$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft File: mK6VbUJuFgLO2LtyWI9io9oSqVU.mft (raw, json) Hash identifier: GzoPGTrJPMEJoK0tOCLOG8VIb3/POPmxuSvBwrodw/A= Subject key identifier: 96:FB:A7:BA:F2:15:32:0B:B2:67:EC:63:52:20:BD:95:4E:3D:14:DF Authority key identifier: 98:AE:95:6D:42:6E:16:02:CE:D8:BB:72:58:8F:62:A3:DA:12:A9:55 Certificate issuer: /CN=A91A5FCF/serialNumber=98AE956D426E1602CED8BB72588F62A3DA12A955 Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft Manifest number: 3F Signing time: Sat 23 Aug 2025 07:42:30 +0000 Manifest this update: Sat 23 Aug 2025 07:42:29 +0000 Manifest next update: Sat 30 Aug 2025 07:42:29 +0000 Files and hashes: 1: mK6VbUJuFgLO2LtyWI9io9oSqVU.crl (hash: SCmDFGlNLigO/Eire4DaRxD4k/03/1JZmvsQEXy2Pw8=) 2: 943B92961E6011F0B81D3A54C4F9AE02.roa (hash: OpKLsw9gUBvgDq3xLq9YboZIcPYYkBwvYdkkqKU3FB4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.crl rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5FCF, serialNumber=98AE956D426E1602CED8BB72588F62A3DA12A955 Validity Not Before: Aug 23 07:42:29 2025 GMT Not After : Aug 30 07:42:29 2025 GMT Subject: CN=68a970e6-4fef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:7c:a6:fb:fc:e7:de:1d:58:45:a4:3d:3d:c4: ca:d1:66:ed:b7:59:c9:a9:07:61:72:a9:5c:6d:15: 86:57:07:15:ba:1a:bd:cb:d5:52:cb:d2:ce:5c:a7: 82:63:f8:ad:e6:50:29:3c:40:dc:79:28:c5:05:0f: 41:3a:b1:4c:7a:5f:da:c3:32:88:05:5b:b4:a7:31: 15:e9:e7:7a:d1:89:08:7f:47:4c:57:0b:be:9a:62: ad:fe:c8:44:78:11:fe:16:d5:3f:3e:0d:b0:87:9a: d0:26:97:55:ea:a4:69:2e:06:66:5b:75:b6:68:22: fb:24:70:38:21:f8:f3:6c:d0:d7:21:ae:42:5b:0a: 80:a6:b7:a0:e8:e2:62:66:b9:18:26:63:bc:f4:6e: 3e:e7:2f:8f:6b:37:9e:45:b6:23:9c:c5:9e:e2:26: 40:14:91:4c:96:e1:fd:71:19:1a:af:e1:38:23:70: ab:a3:e1:00:e5:e2:92:77:e8:bf:30:d8:d2:ee:5c: b3:ac:bf:d3:67:00:27:00:05:fb:1c:c5:40:b8:73: 48:bb:48:3a:bf:f7:1f:9d:5a:d3:d1:59:d2:07:2c: 99:82:aa:98:91:43:85:05:ba:61:56:38:f0:4c:50: cf:83:e8:8d:a4:7b:4c:e5:1a:9c:f3:22:0e:8d:3c: d1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:FB:A7:BA:F2:15:32:0B:B2:67:EC:63:52:20:BD:95:4E:3D:14:DF X509v3 Authority Key Identifier: keyid:98:AE:95:6D:42:6E:16:02:CE:D8:BB:72:58:8F:62:A3:DA:12:A9:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:f2:c9:8e:5c:82:4d:eb:2c:8c:9a:8e:1c:8b:d9:26:c0:23: