$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft File: rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft (raw, json) Hash identifier: CXkFcA0S0C6tvV1LiU1jhH8+NfRCnhwh5OGoOjQYHcE= Subject key identifier: 78:5D:08:BC:2D:97:25:C0:58:08:58:23:F9:FD:D8:31:B7:CF:E8:F3 Authority key identifier: AD:73:AD:B9:14:21:38:62:ED:8E:14:D7:70:69:F4:74:D8:3C:C8:F5 Certificate issuer: /CN=A91EE735/serialNumber=AD73ADB914213862ED8E14D77069F474D83CC8F5 Certificate serial: 099B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXOtuRQhOGLtjhTXcGn0dNg8yPU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft Manifest number: 098C Signing time: Sun 10 Aug 2025 20:06:59 +0000 Manifest this update: Sun 10 Aug 2025 20:06:59 +0000 Manifest next update: Sun 17 Aug 2025 20:06:59 +0000 Files and hashes: 1: rXOtuRQhOGLtjhTXcGn0dNg8yPU.crl (hash: RWJbHikx36yaL7RRXcIcShir7WkRqI6vyFlaSiPE3L4=) 2: 34E183809E5F11EB97709628C4F9AE02.roa (hash: 6TUVFO2Ivu/tY1JvgLaKV+3n0wexlzOCwMKMpOyQlPA=) 3: E7F141609E9911EBB4117632C4F9AE02.roa (hash: nwk0Qb0D2pWgRwQM08AvCns/X8x+3fZwLOgEyevfH8w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.crl rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXOtuRQhOGLtjhTXcGn0dNg8yPU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2459 (0x99b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE735, serialNumber=AD73ADB914213862ED8E14D77069F474D83CC8F5 Validity Not Before: Aug 10 20:06:59 2025 GMT Not After : Aug 17 20:06:59 2025 GMT Subject: CN=6898fbe3-1805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9f:49:69:31:c9:72:3c:ee:26:11:21:7e:67: 35:2c:be:95:c4:74:d1:6e:9e:80:28:a3:59:42:ea: f0:88:86:0a:7c:f4:76:ce:a6:48:69:c8:ea:33:16: ba:d4:e6:85:1d:82:17:78:38:e4:eb:91:6f:21:a2: 4f:b2:24:ac:d2:a7:8d:16:66:a2:5e:2e:89:69:99: b2:2a:28:f3:91:6b:49:7f:16:df:23:d1:bd:d7:0b: 72:c6:50:5b:1c:c4:34:79:92:d6:80:50:9c:bf:6e: bf:e6:f5:1b:5a:ae:0c:ab:a4:87:a7:1d:ac:45:ec: 2e:c2:e8:7b:d8:24:be:48:4a:30:5b:6c:73:a5:34: 9c:94:23:40:e1:2a:7f:16:ce:68:7f:4d:24:0f:b7: 94:5e:db:66:8a:8f:e8:d1:d5:6e:b7:c3:30:00:6d: eb:a3:c1:f2:11:9e:f4:06:21:e5:ab:f5:2d:a5:26: 96:08:75:82:94:30:34:62:d5:9c:98:10:f9:e1:d3: 17:85:71:6d:72:b7:84:96:9b:0f:08:c4:71:7d:a8: 59:0a:f0:f0:b8:8b:39:83:e2:b0:c5:af:47:2f:17: e1:b6:13:4f:21:2f:ac:10:8d:47:fd:ec:79:a2:59: 43:33:3f:e5:2b:79:6b:52:f5:1a:f2:7b:8f:cb:81: 5c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:5D:08:BC:2D:97:25:C0:58:08:58:23:F9:FD:D8:31:B7:CF:E8:F3 X509v3 Authority Key Identifier: