$ rpki-client -vvf rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.mft File: grMfodzgxL8vZjl3hqbAjkfGuP4.mft (raw, json) Hash identifier: Ljm2cyWtwpaYSgvH6ypAqq7qqbl7Cq+bLu77JvLLdOE= Subject key identifier: A9:99:C8:E5:91:5F:75:A0:BE:EC:BB:86:5B:B1:B3:70:BE:F4:CD:8F Authority key identifier: 82:B3:1F:A1:DC:E0:C4:BF:2F:66:39:77:86:A6:C0:8E:47:C6:B8:FE Certificate issuer: /CN=A91294F7/serialNumber=82B31FA1DCE0C4BF2F66397786A6C08E47C6B8FE Certificate serial: 0554 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grMfodzgxL8vZjl3hqbAjkfGuP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.mft Manifest number: 054F Signing time: Fri 22 Aug 2025 23:36:40 +0000 Manifest this update: Fri 22 Aug 2025 23:36:39 +0000 Manifest next update: Fri 29 Aug 2025 23:36:39 +0000 Files and hashes: 1: grMfodzgxL8vZjl3hqbAjkfGuP4.crl (hash: lUMT5Y98oMpaTVjiFPXfaOdsZPFoZ72QY7SxMfLXQ4Y=) 2: F7307C08FFCA11EB93268E6DC4F9AE02.roa (hash: 68/9CqYRkzm0ius//S97EiCu+9Aa9Wpy/boYkEQX4yg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.crl rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grMfodzgxL8vZjl3hqbAjkfGuP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1364 (0x554) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91294F7, serialNumber=82B31FA1DCE0C4BF2F66397786A6C08E47C6B8FE Validity Not Before: Aug 22 23:36:39 2025 GMT Not After : Aug 29 23:36:39 2025 GMT Subject: CN=68a8ff07-cfc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4f:0d:0f:cf:62:03:99:90:c0:f9:d3:1b:16: 1c:e9:2c:6c:4a:ea:34:05:8a:08:7c:f3:d7:45:73: 1f:51:93:1c:04:b1:85:25:36:55:84:1d:8e:05:da: 62:64:6d:a2:4a:d0:7a:c3:03:98:c0:f3:c5:5c:db: 13:0f:fe:37:db:ae:98:bd:8b:25:0d:05:85:d0:b1: 01:2d:25:cc:b4:05:cb:45:71:fb:93:74:97:22:8a: 19:18:86:6d:95:ef:ec:7a:67:af:21:2e:36:3e:cd: 13:4b:a0:c9:8d:35:96:f9:72:76:7a:bc:79:ef:4d: 1c:86:99:17:18:9f:ef:a3:c9:28:ce:14:42:6b:10: 3f:ed:69:8b:c2:04:5d:20:57:20:6c:69:1a:8e:8e: 81:3b:c5:c9:78:28:57:a9:38:06:96:91:b2:df:5c: 35:83:31:30:6b:40:36:9f:4d:b3:df:ee:c7:97:3e: f5:d9:12:c7:b7:71:83:2c:ab:a6:a0:fc:4c:5b:e3: 75:df:2e:9f:2c:2a:4d:d9:dc:76:e0:50:1f:19:d3: af:cd:df:e3:40:09:15:0d:cf:3e:7a:57:c6:09:1f: 1d:1e:d4:58:e6:5b:59:7b:d8:e0:3d:e3:f2:7e:d1: 2f:2b:39:41:0d:46:dd:79:3c:48:ef:ac:97:08:9a: 06:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:99:C8:E5:91:5F:75:A0:BE:EC:BB:86:5B:B1:B3:70:BE:F4:CD:8F X509v3 Authority Key Identifier: keyid:82:B3:1F:A1:DC:E0:C4:BF:2F:66:39:77:86:A6:C0:8E:47:C6:B8:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grMfodzgxL8vZjl3hqbAjkfGuP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:f8:c4:21:26:4c:38:fd:ed:2e:db:9c:c4:a6:42:38:97:9e: d9:a3:65:98:d0:4b:32:8b:db:ea:67:9b:c6:81:b9:f1:3f:74: 3e:81:33:91:31:13:e3:4d:88:ce:38:3a:01:45:2b:2a:2b:4f: 50:a9:03:f6:5a:27:92:db:a9:93:07:79:a2:6a:0e:93:af:db: d3:b9:6c:c8:95:e1:d8:6f:9d:3a:6d:f1:6c:66:0e:b9:a8:5e: 8c:28:14:5a:80:0a:35:a8:4c:c2:98:91:51:ae:74:17:6b:4d: 6c:ad:64:d1:4b:a9:38:72:6d:64:fd:3b:02:56:9f:b5:b3:dc: 53:5e:38:89:5b:f3:f4:0e:9a:0c:14:c2:2e:85:0c:f1:48:74: e4:f2:51:6b:22:53:5c:5a:77:f9:b9:2b:40:bd:1c:f0:ae:5d: bd:8e:ce:1c:bb:db:e3:d9:bd:f8:7c:69:f4:7c:96:06:fa:b7: 0e:b8:9c:8d:9a:02:c4:0b:f8:37:d9:07:96:90:71:b2:e9:cb: e7:82:40:dd:4d:ac:88:26:5a:bc:63:fb:58:0f:59:5c:17:e4: 0e:f0:c9:01:df:25:24:fb:bd:21:f8:4c:7e:e9:09:aa:3a:a4: dd:9f:57:21:49:2b:1b:aa:84:04:e7:f6:f1:03:65:b1:6b:26: cb:96:5b:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk0RjcxMTAvBgNVBAUTKDgyQjMxRkExRENFMEM0QkYyRjY2Mzk3Nzg2QTZDMDhF NDdDNkI4RkUwHhcNMjUwODIyMjMzNjM5WhcNMjUwODI5MjMzNjM5WjAYMRYwFAYD VQQDEw02OGE4ZmYwNy1jZmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyk8ND89iA5mQwPnTGxYc6SxsSuo0BYoIfPPXRXMfUZMcBLGFJTZVhB2OBdpi ZG2iStB6wwOYwPPFXNsTD/43266YvYslDQWF0LEBLSXMtAXLRXH7k3SXIooZGIZt le/semevIS42Ps0TS6DJjTWW+XJ2erx5700chpkXGJ/vo8kozhRCaxA/7WmLwgRd IFcgbGkajo6BO8XJeChXqTgGlpGy31w1gzEwa0A2n02z3+7Hlz712RLHt3GDLKum oPxMW+N13y6fLCpN2dx24FAfGdOvzd/jQAkVDc8+elfGCR8dHtRY5ltZe9jgPePy ftEvKzlBDUbdeTxI76yXCJoGYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKmZyOWR X3Wgvuy7hluxs3C+9M2PMB8GA1UdIwQYMBaAFIKzH6Hc4MS/L2Y5d4amwI5Hxrj+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTRGNy81OUZGMDVBQUZG QzgxMUVCQThBNEEwNTdDNEY5QUUwMi9nck1mb2R6Z3hMOHZaamwzaHFiQWprZkd1 UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dyTWZvZHpneEw4dlpqbDNocWJBamtmR3VQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTRGNy81OUZGMDVBQUZGQzgxMUVCQThBNEEwNTdDNEY5QUUwMi9nck1mb2R6Z3hM OHZaamwzaHFiQWprZkd1UDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBt+MQhJkw4/e0u25zEpkI4l57Zo2WY0Esyi9vqZ5vGgbnxP3Q+gTOR MRPjTYjOODoBRSsqK09QqQP2WieS26mTB3miag6Tr9vTuWzIleHYb506bfFsZg65 qF6MKBRagAo1qEzCmJFRrnQXa01srWTRS6k4cm1k/TsCVp+1s9xTXjiJW/P0DpoM FMIuhQzxSHTk8lFrIlNcWnf5uStAvRzwrl29js4cu9vj2b34fGn0fJYG+rcOuJyN mgLEC/g32QeWkHGy6cvngkDdTayIJlq8Y/tYD1lcF+QO8MkB3yUk+70h+Ex+6Qmq OqTdn1chSSsbqoQE5/bxA2WxaybLllsP -----END CERTIFICATE-----Generated at Sat Aug 23 18:00:27 2025 by rpki-client