$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.mft File: v3H1vxFop4QFduAAbzu8ZfxINAs.mft (raw, json) Hash identifier: zQl0wjD6umCnTTiHhuZxvE3g/Bi5KXHJCsNK08cZe1Q= Subject key identifier: F4:B4:93:61:B4:3B:8C:4D:E5:44:52:E7:85:47:52:D7:AE:7E:7A:09 Authority key identifier: BF:71:F5:BF:11:68:A7:84:05:76:E0:00:6F:3B:BC:65:FC:48:34:0B Certificate issuer: /CN=A91ED596/serialNumber=BF71F5BF1168A7840576E0006F3BBC65FC48340B Certificate serial: BF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v3H1vxFop4QFduAAbzu8ZfxINAs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.mft Manifest number: BD Signing time: Fri 15 Aug 2025 06:25:39 +0000 Manifest this update: Fri 15 Aug 2025 06:25:39 +0000 Manifest next update: Fri 22 Aug 2025 06:25:39 +0000 Files and hashes: 1: v3H1vxFop4QFduAAbzu8ZfxINAs.crl (hash: KTczMnNB6FTfAdcmKgSoFRTq3VZnTuAEQzx1SMFdRSw=) 2: 8580DC705AE311EF86351430C4F9AE02.roa (hash: 27On7VhpG5fhZmLnd0n/w+EKAhYgslmits5+QsN4KvA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.crl rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v3H1vxFop4QFduAAbzu8ZfxINAs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Aug 2025 06:25:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 191 (0xbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED596, serialNumber=BF71F5BF1168A7840576E0006F3BBC65FC48340B Validity Not Before: Aug 15 06:25:39 2025 GMT Not After : Aug 22 06:25:39 2025 GMT Subject: CN=689ed2e3-3e82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a6:bc:50:5f:f0:40:03:b3:7a:78:2f:2f:1a: e8:3f:81:c2:39:e7:d0:c2:ca:3b:e0:d9:27:e3:7c: 98:19:03:18:85:50:4f:71:91:9e:22:5d:f9:ca:49: 1d:28:fa:9a:b4:a4:0e:3c:03:87:44:f4:ad:64:0f: af:2c:be:d7:25:86:dd:21:f1:64:da:99:a7:43:3f: 5c:b2:27:22:9f:f5:92:ad:df:e0:d1:c0:2a:eb:0e: 2b:16:5a:f6:09:59:1b:aa:9f:5a:d4:e8:a3:98:bb: f0:1e:0f:0f:0b:67:e6:dd:5b:e7:1e:82:d5:36:0f: 45:ee:37:1c:0b:46:9b:89:e4:0c:87:c5:64:97:e8: b1:99:a5:6a:5c:7a:3b:f8:26:d4:0a:af:a5:5b:07: 2b:bc:53:93:49:32:e3:8e:39:6b:6d:07:dc:8f:41: 57:b9:38:df:8a:4a:6a:57:d6:6a:c2:09:1d:8b:53: 2d:3e:88:b6:a0:f8:fc:ee:82:c7:7b:c1:5c:40:76: 42:fb:66:e5:85:25:69:33:a7:2b:d3:b8:15:e6:a4: 7e:ef:4e:8e:f9:e9:de:ab:27:75:f0:2f:11:e3:ec: bc:19:13:d3:8c:8b:69:7b:f0:52:f5:fe:98:88:20: d7:da:af:b3:33:04:59:3c:14:a4:77:08:c3:be:2c: c9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:B4:93:61:B4:3B:8C:4D:E5:44:52:E7:85:47:52:D7:AE:7E:7A:09 X509v3 Authority Key Identifier: keyid:BF:71:F5:BF:11:68:A7:84:05:76:E0:00:6F:3B:BC:65:FC:48:34:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v3H1vxFop4QFduAAbzu8ZfxINAs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:c1:af:56:50:fa:24:eb:56:31:f2:f6:f7:76:b8:21:d3:e4: d0:f6:d2:e1:d2:f0:d3:80:96:bf:75:ae:52:89:e3:2b:30:28: 5f:03:a7:86:6f:77:5a:6c:10:fb:d5:ac:81:e8:76:f7:5a:f2: 83:60:d5:b7:64:8f:f4:eb:c6:30:38:67:5b:91:4f:26:63:d9: 9b:11:27:c1:d7:25:9f:72:35:99:ba:15:b6:b0:db:55:a7:0b: 11:51:f3:a6:d4:f1:55:f3:70:fd:ef:d5:2b:cd:28:13:ce:94: 1b:33:85:c2:1a:3d:a0:6e:0f:ed:4d:91:b8:3d:5a:ff:60:d3: eb:71:c2:45:9d:8a:fb:18:66:c8:59:45:7e:6e:6d:1c:e4:fd: 37:59:7e:88:3e:f2:5c:93:41:98:b5:ba:23:5c:77:0d:16:3a: 4c:20:d5:17:3b:75:fe:32:6c:3e:f4:43:4b:aa:59:77:9b:80: af:cd:06:81:3e:a5:c3:d8:a1:41:b8:58:c0:d7:a6:d1:b0:a1: d7:92:45:c5:9d:53:27:8f:38:68:d0:be:f9:61:37:9e:bf:4b: dc:14:8d:9a:10:af:d7:a4:90:50:70:e9:be:70:ca:cb:78:06: 5c:64:ff:25:00:c5:ec:a7:0e:74:19:76:c7:fa:30:19:29:b2: 6c:0d:48:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ1OTYxMTAvBgNVBAUTKEJGNzFGNUJGMTE2OEE3ODQwNTc2RTAwMDZGM0JCQzY1 RkM0ODM0MEIwHhcNMjUwODE1MDYyNTM5WhcNMjUwODIyMDYyNTM5WjAYMRYwFAYD VQQDEw02ODllZDJlMy0zZTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA46a8UF/wQAOzengvLxroP4HCOefQwso74Nkn43yYGQMYhVBPcZGeIl35ykkd KPqatKQOPAOHRPStZA+vLL7XJYbdIfFk2pmnQz9csicin/WSrd/g0cAq6w4rFlr2 CVkbqp9a1OijmLvwHg8PC2fm3VvnHoLVNg9F7jccC0abieQMh8Vkl+ixmaVqXHo7 +CbUCq+lWwcrvFOTSTLjjjlrbQfcj0FXuTjfikpqV9Zqwgkdi1MtPoi2oPj87oLH e8FcQHZC+2blhSVpM6cr07gV5qR+706O+eneqyd18C8R4+y8GRPTjItpe/BS9f6Y iCDX2q+zMwRZPBSkdwjDvizJYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPS0k2G0 O4xN5URS54VHUteufnoJMB8GA1UdIwQYMBaAFL9x9b8RaKeEBXbgAG87vGX8SDQL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDU5Ni8wNTcyREQ4QTVB RTMxMUVGOTMyQzIzMkZDNEY5QUUwMi92M0gxdnhGb3A0UUZkdUFBYnp1OFpmeElO QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3YzSDF2eEZvcDRRRmR1QUFienU4WmZ4SU5Bcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDU5Ni8wNTcyREQ4QTVBRTMxMUVGOTMyQzIzMkZDNEY5QUUwMi92M0gxdnhGb3A0 UUZkdUFBYnp1OFpmeElOQXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqwa9WUPok61Yx8vb3drgh0+TQ9tLh0vDTgJa/da5SieMrMChfA6eG b3dabBD71ayB6Hb3WvKDYNW3ZI/068YwOGdbkU8mY9mbESfB1yWfcjWZuhW2sNtV pwsRUfOm1PFV83D979UrzSgTzpQbM4XCGj2gbg/tTZG4PVr/YNPrccJFnYr7GGbI WUV+bm0c5P03WX6IPvJck0GYtbojXHcNFjpMINUXO3X+Mmw+9ENLqll3m4CvzQaB PqXD2KFBuFjA16bRsKHXkkXFnVMnjzho0L75YTeev0vcFI2aEK/XpJBQcOm+cMrL eAZcZP8lAMXspw50GXbH+jAZKbJsDUiN -----END CERTIFICATE-----Generated at Fri Aug 15 13:47:28 2025 by rpki-client