$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.mft File: exrifTz1FJnFBW59qHNmXk5BUXk.mft (raw, json) Hash identifier: /96feyjTboeP0v3i0GFEiD/L2ukHkhhPIO2oL5jcU2M= Subject key identifier: 18:7A:BC:14:AF:1B:2C:A6:D9:37:D5:63:93:5A:CE:92:62:F4:35:AA Authority key identifier: 7B:1A:E2:7D:3C:F5:14:99:C5:05:6E:7D:A8:73:66:5E:4E:41:51:79 Certificate issuer: /CN=A91AB193/serialNumber=7B1AE27D3CF51499C5056E7DA873665E4E415179 Certificate serial: 0110 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exrifTz1FJnFBW59qHNmXk5BUXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.mft Manifest number: 0107 Signing time: Sat 23 Aug 2025 05:14:49 +0000 Manifest this update: Sat 23 Aug 2025 05:14:48 +0000 Manifest next update: Sat 30 Aug 2025 05:14:48 +0000 Files and hashes: 1: exrifTz1FJnFBW59qHNmXk5BUXk.crl (hash: hSxCKRX8SVr8Vt/4R/yx3ZNITr6DjZJNSc/U9ecSIG0=) 2: 0E3462143D2D11EFA4B90A1EC4F9AE02.roa (hash: 8YLAmzfkAq7wWaHxcBzfEAiWvy9p4CNzd9sT8leEWdE=) 3: AC82414A392511EF88F70D39C4F9AE02.roa (hash: wtDTYViLvQ71y8LfCWrpB6kCmz/GyFN75jh6EmmBpDw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.crl rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exrifTz1FJnFBW59qHNmXk5BUXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:14:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 272 (0x110) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB193, serialNumber=7B1AE27D3CF51499C5056E7DA873665E4E415179 Validity Not Before: Aug 23 05:14:48 2025 GMT Not After : Aug 30 05:14:48 2025 GMT Subject: CN=68a94e48-bbf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a7:c4:f9:d4:f1:cc:ee:c2:bc:b2:19:d6:d9: 7e:4f:be:8a:84:60:0d:3a:cc:50:59:70:1e:08:86: 61:47:5d:fb:ac:87:9a:1e:91:82:09:76:95:89:fc: da:b0:da:4c:f3:80:26:88:29:c1:a1:fa:d6:2d:7a: eb:cc:b1:f9:39:d0:b5:1c:fb:57:6d:d0:04:66:fe: 59:7d:17:d8:1c:2c:53:0b:38:e1:e5:eb:2f:96:a6: b4:97:1e:ec:12:be:a2:6c:17:62:7a:f3:4b:d9:b2: c9:49:57:b0:4e:cc:1c:8c:59:d8:87:08:35:0f:10: b8:d6:a7:a7:c0:4b:1b:04:0e:21:d6:6e:d4:99:ca: fa:ca:b3:6d:fb:8b:59:a4:5c:37:f5:f8:62:ed:b6: ae:d4:a8:4e:a8:90:71:48:d5:6d:8d:33:0d:c9:19: bb:68:83:05:c1:91:96:a3:b4:d3:35:a0:60:7f:86: 18:74:ea:c3:2c:17:e3:84:dc:91:b5:12:6f:bf:98: a2:84:b0:9e:eb:80:72:96:50:5a:a3:c1:a0:45:34: c6:f4:e0:02:24:f0:91:9a:3f:61:51:e3:6f:cb:36: 85:78:85:07:28:c9:ee:d6:54:7a:32:99:ca:d2:eb: 3b:ff:43:8e:cd:34:6c:d6:1b:40:10:ed:07:89:eb: 1e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:7A:BC:14:AF:1B:2C:A6:D9:37:D5:63:93:5A:CE:92:62:F4:35:AA X509v3 Authority Key Identifier: