$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft File: SrvXMBz_f7SstqBKFPCjbM6FYRw.mft (raw, json) Hash identifier: ZlXH8rNcS3vARkMTFtlhmuZN0f5p5l//qpE+Js0f4xY= Subject key identifier: CB:9F:59:38:75:94:14:7B:24:61:90:CA:03:B3:84:0C:67:D9:4A:A0 Authority key identifier: 4A:BB:D7:30:1C:FF:7F:B4:AC:B6:A0:4A:14:F0:A3:6C:CE:85:61:1C Certificate issuer: /CN=A91FA9BC/serialNumber=4ABBD7301CFF7FB4ACB6A04A14F0A36CCE85611C Certificate serial: 0202 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft Manifest number: 01EB Signing time: Tue 05 Aug 2025 03:19:36 +0000 Manifest this update: Tue 05 Aug 2025 03:19:36 +0000 Manifest next update: Tue 12 Aug 2025 03:19:36 +0000 Files and hashes: 1: SrvXMBz_f7SstqBKFPCjbM6FYRw.crl (hash: b5vbV8GDNmCrhMPtVaNmG2MTT+XS1u7LE81KEqPs/SU=) 2: 106F283CB74311EDB0C38030C4F9AE02.roa (hash: hw7fn2Uz56pW/An8KSiF7/ybzu4erny13VSakUkooRo=) 3: 688B6F18355811F0AF79910EC4F9AE02.roa (hash: TCN1AZgzVPw/0NzN3SuEMukcZY6yAiASu/ppodIE8PQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.crl rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 03:19:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 514 (0x202) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA9BC, serialNumber=4ABBD7301CFF7FB4ACB6A04A14F0A36CCE85611C Validity Not Before: Aug 5 03:19:36 2025 GMT Not After : Aug 12 03:19:36 2025 GMT Subject: CN=68917848-9cba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f0:4a:cc:8b:28:ed:1d:6a:c9:65:73:d0:21: c5:de:f3:f7:5a:41:10:b1:83:7b:35:13:85:be:79: c5:2b:ca:5d:12:a2:89:d8:f8:a7:84:01:c8:a3:6a: a5:cd:59:c4:c8:a6:f6:77:2b:df:50:31:39:1f:37: 77:68:cd:06:c7:00:f7:87:10:9b:98:b0:4a:56:ca: 0b:38:7c:2f:f4:6c:aa:bb:12:b8:90:57:ff:22:5d: 37:8f:19:e4:63:a8:7b:ed:e0:85:4f:11:cc:26:7c: f6:74:b7:34:f0:6e:a1:45:7a:cc:0a:3d:fb:d6:a9: 76:62:54:e9:58:3b:ff:42:10:f5:4e:25:08:35:57: 1c:e8:8b:1e:54:97:fd:0e:06:a8:3b:88:69:52:ff: b3:9c:15:5e:50:16:b5:02:b5:77:21:cb:b2:21:bc: 00:7a:0d:da:98:79:84:cc:7f:26:d3:e3:d2:f2:e2: 9b:06:90:5b:55:80:94:f8:63:4c:66:17:e2:81:11: fe:f9:91:a6:35:4f:2d:cc:ba:cb:15:87:1c:2f:39: 08:45:e8:43:de:e7:eb:11:e6:bd:fa:47:33:85:49: 8f:cb:07:0f:cc:c8:eb:af:58:38:5f:b7:93:0c:d1: 1c:65:12:ea:45:62:a5:8f:9c:37:09:e4:39:22:1d: bf:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:9F:59:38:75:94:14:7B:24:61:90:CA:03:B3:84:0C:67:D9:4A:A0 X509v3 Authority Key Identifier: keyid:4A:BB:D7:30:1C:FF:7F:B4:AC:B6:A0:4A:14:F0:A3:6C:CE:85:61:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:8a:1c:3a:3b:16:65:d0:af:4f:af:a6:05:03:1b:45:b5:d5: ae:4f:79:28:ca:b9:91:3f:e0:9c:6f:cf:d5:b6:6f:0b:cf:79: 0e:b0:7f:33:ce:14:0f:19:a2:1e:ff:b2:f3:e9:3b:4c:94:9d: 8a:3b:eb:99:ee:56:7d:5f:97:51:62:0a:f3:0c:8a:60:5c:4b: 52:f0:2c:1b:87:73:99:ea:ab:e0:39:26:f2:11:de:4c:05:df: 49:09:b6:6e:31:7b:93:39:ea:b0:ff:cf:c9:f3:8f:da:bf:17: 38:08:28:0a:19:3d:2d:9a:c1:91:65:05:87:b5:18:49:4f:f3: b4:96:08:f8:61:40:fb:bf:30:02:f6:c5:34:a8:0a:43:c0:e7: e6:b1:10:81:54:d5:fa:56:e0:86:f5:84:c9:4d:49:62:b8:4d: ff:52:f2:5c:b3:0c:58:d0:e3:38:ab:11:d9:8d:03:ad:c0:e5: f2:38:6e:f8:b8:d6:c0:2a:7e:66:91:9e:2a:71:ca:31:03:a7: 9d:fb:4b:96:47:1c:eb:02:8c:2b:d8:85:d3:e7:79:e9:2a:1e: 9f:2f:b2:f7:7d:77:b6:e5:52:5d:c8:2b:d0:7e:03:fa:93:22: 08:3c:4b:1b:04:8e:fb:15:a8:67:e4:09:94:90:10:ce:28:09: c5:f3:47:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE5QkMxMTAvBgNVBAUTKDRBQkJENzMwMUNGRjdGQjRBQ0I2QTA0QTE0RjBBMzZD Q0U4NTYxMUMwHhcNMjUwODA1MDMxOTM2WhcNMjUwODEyMDMxOTM2WjAYMRYwFAYD VQQDEw02ODkxNzg0OC05Y2JhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0fBKzIso7R1qyWVz0CHF3vP3WkEQsYN7NROFvnnFK8pdEqKJ2PinhAHIo2ql zVnEyKb2dyvfUDE5Hzd3aM0GxwD3hxCbmLBKVsoLOHwv9GyquxK4kFf/Il03jxnk Y6h77eCFTxHMJnz2dLc08G6hRXrMCj371ql2YlTpWDv/QhD1TiUINVcc6IseVJf9 DgaoO4hpUv+znBVeUBa1ArV3IcuyIbwAeg3amHmEzH8m0+PS8uKbBpBbVYCU+GNM ZhfigRH++ZGmNU8tzLrLFYccLzkIRehD3ufrEea9+kczhUmPywcPzMjrr1g4X7eT DNEcZRLqRWKlj5w3CeQ5Ih2/kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMufWTh1 lBR7JGGQygOzhAxn2UqgMB8GA1UdIwQYMBaAFEq71zAc/3+0rLagShTwo2zOhWEc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTlCQy9CRTJDRUZGMEIz QUExMUVEQUYzMTYyM0ZDNEY5QUUwMi9TcnZYTUJ6X2Y3U3N0cUJLRlBDamJNNkZZ UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NydlhNQnpfZjdTc3RxQktGUENqYk02RllSdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTlCQy9CRTJDRUZGMEIzQUExMUVEQUYzMTYyM0ZDNEY5QUUwMi9TcnZYTUJ6X2Y3 U3N0cUJLRlBDamJNNkZZUncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjihw6OxZl0K9Pr6YFAxtFtdWuT3koyrmRP+Ccb8/Vtm8Lz3kOsH8z zhQPGaIe/7Lz6TtMlJ2KO+uZ7lZ9X5dRYgrzDIpgXEtS8Cwbh3OZ6qvgOSbyEd5M Bd9JCbZuMXuTOeqw/8/J84/avxc4CCgKGT0tmsGRZQWHtRhJT/O0lgj4YUD7vzAC 9sU0qApDwOfmsRCBVNX6VuCG9YTJTUliuE3/UvJcswxY0OM4qxHZjQOtwOXyOG74 uNbAKn5mkZ4qccoxA6ed+0uWRxzrAowr2IXT53npKh6fL7L3fXe25VJdyCvQfgP6 kyIIPEsbBI77Fahn5AmUkBDOKAnF80fk -----END CERTIFICATE-----Generated at Wed Aug 6 14:11:39 2025 by rpki-client