$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft File: aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft (raw, json) Hash identifier: 6i5fI/av8y+xn0u4hpfRWhifgOKdGEmk/AZ6ca6sq7c= Subject key identifier: F1:12:01:23:40:EC:EE:14:FF:FA:B8:34:12:C7:5F:66:2F:A9:F0:70 Authority key identifier: 69:98:D9:B5:32:7B:BF:89:4E:D5:61:97:C4:7E:C8:96:FA:E5:9E:34 Certificate issuer: /CN=A91FCF44/serialNumber=6998D9B5327BBF894ED56197C47EC896FAE59E34 Certificate serial: D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft Manifest number: C8 Signing time: Sat 09 Aug 2025 06:25:33 +0000 Manifest this update: Sat 09 Aug 2025 06:25:32 +0000 Manifest next update: Sat 16 Aug 2025 06:25:32 +0000 Files and hashes: 1: aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.crl (hash: YPoUyxZqS4HcTfePzjxBDmPgM+gf51x+k2UHfOsagEw=) 2: B2A0074EAD4F11EF93ECF282C4F9AE02.roa (hash: Vji2bwj5pG0AmszlyVBCPumUcxu21MvYnK8Tx2Nah1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.crl rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCF44, serialNumber=6998D9B5327BBF894ED56197C47EC896FAE59E34 Validity Not Before: Aug 9 06:25:32 2025 GMT Not After : Aug 16 06:25:32 2025 GMT Subject: CN=6896e9dc-6d26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:cb:ee:a4:c5:d3:f0:4c:c1:fd:30:bb:9d:b3: 42:14:e0:f3:bd:3f:61:96:6f:92:86:d9:96:eb:bd: 54:2b:ea:2c:72:2f:6b:00:03:f5:8c:9b:1c:57:18: 90:79:dd:2e:c1:f0:b7:54:79:e8:f3:ac:72:b1:d8: ef:e8:38:90:23:78:68:0d:f2:dc:e3:8c:b6:1c:fc: 20:a1:6f:bc:c5:da:bb:1a:bc:47:82:d2:60:db:c2: 19:5e:89:1c:74:f5:30:17:1c:b9:35:a4:50:d8:43: 19:71:e2:65:a7:c4:eb:ad:1b:16:cc:6c:e8:a6:60: 0b:8e:6a:2e:51:75:c9:52:f7:e2:c1:c5:b7:4a:38: 74:c2:42:d3:01:ae:ce:a2:5b:3c:63:2b:d9:2f:9d: 9a:ca:9d:bf:82:8c:f5:f9:01:39:0c:0f:97:38:7c: b2:70:57:91:aa:1b:de:3a:e9:63:6d:07:61:0f:34: 13:94:5c:16:07:18:ec:22:59:6d:4e:d7:10:52:4c: e9:84:94:e5:9d:e3:f4:dc:4d:83:1f:a9:48:50:6b: 28:c1:e5:92:cf:a9:5a:4b:f1:69:92:21:96:b6:9d: f1:49:ac:88:b6:0c:75:04:f1:60:db:01:cd:56:d7: fd:8e:39:ff:7f:63:24:bd:48:0b:9b:d5:6e:74:94: c3:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:12:01:23:40:EC:EE:14:FF:FA:B8:34:12:C7:5F:66:2F:A9:F0:70 X509v3 Authority Key Identifier: keyid:69:98:D9:B5:32:7B:BF:89:4E:D5:61:97:C4:7E:C8:96:FA:E5:9E:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:d4:86:77:fb:01:1d:45:95:88:6c:e5:b4:22:af:e6:03:95: d0:c9:e2:5b:80:98:4f:e5:38:1d:3e:e7:7c:1d:8a:fd:32:96: 3d:8f:24:ec:79:70:a7:5a:38:fa:f8:a0:5d:63:f0:32:4f:c0: 4e:9c:57:ea:f3:db:21:dc:8d:98:c8:64:2b:63:df:a7:51:8b: ad:c1:c3:18:c7:d3:79:e5:dc:d3:28:b5:cb:00:4e:33:c0:b7: 25:ac:8b:58:2e:eb:e0:9b:9d:1e:74:a3:2d:7f:69:45:e0:fb: 76:d5:f8:0f:f3:d3:d1:d7:51:fd:ba:e5:70:b6:50:a2:d9:1a: 5e:d7:0f:69:53:c8:2e:c8:ec:02:59:dd:4c:8f:6f:6d:99:37: 36:b9:74:1e:ea:ff:ef:5a:9e:84:7a:2e:94:0c:98:e7:60:e8: 97:1e:06:2f:c5:8e:c5:74:0b:17:8a:db:2b:68:f0:ef:1f:60: 9f:4f:29:3b:9c:f6:8d:b0:cf:9c:67:ef:a5:b0:2f:7d:01:e1: bf:70:97:11:d4:1c:cf:0e:5f:26:99:dd:34:87:25:12:8c:8d: 02:4c:11:34:d0:8b:ca:c2:9e:b0:62:cd:ff:c9:4c:d1:23:18: 44:e7:0a:11:6f:2e:2d:c9:58:7e:97:60:c4:0c:5e:83:42:19: 44:08:d0:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNGNDQxMTAvBgNVBAUTKDY5OThEOUI1MzI3QkJGODk0RUQ1NjE5N0M0N0VDODk2 RkFFNTlFMzQwHhcNMjUwODA5MDYyNTMyWhcNMjUwODE2MDYyNTMyWjAYMRYwFAYD VQQDEw02ODk2ZTlkYy02ZDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv8vupMXT8EzB/TC7nbNCFODzvT9hlm+ShtmW671UK+osci9rAAP1jJscVxiQ ed0uwfC3VHno86xysdjv6DiQI3hoDfLc44y2HPwgoW+8xdq7GrxHgtJg28IZXokc dPUwFxy5NaRQ2EMZceJlp8TrrRsWzGzopmALjmouUXXJUvfiwcW3Sjh0wkLTAa7O ols8YyvZL52ayp2/goz1+QE5DA+XOHyycFeRqhveOuljbQdhDzQTlFwWBxjsIllt TtcQUkzphJTlneP03E2DH6lIUGsoweWSz6laS/FpkiGWtp3xSayItgx1BPFg2wHN Vtf9jjn/f2MkvUgLm9VudJTDLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPESASNA 7O4U//q4NBLHX2YvqfBwMB8GA1UdIwQYMBaAFGmY2bUye7+JTtVhl8R+yJb65Z40 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0Y0NC85NDExMDYwNDYw MkMxMUVGOTdENzNDNUZDNEY5QUUwMi9hWmpadFRKN3Y0bE8xV0dYeEg3SWx2cmxu alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Faalp0VEo3djRsTzFXR1h4SDdJbHZybG5qUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0Y0NC85NDExMDYwNDYwMkMxMUVGOTdENzNDNUZDNEY5QUUwMi9hWmpadFRKN3Y0 bE8xV0dYeEg3SWx2cmxualEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBX1IZ3+wEdRZWIbOW0Iq/mA5XQyeJbgJhP5TgdPud8HYr9MpY9jyTs eXCnWjj6+KBdY/AyT8BOnFfq89sh3I2YyGQrY9+nUYutwcMYx9N55dzTKLXLAE4z wLclrItYLuvgm50edKMtf2lF4Pt21fgP89PR11H9uuVwtlCi2Rpe1w9pU8guyOwC Wd1Mj29tmTc2uXQe6v/vWp6Eei6UDJjnYOiXHgYvxY7FdAsXitsraPDvH2CfTyk7 nPaNsM+cZ++lsC99AeG/cJcR1BzPDl8mmd00hyUSjI0CTBE00IvKwp6wYs3/yUzR IxhE5woRby4tyVh+l2DEDF6DQhlECNAY -----END CERTIFICATE-----Generated at Mon Aug 11 04:10:14 2025 by rpki-client