$ rpki-client -vvf rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft File: RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft (raw, json) Hash identifier: Uuv9JTWUf14R3/I1iqzVkZC6VqPRpgYwTXfNGk6bEjw= Subject key identifier: C8:F4:54:C3:62:2E:25:69:CD:99:85:4F:E5:08:3B:3E:FE:7D:35:F0 Authority key identifier: 46:48:54:FB:50:A9:90:3C:52:53:41:8C:58:3D:0F:31:B8:41:D5:97 Certificate issuer: /CN=A91964B3/serialNumber=464854FB50A9903C5253418C583D0F31B841D597 Certificate serial: 104C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft Manifest number: 103C Signing time: Fri 22 Aug 2025 14:24:54 +0000 Manifest this update: Fri 22 Aug 2025 14:24:53 +0000 Manifest next update: Fri 29 Aug 2025 14:24:53 +0000 Files and hashes: 1: RkhU-1CpkDxSU0GMWD0PMbhB1Zc.crl (hash: qmji8nZk9Zl70hienUWDBnCqcY6S8yYZNVN9p3/A+Ww=) 2: 23B68638C5DD11EABC58FD24C4F9AE02.roa (hash: 7YuoX9OkBSRUQiHpsiuHEMGmDB7ygNEWHmpkRA4QfgE=) 3: 5D563164AF3411EFB5B51A57C4F9AE02.roa (hash: Mjf+9MFV/8wopOF7hLs3Tt14yZvRKLf5RcXcRhi35uI=) 4: 1396434EC90A11EF8577744AC4F9AE02.roa (hash: vv5/sNroDyn31EV1FuwDRkKZ1Ky/CQIEoorZo83v9h8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.crl rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:24:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4172 (0x104c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91964B3, serialNumber=464854FB50A9903C5253418C583D0F31B841D597 Validity Not Before: Aug 22 14:24:53 2025 GMT Not After : Aug 29 14:24:53 2025 GMT Subject: CN=68a87db5-b1ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:5d:5d:09:ca:b6:3b:2f:7a:56:af:18:0e:26: 0b:80:33:5c:44:a0:53:2b:81:c1:54:9e:b7:8e:7a: aa:48:dc:6f:e6:44:19:36:91:9b:df:05:38:66:01: 1a:ee:5e:62:15:68:e2:82:b5:84:52:f5:6d:28:8a: d5:ae:e7:62:98:fe:e6:4c:7c:a8:e0:b3:6b:fc:fe: 48:84:25:ca:c4:2c:a5:ab:f0:ea:75:12:b2:b8:df: f2:90:f2:ef:80:dc:e4:fb:3e:66:10:e1:f9:3d:1d: 01:24:f1:1c:8d:7d:45:11:ab:5b:48:43:c2:63:a6: 98:1f:0a:7c:8a:b6:05:22:5f:07:23:f6:33:5c:93: 94:fe:1d:a7:d7:8c:31:24:4d:c0:b8:a9:a6:f5:1c: 27:21:18:79:60:69:ad:5e:89:85:92:a1:06:12:97: 31:73:3e:be:0a:a9:e4:26:10:24:03:db:06:e9:55: 6e:52:ed:2f:9e:f8:81:5c:28:76:b9:b5:73:17:7c: c0:81:c1:78:de:ca:3d:55:c9:e2:ec:55:d4:56:c0: 8e:ed:c1:17:d2:91:ab:42:82:42:66:30:e8:78:10: 13:ff:9b:10:45:6c:48:72:a3:57:7a:7d:21:bc:be: 5e:3d:fb:75:72:db:33:1e:3b:d4:4a:d9:16:22:82: 19:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:F4:54:C3:62:2E:25:69:CD:99:85:4F:E5:08:3B:3E:FE:7D:35:F0 X509v3 Authority Key