$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft File: l85Wj2RoJWRz-Es4s84D6jVJ64k.mft (raw, json) Hash identifier: ylzB4GE0ZRpWzQ6NYUaik1VaXeAcH+HnP+uZqnz+pNc= Subject key identifier: E8:C7:ED:3C:AC:83:60:EC:61:7C:EE:DF:CA:5D:A4:08:9A:86:3E:AF Authority key identifier: 97:CE:56:8F:64:68:25:64:73:F8:4B:38:B3:CE:03:EA:35:49:EB:89 Certificate issuer: /CN=A91FCABC/serialNumber=97CE568F6468256473F84B38B3CE03EA3549EB89 Certificate serial: 0199 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l85Wj2RoJWRz-Es4s84D6jVJ64k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft Manifest number: 0196 Signing time: Sat 09 Aug 2025 03:45:16 +0000 Manifest this update: Sat 09 Aug 2025 03:45:16 +0000 Manifest next update: Sat 16 Aug 2025 03:45:16 +0000 Files and hashes: 1: l85Wj2RoJWRz-Es4s84D6jVJ64k.crl (hash: McXBTzvlIRIBdSKeQhi1N0/URrdoxhz4KruwoxvY1m0=) 2: 35BBCFB005C111EEA3A8584CC4F9AE02.roa (hash: HMZ69Vk7ZS0Jv78BueT5h2a9dKdT1kZJMuqKYnjLHLY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.crl rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l85Wj2RoJWRz-Es4s84D6jVJ64k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 409 (0x199) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCABC, serialNumber=97CE568F6468256473F84B38B3CE03EA3549EB89 Validity Not Before: Aug 9 03:45:16 2025 GMT Not After : Aug 16 03:45:16 2025 GMT Subject: CN=6896c44c-58f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:41:7f:53:a2:3d:3a:47:26:b9:af:18:7f:59: 72:1e:a4:ee:e1:38:8b:2f:c2:bd:56:1f:19:3b:fe: 3b:1e:a7:7b:34:70:44:aa:94:68:1b:5f:ac:df:c0: 6e:05:c9:6e:b1:80:ec:86:ad:ce:e5:b9:45:33:fa: e3:52:b7:21:7d:f0:62:72:45:45:8a:99:f5:78:13: 3a:3e:18:d2:22:3e:14:ca:a4:e7:eb:70:1d:f8:39: 2f:bc:5a:1a:06:06:ef:a2:66:b7:29:c4:8b:5c:58: 30:ff:6f:a8:24:a5:5b:27:fa:af:d4:ff:f7:c1:c3: 7b:19:28:a8:25:80:24:48:8c:3c:da:19:33:56:4a: a6:97:21:93:b9:16:7b:17:62:9d:f9:cf:13:27:ff: ae:40:b3:98:1a:22:fb:73:e8:ea:33:2f:b7:fc:2d: da:6f:42:3c:e3:cd:fd:87:30:70:19:e7:e3:13:19: 4e:de:28:b4:8d:0a:a6:f7:59:8d:8d:87:46:2b:f4: f0:30:cc:b4:7f:26:39:30:42:a3:f2:84:5e:8e:37: 0b:82:57:6a:c6:2e:f9:10:00:a7:c5:35:ff:dc:05: 42:ac:e0:dc:3f:d8:49:02:12:3f:21:83:ab:88:2e: 4d:82:17:cd:03:85:d9:59:21:40:84:46:77:5e:7e: 2a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:C7:ED:3C:AC:83:60:EC:61:7C:EE:DF:CA:5D:A4:08:9A:86:3E:AF X509v3 Authority Key Identifier: