$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.mft File: grPUpZa7l4hVoVXKr6iyYlMw3o0.mft (raw, json) Hash identifier: +PXfQ4V4RIEV/k8v7vj0hbzMs3Ak6Sp2FO7IbQBETWM= Subject key identifier: 09:D8:33:DC:DE:E1:62:19:D7:C9:D5:93:D6:73:F6:5C:8D:D1:AD:75 Authority key identifier: 82:B3:D4:A5:96:BB:97:88:55:A1:55:CA:AF:A8:B2:62:53:30:DE:8D Certificate issuer: /CN=A91FC42A/serialNumber=82B3D4A596BB978855A155CAAFA8B2625330DE8D Certificate serial: 0D9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grPUpZa7l4hVoVXKr6iyYlMw3o0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.mft Manifest number: 0D98 Signing time: Wed 06 Aug 2025 18:05:21 +0000 Manifest this update: Wed 06 Aug 2025 18:05:21 +0000 Manifest next update: Wed 13 Aug 2025 18:05:21 +0000 Files and hashes: 1: grPUpZa7l4hVoVXKr6iyYlMw3o0.crl (hash: p6nCGEk59i6+VKS5UNTemmFTJzsCDJaATW5Omb5caFA=) 2: E4653316C87211E9ADADA185C4F9AE02.roa (hash: Kl+qHWqwPNXr+jNBmlZ54bsne4TIDTa38/cYe+iBa+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.crl rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grPUpZa7l4hVoVXKr6iyYlMw3o0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 18:05:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3487 (0xd9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC42A, serialNumber=82B3D4A596BB978855A155CAAFA8B2625330DE8D Validity Not Before: Aug 6 18:05:21 2025 GMT Not After : Aug 13 18:05:21 2025 GMT Subject: CN=68939961-755c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ec:df:84:e7:9f:c4:fa:94:1b:7c:7e:7b:74: 29:72:32:dc:f0:d4:93:03:14:c0:e8:bf:97:69:2d: ef:71:59:d6:a7:fc:47:9c:f2:5c:63:3b:27:4b:07: da:04:ad:be:71:2e:9b:d7:3b:09:49:f8:af:c0:38: 43:bd:c8:b1:39:dd:84:1a:93:ab:f5:82:8f:57:28: 0b:e5:6b:6b:89:41:63:e5:61:84:4a:0c:b7:a3:26: 3e:b5:9f:6e:dd:7d:c4:18:53:62:ff:99:e4:84:29: f6:26:29:eb:f3:74:10:39:97:4e:17:31:ab:e2:b3: 1e:d3:d9:e6:9f:2a:e4:9e:3e:b0:39:f3:d4:7e:17: a7:31:1e:6d:41:26:88:9e:88:d8:68:87:01:9e:99: 74:bc:14:36:b1:ff:fc:f9:12:88:03:f9:7f:39:d7: 94:1c:bf:02:b5:6a:86:0b:90:55:c5:09:b0:d9:b6: 63:3b:07:4b:2b:79:eb:14:93:b1:f7:10:a8:55:86: 6f:29:87:39:7d:33:c0:75:a7:65:a7:c9:89:27:16: 51:f5:b5:68:96:8b:1a:07:71:8e:45:b8:ec:63:d8: 72:51:9b:7e:0d:bd:3f:b3:2f:b4:92:9a:16:c3:ab: cd:b0:95:52:ae:e1:18:b7:74:ac:d5:a5:dd:3c:1d: f2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:D8:33:DC:DE:E1:62:19:D7:C9:D5:93:D6:73:F6:5C:8D:D1:AD:75 X509v3 Authority Key Identifier: