$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.mft File: MvJs85-fvKfzH1OV-I3ZfZRw0Zc.mft (raw, json) Hash identifier: 5faHHSw43l/u1dVK8/mTvTxRUPFNxGQJfI9qBiULmjI= Subject key identifier: D3:C5:81:BA:BB:21:A8:42:F9:FE:BE:C8:9A:10:42:A0:E4:13:7D:19 Authority key identifier: 32:F2:6C:F3:9F:9F:BC:A7:F3:1F:53:95:F8:8D:D9:7D:94:70:D1:97 Certificate issuer: /CN=A91AF095/serialNumber=32F26CF39F9FBCA7F31F5395F88DD97D9470D197 Certificate serial: 1D95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.mft Manifest number: 1D86 Signing time: Fri 22 Aug 2025 16:10:49 +0000 Manifest this update: Fri 22 Aug 2025 16:10:49 +0000 Manifest next update: Fri 29 Aug 2025 16:10:49 +0000 Files and hashes: 1: MvJs85-fvKfzH1OV-I3ZfZRw0Zc.crl (hash: 0cnNOg41yGmJj+K7QH4YsiPFNYewd7HAbpAGLiKwC9s=) 2: 7DB839C04C5F11F09A279D41C4F9AE02.roa (hash: 1Kglhggr20KDI8G+GusY7qefa3HmD56lGdxiimkKhgc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.crl rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:10:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7573 (0x1d95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF095, serialNumber=32F26CF39F9FBCA7F31F5395F88DD97D9470D197 Validity Not Before: Aug 22 16:10:49 2025 GMT Not After : Aug 29 16:10:49 2025 GMT Subject: CN=68a89689-fdd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:8b:8f:f5:b2:09:da:fb:7c:b2:dd:f1:e2:f0: 85:1e:fb:3c:4c:a0:b3:16:c4:09:3e:11:21:e3:9e: de:77:88:e5:43:5d:b1:06:d3:d6:db:2e:cc:42:b6: 9f:86:88:42:68:40:22:24:14:1b:a9:90:23:dc:e5: 7b:aa:7d:88:6c:60:cd:28:f3:89:aa:a1:89:7a:46: 4b:9a:54:24:38:38:84:d4:20:d0:ce:9b:95:84:0b: f0:46:f3:cb:6f:d4:05:d8:52:bc:07:d9:57:b1:cd: 66:ef:ad:12:77:ea:cb:7f:c7:3a:48:b6:1c:b9:b8: b8:67:69:8e:68:02:4f:e8:2a:7d:a0:4a:08:25:71: f9:c8:bb:7e:55:f8:e4:f7:3d:6e:53:d7:5c:c8:58: 32:9e:bb:8e:4d:2f:b9:d1:bc:9f:77:12:17:8f:f9: 08:c4:30:df:cc:af:ff:ee:11:d6:f2:8d:43:9d:26: 58:bc:e1:80:a7:22:27:66:f4:cd:5b:89:41:68:c3: 01:5b:96:39:c0:b5:78:16:77:4a:bf:52:35:41:f9: 36:9f:3e:0e:58:51:5f:b7:40:71:68:43:52:64:ae: f9:bd:a1:f0:35:34:bf:f5:74:dc:74:21:ec:7c:d4: da:a7:a3:c6:e9:f4:3d:f2:62:f1:6f:6c:0c:ec:33: f7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:C5:81:BA:BB:21:A8:42:F9:FE:BE:C8:9A:10:42:A0:E4:13:7D:19 X509v3 Authority Key Identifier: keyid:32:F2:6C:F3:9F:9F:BC:A7:F3:1F:53:95:F8:8D:D9:7D:94:70:D1:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:cc:ea:11:df:00:e3:0a:98:fa:6d:e4:f3:15:5c:1a:b1:92: 