Identifier: keyid:46:48:54:FB:50:A9:90:3C:52:53:41:8C:58:3D:0F:31:B8:41:D5:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:a5:07:46:ae:86:58:76:0c:4b:83:78:28:02:06:57:e6:a3: 61:49:46:dc:5c:8e:5a:62:6c:ca:bd:67:6f:41:52:e5:4e:8e: 3e:3c:4d:d9:3f:44:12:5a:55:2a:24:03:69:9e:23:c4:77:f0: a7:86:76:62:41:33:8f:49:65:9f:68:63:f7:6a:e6:c7:96:c3: ac:db:04:5a:a1:b2:be:42:ef:a7:ed:0b:1d:e9:6b:5a:20:51: 25:7d:80:b2:3e:29:14:b2:cd:af:ba:2a:6c:b6:05:d2:c0:1b: ad:51:2f:de:b0:28:63:2a:2b:8d:87:27:e1:18:d5:79:26:d7: 78:22:25:64:e6:64:cd:3c:13:e5:d9:de:b1:8b:69:c0:24:ae: 70:25:7b:d9:db:2e:8c:88:0c:d6:ea:cf:b8:7f:9a:e3:4f:94: 8a:3c:eb:65:2a:78:ae:9e:4d:38:9c:f1:c9:c7:c5:f2:7d:1e: de:d6:5c:56:e3:d6:b7:58:60:8a:37:9e:74:f4:8d:c3:49:81: 54:11:04:ac:50:dc:c4:b8:ee:92:6d:0d:64:7a:98:59:1c:d0: 09:2e:6f:61:76:3e:2f:48:0c:56:b5:17:17:70:5c:82:3a:27: b4:df:a3:4e:8d:4e:4c:d6:69:91:18:c0:83:ed:8c:a1:81:ec: ca:58:70:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY0QjMxMTAvBgNVBAUTKDQ2NDg1NEZCNTBBOTkwM0M1MjUzNDE4QzU4M0QwRjMx Qjg0MUQ1OTcwHhcNMjUwODIyMTQyNDUzWhcNMjUwODI5MTQyNDUzWjAYMRYwFAYD VQQDEw02OGE4N2RiNS1iMWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl11dCcq2Oy96Vq8YDiYLgDNcRKBTK4HBVJ63jnqqSNxv5kQZNpGb3wU4ZgEa 7l5iFWjigrWEUvVtKIrVrudimP7mTHyo4LNr/P5IhCXKxCylq/DqdRKyuN/ykPLv gNzk+z5mEOH5PR0BJPEcjX1FEatbSEPCY6aYHwp8irYFIl8HI/YzXJOU/h2n14wx JE3AuKmm9RwnIRh5YGmtXomFkqEGEpcxcz6+CqnkJhAkA9sG6VVuUu0vnviBXCh2 ubVzF3zAgcF43so9Vcni7FXUVsCO7cEX0pGrQoJCZjDoeBAT/5sQRWxIcqNXen0h vL5ePft1ctszHjvUStkWIoIZSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMj0VMNi LiVpzZmFT+UIOz7+fTXwMB8GA1UdIwQYMBaAFEZIVPtQqZA8UlNBjFg9DzG4QdWX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjRCMy8yQTU5NDBGMjRC QjMxMUU5QUIxNTFDMTdDNEY5QUUwMi9Sa2hVLTFDcGtEeFNVMEdNV0QwUE1iaEIx WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JraFUtMUNwa0R4U1UwR01XRDBQTWJoQjFaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NjRCMy8yQTU5NDBGMjRCQjMxMUU5QUIxNTFDMTdDNEY5QUUwMi9Sa2hVLTFDcGtE eFNVMEdNV0QwUE1iaEIxWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGpQdGroZYdgxLg3goAgZX5qNhSUbcXI5aYmzKvWdvQVLlTo4+PE3Z P0QSWlUqJANpniPEd/CnhnZiQTOPSWWfaGP3aubHlsOs2wRaobK+Qu+n7Qsd6Wta IFElfYCyPikUss2vuipstgXSwButUS/esChjKiuNhyfhGNV5Jtd4IiVk5mTNPBPl 2d6xi2nAJK5wJXvZ2y6MiAzW6s+4f5rjT5SKPOtlKniunk04nPHJx8XyfR7e1lxW 49a3WGCKN5509I3DSYFUEQSsUNzEuO6SbQ1kephZHNAJLm9hdj4vSAxWtRcXcFyC Oie036NOjU5M1mmRGMCD7YyhgezKWHCs -----END CERTIFICATE-----Generated at Sat Aug 23 20:44:26 2025 by rpki-client