keyid:97:CE:56:8F:64:68:25:64:73:F8:4B:38:B3:CE:03:EA:35:49:EB:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l85Wj2RoJWRz-Es4s84D6jVJ64k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:32:d9:1e:d2:33:8e:68:ab:4d:05:ce:50:b9:bd:b2:eb:76: 04:66:f2:c8:c8:43:a8:32:18:59:0b:04:20:c3:9a:dc:54:a5: 1d:bc:db:b0:5b:e6:7a:88:dd:7b:f9:c7:8d:9a:c4:6f:51:11: 41:a9:98:0f:9e:b8:78:27:44:71:49:b6:2b:35:49:b3:99:11: ce:27:69:2f:78:e2:b7:1e:57:e2:73:74:9a:e4:2d:49:f6:94: 54:db:24:5f:3a:ce:14:89:b3:4d:7b:77:19:a8:5f:a3:79:c6: 32:e5:19:e1:7d:c9:26:72:b4:97:8a:9b:ec:58:2c:f9:50:1b: c4:26:76:8e:ec:79:28:db:02:60:19:1c:94:e9:b3:91:ba:76: a3:a5:21:35:fd:10:cf:12:71:4a:0b:cd:9b:75:20:3a:99:5e: 79:27:80:45:7a:e2:44:73:92:db:b3:79:75:99:db:55:df:98: 15:c2:4d:49:3b:da:bd:b5:0d:0e:38:48:08:72:43:a2:4d:c8: 9d:b0:91:c1:a7:3f:f4:fa:a8:f1:1c:42:61:de:aa:c8:6f:5a: 58:83:de:9a:e3:2c:e6:81:53:26:72:0a:fd:18:9e:e0:ae:48: 06:0a:24:8b:d8:a6:24:20:7c:da:6d:bd:54:f1:55:fb:ee:f7: 5e:48:26:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNBQkMxMTAvBgNVBAUTKDk3Q0U1NjhGNjQ2ODI1NjQ3M0Y4NEIzOEIzQ0UwM0VB MzU0OUVCODkwHhcNMjUwODA5MDM0NTE2WhcNMjUwODE2MDM0NTE2WjAYMRYwFAYD VQQDEw02ODk2YzQ0Yy01OGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArEF/U6I9Okcmua8Yf1lyHqTu4TiLL8K9Vh8ZO/47Hqd7NHBEqpRoG1+s38Bu BclusYDshq3O5blFM/rjUrchffBickVFipn1eBM6PhjSIj4UyqTn63Ad+DkvvFoa Bgbvoma3KcSLXFgw/2+oJKVbJ/qv1P/3wcN7GSioJYAkSIw82hkzVkqmlyGTuRZ7 F2Kd+c8TJ/+uQLOYGiL7c+jqMy+3/C3ab0I84839hzBwGefjExlO3ii0jQqm91mN jYdGK/TwMMy0fyY5MEKj8oRejjcLgldqxi75EACnxTX/3AVCrODcP9hJAhI/IYOr iC5NghfNA4XZWSFAhEZ3Xn4qJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOjH7Tys g2DsYXzu38pdpAiahj6vMB8GA1UdIwQYMBaAFJfOVo9kaCVkc/hLOLPOA+o1SeuJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0FCQy9DNTUxNjQxMjA1 QjkxMUVFQTkxMzBCMzdDNEY5QUUwMi9sODVXajJSb0pXUnotRXM0czg0RDZqVko2 NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2w4NVdqMlJvSldSei1FczRzODRENmpWSjY0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0FCQy9DNTUxNjQxMjA1QjkxMUVFQTkxMzBCMzdDNEY5QUUwMi9sODVXajJSb0pX UnotRXM0czg0RDZqVko2NGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEMtke0jOOaKtNBc5Qub2y63YEZvLIyEOoMhhZCwQgw5rcVKUdvNuw W+Z6iN17+ceNmsRvURFBqZgPnrh4J0RxSbYrNUmzmRHOJ2kveOK3Hlfic3Sa5C1J 9pRU2yRfOs4UibNNe3cZqF+jecYy5RnhfckmcrSXipvsWCz5UBvEJnaO7Hko2wJg GRyU6bORunajpSE1/RDPEnFKC82bdSA6mV55J4BFeuJEc5Lbs3l1mdtV35gVwk1J O9q9tQ0OOEgIckOiTcidsJHBpz/0+qjxHEJh3qrIb1pYg96a4yzmgVMmcgr9GJ7g rkgGCiSL2KYkIHzabb1U8VX77vdeSCaH -----END CERTIFICATE-----Generated at Sun Aug 10 04:17:52 2025 by rpki-client