44:65:1b:46:b8:49:1f:03:a1:33:a4:66:cd:bb:c5:43:78:af: be:cd:dd:98:fe:e4:3f:5c:72:2e:fc:e7:31:d5:72:b3:d4:1a: 19:a0:7c:33:06:5e:7f:19:f5:70:c5:ed:6d:ad:0b:d1:96:7e: 56:34:ae:25:63:d4:cc:47:0a:1c:d8:e4:9a:cd:04:ab:43:c1: 03:1a:17:67:ea:5e:26:d6:3d:bd:50:83:ca:f1:a2:3a:e9:d3: df:93:c9:83:77:66:97:a7:b1:dd:58:8c:3c:ee:a1:0b:c4:74: 08:2a:3b:a4:57:54:6c:05:ec:3e:d6:8d:4a:ef:fa:d2:63:7d: b4:b7:57:6f:df:26:dd:a5:da:66:2b:6f:6d:10:72:48:6d:5a: f2:9e:35:d7:f6:7b:ff:c2:9a:30:ec:a8:93:f7:2d:50:8f:87: bc:43:9f:89:67:80:8b:de:ec:85:e8:55:ed:b1:46:06:1b:a4: 07:a0:99:62:22:7d:e4:d2:80:f8:0f:63:c1:10:b5:4f:0d:91: ea:9d:f2:e8:b3:8d:99:f1:0e:3c:79:d3:54:b8:c9:28:97:1c: fd:9d:2b:8e:80:e6:21:83:1e:a7:d1:78:51:37:0b:c1:a5:5b: 11:4b:41:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYwOTUxMTAvBgNVBAUTKDMyRjI2Q0YzOUY5RkJDQTdGMzFGNTM5NUY4OEREOTdE OTQ3MEQxOTcwHhcNMjUwODIyMTYxMDQ5WhcNMjUwODI5MTYxMDQ5WjAYMRYwFAYD VQQDEw02OGE4OTY4OS1mZGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzouP9bIJ2vt8st3x4vCFHvs8TKCzFsQJPhEh457ed4jlQ12xBtPW2y7MQraf hohCaEAiJBQbqZAj3OV7qn2IbGDNKPOJqqGJekZLmlQkODiE1CDQzpuVhAvwRvPL b9QF2FK8B9lXsc1m760Sd+rLf8c6SLYcubi4Z2mOaAJP6Cp9oEoIJXH5yLt+Vfjk 9z1uU9dcyFgynruOTS+50byfdxIXj/kIxDDfzK//7hHW8o1DnSZYvOGApyInZvTN W4lBaMMBW5Y5wLV4FndKv1I1Qfk2nz4OWFFft0BxaENSZK75vaHwNTS/9XTcdCHs fNTap6PG6fQ98mLxb2wM7DP3zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNPFgbq7 IahC+f6+yJoQQqDkE30ZMB8GA1UdIwQYMBaAFDLybPOfn7yn8x9TlfiN2X2UcNGX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjA5NS84Qzg5OUE0MkFC NTYxMUU2QjMyOUM0ODRDNEY5QUUwMi9NdkpzODUtZnZLZnpIMU9WLUkzWmZaUncw WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL012SnM4NS1mdktmekgxT1YtSTNaZlpSdzBaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjA5NS84Qzg5OUE0MkFCNTYxMUU2QjMyOUM0ODRDNEY5QUUwMi9NdkpzODUtZnZL ZnpIMU9WLUkzWmZaUncwWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvzOoR3wDjCpj6beTzFVwasZJEZRtGuEkfA6EzpGbNu8VDeK++zd2Y /uQ/XHIu/Ocx1XKz1BoZoHwzBl5/GfVwxe1trQvRln5WNK4lY9TMRwoc2OSazQSr Q8EDGhdn6l4m1j29UIPK8aI66dPfk8mDd2aXp7HdWIw87qELxHQIKjukV1RsBew+ 1o1K7/rSY320t1dv3ybdpdpmK29tEHJIbVrynjXX9nv/wpow7KiT9y1Qj4e8Q5+J Z4CL3uyF6FXtsUYGG6QHoJliIn3k0oD4D2PBELVPDZHqnfLos42Z8Q48edNUuMko lxz9nSuOgOYhgx6n0XhRNwvBpVsRS0FT -----END CERTIFICATE-----Generated at Sat Aug 23 16:18:27 2025 by rpki-client