$ rpki-client -vvf rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.mft File: B04WzKCA1UX-9PLYrcuQnw7LIKI.mft (raw, json) Hash identifier: daQ3QXj+6s/+NtUOjY5EEf96UJ77FlOloSnH/MRN7xM= Subject key identifier: E6:33:49:0A:F8:85:B2:C0:40:A8:71:12:06:9E:2F:0C:50:03:D7:35 Authority key identifier: 07:4E:16:CC:A0:80:D5:45:FE:F4:F2:D8:AD:CB:90:9F:0E:CB:20:A2 Certificate issuer: /CN=A91655EF/serialNumber=074E16CCA080D545FEF4F2D8ADCB909F0ECB20A2 Certificate serial: 11E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B04WzKCA1UX-9PLYrcuQnw7LIKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.mft Manifest number: 11CC Signing time: Fri 22 Aug 2025 17:18:56 +0000 Manifest this update: Fri 22 Aug 2025 17:18:56 +0000 Manifest next update: Fri 29 Aug 2025 17:18:56 +0000 Files and hashes: 1: B04WzKCA1UX-9PLYrcuQnw7LIKI.crl (hash: KYE0kSWoJS2JC3tZU1y09t5KtRCrzofnd5xnhg+0SLU=) 2: 70F8E50039AF11EE8486453DC4F9AE02.roa (hash: CQ2YO4KFwTMH/P0kajoe5d8Btg/O5fE6q6xcjIQsWNk=) 3: BA1EA120E6FC11EE96775810C4F9AE02.roa (hash: sB4pmseHL4MX5nc05THnJz70E6W3QfcckHXpmWVSxtQ=) 4: FEDDF63AE6FC11EE8AD61644C4F9AE02.roa (hash: nPDF1Ky8Z4ZJlPWH1PkLPctnsIih8GHSZ5cqXRTU56A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.crl rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B04WzKCA1UX-9PLYrcuQnw7LIKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:18:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4585 (0x11e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91655EF, serialNumber=074E16CCA080D545FEF4F2D8ADCB909F0ECB20A2 Validity Not Before: Aug 22 17:18:56 2025 GMT Not After : Aug 29 17:18:56 2025 GMT Subject: CN=68a8a680-b02b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:da:0f:17:51:6f:e2:11:94:1d:4a:47:8f:c1: bb:95:2f:7e:0f:c0:02:8c:3f:27:ec:0b:2a:6f:dd: 8d:3c:4c:e0:bc:a3:3a:0f:83:2e:f3:fb:10:aa:16: e7:6c:e7:e6:ce:3e:01:1f:a9:55:6e:60:b3:a7:cc: d7:4a:3a:89:6f:73:c2:bd:ea:ff:08:b1:fe:37:53: 94:d5:8f:68:6b:f7:d5:f3:ba:3e:c1:ff:3a:50:3d: 98:d7:c4:74:f8:ca:59:60:7a:52:20:28:db:f0:2b: 81:19:2c:89:f5:67:3d:f8:85:2b:c8:12:eb:26:b8: d4:af:ed:67:50:8d:c8:1c:cb:10:a2:6c:d3:11:9b: 70:99:e5:af:62:35:da:9b:89:30:ce:dc:7d:44:ba: 7e:4b:c8:8b:cd:39:6b:7e:9f:b4:0b:c1:fe:06:33: 89:3f:d4:b2:b3:e8:e7:a6:d3:12:06:f4:e5:16:08: a5:1b:d4:2b:82:b7:a6:8c:b0:1d:d9:fd:7d:ca:3c: fe:d6:5e:aa:0f:fb:4e:46:8f:79:23:da:db:5d:ca: e8:47:be:c5:8d:d5:03:1b:cb:d2:fe:be:92:44:a2: bb:15:2e:f4:38:c1:13:7f:df:e7:f6:b2:64:46:fd: bb:5f:f9:d4:e0:75:4e:84:26:ce:c3:06:ba:5b:8c: bc:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:33:49:0A:F8:85:B2:C0:40:A8:71:12:06:9E:2F:0C:50:03:D7:35 