$ rpki-client -vvf rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft File: FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft (raw, json) Hash identifier: zzp+VddfyOWpkwI/vw0AEmpN6fOTQvjg8BY+Z5P5/+U= Subject key identifier: 0B:F2:20:F1:3E:40:65:24:0B:4D:24:06:B9:6B:0D:FA:1F:0A:C0:66 Authority key identifier: 16:84:15:C0:C1:34:01:C0:D7:71:57:1D:F8:6F:8C:D5:F8:50:3B:14 Certificate issuer: /CN=A91314BC/serialNumber=168415C0C13401C0D771571DF86F8CD5F8503B14 Certificate serial: 0220 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft Manifest number: 0213 Signing time: Sat 23 Aug 2025 02:18:57 +0000 Manifest this update: Sat 23 Aug 2025 02:18:56 +0000 Manifest next update: Sat 30 Aug 2025 02:18:56 +0000 Files and hashes: 1: FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl (hash: Mx9Etwt/rALUJ1GMQJKmVahqJxkWW2Zj5vfWDCdKKpo=) 2: 1083BE64499711EE86AE452DC4F9AE02.roa (hash: slu67F8KWLFn/RxCNvxBYhj1V1Mx5+noN3O9kww2W8Y=) 3: 7DD0E8845A3211EDB637E665C4F9AE02.roa (hash: wtWT4PZFgcn64rOhtqw01Kyp1pjejdqieeode8aJT6o=) 4: 7D0DFE0A5A3211EDB637E665C4F9AE02.roa (hash: K4zq7amWLtDyT+UqSOR4oOsSasN49MRy2b9Pfvweln4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:18:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 544 (0x220) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91314BC, serialNumber=168415C0C13401C0D771571DF86F8CD5F8503B14 Validity Not Before: Aug 23 02:18:56 2025 GMT Not After : Aug 30 02:18:56 2025 GMT Subject: CN=68a92511-f42f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:07:c2:95:82:9e:88:9e:b4:9a:b1:c5:1f:2c: 82:5a:84:73:39:95:58:19:c2:8c:6f:fc:00:5a:00: b2:b7:ac:fa:7a:18:7f:67:06:9a:f6:dd:59:3e:cd: 23:9b:42:c7:74:cb:40:fe:a3:a3:18:1a:ee:12:d3: 19:87:52:fb:81:7e:94:0f:3a:33:92:ad:f3:29:67: bf:96:18:3b:89:eb:3a:24:09:ca:32:e7:2a:64:98: 6c:37:14:58:04:c7:bb:18:4a:21:9e:13:05:76:aa: e3:17:94:c1:c1:9a:ad:ef:a1:8e:e0:bb:4b:96:a0: 35:35:da:ec:85:3e:8a:6b:13:73:b0:39:b5:cc:ac: cf:8f:58:30:2a:17:69:b6:34:88:d9:7a:84:84:69: 4d:06:ed:de:84:df:48:21:1b:73:50:0a:8e:f4:3e: 32:84:c5:62:4a:4e:9b:18:73:70:58:a3:78:4a:bd: 6f:76:3b:cd:ef:58:04:80:3b:a9:e5:ac:db:16:eb: f6:fa:73:7e:3f:7d:0d:62:97:f6:b2:f7:13:bb:a5: 58:c4:16:ba:9e:64:57:10:bd:d6:ee:c1:73:09:54: 6e:8a:97:1e:fe:b5:dd:dc:02:ca:5d:f7:b8:be:ac: 4f:08:3d:76:0e:65:2a:16:c4:d9:8d:10:5f:30:f5: e8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:F2:20:F1:3E:40:65:24:0B:4D:24:06:B9:6B:0D:FA:1F:0A:C0:66 X509v3 Authority Key Identifier: keyid:16:84:15:C0:C1:34:01:C0:D7:71:57:1D:F8:6F:8C:D5:F8:50:3B:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:4a:a7:2c:d3:35:60:2e:6d:38:3a:72:81:73:27:5c:91:19: 9e:b9:74:ef:f1:b8:e2:70:83:b7:51:34:77:61:69:6a:90:6c: 90:e7:fb:9a:41:fd:21:d8:0e:ac:5e:9b:0b:62:a9:51:60:e3: f1:7a:24:46:c5:e3:3c:36:4a:be:9d:aa:62:c1:3a:d0:4d:f6: 5e:23:36:8f:99:b3:0e:37:6d:f2:5a:15:8f:0d:d5:3d:2a:83: 68:e0:66:67:75:02:6c:1c:23:93:01:0a:bd:65:a5:6f:1c:78: 75:d9:0d:23:94:38:a7:6b:b6:67:df:d7:2a:28:54:b4:5c:c8: 68:65:de:bb:a5:19:55:cd:dc:22:1a:80:62:a8:66:ed:cf:94: 8d:3e:8e:cb:f8:7b:0c:94:b0:a3:5f:03:8e:9b:ba:a8:60:d2: 05:a5:44:fd:b0:8a:ea:cd:90:33:e0:a4:35:4d:c4:30:ed:4c: 96:70:ef:a5:4c:80:e4:44:a3:ac:1b:a2:9a:49:b9:1e:9b:f9: 59:98:a5:32:f2:ed:83:85:43:51:f3:fb:7c:f4:72:05:c0:80: 8f:cb:86:b2:b7:e7:81:52:61:d2:e4:fc:e7:ed:98:5b:5c:ae: 53:a7:14:1a:f6:d9:67:c7:bb:8c:2b:79:f0:66:ff:44:55:1c: 9f:18:76:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE0QkMxMTAvBgNVBAUTKDE2ODQxNUMwQzEzNDAxQzBENzcxNTcxREY4NkY4Q0Q1 Rjg1MDNCMTQwHhcNMjUwODIzMDIxODU2WhcNMjUwODMwMDIxODU2WjAYMRYwFAYD VQQDEw02OGE5MjUxMS1mNDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3QfClYKeiJ60mrHFHyyCWoRzOZVYGcKMb/wAWgCyt6z6ehh/Zwaa9t1ZPs0j m0LHdMtA/qOjGBruEtMZh1L7gX6UDzozkq3zKWe/lhg7ies6JAnKMucqZJhsNxRY BMe7GEohnhMFdqrjF5TBwZqt76GO4LtLlqA1NdrshT6KaxNzsDm1zKzPj1gwKhdp tjSI2XqEhGlNBu3ehN9IIRtzUAqO9D4yhMViSk6bGHNwWKN4Sr1vdjvN71gEgDup 5azbFuv2+nN+P30NYpf2svcTu6VYxBa6nmRXEL3W7sFzCVRuipce/rXd3ALKXfe4 vqxPCD12DmUqFsTZjRBfMPXoHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAvyIPE+ QGUkC00kBrlrDfofCsBmMB8GA1UdIwQYMBaAFBaEFcDBNAHA13FXHfhvjNX4UDsU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTRCQy83RkQwMTY2QzVB MkYxMUVEQTE5RTVFNjFDNEY5QUUwMi9Gb1FWd01FMEFjRFhjVmNkLUctTTFmaFFP eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZvUVZ3TUUwQWNEWGNWY2QtRy1NMWZoUU94US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTRCQy83RkQwMTY2QzVBMkYxMUVEQTE5RTVFNjFDNEY5QUUwMi9Gb1FWd01FMEFj RFhjVmNkLUctTTFmaFFPeFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQSqcs0zVgLm04OnKBcydckRmeuXTv8bjicIO3UTR3YWlqkGyQ5/ua Qf0h2A6sXpsLYqlRYOPxeiRGxeM8Nkq+napiwTrQTfZeIzaPmbMON23yWhWPDdU9 KoNo4GZndQJsHCOTAQq9ZaVvHHh12Q0jlDina7Zn39cqKFS0XMhoZd67pRlVzdwi GoBiqGbtz5SNPo7L+HsMlLCjXwOOm7qoYNIFpUT9sIrqzZAz4KQ1TcQw7UyWcO+l TIDkRKOsG6KaSbkem/lZmKUy8u2DhUNR8/t89HIFwICPy4ayt+eBUmHS5Pzn7Zhb XK5TpxQa9tlnx7uMK3nwZv9EVRyfGHZo -----END CERTIFICATE-----Generated at Sun Aug 24 03:58:35 2025 by rpki-client