keyid:7B:1A:E2:7D:3C:F5:14:99:C5:05:6E:7D:A8:73:66:5E:4E:41:51:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exrifTz1FJnFBW59qHNmXk5BUXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:58:2d:a4:fe:14:49:3d:91:ca:e9:8c:b3:e7:5f:6e:0e:29: e6:9f:3a:2f:9e:60:4b:59:84:dc:ed:fd:9f:3e:2b:08:41:57: 77:76:d9:d9:b9:a5:72:5e:10:a7:0d:96:99:3c:d3:0e:6b:be: e6:1d:59:af:ff:a6:d5:c8:b7:0f:01:82:2b:c0:a9:15:21:67: 0c:4e:64:62:79:1a:20:bc:69:40:a8:54:9c:3f:24:20:32:7c: 4a:25:33:cc:4f:e8:22:41:e3:bd:6c:e0:ed:f1:c6:23:7f:e4: fb:fe:8f:0b:53:af:8f:ee:5a:91:45:a2:7b:85:95:ce:80:7d: 4d:35:38:19:59:b0:26:22:82:9e:b2:89:3d:ac:c0:93:ad:e2: 4b:fe:40:27:56:4b:9e:83:19:05:48:18:15:f4:20:f7:3f:ed: b1:ad:23:62:c0:26:de:d0:2d:eb:bc:6e:6c:4e:98:2e:5e:80: 0d:4e:84:84:aa:2c:74:b7:80:5c:9a:6c:ab:f6:42:4e:24:6e: d8:37:77:4e:98:45:2b:e7:f3:39:3c:5f:8c:63:90:33:99:04: b3:15:39:5c:d9:30:c7:bd:07:40:3a:ba:5a:a8:6a:f1:85:35: f6:57:b0:8b:8a:d0:d8:9a:64:5b:f7:f0:f8:84:5b:90:2f:7b: 9a:e5:53:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIxOTMxMTAvBgNVBAUTKDdCMUFFMjdEM0NGNTE0OTlDNTA1NkU3REE4NzM2NjVF NEU0MTUxNzkwHhcNMjUwODIzMDUxNDQ4WhcNMjUwODMwMDUxNDQ4WjAYMRYwFAYD VQQDEw02OGE5NGU0OC1iYmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2qfE+dTxzO7CvLIZ1tl+T76KhGANOsxQWXAeCIZhR137rIeaHpGCCXaVifza sNpM84AmiCnBofrWLXrrzLH5OdC1HPtXbdAEZv5ZfRfYHCxTCzjh5esvlqa0lx7s Er6ibBdievNL2bLJSVewTswcjFnYhwg1DxC41qenwEsbBA4h1m7Umcr6yrNt+4tZ pFw39fhi7bau1KhOqJBxSNVtjTMNyRm7aIMFwZGWo7TTNaBgf4YYdOrDLBfjhNyR tRJvv5iihLCe64ByllBao8GgRTTG9OACJPCRmj9hUeNvyzaFeIUHKMnu1lR6MpnK 0us7/0OOzTRs1htAEO0HieseUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBh6vBSv Gyym2TfVY5NazpJi9DWqMB8GA1UdIwQYMBaAFHsa4n089RSZxQVufahzZl5OQVF5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjE5My85M0Q0RTQ5MEY2 MzExMUVFOUFDQkUyMjFDNEY5QUUwMi9leHJpZlR6MUZKbkZCVzU5cUhObVhrNUJV WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4cmlmVHoxRkpuRkJXNTlxSE5tWGs1QlVYay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjE5My85M0Q0RTQ5MEY2MzExMUVFOUFDQkUyMjFDNEY5QUUwMi9leHJpZlR6MUZK bkZCVzU5cUhObVhrNUJVWGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzWC2k/hRJPZHK6Yyz519uDinmnzovnmBLWYTc7f2fPisIQVd3dtnZ uaVyXhCnDZaZPNMOa77mHVmv/6bVyLcPAYIrwKkVIWcMTmRieRogvGlAqFScPyQg MnxKJTPMT+giQeO9bODt8cYjf+T7/o8LU6+P7lqRRaJ7hZXOgH1NNTgZWbAmIoKe sok9rMCTreJL/kAnVkuegxkFSBgV9CD3P+2xrSNiwCbe0C3rvG5sTpguXoANToSE qix0t4Bcmmyr9kJOJG7YN3dOmEUr5/M5PF+MY5AzmQSzFTlc2TDHvQdAOrpaqGrx hTX2V7CLitDYmmRb9/D4hFuQL3ua5VOR -----END CERTIFICATE-----Generated at Sat Aug 23 17:09:19 2025 by rpki-client