b0:d5:2a:dc:8f:d3:da:9c:cf:a7:ca:1f:ad:25:71:f4:8b:2b: 9a:2c:f8:3f:1b:c1:ed:0c:b1:88:cd:aa:31:f2:28:e0:ca:8c: cd:fb:64:23:e7:7f:41:b7:a7:59:0c:85:75:83:18:2a:d1:11: 32:eb:bf:13:68:7b:40:4e:a7:32:11:45:b1:e7:ee:05:39:01: fe:f4:6d:3a:de:00:31:15:34:7f:5e:26:4b:ce:93:5a:e0:d1: 44:68:35:c8:4e:c0:31:de:93:6e:68:6b:aa:e6:48:7d:3d:4d: ef:d9:55:c9:22:2f:58:16:ca:20:5e:56:75:73:d8:74:cf:da: 67:5f:25:03:fa:cb:c3:a3:50:62:a4:0f:a2:a4:88:d8:ee:1a: 8f:c6:5a:ef:7b:bf:6a:1e:82:08:15:f6:3c:e6:1b:44:e9:d3: 9c:56:50:5f:2c:0e:21:06:10:02:88:6d:d6:f9:e9:62:ef:86: 81:2a:61:62:cd:ca:6c:ad:04:2c:fe:1a:3e:5e:6f:ff:c9:a3: 76:06:bc:09:b6:f0:a5:a4:bc:53:00:e4:99:5b:86:ca:fd:36: f4:57:1e:62:f7:4a:83:8a:9d:52:7e:6e:21:9d:f3:7a:f6:86: 4f:a7:db:e3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NUZDRjExMC8GA1UEBRMoOThBRTk1NkQ0MjZFMTYwMkNFRDhCQjcyNTg4RjYyQTNE QTEyQTk1NTAeFw0yNTA4MjMwNzQyMjlaFw0yNTA4MzAwNzQyMjlaMBgxFjAUBgNV BAMTDTY4YTk3MGU2LTRmZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDifKb7/OfeHVhFpD09xMrRZu23WcmpB2FyqVxtFYZXBxW6Gr3L1VLL0s5cp4Jj +K3mUCk8QNx5KMUFD0E6sUx6X9rDMogFW7SnMRXp53rRiQh/R0xXC76aYq3+yER4 Ef4W1T8+DbCHmtAml1XqpGkuBmZbdbZoIvskcDgh+PNs0NchrkJbCoCmt6Do4mJm uRgmY7z0bj7nL49rN55FtiOcxZ7iJkAUkUyW4f1xGRqv4TgjcKuj4QDl4pJ36L8w 2NLuXLOsv9NnACcABfscxUC4c0i7SDq/9x+dWtPRWdIHLJmCqpiRQ4UFumFWOPBM UM+D6I2ke0zlGpzzIg6NPNGNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlvunuvIV MguyZ+xjUiC9lU49FN8wHwYDVR0jBBgwFoAUmK6VbUJuFgLO2LtyWI9io9oSqVUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1RkNGL0I4NEM2MDNBMUU1 RjExRjA5RTZBNkI0RkM0RjlBRTAyL21LNlZiVUp1RmdMTzJMdHlXSTlpbzlvU3FW VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbUs2VmJVSnVGZ0xPMkx0eVdJOWlvOW9TcVZVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1 RkNGL0I4NEM2MDNBMUU1RjExRjA5RTZBNkI0RkM0RjlBRTAyL21LNlZiVUp1RmdM TzJMdHlXSTlpbzlvU3FWVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGTyyY5cgk3rLIyajhyL2SbAI7DVKtyP09qcz6fKH60lcfSLK5os+D8b we0MsYjNqjHyKODKjM37ZCPnf0G3p1kMhXWDGCrRETLrvxNoe0BOpzIRRbHn7gU5 Af70bTreADEVNH9eJkvOk1rg0URoNchOwDHek25oa6rmSH09Te/ZVckiL1gWyiBe VnVz2HTP2mdfJQP6y8OjUGKkD6KkiNjuGo/GWu97v2oegggV9jzmG0Tp05xWUF8s DiEGEAKIbdb56WLvhoEqYWLNymytBCz+Gj5eb//Jo3YGvAm28KWkvFMA5Jlbhsr9 NvRXHmL3SoOKnVJ+biGd83r2hk+n2+M= -----END CERTIFICATE-----Generated at Sat Aug 23 17:08:01 2025 by rpki-client