$ rpki-client -vvf rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.mft File: 82dKiQfpsa6O4m-c88mcR_dUk0w.mft (raw, json) Hash identifier: o61QL7zCznxKd/WsUWFkhqyvUoH+/3brzwzsbT/Aljw= Subject key identifier: 1B:7A:5D:91:DC:FF:CB:DA:EF:54:15:1A:C6:E6:15:38:CC:58:83:85 Authority key identifier: F3:67:4A:89:07:E9:B1:AE:8E:E2:6F:9C:F3:C9:9C:47:F7:54:93:4C Certificate issuer: /CN=A91910A8/serialNumber=F3674A8907E9B1AE8EE26F9CF3C99C47F754934C Certificate serial: 03DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/82dKiQfpsa6O4m-c88mcR_dUk0w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.mft Manifest number: 03CD Signing time: Sat 23 Aug 2025 00:53:13 +0000 Manifest this update: Sat 23 Aug 2025 00:53:12 +0000 Manifest next update: Sat 30 Aug 2025 00:53:12 +0000 Files and hashes: 1: 82dKiQfpsa6O4m-c88mcR_dUk0w.crl (hash: yyoWJB1QEYA0SVGYeqQRjIQH1AtJFO5eRwbR9/Vrs8Y=) 2: F47320C4E04111EE8F798E3DC4F9AE02.roa (hash: +qgf84XC7fwqmND33skSgzHGmdhqJ+EK/64iZ97m69g=) 3: 5C27D4DCB0DB11EC87206C69C4F9AE02.roa (hash: M3aykX0j4vteJ7Aeu69jjSSSHCYOZs36DtkdcU8NJ0w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.crl rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/82dKiQfpsa6O4m-c88mcR_dUk0w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:53:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 988 (0x3dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91910A8, serialNumber=F3674A8907E9B1AE8EE26F9CF3C99C47F754934C Validity Not Before: Aug 23 00:53:12 2025 GMT Not After : Aug 30 00:53:12 2025 GMT Subject: CN=68a910f9-6f64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:49:ff:fd:27:02:d5:32:88:ae:33:01:60:52: 7f:31:f9:19:93:b2:a9:65:66:8a:6c:ba:40:a7:f7: bc:ac:37:f0:00:3a:95:e4:79:5e:11:94:cb:6a:4f: 13:d6:7c:3b:93:b2:8d:22:78:5c:2e:bf:71:fe:df: 7d:47:50:d7:a1:ad:a3:14:1f:b8:38:46:ce:e5:db: 34:b8:25:0a:1e:34:57:95:96:c9:be:5b:29:97:71: 94:e1:07:5e:f1:6a:da:39:88:fc:b2:c1:0d:34:55: 45:68:4d:e6:45:9b:62:35:39:44:be:1b:9c:5f:18: f6:6a:34:08:92:80:c8:f7:59:d5:45:45:a9:c1:ca: c6:c8:30:bf:75:f0:38:3a:01:8b:81:8c:b0:0b:e3: ab:17:fd:76:ad:af:48:ae:17:a6:b6:a0:f2:0e:58: 87:07:f9:ba:21:5d:7a:c0:45:48:c1:3a:35:2b:91: dc:68:d5:86:af:5f:3e:27:2a:3f:32:74:1c:8a:72: a2:d3:f4:66:af:bc:21:14:b7:83:8b:83:ab:7f:7c: ab:c4:40:23:0c:4f:50:d3:5e:42:82:a4:e0:2a:2b: b9:94:5f:31:da:b6:f9:4b:f3:79:16:7f:1c:b0:65: d6:94:05:be:8c:6d:18:c5:32:f2:64:97:6b:34:50: bb:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:7A:5D:91:DC:FF:CB:DA:EF:54:15:1A:C6:E6:15:38:CC:58:83:85 X509v3 Authority Key Identifier: keyid:F3:67:4A:89:07:E9:B1:AE:8E:E2:6F:9C:F3:C9:9C:47:F7:54:93:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/82dKiQfpsa6O4m-c88mcR_dUk0w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:ae:0b:b5:89:59:90:45:37:c1:c4:a9:25:f6:81:46:05:49: fe:db:a3:ce:8e:d1:5a:b1:2b:b1:ab:5b:c5:a6:8b:95:1a:9d: b2:d8:6c:38:9d:70:18:e9:d5:56:63:c0:28:6f:ad:f9:28:24: 91:2b:3e:60:72:35:d3:14:7b:5c:2c:b3:62:f1:d0:55:64:9a: 77:70:28:71:cc:43:21:9c:06:b9:2f:eb:a0:ce:80:c4:e1:02: dd:38:6d:dd:d4:82:94:6e:70:31:84:4c:29:79:d7:2e:f0:d6: 71:17:7d:db:6f:5d:68:2b:e0:1d:a0:13:52:e4:7c:f5:10:77: bf:45:0d:fc:d6:29:53:5b:d0:8b:76:4a:bd:e6:2d:08:d0:70: 4a:34:7b:6f:1f:30:a2:bf:a6:03:38:af:44:27:d4:f4:a1:58: 28:8b:cf:db:4d:93:9e:83:8d:67:fe:81:69:99:25:54:91:4e: 21:1e:42:92:f5:2c:44:ba:14:b0:31:d8:c6:81:92:bc:0d:4a: 66:20:64:fa:5d:2d:64:9f:23:17:f2:dc:90:a6:77:58:a9:51: 08:17:80:e5:64:35:27:6d:f5:e0:f0:6f:3d:5f:59:0e:31:d2: ca:11:c2:67:61:eb:07:76:ab:d3:ff:18:07:d5:30:3b:ca:9b: dd:6d:c3:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEwQTgxMTAvBgNVBAUTKEYzNjc0QTg5MDdFOUIxQUU4RUUyNkY5Q0YzQzk5QzQ3 Rjc1NDkzNEMwHhcNMjUwODIzMDA1MzEyWhcNMjUwODMwMDA1MzEyWjAYMRYwFAYD VQQDEw02OGE5MTBmOS02ZjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3En//ScC1TKIrjMBYFJ/MfkZk7KpZWaKbLpAp/e8rDfwADqV5HleEZTLak8T 1nw7k7KNInhcLr9x/t99R1DXoa2jFB+4OEbO5ds0uCUKHjRXlZbJvlspl3GU4Qde 8WraOYj8ssENNFVFaE3mRZtiNTlEvhucXxj2ajQIkoDI91nVRUWpwcrGyDC/dfA4 OgGLgYywC+OrF/12ra9IrhemtqDyDliHB/m6IV16wEVIwTo1K5HcaNWGr18+Jyo/ MnQcinKi0/Rmr7whFLeDi4Orf3yrxEAjDE9Q015CgqTgKiu5lF8x2rb5S/N5Fn8c sGXWlAW+jG0YxTLyZJdrNFC72wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBt6XZHc /8va71QVGsbmFTjMWIOFMB8GA1UdIwQYMBaAFPNnSokH6bGujuJvnPPJnEf3VJNM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTBBOC83QjIwMDczRTlD NEUxMUVDQjE3NDhCNjhDNEY5QUUwMi84MmRLaVFmcHNhNk80bS1jODhtY1JfZFVr MHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgyZEtpUWZwc2E2TzRtLWM4OG1jUl9kVWswdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTBBOC83QjIwMDczRTlDNEUxMUVDQjE3NDhCNjhDNEY5QUUwMi84MmRLaVFmcHNh Nk80bS1jODhtY1JfZFVrMHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3rgu1iVmQRTfBxKkl9oFGBUn+26POjtFasSuxq1vFpouVGp2y2Gw4 nXAY6dVWY8Aob635KCSRKz5gcjXTFHtcLLNi8dBVZJp3cChxzEMhnAa5L+ugzoDE 4QLdOG3d1IKUbnAxhEwpedcu8NZxF33bb11oK+AdoBNS5Hz1EHe/RQ381ilTW9CL dkq95i0I0HBKNHtvHzCiv6YDOK9EJ9T0oVgoi8/bTZOeg41n/oFpmSVUkU4hHkKS 9SxEuhSwMdjGgZK8DUpmIGT6XS1knyMX8tyQpndYqVEIF4DlZDUnbfXg8G89X1kO MdLKEcJnYesHdqvT/xgH1TA7ypvdbcMq -----END CERTIFICATE-----Generated at Sat Aug 23 17:15:32 2025 by rpki-client