$ rpki-client -vvf rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.mft File: 91rI3ARJV7GxWgsVxu2jGLI7QDM.mft (raw, json) Hash identifier: MvdeJ3RNwQx5EVtV8e+psl0+zFp00dalweILoJSwZy0= Subject key identifier: 21:BF:4B:E1:8C:D6:26:35:BA:38:EE:6B:82:DC:85:06:CC:C9:D4:68 Authority key identifier: F7:5A:C8:DC:04:49:57:B1:B1:5A:0B:15:C6:ED:A3:18:B2:3B:40:33 Certificate issuer: /CN=A919CDE4/serialNumber=F75AC8DC044957B1B15A0B15C6EDA318B23B4033 Certificate serial: 01CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91rI3ARJV7GxWgsVxu2jGLI7QDM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.mft Manifest number: 01C7 Signing time: Sat 23 Aug 2025 03:03:15 +0000 Manifest this update: Sat 23 Aug 2025 03:03:14 +0000 Manifest next update: Sat 30 Aug 2025 03:03:14 +0000 Files and hashes: 1: 91rI3ARJV7GxWgsVxu2jGLI7QDM.crl (hash: s4TChu/6y43W86pkL/XGd7SmFrg38ZUajZpCPSar5+Q=) 2: 955C43AAC99E11ED98E9BE5BC4F9AE02.roa (hash: sO+2+/cvQ7fG/IUMq+A+e08x9da5+jbIe5T9qmjARBg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.crl rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91rI3ARJV7GxWgsVxu2jGLI7QDM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:03:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 458 (0x1ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CDE4, serialNumber=F75AC8DC044957B1B15A0B15C6EDA318B23B4033 Validity Not Before: Aug 23 03:03:14 2025 GMT Not After : Aug 30 03:03:14 2025 GMT Subject: CN=68a92f72-6d92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:2e:5f:0d:ac:bb:35:d3:a5:84:1a:6c:b5:31: 71:69:16:da:f4:da:25:6c:43:95:40:1a:36:fc:2b: ce:56:4d:a4:1e:f1:bd:f0:2e:e1:5e:c9:e0:5a:d4: d8:72:40:84:b8:bd:00:b3:b3:7b:28:8a:79:13:e1: ec:68:a3:47:7d:44:0f:97:e0:61:82:92:38:fd:97: fe:f8:c5:34:1e:5e:a2:18:be:41:45:f0:b9:5c:9b: a5:0a:1b:65:31:ba:53:1c:49:b8:65:1a:f3:0e:37: c5:ab:84:ba:17:ad:b4:2a:32:04:49:67:0a:3b:9c: 20:b6:a2:24:ab:c2:2f:d5:ff:32:c9:b4:21:05:94: f3:36:b2:b9:dc:55:73:3d:a5:da:1a:dc:47:48:d1: 45:03:15:97:e1:c0:cc:32:b1:95:da:a0:63:f3:1e: d2:a4:1b:41:ff:4c:89:7a:30:95:38:de:bf:93:36: a8:cd:c1:3b:ce:32:23:cf:0e:91:bc:fc:06:94:20: 88:7f:39:c5:b3:e5:70:f7:10:b0:26:1b:86:11:87: e9:f8:8e:08:10:4a:3b:27:7f:6a:48:c3:c4:9c:d6: 27:c3:56:ec:e8:47:cc:fc:2c:19:5f:67:44:d1:b5: ba:8d:ca:6c:b4:f0:49:1f:c8:fa:17:49:d0:d7:8c: 17:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:BF:4B:E1:8C:D6:26:35:BA:38:EE:6B:82:DC:85:06:CC:C9:D4:68 X509v3 Authority Key Identifier: keyid:F7:5A:C8:DC:04:49:57:B1:B1:5A:0B:15:C6:ED:A3:18:B2:3B:40:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91rI3ARJV7GxWgsVxu2jGLI7QDM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:a9:07:22:c7:f8:0a:cf:58:06:80:25:ea:b6:64:d9:ba:f1: 4b:fe:98:59:d7:db:c3:0e:22:d4:59:cf:e6:29:62:3f:f3:2d: 6e:f1:0e:a5:ed:55:68:fa:a3:43:d5:5c:c4:c9:d6:28:4b:ef: 1e:c5:6a:fe:ec:df:06:ec:a1:0a:5a:28:e9:04:cb:26:d0:de: 9e:8f:6d:0e:95:36:8f:2b:e3:eb:d2:d3:df:4d:d4:04:1b:b9: 2a:e7:e8:3d:7b:8c:00:bb:86:e0:2a:e6:87:d7:f0:d1:f4:d3: bf:ad:2d:8c:1f:b9:5d:4b:0e:cf:06:e3:4c:23:08:9f:27:49: 01:dd:c6:ad:78:8b:e1:7d:9a:3e:bf:75:85:f7:08:24:be:c5: dd:0f:e4:41:20:39:ec:79:9f:2b:b9:f1:49:42:02:79:36:9e: 60:af:b1:84:66:19:01:a9:db:b6:0f:6b:9a:9d:47:b5:7d:3f: 5f:db:b5:38:63:ce:e0:91:0c:1c:3e:50:4e:a6:22:ef:2c:d8: 17:82:ef:b4:46:77:51:83:43:f9:60:57:e4:d6:9f:cf:f3:9b: 79:ad:10:9f:24:0b:41:51:c3:f1:92:b2:d6:ed:f1:fc:0a:1c: 98:f9:d7:53:e0:13:ec:a9:ae:5f:a2:18:59:0a:df:56:99:c1: 0f:95:0d:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNERTQxMTAvBgNVBAUTKEY3NUFDOERDMDQ0OTU3QjFCMTVBMEIxNUM2RURBMzE4 QjIzQjQwMzMwHhcNMjUwODIzMDMwMzE0WhcNMjUwODMwMDMwMzE0WjAYMRYwFAYD VQQDEw02OGE5MmY3Mi02ZDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4S5fDay7NdOlhBpstTFxaRba9NolbEOVQBo2/CvOVk2kHvG98C7hXsngWtTY ckCEuL0As7N7KIp5E+HsaKNHfUQPl+BhgpI4/Zf++MU0Hl6iGL5BRfC5XJulChtl MbpTHEm4ZRrzDjfFq4S6F620KjIESWcKO5wgtqIkq8Iv1f8yybQhBZTzNrK53FVz PaXaGtxHSNFFAxWX4cDMMrGV2qBj8x7SpBtB/0yJejCVON6/kzaozcE7zjIjzw6R vPwGlCCIfznFs+Vw9xCwJhuGEYfp+I4IEEo7J39qSMPEnNYnw1bs6EfM/CwZX2dE 0bW6jcpstPBJH8j6F0nQ14wXoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCG/S+GM 1iY1ujjua4LchQbMydRoMB8GA1UdIwQYMBaAFPdayNwESVexsVoLFcbtoxiyO0Az MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0RFNC9CNUE0NzM5MEM5 OTMxMUVEOUI0QjNCMTBDNEY5QUUwMi85MXJJM0FSSlY3R3hXZ3NWeHUyakdMSTdR RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkxckkzQVJKVjdHeFdnc1Z4dTJqR0xJN1FETS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0RFNC9CNUE0NzM5MEM5OTMxMUVEOUI0QjNCMTBDNEY5QUUwMi85MXJJM0FSSlY3 R3hXZ3NWeHUyakdMSTdRRE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuqQcix/gKz1gGgCXqtmTZuvFL/phZ19vDDiLUWc/mKWI/8y1u8Q6l 7VVo+qND1VzEydYoS+8exWr+7N8G7KEKWijpBMsm0N6ej20OlTaPK+Pr0tPfTdQE G7kq5+g9e4wAu4bgKuaH1/DR9NO/rS2MH7ldSw7PBuNMIwifJ0kB3cateIvhfZo+ v3WF9wgkvsXdD+RBIDnseZ8rufFJQgJ5Np5gr7GEZhkBqdu2D2uanUe1fT9f27U4 Y87gkQwcPlBOpiLvLNgXgu+0RndRg0P5YFfk1p/P85t5rRCfJAtBUcPxkrLW7fH8 ChyY+ddT4BPsqa5fohhZCt9WmcEPlQ2I -----END CERTIFICATE-----Generated at Sat Aug 23 22:40:04 2025 by rpki-client