$ rpki-client -vvf rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.mft File: _f0WbMUdnjq3SWQHS25klGdOL24.mft (raw, json) Hash identifier: aBZCkkZsXZUGTzk/tk0qGGXrVwdnEkpT/cLVPI48s+c= Subject key identifier: FD:8B:90:23:C2:BA:8C:6E:B2:E4:D3:14:07:A4:8C:89:D4:6D:32:81 Authority key identifier: FD:FD:16:6C:C5:1D:9E:3A:B7:49:64:07:4B:6E:64:94:67:4E:2F:6E Certificate issuer: /CN=A91884F8/serialNumber=FDFD166CC51D9E3AB74964074B6E6494674E2F6E Certificate serial: 1ED4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_f0WbMUdnjq3SWQHS25klGdOL24.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.mft Manifest number: 1ECA Signing time: Fri 22 Aug 2025 16:05:31 +0000 Manifest this update: Fri 22 Aug 2025 16:05:31 +0000 Manifest next update: Fri 29 Aug 2025 16:05:31 +0000 Files and hashes: 1: _f0WbMUdnjq3SWQHS25klGdOL24.crl (hash: /TVbKo4k1g7d0s3NxhGxrkh237KFOL79Tg6HBwRRzoY=) 2: 888B4AC26B3611E6A149F871C4F9AE02.roa (hash: JNpFgM+KWXtVAKMLIECfprcazoPzZ95joJw//lWOa/c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.crl rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_f0WbMUdnjq3SWQHS25klGdOL24.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:05:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7892 (0x1ed4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91884F8, serialNumber=FDFD166CC51D9E3AB74964074B6E6494674E2F6E Validity Not Before: Aug 22 16:05:31 2025 GMT Not After : Aug 29 16:05:31 2025 GMT Subject: CN=68a8954b-e0b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:11:00:b1:8a:e2:17:17:26:18:b4:31:a8:34: 78:94:47:f3:f5:5d:e9:7d:aa:c2:3a:c6:fd:e2:0f: 3d:13:d1:e5:5f:3d:96:ca:65:71:de:88:60:69:c4: 47:12:e8:d2:23:b6:aa:58:37:ba:8a:1f:64:b6:20: 23:70:ec:73:07:ec:fe:eb:e0:ad:a0:df:1c:f9:54: 32:73:5b:b9:01:f9:13:67:40:a2:26:59:6e:8f:74: c3:e1:90:7f:c1:38:b7:57:47:d6:57:96:eb:ee:10: 7b:a4:52:b2:b2:18:cb:06:c8:be:36:45:b2:bd:d2: 09:19:75:c9:59:c0:ef:f6:86:c4:f4:2c:8d:f3:ab: 0c:f2:0d:32:b9:9c:83:7c:ae:91:9f:b4:27:ac:0a: b0:cb:9a:61:7d:51:a8:d6:15:98:19:f6:22:ab:a4: 82:85:88:77:18:a0:e9:dd:f7:5b:15:c3:89:32:d8: d2:c8:87:49:52:d5:56:fd:a1:a7:7c:dd:9e:9f:28: 4f:62:c5:c3:89:39:fc:b2:91:21:91:bf:1a:d1:6a: 15:30:71:f7:a5:ba:f0:f0:bb:ca:4c:df:17:aa:c1: 1a:fe:45:59:bc:23:ed:62:d1:55:3c:ab:e5:12:6b: da:c0:1e:47:34:ea:0e:5e:fb:4e:d8:4d:3d:37:fb: ed:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:8B:90:23:C2:BA:8C:6E:B2:E4:D3:14:07:A4:8C:89:D4:6D:32:81 X509v3 Authority Key Identifier: keyid:FD:FD:16:6C:C5:1D:9E:3A:B7:49:64:07:4B:6E:64:94:67:4E:2F:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_f0WbMUdnjq3SWQHS25klGdOL24.