$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft File: fSkuhkI7U8Czc7eZZYghkTSp5hA.mft (raw, json) Hash identifier: GFALicQRBEhgO2REHJxcgihm8KLhAqLuEcdWSvarXo0= Subject key identifier: BA:66:1D:5A:75:72:00:B9:0E:CB:6A:5A:BC:2B:ED:3A:31:42:A7:89 Authority key identifier: 7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10 Certificate issuer: /CN=A91A3430/serialNumber=7D292E86423B53C0B373B7996588219134A9E610 Certificate serial: 0D0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft Manifest number: 0D03 Signing time: Fri 22 Aug 2025 18:11:37 +0000 Manifest this update: Fri 22 Aug 2025 18:11:36 +0000 Manifest next update: Fri 29 Aug 2025 18:11:36 +0000 Files and hashes: 1: fSkuhkI7U8Czc7eZZYghkTSp5hA.crl (hash: s6faOcrY5ToK5VwI6CxnWFp2ZLkx5oLp4e/lR3JXvbg=) 2: 7B3163F0072A11EA9E314D4CC4F9AE02.roa (hash: 8KRCIYlWeIU1RFVFOTA+MnkOIQ/xaefXlo2pRQaFi20=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.crl rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:11:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3340 (0xd0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3430, serialNumber=7D292E86423B53C0B373B7996588219134A9E610 Validity Not Before: Aug 22 18:11:36 2025 GMT Not After : Aug 29 18:11:36 2025 GMT Subject: CN=68a8b2d9-c0c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:06:b9:8a:77:f9:73:a4:31:01:c9:c9:7b:0f: eb:4a:39:e9:c7:a8:4d:9b:d3:5d:dd:02:6e:06:3f: 90:36:34:c7:2b:19:28:93:d6:cb:92:9e:52:88:8e: 39:04:40:fc:fb:40:cc:55:1d:b3:fc:06:ed:0c:84: b2:94:31:75:2a:12:c1:69:42:77:26:7b:4f:f9:5a: 49:d6:18:04:40:54:c6:8e:c9:a2:75:ce:4e:cc:0c: 0e:a4:5f:d5:c7:ac:aa:67:f6:be:eb:68:bc:c3:63: 94:20:69:7f:6d:f0:31:a3:28:7f:c4:be:2d:9e:b8: 83:c2:bc:46:61:e2:97:a2:a5:6e:ca:20:18:f8:11: 96:72:e6:a2:23:50:fc:11:fa:c6:aa:90:e4:0d:7b: 69:bf:c5:a7:f2:7f:49:51:f2:74:e1:40:cc:fe:1c: 0e:08:81:ea:4f:a0:02:db:d6:c0:44:5c:3e:91:8b: 44:89:29:70:0f:93:ec:92:9e:6d:bc:4c:2c:42:d8: 69:42:e3:8c:ca:66:3b:ef:43:18:07:79:09:f4:39: b0:a9:62:ab:5b:f2:45:02:9e:4c:6b:82:48:d1:42: 1e:22:c4:c5:60:4c:23:1f:23:b0:b3:76:60:82:1c: dd:8b:cf:a0:39:e6:bb:61:78:ee:56:ac:9a:df:ef: c2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:66:1D:5A:75:72:00:B9:0E:CB:6A:5A:BC:2B:ED:3A:31:42:A7:89 X509v3 Authority Key Identifier: keyid:7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:2a:33:20:3b:58:8a:7e:21:5a:32:38:02:0a:b6:e1:43:e3: 