2A X509v3 Authority Key Identifier: keyid:8B:6F:50:51:2F:3D:21:F1:5E:EE:67:54:78:18:E2:63:BF:5C:5D:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i29QUS89IfFe7mdUeBjiY79cXRQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:2a:f7:2f:91:96:16:8f:85:51:fa:95:b2:0d:77:b4:d5:6b: 8e:ff:f2:31:f4:4b:b7:71:ef:31:70:c6:2a:13:8c:e5:ea:c1: 90:91:3a:9f:a7:03:67:de:3a:1a:c2:e0:48:34:20:09:74:48: 3f:9f:ab:0b:5f:a7:70:fe:93:2d:f3:db:cc:1f:27:9f:1d:f1: 24:d5:ac:0b:35:e0:c6:5a:89:5f:19:b0:d9:00:21:17:89:14: 0b:cc:37:27:65:55:7a:a7:7c:84:84:af:97:1e:0c:45:10:7f: 3c:85:bd:4a:25:fd:c2:78:ba:66:76:97:02:e8:0f:f7:fc:5f: d6:27:81:3c:c0:44:23:8f:b2:5a:a3:15:3d:09:8f:88:91:83: 3e:30:ae:ce:2a:84:db:5c:96:2a:29:95:2e:0f:13:6f:93:b1: c3:05:7c:31:64:ce:fa:10:19:4b:29:0a:d6:ef:0c:c2:00:48: f3:a8:61:c2:e3:90:0f:a6:02:45:d5:52:64:06:65:34:d5:e8: 53:dd:47:51:0f:d0:5f:1d:da:bd:ad:b7:82:ff:ab:fe:36:45: 3a:0f:e0:86:1e:66:e7:70:68:31:5c:fc:89:6a:45:60:91:5e: 18:6f:f4:61:86:27:2d:44:39:ab:2d:af:9e:3f:02:07:d6:b5: a4:dd:d0:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQzMUUxMTAvBgNVBAUTKDhCNkY1MDUxMkYzRDIxRjE1RUVFNjc1NDc4MThFMjYz QkY1QzVEMTQwHhcNMjUwODA0MjI1MDQ5WhcNMjUwODExMjI1MDQ5WjAYMRYwFAYD VQQDEw02ODkxMzk0OS1jYmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApP8a2bJHh9r807Ij8ejhcaUcuoHROKZLlo1buT4MXWQC6NkJsCzYGPrPGxO1 /md7wafZhED7lxgiZ0f3ZQvWa7I7hZRI1x2yF23oI6GEYqLWU2hFQxlhDcXOkOby DadhC+RIhT+A0DXn53zVzG9/u8BYriWtGRGKuJlj+gS98Wpj5voQ4HHpUqLLZLz+ /rxwooJRzCO89QI6NVE8JhMijwHVFeuBd7Ywmmsf8OMXqiIEH/akT7LAiAIlTRXc CsnivIz8ycJddIjaoA5PX7xJlMd43EiF3U/jJHmdANTvdyti5xxxh+l7djCNKDOU XlaXmb7juyMmu1OacbjTCmZVPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCjZ9ncD 7jFNVcI6tqiaYzzfBr8qMB8GA1UdIwQYMBaAFItvUFEvPSHxXu5nVHgY4mO/XF0U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDMxRS83QTg0ODE5NjhD NjUxMUVCQUFGODAzNzZDNEY5QUUwMi9pMjlRVVM4OUlmRmU3bWRVZUJqaVk3OWNY UlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2kyOVFVUzg5SWZGZTdtZFVlQmppWTc5Y1hSUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDMxRS83QTg0ODE5NjhDNjUxMUVCQUFGODAzNzZDNEY5QUUwMi9pMjlRVVM4OUlm RmU3bWRVZUJqaVk3OWNYUlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwKvcvkZYWj4VR+pWyDXe01WuO//Ix9Eu3ce8xcMYqE4zl6sGQkTqf pwNn3joawuBINCAJdEg/n6sLX6dw/pMt89vMHyefHfEk1awLNeDGWolfGbDZACEX iRQLzDcnZVV6p3yEhK+XHgxFEH88hb1KJf3CeLpmdpcC6A/3/F/WJ4E8wEQjj7Ja oxU9CY+IkYM+MK7OKoTbXJYqKZUuDxNvk7HDBXwxZM76EBlLKQrW7wzCAEjzqGHC 45APpgJF1VJkBmU01ehT3UdRD9BfHdq9rbeC/6v+NkU6D+CGHmbncGgxXPyJakVg kV4Yb/RhhictRDmrLa+ePwIH1rWk3dAe -----END CERTIFICATE-----Generated at Wed Aug 6 13:14:38 2025 by rpki-client