$ rpki-client -vvf rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft File: -L04pMnwxPpzvw2Q_wzKgC2_1tw.mft (raw, json) Hash identifier: eB3csgIwxJpF6ZCsglgzjZIbMvYMiUhDrcQl7wMv8Ic= Subject key identifier: 84:0F:67:13:EA:B5:7A:BE:98:47:3A:2E:66:05:9E:AB:E2:51:9E:E7 Authority key identifier: F8:BD:38:A4:C9:F0:C4:FA:73:BF:0D:90:FF:0C:CA:80:2D:BF:D6:DC Certificate issuer: /CN=A91407B7/serialNumber=F8BD38A4C9F0C4FA73BF0D90FF0CCA802DBFD6DC Certificate serial: 0812 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L04pMnwxPpzvw2Q_wzKgC2_1tw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft Manifest number: 0803 Signing time: Fri 22 Aug 2025 21:02:51 +0000 Manifest this update: Fri 22 Aug 2025 21:02:50 +0000 Manifest next update: Fri 29 Aug 2025 21:02:50 +0000 Files and hashes: 1: -L04pMnwxPpzvw2Q_wzKgC2_1tw.crl (hash: OPx2npUnDBA4gUaTKiPKq+dTO9WzfLMshkfM6B13wmI=) 2: 26833348954511EFA5D9B90FC4F9AE02.roa (hash: CyHrVj1UIxTmkHUnWq5JYlTSppmsSZAZAIYgcE9IyY4=) 3: 4878EA2E954511EF87341210C4F9AE02.roa (hash: 3Hi3qHebz75olBYvl7sFul5/x4z+usSMAu2fmKYpx6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.crl rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L04pMnwxPpzvw2Q_wzKgC2_1tw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2066 (0x812) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91407B7, serialNumber=F8BD38A4C9F0C4FA73BF0D90FF0CCA802DBFD6DC Validity Not Before: Aug 22 21:02:50 2025 GMT Not After : Aug 29 21:02:50 2025 GMT Subject: CN=68a8dafa-d053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:37:3f:89:41:b6:ac:d3:d9:cb:34:22:b0:1f: af:9d:44:ea:6f:24:f3:c5:bb:5f:69:5f:5f:68:24: 1c:6b:0a:c9:22:7a:82:8b:b2:48:27:28:2d:1c:cc: f5:be:2d:42:27:11:7b:71:9f:06:37:70:76:ad:5f: 99:2e:18:7f:e6:94:2c:2c:47:53:36:11:67:7b:71: 03:58:5a:0a:e8:cb:57:50:ac:28:d8:47:a0:b9:e2: 04:af:bc:03:8c:72:7e:62:93:34:47:55:b0:96:28: af:7d:8f:1f:09:03:75:fa:37:91:54:f3:6e:22:7d: d6:22:8e:76:c3:a0:4f:90:10:fd:5d:19:11:dc:86: 20:3c:5e:06:c4:f5:d5:ec:67:1c:37:93:17:8f:81: fe:bb:ce:a2:b3:1b:d3:72:b4:6c:45:56:e5:c3:22: 96:0a:57:c0:50:fa:4b:84:16:7f:65:a1:61:22:9a: 72:37:86:2f:a6:6c:69:14:ac:05:f7:aa:4d:67:3f: 37:3f:9b:60:f8:f4:30:7d:7e:0b:56:b5:a7:a0:2a: 0f:d6:26:b5:03:5b:3b:48:e2:cb:4d:ed:d2:c6:42: 33:67:f6:97:2c:12:6d:04:f6:3d:71:a2:61:b5:d5: f9:b4:3f:98:f2:72:43:b9:8a:09:ad:c2:23:d2:b1: 40:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:0F:67:13:EA:B5:7A:BE:98:47:3A:2E:66:05:9E:AB:E2:51:9E:E7 X509v3 Authority Key Identifier: keyid:F8:BD:38:A4:C9:F0:C4:FA:73:BF:0D:90:FF:0C:CA:80:2D:BF:D6:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L04pMnwxPpzvw2Q_wzKgC2_1tw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:bc:d8:cc:38:eb:a6:4b:84:f5:78:50:7e:fc:7c:eb:d7:1e: a5:41:00:69:5b:bb:35:2d:98:7d:44:87:99:79:66:6d:3f:60: ff:e2:f9:57:41:55:74:52:b8:c6:0a:cf:f1:4a:7b:9a:1f:3f: 99:2f:55:15:24:e3:91:89:4a:28:de:b6:f0:af:43:b2:08:21: 27:35:d1:ac:58:e5:8a:1e:3e:fa:22:23:df:fd:50:8c:b2:b6: c3:f5:df:91:7d:b0:c4:94:7d:2f:b4:fb:f7:7f:59:05:2a:ec: af:1d:03:a0:d0:dd:3f:f9:4c:c4:6f:65:13:d1:5e:b8:20:3d: 5e:e5:8f:38:a6:f6:a6:3b:81:22:16:b9:28:27:72:4e:b7:3f: 05:12:39:78:7a:1c:c8:ca:a2:d0:1f:db:9e:54:3c:a6:7d:c3: 17:1d:54:f8:44:ff:ff:cc:37:a8:83:d6:0c:98:7f:f6:2e:fa: 4d:7e:ad:0d:c9:76:6a:99:01:7a:07:25:5f:d4:0a:42:ae:f3: 77:32:d2:f4:cd:cc:0a:4d:35:b2:fc:64:70:9c:49:33:80:61: a0:0c:cd:26:1c:29:11:6a:41:17:0f:e6:38:5b:b2:c9:df:c7: 6e:e6:09:0c:22:9c:56:da:5c:49:83:33:96:73:f3:04:29:4a: 4d:f4:91:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA3QjcxMTAvBgNVBAUTKEY4QkQzOEE0QzlGMEM0RkE3M0JGMEQ5MEZGMENDQTgw MkRCRkQ2REMwHhcNMjUwODIyMjEwMjUwWhcNMjUwODI5MjEwMjUwWjAYMRYwFAYD VQQDEw02OGE4ZGFmYS1kMDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyTc/iUG2rNPZyzQisB+vnUTqbyTzxbtfaV9faCQcawrJInqCi7JIJygtHMz1 vi1CJxF7cZ8GN3B2rV+ZLhh/5pQsLEdTNhFne3EDWFoK6MtXUKwo2EegueIEr7wD jHJ+YpM0R1WwliivfY8fCQN1+jeRVPNuIn3WIo52w6BPkBD9XRkR3IYgPF4GxPXV 7GccN5MXj4H+u86isxvTcrRsRVblwyKWClfAUPpLhBZ/ZaFhIppyN4YvpmxpFKwF 96pNZz83P5tg+PQwfX4LVrWnoCoP1ia1A1s7SOLLTe3SxkIzZ/aXLBJtBPY9caJh tdX5tD+Y8nJDuYoJrcIj0rFAgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIQPZxPq tXq+mEc6LmYFnqviUZ7nMB8GA1UdIwQYMBaAFPi9OKTJ8MT6c78NkP8MyoAtv9bc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDdCNy9CRDZGRTg1MEYx NzUxMUVBQjU2QjAwNENDNEY5QUUwMi8tTDA0cE1ud3hQcHp2dzJRX3d6S2dDMl8x dHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1MMDRwTW53eFBwenZ3MlFfd3pLZ0MyXzF0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDdCNy9CRDZGRTg1MEYxNzUxMUVBQjU2QjAwNENDNEY5QUUwMi8tTDA0cE1ud3hQ cHp2dzJRX3d6S2dDMl8xdHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8vNjMOOumS4T1eFB+/Hzr1x6lQQBpW7s1LZh9RIeZeWZtP2D/4vlX QVV0UrjGCs/xSnuaHz+ZL1UVJOORiUoo3rbwr0OyCCEnNdGsWOWKHj76IiPf/VCM srbD9d+RfbDElH0vtPv3f1kFKuyvHQOg0N0/+UzEb2UT0V64ID1e5Y84pvamO4Ei FrkoJ3JOtz8FEjl4ehzIyqLQH9ueVDymfcMXHVT4RP//zDeog9YMmH/2LvpNfq0N yXZqmQF6ByVf1ApCrvN3MtL0zcwKTTWy/GRwnEkzgGGgDM0mHCkRakEXD+Y4W7LJ 38du5gkMIpxW2lxJgzOWc/MEKUpN9JG2 -----END CERTIFICATE-----Generated at Sun Aug 24 00:13:42 2025 by rpki-client