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:65:98:08:3a:15:6f:64:58:25:bc:bd:7f:3e:fd:2f:74:cd: 40:b1:ba:08:a9:f2:cf:f2:6b:ac:e5:d8:5e:65:85:fa:b2:f4: c7:a1:b8:30:27:6c:15:4a:d7:c5:40:d0:3a:2f:d2:be:15:05: 27:3a:58:70:9a:5c:33:19:23:3a:06:8b:e4:97:6a:0c:cc:b1: 59:04:c7:58:3f:95:e1:44:9e:e2:88:25:3a:fe:51:86:5c:1a: 34:c5:38:3e:cb:7a:4a:06:45:e9:e7:fe:3b:47:02:82:4d:f9: 8c:c5:58:b8:c5:25:0b:f3:0b:08:a9:98:30:cf:87:8d:04:a6: 1f:6c:d6:c6:c3:16:17:cb:9e:17:b3:83:16:00:5d:e2:13:ac: 98:2a:16:85:bd:76:5b:1a:2d:44:99:ac:23:12:d9:71:e1:79: b8:ec:30:e0:9f:f3:a7:b7:e4:a1:c5:58:5b:59:dc:85:b5:31: 94:45:d2:4e:27:f8:1d:ab:84:31:72:c4:d4:60:2c:c8:fa:ee: 22:6e:6b:16:84:11:51:f6:36:07:95:ed:13:6d:ad:8d:c4:21: 3d:9f:d4:aa:2b:04:75:85:b7:0e:23:57:6d:8b:26:b2:ec:3b: 51:ec:b4:c7:24:b9:ba:5c:c6:f0:8f:46:e9:1b:3e:74:17:e4: 69:7f:10:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHtQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg0RjgxMTAvBgNVBAUTKEZERkQxNjZDQzUxRDlFM0FCNzQ5NjQwNzRCNkU2NDk0 Njc0RTJGNkUwHhcNMjUwODIyMTYwNTMxWhcNMjUwODI5MTYwNTMxWjAYMRYwFAYD VQQDEw02OGE4OTU0Yi1lMGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5xEAsYriFxcmGLQxqDR4lEfz9V3pfarCOsb94g89E9HlXz2WymVx3ohgacRH EujSI7aqWDe6ih9ktiAjcOxzB+z+6+CtoN8c+VQyc1u5AfkTZ0CiJlluj3TD4ZB/ wTi3V0fWV5br7hB7pFKyshjLBsi+NkWyvdIJGXXJWcDv9obE9CyN86sM8g0yuZyD fK6Rn7QnrAqwy5phfVGo1hWYGfYiq6SChYh3GKDp3fdbFcOJMtjSyIdJUtVW/aGn fN2enyhPYsXDiTn8spEhkb8a0WoVMHH3pbrw8LvKTN8XqsEa/kVZvCPtYtFVPKvl EmvawB5HNOoOXvtO2E09N/vtNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP2LkCPC uoxusuTTFAekjInUbTKBMB8GA1UdIwQYMBaAFP39FmzFHZ46t0lkB0tuZJRnTi9u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODRGOC8yMjhBRDNFQTZC MzIxMUU2OTQxNjYyNjVDNEY5QUUwMi9fZjBXYk1VZG5qcTNTV1FIUzI1a2xHZE9M MjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19mMFdiTVVkbmpxM1NXUUhTMjVrbEdkT0wyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODRGOC8yMjhBRDNFQTZCMzIxMUU2OTQxNjYyNjVDNEY5QUUwMi9fZjBXYk1VZG5q cTNTV1FIUzI1a2xHZE9MMjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUZZgIOhVvZFglvL1/Pv0vdM1AsboIqfLP8mus5dheZYX6svTHobgw J2wVStfFQNA6L9K+FQUnOlhwmlwzGSM6Bovkl2oMzLFZBMdYP5XhRJ7iiCU6/lGG XBo0xTg+y3pKBkXp5/47RwKCTfmMxVi4xSUL8wsIqZgwz4eNBKYfbNbGwxYXy54X s4MWAF3iE6yYKhaFvXZbGi1EmawjEtlx4Xm47DDgn/Ont+ShxVhbWdyFtTGURdJO J/gdq4QxcsTUYCzI+u4ibmsWhBFR9jYHle0Tba2NxCE9n9SqKwR1hbcOI1dtiyay 7DtR7LTHJLm6XMbwj0bpGz50F+RpfxBJ -----END CERTIFICATE-----Generated at Sun Aug 24 03:07:19 2025 by rpki-client