$ rpki-client -vvf rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft File: 1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft (raw, json) Hash identifier: 5+akIZ5SFbyCz8F/fqeA0CGr2hX65RiusxsNH726hxY= Subject key identifier: 46:39:20:DC:82:63:24:BE:D8:C2:DB:A0:D1:D9:18:CC:C5:AE:7D:D1 Authority key identifier: D6:C8:0C:5D:38:AA:3F:10:D1:EB:0E:13:9B:9E:49:4E:BF:6C:64:21 Certificate issuer: /CN=A91F495C/serialNumber=D6C80C5D38AA3F10D1EB0E139B9E494EBF6C6421 Certificate serial: CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft Manifest number: CB Signing time: Sat 09 Aug 2025 06:08:24 +0000 Manifest this update: Sat 09 Aug 2025 06:08:24 +0000 Manifest next update: Sat 16 Aug 2025 06:08:24 +0000 Files and hashes: 1: 1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl (hash: wrss5aaqgkQXOAt6Ofxq6SGdRWcGf/7drmFleP6ODgE=) 2: 084D41C6407111EFB0944C40C4F9AE02.roa (hash: Jb/5el+254tvWTwmxgE5e2fworHZ6IC6eYTkaaOmWbo=) 3: 08FDDCFC407111EFB0944C40C4F9AE02.roa (hash: 5j1mJUsKsqLJqbWxCLNYcCoMJnOjUallWOckNeSTW7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 207 (0xcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F495C, serialNumber=D6C80C5D38AA3F10D1EB0E139B9E494EBF6C6421 Validity Not Before: Aug 9 06:08:24 2025 GMT Not After : Aug 16 06:08:24 2025 GMT Subject: CN=6896e5d8-847f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:de:a9:01:c5:1b:43:d6:58:0d:77:3b:d9:2a: 16:35:35:98:ba:cb:7d:72:f8:84:0a:38:83:c4:71: 38:3f:ce:1f:98:32:58:27:91:82:db:97:82:23:ba: d1:67:47:dc:d9:9c:9f:5a:ad:3c:59:9c:c2:21:a6: 5e:ca:8e:f3:3f:53:41:dc:2d:8c:cb:77:e4:68:a4: 7c:da:e1:47:c3:8e:6a:37:d0:02:b8:b1:7b:be:24: 7b:fc:b5:e8:cf:41:8f:7c:d1:3c:37:59:e8:e0:11: 12:67:8e:80:41:87:8d:ac:d8:57:63:98:1a:44:98: 18:54:7d:9b:bf:2a:a6:da:d2:00:08:05:d5:47:01: 6c:12:77:65:0f:be:ee:bb:6c:be:9e:78:f8:a0:2e: ee:89:b8:80:12:66:e4:fd:df:3f:b2:98:c2:92:be: 72:97:ea:6f:87:37:9d:61:fa:16:9b:89:09:60:9c: c7:46:bd:b5:c5:c3:81:65:27:c1:00:a8:27:46:9c: 53:ae:22:07:fc:5a:73:5a:1f:56:8a:28:37:89:83: c4:5d:6d:02:aa:70:8e:76:a4:b6:ff:21:c1:2f:1c: f6:fc:98:13:21:d5:63:e1:2a:38:0f:57:f4:3a:d7: 47:10:33:b2:34:14:92:74:b1:fa:d4:98:41:02:30: 71:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:39:20:DC:82:63:24:BE:D8:C2:DB:A0:D1:D9:18:CC:C5:AE:7D:D1 X509v3 Authority Key Identifier: keyid:D6:C8:0C:5D:38:AA:3F:10:D1:EB:0E:13:9B:9E:49:4E:BF:6C:64:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:98:f0:64:85:15:9d:e6:e7:6f:69:1e:7c:2b:a7:cc:96:88: 