X509v3 Authority Key Identifier: keyid:07:4E:16:CC:A0:80:D5:45:FE:F4:F2:D8:AD:CB:90:9F:0E:CB:20:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B04WzKCA1UX-9PLYrcuQnw7LIKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:13:8d:69:f1:bd:6a:fe:82:f4:1c:67:56:ea:8f:0a:d1:d5: 13:bf:7c:26:35:6a:18:a6:0b:5a:d4:a6:1f:7f:4d:ca:62:26: ad:94:4d:5a:04:89:b6:77:82:61:4d:c2:84:4f:07:ad:81:ab: f2:06:d5:35:5b:1c:fa:23:36:82:5f:91:1e:e9:58:3b:68:80: b0:04:d6:01:8d:0d:9d:02:19:56:b1:7f:01:b7:d1:0f:c8:25: d1:6e:10:2b:df:e0:52:f1:43:4e:82:a5:09:9f:1b:1b:63:b5: 6b:78:83:d7:35:d1:90:12:29:c5:95:a7:54:df:85:b6:04:70: 08:d1:2c:e7:aa:f8:88:a0:66:7b:69:38:6a:ba:6b:a2:24:31: b1:9e:47:81:09:f8:35:ca:bc:85:7c:34:fa:79:3e:86:99:3d: 2d:be:f0:d3:d7:ab:9b:8c:82:0e:1a:d1:3a:e0:8b:f2:c9:75: b2:08:69:06:84:cf:66:a6:19:ef:0f:1d:d4:32:60:a3:1f:d4: 41:68:85:b0:e3:c5:d6:e0:e8:06:89:d5:3a:2a:6d:19:73:f7: fa:f1:3e:ff:7f:39:08:71:f4:22:7e:ad:aa:90:96:76:9b:32: da:53:0f:95:e0:ec:d5:19:18:74:80:4a:45:63:a7:1a:fc:83: f3:8d:50:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU1RUYxMTAvBgNVBAUTKDA3NEUxNkNDQTA4MEQ1NDVGRUY0RjJEOEFEQ0I5MDlG MEVDQjIwQTIwHhcNMjUwODIyMTcxODU2WhcNMjUwODI5MTcxODU2WjAYMRYwFAYD VQQDEw02OGE4YTY4MC1iMDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9doPF1Fv4hGUHUpHj8G7lS9+D8ACjD8n7Asqb92NPEzgvKM6D4Mu8/sQqhbn bOfmzj4BH6lVbmCzp8zXSjqJb3PCver/CLH+N1OU1Y9oa/fV87o+wf86UD2Y18R0 +MpZYHpSICjb8CuBGSyJ9Wc9+IUryBLrJrjUr+1nUI3IHMsQomzTEZtwmeWvYjXa m4kwztx9RLp+S8iLzTlrfp+0C8H+BjOJP9Sys+jnptMSBvTlFgilG9QrgremjLAd 2f19yjz+1l6qD/tORo95I9rbXcroR77FjdUDG8vS/r6SRKK7FS70OMETf9/n9rJk Rv27X/nU4HVOhCbOwwa6W4y8MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOYzSQr4 hbLAQKhxEgaeLwxQA9c1MB8GA1UdIwQYMBaAFAdOFsyggNVF/vTy2K3LkJ8OyyCi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTVFRi82MDc3MjlEMEZB QzExMUU4QkM3NkQ2NzFDNEY5QUUwMi9CMDRXektDQTFVWC05UExZcmN1UW53N0xJ S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0IwNFd6S0NBMVVYLTlQTFlyY3VRbnc3TElLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTVFRi82MDc3MjlEMEZBQzExMUU4QkM3NkQ2NzFDNEY5QUUwMi9CMDRXektDQTFV WC05UExZcmN1UW53N0xJS0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALE41p8b1q/oL0HGdW6o8K0dUTv3wmNWoYpgta1KYff03KYiatlE1a BIm2d4JhTcKETwetgavyBtU1Wxz6IzaCX5Ee6Vg7aICwBNYBjQ2dAhlWsX8Bt9EP yCXRbhAr3+BS8UNOgqUJnxsbY7VreIPXNdGQEinFladU34W2BHAI0SznqviIoGZ7 aThqumuiJDGxnkeBCfg1yryFfDT6eT6GmT0tvvDT16ubjIIOGtE64IvyyXWyCGkG hM9mphnvDx3UMmCjH9RBaIWw48XW4OgGidU6Km0Zc/f68T7/fzkIcfQifq2qkJZ2 mzLaUw+V4OzVGRh0gEpFY6ca/IPzjVCQ -----END CERTIFICATE-----Generated at Sat Aug 23 19:32:16 2025 by rpki-client