keyid:82:B3:D4:A5:96:BB:97:88:55:A1:55:CA:AF:A8:B2:62:53:30:DE:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grPUpZa7l4hVoVXKr6iyYlMw3o0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:ec:29:af:a7:c4:33:66:17:83:ec:c8:ae:19:22:5c:60:91: db:f6:a5:0d:bb:f0:54:62:cf:58:a9:22:f0:81:ff:4e:80:1e: ec:df:d1:97:8b:a4:db:d6:ca:5e:7a:e0:5d:5b:e4:b3:d8:c0: 54:75:fe:bf:a8:88:81:31:ae:25:ed:7c:42:0f:9e:5f:e5:80: cd:95:93:20:1a:26:3e:5b:f9:20:5e:69:eb:97:33:24:34:0e: f1:71:26:54:c4:8b:52:e7:cf:09:88:83:7a:b9:57:2f:b0:56: d8:1b:39:02:f1:22:73:49:49:c4:8e:24:ea:d5:c7:4e:da:1f: a8:a3:01:56:4c:7d:da:39:94:aa:55:26:99:da:d4:d0:db:62: ae:8b:21:a2:81:00:62:da:b1:15:93:7d:58:2e:db:20:dc:19: af:d9:48:29:a6:25:c8:bc:4d:1e:3a:ea:e7:8b:b3:30:60:0b: 1a:1b:70:de:44:2d:24:a6:fb:88:0a:a4:71:95:4a:46:01:c8: 2f:bb:2d:3e:48:4d:31:0a:9b:5b:51:91:5c:db:cf:96:5c:f2: 93:6b:d9:a3:af:ab:08:67:89:bd:35:e3:4a:6f:4e:67:4d:ff: 9a:26:b4:e6:87:e5:48:69:24:4b:77:0a:67:ef:4f:fd:e0:00: 7d:2c:55:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM0MkExMTAvBgNVBAUTKDgyQjNENEE1OTZCQjk3ODg1NUExNTVDQUFGQThCMjYy NTMzMERFOEQwHhcNMjUwODA2MTgwNTIxWhcNMjUwODEzMTgwNTIxWjAYMRYwFAYD VQQDEw02ODkzOTk2MS03NTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx+zfhOefxPqUG3x+e3QpcjLc8NSTAxTA6L+XaS3vcVnWp/xHnPJcYzsnSwfa BK2+cS6b1zsJSfivwDhDvcixOd2EGpOr9YKPVygL5WtriUFj5WGESgy3oyY+tZ9u 3X3EGFNi/5nkhCn2Jinr83QQOZdOFzGr4rMe09nmnyrknj6wOfPUfhenMR5tQSaI nojYaIcBnpl0vBQ2sf/8+RKIA/l/OdeUHL8CtWqGC5BVxQmw2bZjOwdLK3nrFJOx 9xCoVYZvKYc5fTPAdadlp8mJJxZR9bVolosaB3GORbjsY9hyUZt+Db0/sy+0kpoW w6vNsJVSruEYt3Ss1aXdPB3y0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAnYM9ze 4WIZ18nVk9Zz9lyN0a11MB8GA1UdIwQYMBaAFIKz1KWWu5eIVaFVyq+osmJTMN6N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzQyQS9GM0I1MkU3MkM4 NzAxMUU5OERFQ0E1ODFDNEY5QUUwMi9nclBVcFphN2w0aFZvVlhLcjZpeVlsTXcz bzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dyUFVwWmE3bDRoVm9WWEtyNml5WWxNdzNvMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzQyQS9GM0I1MkU3MkM4NzAxMUU5OERFQ0E1ODFDNEY5QUUwMi9nclBVcFphN2w0 aFZvVlhLcjZpeVlsTXczbzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCe7Cmvp8QzZheD7MiuGSJcYJHb9qUNu/BUYs9YqSLwgf9OgB7s39GX i6Tb1speeuBdW+Sz2MBUdf6/qIiBMa4l7XxCD55f5YDNlZMgGiY+W/kgXmnrlzMk NA7xcSZUxItS588JiIN6uVcvsFbYGzkC8SJzSUnEjiTq1cdO2h+oowFWTH3aOZSq VSaZ2tTQ22KuiyGigQBi2rEVk31YLtsg3Bmv2UgppiXIvE0eOurni7MwYAsaG3De RC0kpvuICqRxlUpGAcgvuy0+SE0xCptbUZFc28+WXPKTa9mjr6sIZ4m9NeNKb05n Tf+aJrTmh+VIaSRLdwpn70/94AB9LFXz -----END CERTIFICATE-----Generated at Thu Aug 7 05:11:25 2025 by rpki-client