$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft File: x-37dX9ZS98jrdcSH12-PSWuAPw.mft (raw, json) Hash identifier: qposlJNQAYql7PcQugyv2GxWGESRJWsGpohZpyuMMCw= Subject key identifier: 16:96:CC:AA:F4:B6:8F:03:23:24:33:D3:A7:42:69:05:1E:F5:BB:AD Authority key identifier: C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC Certificate issuer: /CN=A91F8579/serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC Certificate serial: 0365 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft Manifest number: 034A Signing time: Sat 09 Aug 2025 01:35:44 +0000 Manifest this update: Sat 09 Aug 2025 01:35:44 +0000 Manifest next update: Sat 16 Aug 2025 01:35:44 +0000 Files and hashes: 1: x-37dX9ZS98jrdcSH12-PSWuAPw.crl (hash: Mxd99V9Jqpjk7zr3FMAA3QkK5eVcOhT7vWMQWEqvBxo=) 2: C38C54A2650411EE89EC7112C4F9AE02.roa (hash: vXzSIXZBaXcIq7HGAv3/KzQ/zFxGEtVsxyV8BgD55Xg=) 3: EA2C5116450411F09738105FC4F9AE02.roa (hash: mDgnt/g1+zuzz/Dldep3lhpu+guK6efPn+25tb2sN6w=) 4: 2872E3EEB78511EFACBD807DC4F9AE02.roa (hash: kZzMXdkHsbeWhqQo08LJANq63hJpAGNo4uFVGoBwQ/0=) 5: EB1C709C450411F09738105FC4F9AE02.roa (hash: O/x91LtvdsHnu6UD+9TxpNdI3pzLLK+i+0wDI9cj5DI=) 6: 27DC7846B78511EFACBD807DC4F9AE02.roa (hash: b5B3lzxVsrZlixjiSWlcyQY2EuLiKocCaABGFArbDwM=) 7: EAAF7884450411F09738105FC4F9AE02.roa (hash: tBvhikagp7Nt4A+RvXoPttqaLGkwIsP8h24We8nhn+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 869 (0x365) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8579, serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC Validity Not Before: Aug 9 01:35:44 2025 GMT Not After : Aug 16 01:35:44 2025 GMT Subject: CN=6896a5f0-4124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:23:6a:25:b5:b7:cd:ed:98:92:9a:8e:03:81: 80:8e:a1:6d:7b:28:36:9a:1f:7e:4f:2f:df:83:a5: f7:7a:43:67:ae:86:20:bd:81:bc:8f:bc:b6:0c:cf: 5b:5d:c8:8f:7c:10:60:54:dc:18:33:2c:b9:0f:cb: cf:74:07:ff:e3:3e:2f:04:6e:f3:64:0b:75:99:7f: 38:3d:c0:6c:92:ff:63:cb:32:b1:76:48:5f:0a:02: 48:2e:46:42:f2:11:05:7d:2b:93:86:56:a4:fc:c3: 93:2e:14:c0:5f:65:cc:78:56:6f:d8:ee:45:07:77: 11:fb:74:e7:2f:94:0b:c0:6f:e2:b8:ac:51:d4:6f: ee:37:6a:5f:c5:77:0c:73:05:8a:43:5b:d6:a8:07: e3:e4:a5:12:fd:6b:6d:01:26:75:5b:36:1d:61:ec: 00:3f:39:46:12:a1:e0:33:a1:17:4f:7c:a7:99:e2: e5:a1:29:77:4f:a6:7f:48:ad:35:46:aa:a4:89:5b: 0c:cb:f0:c1:88:61:18:56:96:a0:05:c5:37:91:b0: a3:db:b9:ef:fe:13:75:3e:03:81:0f:84:10:cf:d3: 18:09:d1:33:f8:3f:c9:2a:c8:b1:bf:47:65:82:f7: 0f:0c:03:cb:57:67:40:58:32:34:3b:d7:e6:3c:e2: 00:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:96:CC:AA:F4:B6:8F:03:23:24:33:D3:A7:42:69:05:1E:F5:BB:AD X509v3 Authority Key Identifier: keyid:C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:b8:fe:c7:ce:ba:55:37:0e:69:7d:78:62:4d:f8:e1:95:68: a9:95:e8:90:37:5c:a1:44:5d:9e:a9:5d:66:0a:5b:35:21:9a: 55:45:3b:28:34:39:fe:71:77:d3:42:04:4f:c2:09:2b:65:2f: 4d:18:51:25:27:2c:e7:76:70:1e:70:53:83:01:31:a2:c8:88: ab:fd:eb:4e:f1:81:ac:5e:b8:6d:e0:65:ec:1b:90:ba:ce:67: 9c:9b:41:4a:da:0d:0f:66:9e:df:2d:de:34:2b:02:48:cf:4a: 0e:de:20:3d:53:59:a0:cb:ae:92:c6:81:11:b6:68:8a:94:bb: 90:07:04:6e:49:73:a3:8d:9d:90:7e:b7:b3:8b:ce:89:54:45: 78:df:57:fd:b6:4b:bc:30:ed:67:59:40:fa:ca:c5:65:81:39: 81:85:e7:eb:98:7c:23:bc:f2:ad:6e:c8:de:4b:23:7d:9c:dd: c3:8b:54:c6:ac:d3:81:3a:91:ef:ae:a2:4a:81:13:c2:8a:14: 04:36:22:e2:84:fd:57:c4:c4:c2:c8:e3:b2:7a:2c:ad:8f:06: 5d:4b:ea:51:1b:fb:d2:03:04:b4:92:d5:ac:f6:fb:69:da:b6: 90:1a:7f:9e:dd:ba:56:7e:25:ae:9f:c6:46:f8:b5:84:04:4e: 37:ca:3a:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg1NzkxMTAvBgNVBAUTKEM3RURGQjc1N0Y1OTRCREYyM0FERDcxMjFGNURCRTNE MjVBRTAwRkMwHhcNMjUwODA5MDEzNTQ0WhcNMjUwODE2MDEzNTQ0WjAYMRYwFAYD VQQDEw02ODk2YTVmMC00MTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApSNqJbW3ze2YkpqOA4GAjqFteyg2mh9+Ty/fg6X3ekNnroYgvYG8j7y2DM9b XciPfBBgVNwYMyy5D8vPdAf/4z4vBG7zZAt1mX84PcBskv9jyzKxdkhfCgJILkZC 8hEFfSuThlak/MOTLhTAX2XMeFZv2O5FB3cR+3TnL5QLwG/iuKxR1G/uN2pfxXcM cwWKQ1vWqAfj5KUS/WttASZ1WzYdYewAPzlGEqHgM6EXT3ynmeLloSl3T6Z/SK01 RqqkiVsMy/DBiGEYVpagBcU3kbCj27nv/hN1PgOBD4QQz9MYCdEz+D/JKsixv0dl gvcPDAPLV2dAWDI0O9fmPOIAkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBaWzKr0 to8DIyQz06dCaQUe9butMB8GA1UdIwQYMBaAFMft+3V/WUvfI63XEh9dvj0lrgD8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODU3OS8wMTc2MDNGQ0NF QjIxMUVDQUUwMDE4MjNDNEY5QUUwMi94LTM3ZFg5WlM5OGpyZGNTSDEyLVBTV3VB UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gtMzdkWDlaUzk4anJkY1NIMTItUFNXdUFQdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODU3OS8wMTc2MDNGQ0NFQjIxMUVDQUUwMDE4MjNDNEY5QUUwMi94LTM3ZFg5WlM5 OGpyZGNTSDEyLVBTV3VBUHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxuP7HzrpVNw5pfXhiTfjhlWipleiQN1yhRF2eqV1mCls1IZpVRTso NDn+cXfTQgRPwgkrZS9NGFElJyzndnAecFODATGiyIir/etO8YGsXrht4GXsG5C6 zmecm0FK2g0PZp7fLd40KwJIz0oO3iA9U1mgy66SxoERtmiKlLuQBwRuSXOjjZ2Q frezi86JVEV431f9tku8MO1nWUD6ysVlgTmBhefrmHwjvPKtbsjeSyN9nN3Di1TG rNOBOpHvrqJKgRPCihQENiLihP1XxMTCyOOyeiytjwZdS+pRG/vSAwS0ktWs9vtp 2raQGn+e3bpWfiWun8ZG+LWEBE43yjpX -----END CERTIFICATE-----Generated at Sat Aug 9 03:02:36 2025 by rpki-client