$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft File: t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft (raw, json) Hash identifier: u1vEVSq4XQAgfpuGmg9UlVsecvskSkZmZ1AJQpXzV/E= Subject key identifier: 8C:F7:AD:84:17:2A:B4:0E:96:69:5F:54:8E:93:78:7D:1A:05:9A:5D Authority key identifier: B7:72:91:7C:B5:C0:76:7D:D8:B9:E9:4C:40:C1:A7:AA:A6:59:DF:2A Certificate issuer: /CN=A91EF72D/serialNumber=B772917CB5C0767DD8B9E94C40C1A7AAA659DF2A Certificate serial: 0421 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KRfLXAdn3YuelMQMGnqqZZ3yo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft Manifest number: 0420 Signing time: Mon 11 Aug 2025 00:30:01 +0000 Manifest this update: Mon 11 Aug 2025 00:30:00 +0000 Manifest next update: Mon 18 Aug 2025 00:30:00 +0000 Files and hashes: 1: t3KRfLXAdn3YuelMQMGnqqZZ3yo.crl (hash: bq7DRVe+khSG59aH1O8xmqa1p8UbMoqg1SIy/T3hCb4=) 2: 46F09F74546A11EF9B82D11DC4F9AE02.roa (hash: 2+LI0FBQeI2/dX1G7Td9+baIQ/+USHCLEosOYsTW+EI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.crl rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KRfLXAdn3YuelMQMGnqqZZ3yo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 00:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1057 (0x421) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF72D, serialNumber=B772917CB5C0767DD8B9E94C40C1A7AAA659DF2A Validity Not Before: Aug 11 00:30:00 2025 GMT Not After : Aug 18 00:30:00 2025 GMT Subject: CN=68993989-253f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f2:31:c0:80:52:ed:ec:de:82:09:54:c3:d3: 1c:4c:eb:67:9f:84:b3:69:a7:ce:42:c5:e3:3a:04: 93:a4:0d:4c:9f:43:e4:7e:3f:f9:ff:7c:cb:03:f9: 7a:6a:2e:0a:b8:06:82:f4:b6:87:2f:8b:5b:89:ae: f6:0d:bb:55:76:59:36:b1:f3:e1:10:83:20:91:84: ad:16:d6:1c:f2:8a:80:54:e7:5c:36:17:81:f2:16: 99:39:46:1f:7c:b9:ea:36:4c:b1:24:05:53:f0:ad: 91:aa:68:59:f6:8f:3a:7d:0b:8c:5b:73:91:4c:26: d8:1a:8c:6e:83:76:3a:d3:89:15:1e:77:31:d3:60: bc:2a:dd:96:b6:a9:dd:9d:c0:45:5e:74:22:19:cd: f6:62:2a:4e:f3:6a:97:42:0c:bc:6d:23:1a:06:7e: c8:3a:bc:a3:d6:01:f8:e6:98:98:5d:4e:03:9e:27: 3b:f6:cf:28:dd:e5:10:1d:d2:ae:63:26:d7:88:65: ad:5a:b3:b2:96:76:d3:cd:c9:26:1a:04:51:bf:7f: c9:67:b3:f7:7d:fe:35:0c:2f:5c:21:74:56:a0:3c: 27:45:04:44:8d:e1:17:e3:8b:ad:a5:36:40:8d:a9: 35:56:ec:f3:c3:9b:44:45:d5:f2:da:ba:0b:3a:78: 50:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F7:AD:84:17:2A:B4:0E:96:69:5F:54:8E:93:78:7D:1A:05:9A:5D X509v3 Authority Key Identifier: keyid:B7:72:91:7C:B5:C0:76:7D:D8:B9:E9:4C:40:C1:A7:AA:A6:59:DF:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KRfLXAdn3YuelMQMGnqqZZ3yo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:fd:6b:c0:43:de:60:77:f4:82:9f:4d:39:cc:68:89:af:44: 9a:83:a7:da:03:32:ca:bb:7b:ae:ac:47:65:a0:72:45:4d:77: dc:17:18:36:ba:66:3e:c5:df:80:6d:b9:11:9c:fc:3d:05:97: 84:0d:64:d3:93:d5:e3:0e:33:2c:94:a9:f3:5b:cd:e4:56:b2: 53:9f:37:54:b1:17:55:35:0b:09:8b:00:87:5c:79:3f:71:40: 6c:80:bc:be:1f:b9:80:a6:97:b7:cf:1b:5f:75:bf:85:0f:52: 7e:45:71:f0:17:92:8a:0c:88:72:71:25:8f:b7:8b:99:9f:3c: cf:7f:5e:fd:81:c1:b7:79:80:2b:87:e7:7e:67:85:d8:77:4a: 89:51:83:ac:ad:02:b6:57:c5:40:32:a7:b3:2b:42:0d:00:b3: 03:1f:8e:bc:23:dd:9e:28:dc:53:a3:ed:5f:52:fe:8b:81:2b: ba:80:30:49:5a:1c:4b:ec:07:aa:7f:65:ce:2c:fa:fe:33:17: f1:c0:7f:00:fa:c9:05:ee:35:31:28:52:23:78:c5:f2:43:75: 19:50:9e:ee:8d:9a:3d:67:6a:b2:9b:cb:b0:62:e9:4d:3e:6c: ec:f0:0b:28:4e:96:c0:70:09:6b:af:8c:62:d1:25:9f:36:1b: ef:d7:3b:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY3MkQxMTAvBgNVBAUTKEI3NzI5MTdDQjVDMDc2N0REOEI5RTk0QzQwQzFBN0FB QTY1OURGMkEwHhcNMjUwODExMDAzMDAwWhcNMjUwODE4MDAzMDAwWjAYMRYwFAYD VQQDEw02ODk5Mzk4OS0yNTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxfIxwIBS7ezegglUw9McTOtnn4SzaafOQsXjOgSTpA1Mn0Pkfj/5/3zLA/l6 ai4KuAaC9LaHL4tbia72DbtVdlk2sfPhEIMgkYStFtYc8oqAVOdcNheB8haZOUYf fLnqNkyxJAVT8K2RqmhZ9o86fQuMW3ORTCbYGoxug3Y604kVHncx02C8Kt2Wtqnd ncBFXnQiGc32YipO82qXQgy8bSMaBn7IOryj1gH45piYXU4Dnic79s8o3eUQHdKu YybXiGWtWrOylnbTzckmGgRRv3/JZ7P3ff41DC9cIXRWoDwnRQREjeEX44utpTZA jak1Vuzzw5tERdXy2roLOnhQSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIz3rYQX KrQOlmlfVI6TeH0aBZpdMB8GA1UdIwQYMBaAFLdykXy1wHZ92LnpTEDBp6qmWd8q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjcyRC84NDg1RjI0QTcz Q0YxMUVDQkMzNTU0ODVDNEY5QUUwMi90M0tSZkxYQWRuM1l1ZWxNUU1HbnFxWloz eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3QzS1JmTFhBZG4zWXVlbE1RTUducXFaWjN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjcyRC84NDg1RjI0QTczQ0YxMUVDQkMzNTU0ODVDNEY5QUUwMi90M0tSZkxYQWRu M1l1ZWxNUU1HbnFxWlozeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAd/WvAQ95gd/SCn005zGiJr0Sag6faAzLKu3uurEdloHJFTXfcFxg2 umY+xd+AbbkRnPw9BZeEDWTTk9XjDjMslKnzW83kVrJTnzdUsRdVNQsJiwCHXHk/ cUBsgLy+H7mAppe3zxtfdb+FD1J+RXHwF5KKDIhycSWPt4uZnzzPf179gcG3eYAr h+d+Z4XYd0qJUYOsrQK2V8VAMqezK0INALMDH468I92eKNxTo+1fUv6LgSu6gDBJ WhxL7Aeqf2XOLPr+MxfxwH8A+skF7jUxKFIjeMXyQ3UZUJ7ujZo9Z2qym8uwYulN Pmzs8AsoTpbAcAlrr4xi0SWfNhvv1zvB -----END CERTIFICATE-----Generated at Tue Aug 12 13:57:34 2025 by rpki-client