$ rpki-client -vvf rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft File: -8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft (raw, json) Hash identifier: dkof/v6L4Phf0xHvbLF/sn7AGCDoKxWSJGBLYPtOYlc= Subject key identifier: 04:3E:13:7D:30:39:42:1D:A7:FB:F2:13:E6:24:FC:0D:EC:1E:D6:6F Authority key identifier: FB:C5:5B:2C:0B:E0:AB:23:47:48:FB:C3:61:54:7F:64:BF:A7:51:97 Certificate issuer: /CN=A91984AC/serialNumber=FBC55B2C0BE0AB234748FBC361547F64BFA75197 Certificate serial: 0113 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft Manifest number: 0109 Signing time: Sat 23 Aug 2025 05:14:42 +0000 Manifest this update: Sat 23 Aug 2025 05:14:41 +0000 Manifest next update: Sat 30 Aug 2025 05:14:41 +0000 Files and hashes: 1: -8VbLAvgqyNHSPvDYVR_ZL-nUZc.crl (hash: Gj9YAXdUbjQdhjw7TCR1Lxps4ELU78N4kexGAzxR2Nk=) 2: 47610B18F5A811EEA84E8049C4F9AE02.roa (hash: IW95bSZsBV41wSCyDVp5L0J87U9yD7MOcR2qX+Jqshk=) 3: 628C9174B6E011EF87D3F60CC4F9AE02.roa (hash: 2lCm+k56qwvoxDHPy2MJ2gVzKL/gSEiow6ar2mDrask=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.crl rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:14:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 275 (0x113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91984AC, serialNumber=FBC55B2C0BE0AB234748FBC361547F64BFA75197 Validity Not Before: Aug 23 05:14:41 2025 GMT Not After : Aug 30 05:14:41 2025 GMT Subject: CN=68a94e42-a7cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:68:2b:ef:bb:83:b9:09:1f:20:98:e6:1c:c8: 93:58:b9:02:e8:a5:a2:54:6b:5f:50:87:a4:e9:7a: 5e:2e:45:ca:45:8a:d8:7e:42:bf:d2:ce:5a:f0:04: 19:2f:c3:9e:d7:64:08:49:43:4f:5b:89:c2:cb:50: 21:64:b1:3f:4e:f2:f5:c7:57:56:9b:8d:fa:20:fa: f4:9a:23:70:52:2d:7b:92:80:42:36:55:36:cf:9a: c9:4b:3d:10:22:06:03:c7:7e:95:37:91:94:de:ff: 0d:42:32:bc:cf:8c:bf:f1:55:f5:4b:20:49:76:7a: 3a:20:fa:fd:2a:d7:90:03:6a:cf:54:df:0c:19:9d: bd:f0:8e:36:fc:d7:7a:fc:31:b8:21:20:e0:81:62: 39:78:c8:d0:06:3b:3b:18:cf:08:ba:51:1f:69:83: d0:ac:3b:ab:e5:86:2c:54:6d:d1:e6:c7:9d:86:11: 80:2c:fd:9a:87:f3:3c:83:b7:ea:61:a9:d9:90:5f: 55:33:2e:9a:91:cc:e7:7b:0a:a0:91:94:2d:3e:8f: ca:da:02:85:ba:63:f1:f8:ef:8b:5f:73:74:c5:7b: aa:a2:49:60:3d:49:95:18:68:fa:88:a0:91:ea:17: 2e:9f:36:89:f5:c7:47:e7:df:98:1f:92:94:ff:48: ed:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:3E:13:7D:30:39:42:1D:A7:FB:F2:13:E6:24:FC:0D:EC:1E:D6:6F X509v3 Authority Key Identifier: keyid:FB:C5:5B:2C:0B:E0:AB:23:47:48:FB:C3:61:54:7F:64:BF:A7:51:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:7d:b9:db:7f:12:de:cf:c1:d9:85:0d:24:4c:8b:50:e0:2b: 81:f0:00:c6:c3:b8:4d:27:71:b5:14:6e:1d:77:10:fd:0c:29: c8:1a:48:40:34:e1:3e:d4:9e:58:69:09:f2:0a:16:60:49:5c: 37:7e:c1:ac:c9:66:49:e0:a6:c1:c1:c5:57:0e:17:07:e6:ad: 6f:d2:47:66:6e:b6:5e:22:82:50:b0:65:ec:9f:80:bb:2b:58: 95:a9:d6:4d:09:44:59:4c:06:30:b5:ed:e5:8a:44:b7:b1:15: 84:8e:2c:fc:59:bc:76:c9:9e:24:e8:90:8e:40:c8:74:05:f0: 35:1c:c4:5f:e2:2f:5b:b0:2e:62:2c:eb:40:05:ba:76:e2:3f: 95:07:9c:b3:be:82:ad:2a:f3:fe:b7:0a:ec:b1:d9:9f:c8:34: a9:80:97:15:a1:b2:d8:f7:1c:f2:49:b0:09:b9:c3:fa:a8:17: e3:23:78:8a:b3:f7:c9:ed:68:16:b8:85:1b:2c:7b:cc:b8:1a: 36:fb:eb:b4:75:d8:30:38:ee:20:c1:12:86:b7:7a:1f:cf:cc: 9c:0e:1b:ce:72:95:3f:79:ed:b1:fe:6c:ba:39:09:40:e4:74: 80:54:c5:a7:1c:dc:86:25:d7:7a:a2:c9:4a:41:09:59:b3:47: 57:76:3b:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg0QUMxMTAvBgNVBAUTKEZCQzU1QjJDMEJFMEFCMjM0NzQ4RkJDMzYxNTQ3RjY0 QkZBNzUxOTcwHhcNMjUwODIzMDUxNDQxWhcNMjUwODMwMDUxNDQxWjAYMRYwFAYD VQQDEw02OGE5NGU0Mi1hN2NmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsGgr77uDuQkfIJjmHMiTWLkC6KWiVGtfUIek6XpeLkXKRYrYfkK/0s5a8AQZ L8Oe12QISUNPW4nCy1AhZLE/TvL1x1dWm436IPr0miNwUi17koBCNlU2z5rJSz0Q IgYDx36VN5GU3v8NQjK8z4y/8VX1SyBJdno6IPr9KteQA2rPVN8MGZ298I42/Nd6 /DG4ISDggWI5eMjQBjs7GM8IulEfaYPQrDur5YYsVG3R5sedhhGALP2ah/M8g7fq YanZkF9VMy6akcznewqgkZQtPo/K2gKFumPx+O+LX3N0xXuqoklgPUmVGGj6iKCR 6hcunzaJ9cdH59+YH5KU/0jtXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAQ+E30w OUIdp/vyE+Yk/A3sHtZvMB8GA1UdIwQYMBaAFPvFWywL4KsjR0j7w2FUf2S/p1GX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODRBQy82RDAyNkNFQ0Y1 QTExMUVFOThEQkNEMTFDNEY5QUUwMi8tOFZiTEF2Z3F5TkhTUHZEWVZSX1pMLW5V WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy04VmJMQXZncXlOSFNQdkRZVlJfWkwtblVaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODRBQy82RDAyNkNFQ0Y1QTExMUVFOThEQkNEMTFDNEY5QUUwMi8tOFZiTEF2Z3F5 TkhTUHZEWVZSX1pMLW5VWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAafbnbfxLez8HZhQ0kTItQ4CuB8ADGw7hNJ3G1FG4ddxD9DCnIGkhA NOE+1J5YaQnyChZgSVw3fsGsyWZJ4KbBwcVXDhcH5q1v0kdmbrZeIoJQsGXsn4C7 K1iVqdZNCURZTAYwte3likS3sRWEjiz8Wbx2yZ4k6JCOQMh0BfA1HMRf4i9bsC5i LOtABbp24j+VB5yzvoKtKvP+twrssdmfyDSpgJcVobLY9xzySbAJucP6qBfjI3iK s/fJ7WgWuIUbLHvMuBo2++u0ddgwOO4gwRKGt3ofz8ycDhvOcpU/ee2x/my6OQlA 5HSAVMWnHNyGJdd6oslKQQlZs0dXdjvJ -----END CERTIFICATE-----Generated at Sun Aug 24 00:01:51 2025 by rpki-client