55:fe:60:31:e5:41:9b:82:34:c1:cb:e7:79:b0:38:e6:d1:e1: 40:49:b0:df:32:d0:c9:cc:bc:f6:9b:c9:3c:ff:09:bc:1c:46: e4:f0:ed:91:84:76:db:2a:dc:cc:49:bc:3e:b8:aa:9e:f6:de: 15:24:06:34:70:5c:5b:a7:d5:96:4d:ae:19:6e:a9:b4:59:d9: 14:4b:d5:26:53:d4:c5:97:ca:1f:c7:55:15:9b:cd:7e:00:96: 02:54:60:b4:22:61:43:af:c7:53:cc:12:2c:65:21:91:10:40: ff:d2:a8:0a:e8:78:db:e4:da:08:0a:29:e0:53:35:fd:1d:26: 1c:19:86:ea:82:ec:8a:f9:b1:60:77:7d:ea:b8:b1:09:50:bf: f7:0a:0e:a3:53:99:58:8d:f0:5c:d0:24:30:a2:ca:22:2a:ad: ff:bf:6b:38:ff:e2:a1:d6:16:ef:e0:85:a2:b6:7d:b1:9c:dc: 19:30:3a:7e:93:6a:c5:38:19:92:e1:9f:bc:bf:34:2c:89:ed: cc:44:19:23:93:d6:db:eb:2d:27:fb:48:0b:a5:2d:58:af:41: b6:43:51:aa:d7:bd:95:f4:c3:fc:a8:42:8c:bc:bd:83:c1:bc: 66:13:d8:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ5NUMxMTAvBgNVBAUTKEQ2QzgwQzVEMzhBQTNGMTBEMUVCMEUxMzlCOUU0OTRF QkY2QzY0MjEwHhcNMjUwODA5MDYwODI0WhcNMjUwODE2MDYwODI0WjAYMRYwFAYD VQQDEw02ODk2ZTVkOC04NDdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx96pAcUbQ9ZYDXc72SoWNTWYust9cviECjiDxHE4P84fmDJYJ5GC25eCI7rR Z0fc2ZyfWq08WZzCIaZeyo7zP1NB3C2My3fkaKR82uFHw45qN9ACuLF7viR7/LXo z0GPfNE8N1no4BESZ46AQYeNrNhXY5gaRJgYVH2bvyqm2tIACAXVRwFsEndlD77u u2y+nnj4oC7uibiAEmbk/d8/spjCkr5yl+pvhzedYfoWm4kJYJzHRr21xcOBZSfB AKgnRpxTriIH/FpzWh9Wiig3iYPEXW0CqnCOdqS2/yHBLxz2/JgTIdVj4So4D1f0 OtdHEDOyNBSSdLH61JhBAjBxcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEY5INyC YyS+2MLboNHZGMzFrn3RMB8GA1UdIwQYMBaAFNbIDF04qj8Q0esOE5ueSU6/bGQh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDk1Qy81QkM2M0VGNDQw NjUxMUVGODU2QzlFMjlDNEY5QUUwMi8xc2dNWFRpcVB4RFI2dzRUbTU1SlRyOXNa Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFzZ01YVGlxUHhEUjZ3NFRtNTVKVHI5c1pDRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDk1Qy81QkM2M0VGNDQwNjUxMUVGODU2QzlFMjlDNEY5QUUwMi8xc2dNWFRpcVB4 RFI2dzRUbTU1SlRyOXNaQ0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4mPBkhRWd5udvaR58K6fMlohV/mAx5UGbgjTBy+d5sDjm0eFASbDf MtDJzLz2m8k8/wm8HEbk8O2RhHbbKtzMSbw+uKqe9t4VJAY0cFxbp9WWTa4Zbqm0 WdkUS9UmU9TFl8ofx1UVm81+AJYCVGC0ImFDr8dTzBIsZSGREED/0qgK6Hjb5NoI CingUzX9HSYcGYbqguyK+bFgd33quLEJUL/3Cg6jU5lYjfBc0CQwosoiKq3/v2s4 /+Kh1hbv4IWitn2xnNwZMDp+k2rFOBmS4Z+8vzQsie3MRBkjk9bb6y0n+0gLpS1Y r0G2Q1Gq172V9MP8qEKMvL2DwbxmE9h4 -----END CERTIFICATE-----Generated at Sun Aug 10 16:04:41 2025 by rpki-client