$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft File: eFfRGlHcrpwuCIahDOBvVfW4QwA.mft (raw, json) Hash identifier: bH4kvjUEkYn3k5WhYBS1nqm0pYVH7jSl7AbWkeZ7eV0= Subject key identifier: 71:44:84:8A:0D:50:29:FC:3E:58:0A:C4:A0:01:CF:D4:B3:93:93:97 Authority key identifier: 78:57:D1:1A:51:DC:AE:9C:2E:08:86:A1:0C:E0:6F:55:F5:B8:43:00 Certificate issuer: /CN=A91A5D8A/serialNumber=7857D11A51DCAE9C2E0886A10CE06F55F5B84300 Certificate serial: 05DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft Manifest number: 05D6 Signing time: Fri 22 Aug 2025 23:13:28 +0000 Manifest this update: Fri 22 Aug 2025 23:13:28 +0000 Manifest next update: Fri 29 Aug 2025 23:13:28 +0000 Files and hashes: 1: eFfRGlHcrpwuCIahDOBvVfW4QwA.crl (hash: 8rExu5exaCQhrVMMr0jQPRLOcIsTu6RQc6Xeg6IrBZ4=) 2: 8183B0FACAF111EBA40AF15BC4F9AE02.roa (hash: 2FiQQsbz3nt2u/cekKkmnmxwVKcgAmIxkizQKnpeMp0=) 3: 18981398329B11EDB9F09862C4F9AE02.roa (hash: dJlRsSYRiHAfXA1Nnt7jiiGzcupZLCHRX4H/d6aCfuU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.crl rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:13:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1503 (0x5df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5D8A, serialNumber=7857D11A51DCAE9C2E0886A10CE06F55F5B84300 Validity Not Before: Aug 22 23:13:28 2025 GMT Not After : Aug 29 23:13:28 2025 GMT Subject: CN=68a8f998-29a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:21:42:94:42:fa:ac:d4:10:d9:21:c3:67:7a: a3:b3:dd:9a:18:67:9a:b9:6c:13:94:be:8a:9a:6f: c7:56:ff:b4:db:96:4c:d8:a4:2a:cf:cd:66:78:aa: b3:69:69:8b:28:f9:5b:51:a9:0e:30:88:84:fc:f1: 9c:ba:7e:3d:1e:ed:55:de:8d:f9:87:df:1b:d9:af: 7e:d2:a9:e2:35:cc:29:87:8d:aa:5d:4f:75:54:8b: 75:0e:7c:76:77:3e:7b:f0:bf:53:fb:30:38:85:2d: 95:b2:34:8d:d6:6b:8d:e2:fe:ec:33:1c:d5:75:6b: 93:97:2d:a6:00:05:6f:f1:de:fa:38:57:65:34:16: 7b:c8:80:08:5c:5a:3c:5a:41:22:d4:ee:c6:68:de: 01:d2:31:ef:f3:5b:38:87:5b:15:24:7a:55:2d:8f: 48:5f:bb:82:5d:0b:cd:ea:01:6e:3b:97:72:1a:f3: 93:ea:f1:2c:8d:f1:aa:d0:e6:b8:a7:4e:c1:f8:fb: 23:1c:86:c0:ff:55:19:1d:bc:c8:6e:f4:c2:65:ef: 67:20:f7:90:b1:51:48:dc:22:53:1e:20:28:a8:f0: d0:c0:ad:6a:c9:63:55:6a:19:67:5f:b5:ff:b8:1d: a7:18:d0:8d:20:5b:8b:0d:3c:ef:74:3b:a5:3d:8f: d0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:44:84:8A:0D:50:29:FC:3E:58:0A:C4:A0:01:CF:D4:B3:93:93:97 X509v3 Authority Key Identifier: keyid:78:57:D1:1A:51:DC:AE:9C:2E:08:86:A1:0C:E0:6F:55:F5:B8:43:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:3f:6e:47:fc:3f:0e:5c:0f:38:87:e1:79:18:44:70:96:3d: ff:0d:bb:b9:8f:78:89:bd:52:af:56:d2:66:00:bf:c8:81:a5: b2:e8:83:ad:1a:d9:d5:5c:ac:73:da:36:0c:c2:e6:3f:bd:a9: b2:d3:cd:44:92:c5:64:5c:b6:8c:b6:77:f7:51:f0:50:3f:4d: 31:bc:56:ad:97:70:39:82:0e:6a:e9:5d:65:3e:d0:6d:e8:62: 98:6e:b0:4d:76:ae:ab:2a:b6:03:f3:81:c4:15:48:04:24:a8: e5:b6:dd:e2:7e:85:36:4b:eb:68:3b:3a:b4:cc:e1:57:0a:8b: d5:e4:a4:42:00:f2:ba:73:c4:c0:fe:0f:94:78:1b:be:11:e5: e8:9a:7c:f9:c4:cc:df:9a:59:09:5c:91:03:7d:6d:e9:55:f1: 10:1c:ee:7f:39:b7:e1:e7:70:82:a0:20:8d:1e:7d:70:07:70: f5:1f:f0:4b:a9:7f:ef:8e:67:45:dc:04:d6:c1:07:d7:2c:08: 51:18:5e:91:73:5c:cf:63:c1:08:3c:bc:2b:cb:9d:99:ed:e9: de:27:4a:11:31:5f:a6:82:cc:65:32:f6:dc:b9:cd:2e:a9:59: db:bf:c4:3b:9d:7b:29:f4:78:2e:c2:68:f9:a5:46:0c:d5:22: c0:e3:7a:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVEOEExMTAvBgNVBAUTKDc4NTdEMTFBNTFEQ0FFOUMyRTA4ODZBMTBDRTA2RjU1 RjVCODQzMDAwHhcNMjUwODIyMjMxMzI4WhcNMjUwODI5MjMxMzI4WjAYMRYwFAYD VQQDEw02OGE4Zjk5OC0yOWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuCFClEL6rNQQ2SHDZ3qjs92aGGeauWwTlL6Kmm/HVv+025ZM2KQqz81meKqz aWmLKPlbUakOMIiE/PGcun49Hu1V3o35h98b2a9+0qniNcwph42qXU91VIt1Dnx2 dz578L9T+zA4hS2VsjSN1muN4v7sMxzVdWuTly2mAAVv8d76OFdlNBZ7yIAIXFo8 WkEi1O7GaN4B0jHv81s4h1sVJHpVLY9IX7uCXQvN6gFuO5dyGvOT6vEsjfGq0Oa4 p07B+PsjHIbA/1UZHbzIbvTCZe9nIPeQsVFI3CJTHiAoqPDQwK1qyWNVahlnX7X/ uB2nGNCNIFuLDTzvdDulPY/QdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHFEhIoN UCn8PlgKxKABz9Szk5OXMB8GA1UdIwQYMBaAFHhX0RpR3K6cLgiGoQzgb1X1uEMA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUQ4QS9CQTJGMUI5QUNB RUUxMUVCQTJGQkQwNTZDNEY5QUUwMi9lRmZSR2xIY3Jwd3VDSWFoRE9CdlZmVzRR d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VGZlJHbEhjcnB3dUNJYWhET0J2VmZXNFF3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUQ4QS9CQTJGMUI5QUNBRUUxMUVCQTJGQkQwNTZDNEY5QUUwMi9lRmZSR2xIY3Jw d3VDSWFoRE9CdlZmVzRRd0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALP25H/D8OXA84h+F5GERwlj3/Dbu5j3iJvVKvVtJmAL/IgaWy6IOt GtnVXKxz2jYMwuY/vamy081EksVkXLaMtnf3UfBQP00xvFatl3A5gg5q6V1lPtBt 6GKYbrBNdq6rKrYD84HEFUgEJKjltt3ifoU2S+toOzq0zOFXCovV5KRCAPK6c8TA /g+UeBu+EeXomnz5xMzfmlkJXJEDfW3pVfEQHO5/Obfh53CCoCCNHn1wB3D1H/BL qX/vjmdF3ATWwQfXLAhRGF6Rc1zPY8EIPLwry52Z7eneJ0oRMV+mgsxlMvbcuc0u qVnbv8Q7nXsp9Hguwmj5pUYM1SLA43qx -----END CERTIFICATE-----Generated at Sat Aug 23 10:42:28 2025 by rpki-client