keyid:AD:73:AD:B9:14:21:38:62:ED:8E:14:D7:70:69:F4:74:D8:3C:C8:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXOtuRQhOGLtjhTXcGn0dNg8yPU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:75:0d:6e:89:41:57:b2:05:7d:a7:a0:df:75:52:40:31:2f: f0:a7:2e:94:98:c9:ce:34:57:3e:f9:44:e3:7f:68:ac:a3:74: c4:f4:53:94:55:9f:3f:be:54:81:3a:65:06:6e:66:d9:5e:ac: 9d:a4:24:9f:2c:60:94:3b:cf:9d:38:b0:9d:af:f0:bd:e0:e9: ca:1c:a0:9f:e9:26:c7:80:12:d4:24:d3:b8:48:4d:41:26:8d: bd:61:c4:2a:e0:46:3d:b9:3f:75:49:be:cc:c8:42:89:81:4c: 34:d8:f8:00:70:70:d3:13:65:fd:a6:8d:82:a6:fe:c2:83:59: e8:bb:ed:bf:1c:84:fe:e0:a2:f5:c6:86:94:57:94:a5:8e:60: 5f:7b:cd:36:b7:5d:49:e7:e9:9f:3b:08:bf:d8:59:17:e1:d3: b2:0c:a1:be:11:c2:5d:f3:bb:94:6a:2f:0c:e3:cd:5d:39:6c: 75:a5:fe:59:1b:b5:ea:a4:68:df:33:97:58:04:29:59:8a:13: 08:ed:73:d7:c8:e7:08:1a:98:8d:ae:95:23:10:89:93:b5:a7: 39:eb:cd:65:92:e4:dd:35:4f:4b:d7:70:33:09:87:06:09:ca: f7:2f:55:1a:e4:5c:5a:76:c0:7f:68:63:f6:2f:9b:b0:54:8c: ef:cc:63:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUU3MzUxMTAvBgNVBAUTKEFENzNBREI5MTQyMTM4NjJFRDhFMTRENzcwNjlGNDc0 RDgzQ0M4RjUwHhcNMjUwODEwMjAwNjU5WhcNMjUwODE3MjAwNjU5WjAYMRYwFAYD VQQDEw02ODk4ZmJlMy0xODA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvp9JaTHJcjzuJhEhfmc1LL6VxHTRbp6AKKNZQurwiIYKfPR2zqZIacjqMxa6 1OaFHYIXeDjk65FvIaJPsiSs0qeNFmaiXi6JaZmyKijzkWtJfxbfI9G91wtyxlBb HMQ0eZLWgFCcv26/5vUbWq4Mq6SHpx2sRewuwuh72CS+SEowW2xzpTSclCNA4Sp/ Fs5of00kD7eUXttmio/o0dVut8MwAG3ro8HyEZ70BiHlq/UtpSaWCHWClDA0YtWc mBD54dMXhXFtcreElpsPCMRxfahZCvDwuIs5g+Kwxa9HLxfhthNPIS+sEI1H/ex5 ollDMz/lK3lrUvUa8nuPy4FcZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHhdCLwt lyXAWAhYI/n92DG3z+jzMB8GA1UdIwQYMBaAFK1zrbkUIThi7Y4U13Bp9HTYPMj1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTczNS9FOEU2NjdDQTk0 QkUxMUVBOTg0RkFENThDNEY5QUUwMi9yWE90dVJRaE9HTHRqaFRYY0duMGROZzh5 UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JYT3R1UlFoT0dMdGpoVFhjR24wZE5nOHlQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTczNS9FOEU2NjdDQTk0QkUxMUVBOTg0RkFENThDNEY5QUUwMi9yWE90dVJRaE9H THRqaFRYY0duMGROZzh5UFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2dQ1uiUFXsgV9p6DfdVJAMS/wpy6UmMnONFc++UTjf2iso3TE9FOU VZ8/vlSBOmUGbmbZXqydpCSfLGCUO8+dOLCdr/C94OnKHKCf6SbHgBLUJNO4SE1B Jo29YcQq4EY9uT91Sb7MyEKJgUw02PgAcHDTE2X9po2Cpv7Cg1nou+2/HIT+4KL1 xoaUV5SljmBfe802t11J5+mfOwi/2FkX4dOyDKG+EcJd87uUai8M481dOWx1pf5Z G7XqpGjfM5dYBClZihMI7XPXyOcIGpiNrpUjEImTtac5681lkuTdNU9L13AzCYcG Ccr3L1Ua5FxadsB/aGP2L5uwVIzvzGPS -----END CERTIFICATE-----Generated at Mon Aug 11 08:59:07 2025 by rpki-client