48:94:19:29:fe:0e:26:36:fc:c3:be:9d:a4:ef:56:ab:8e:84: 5d:fc:be:76:a5:63:fc:3a:52:c2:8d:ab:b1:51:35:5c:5e:1c: 6e:74:81:e2:f0:8a:5b:c6:77:7f:f0:4b:cf:30:f8:c8:0e:df: 33:0c:20:37:17:de:a7:20:53:94:9c:65:d9:74:93:a0:4c:0f: db:fb:8b:c5:9b:8b:f9:5a:1c:5a:13:41:0a:0d:af:73:eb:d5: fe:bc:86:6a:02:70:7c:d1:eb:e2:1d:f1:01:5c:35:af:e8:e1: b6:b8:f8:a3:8a:da:82:d2:2f:68:26:50:dc:cb:44:03:b0:86: 6c:7a:94:d8:00:b0:85:4d:6c:fc:76:67:e7:a7:ec:2f:6d:a7: 83:a6:ce:fe:90:69:ce:1e:cd:c8:e1:8e:42:57:00:b7:b3:b0: 92:96:12:83:9d:2a:a5:7a:1a:3b:d2:51:77:e6:d4:7d:12:d9: 61:fa:d7:4b:da:70:97:57:44:ee:70:44:a6:dc:d3:cc:1d:8d: 7c:18:c4:dd:7a:82:98:61:f9:ba:05:72:a8:bb:75:9c:bf:21: e5:6a:d3:fe:6b:eb:83:35:fd:cf:ad:f3:82:14:a5:85:cc:24: c9:eb:74:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM0MzAxMTAvBgNVBAUTKDdEMjkyRTg2NDIzQjUzQzBCMzczQjc5OTY1ODgyMTkx MzRBOUU2MTAwHhcNMjUwODIyMTgxMTM2WhcNMjUwODI5MTgxMTM2WjAYMRYwFAYD VQQDEw02OGE4YjJkOS1jMGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuga5inf5c6QxAcnJew/rSjnpx6hNm9Nd3QJuBj+QNjTHKxkok9bLkp5SiI45 BED8+0DMVR2z/AbtDISylDF1KhLBaUJ3JntP+VpJ1hgEQFTGjsmidc5OzAwOpF/V x6yqZ/a+62i8w2OUIGl/bfAxoyh/xL4tnriDwrxGYeKXoqVuyiAY+BGWcuaiI1D8 EfrGqpDkDXtpv8Wn8n9JUfJ04UDM/hwOCIHqT6AC29bARFw+kYtEiSlwD5Pskp5t vEwsQthpQuOMymY770MYB3kJ9DmwqWKrW/JFAp5Ma4JI0UIeIsTFYEwjHyOws3Zg ghzdi8+gOea7YXjuVqya3+/CNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLpmHVp1 cgC5DstqWrwr7ToxQqeJMB8GA1UdIwQYMBaAFH0pLoZCO1PAs3O3mWWIIZE0qeYQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzQzMC84NkFDODlEMEU4 N0IxMUU5QTFFRDVCNDdDNEY5QUUwMi9mU2t1aGtJN1U4Q3pjN2VaWllnaGtUU3A1 aEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZTa3Voa0k3VThDemM3ZVpaWWdoa1RTcDVoQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzQzMC84NkFDODlEMEU4N0IxMUU5QTFFRDVCNDdDNEY5QUUwMi9mU2t1aGtJN1U4 Q3pjN2VaWllnaGtUU3A1aEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpKjMgO1iKfiFaMjgCCrbhQ+NIlBkp/g4mNvzDvp2k71arjoRd/L52 pWP8OlLCjauxUTVcXhxudIHi8Ipbxnd/8EvPMPjIDt8zDCA3F96nIFOUnGXZdJOg TA/b+4vFm4v5WhxaE0EKDa9z69X+vIZqAnB80eviHfEBXDWv6OG2uPijitqC0i9o JlDcy0QDsIZsepTYALCFTWz8dmfnp+wvbaeDps7+kGnOHs3I4Y5CVwC3s7CSlhKD nSqleho70lF35tR9Etlh+tdL2nCXV0TucESm3NPMHY18GMTdeoKYYfm6BXKou3Wc vyHlatP+a+uDNf3PrfOCFKWFzCTJ63TJ -----END CERTIFICATE-----Generated at Sat Aug 23 17:19:08 2025 by rpki-client