$ rpki-client -vvf rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.mft File: b814Gaj5P69A0OOH8htG6E3p1ws.mft (raw, json) Hash identifier: ysRS2Qs8GSDUq932X4bqS3hY1IoGW4cxGsXHI1P2WYs= Subject key identifier: C3:CF:DE:DF:7A:4C:50:00:8B:97:15:65:51:56:EB:D5:39:6D:CB:05 Authority key identifier: 6F:CD:78:19:A8:F9:3F:AF:40:D0:E3:87:F2:1B:46:E8:4D:E9:D7:0B Certificate issuer: /CN=A91B02A2/serialNumber=6FCD7819A8F93FAF40D0E387F21B46E84DE9D70B Certificate serial: 0154 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b814Gaj5P69A0OOH8htG6E3p1ws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.mft Manifest number: 0152 Signing time: Sat 23 Aug 2025 04:17:34 +0000 Manifest this update: Sat 23 Aug 2025 04:17:34 +0000 Manifest next update: Sat 30 Aug 2025 04:17:34 +0000 Files and hashes: 1: b814Gaj5P69A0OOH8htG6E3p1ws.crl (hash: PDYWG2xh8LHQ8ao0A0IafDl+fmz8Uy3eLSwzrGIIabw=) 2: 5D98833C77EC11EEA06F373BC4F9AE02.roa (hash: PTNlCaFqxgAXX8dh1a7LSvNmOXF/4erL00o7/e/JlJk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.crl rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b814Gaj5P69A0OOH8htG6E3p1ws.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:17:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 340 (0x154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B02A2, serialNumber=6FCD7819A8F93FAF40D0E387F21B46E84DE9D70B Validity Not Before: Aug 23 04:17:34 2025 GMT Not After : Aug 30 04:17:34 2025 GMT Subject: CN=68a940de-b588 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:78:8f:57:9f:78:f4:8d:e4:5c:f4:44:18:aa: 66:e3:16:12:9b:3d:74:91:4f:a0:7c:d5:5b:af:65: 5b:92:26:20:db:4c:b5:de:4f:d1:0d:07:a2:cf:52: 9d:56:a1:d7:88:28:26:ea:6b:58:c3:64:7e:59:a7: df:df:3c:13:1b:6d:88:bc:06:e8:7e:27:17:6c:91: 64:df:38:97:7d:67:25:cf:ab:3c:9b:05:c5:a3:b6: 13:27:c2:d6:50:c0:27:68:83:4f:9e:35:14:9f:b0: ea:b6:27:a2:1b:1d:fc:53:a1:ba:52:1b:68:36:f8: 1d:7a:b7:ca:bf:3f:5a:f9:0c:88:59:66:df:bf:76: 30:27:40:e6:bd:db:c3:ea:e5:c8:6d:4f:c8:cf:9f: f2:e1:2a:a3:d8:11:99:db:45:3f:f0:77:bf:fb:59: f9:6e:bc:29:32:10:c3:58:4b:20:35:af:cd:f4:58: a4:12:a5:3b:01:c8:18:40:6b:a9:b0:10:17:df:5a: 97:99:84:be:e8:67:9f:62:43:0f:50:26:c2:a4:1b: bf:f8:33:69:4c:13:3f:19:74:2c:71:50:bc:e4:42: 66:14:aa:f0:ef:b4:e4:35:50:8f:13:51:02:92:fd: 93:76:61:52:8e:0d:a2:17:09:48:1f:c2:7f:27:51: 8f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:CF:DE:DF:7A:4C:50:00:8B:97:15:65:51:56:EB:D5:39:6D:CB:05 X509v3 Authority Key Identifier: keyid:6F:CD:78:19:A8:F9:3F:AF:40:D0:E3:87:F2:1B:46:E8:4D:E9:D7:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b814Gaj5P69A0OOH8htG6E3p1ws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:c8:3b:c5:ff:f1:67:14:29:2c:d7:2d:31:91:ad:02:97:7a: 4d:bc:cd:65:3c:0a:88:a0:af:ed:a9:f5:5b:f2:96:f3:a4:69: 33:bb:8a:b0:67:5f:7e:9c:6e:87:1a:44:01:37:b0:6a:31:8b: 60:4b:2c:49:f8:45:46:d6:6f:3d:36:49:fe:62:d8:0b:ab:ad: 91:50:2f:05:2c:a0:5d:b8:04:32:3f:47:a9:a8:aa:a1:d1:2c: 34:8f:42:5b:8e:6f:78:39:9a:04:c6:26:90:94:12:c1:32:b4: b6:4a:90:8e:2d:9b:a8:1f:d7:eb:db:63:8c:a4:a7:94:ee:66: ff:4c:ae:cf:2d:ed:cc:75:7b:0e:29:ec:9e:4e:65:4b:01:a3: d7:02:fc:74:90:0a:77:74:ec:e4:54:da:22:fc:21:13:01:a8: 60:e5:6f:69:f0:8f:bb:bd:37:89:43:a4:46:3b:1a:ae:5d:e9: ef:fe:c2:56:a6:be:b7:66:3f:58:9f:39:e4:03:ea:f2:fa:7f: 7a:e5:f7:4f:69:5d:56:92:56:5b:8d:64:75:bd:9d:15:3d:fd: 36:22:99:3b:f4:65:40:45:71:72:a7:7c:82:55:d3:c2:cb:f3: 44:1c:ef:06:79:96:ef:9b:6b:ae:17:aa:0e:fc:26:c6:8b:d4: 0c:6b:9c:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAyQTIxMTAvBgNVBAUTKDZGQ0Q3ODE5QThGOTNGQUY0MEQwRTM4N0YyMUI0NkU4 NERFOUQ3MEIwHhcNMjUwODIzMDQxNzM0WhcNMjUwODMwMDQxNzM0WjAYMRYwFAYD VQQDEw02OGE5NDBkZS1iNTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5HiPV5949I3kXPREGKpm4xYSmz10kU+gfNVbr2VbkiYg20y13k/RDQeiz1Kd VqHXiCgm6mtYw2R+Waff3zwTG22IvAboficXbJFk3ziXfWclz6s8mwXFo7YTJ8LW UMAnaINPnjUUn7DqtieiGx38U6G6UhtoNvgderfKvz9a+QyIWWbfv3YwJ0DmvdvD 6uXIbU/Iz5/y4Sqj2BGZ20U/8He/+1n5brwpMhDDWEsgNa/N9FikEqU7AcgYQGup sBAX31qXmYS+6GefYkMPUCbCpBu/+DNpTBM/GXQscVC85EJmFKrw77TkNVCPE1EC kv2TdmFSjg2iFwlIH8J/J1GPwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMPP3t96 TFAAi5cVZVFW69U5bcsFMB8GA1UdIwQYMBaAFG/NeBmo+T+vQNDjh/IbRuhN6dcL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDJBMi9FRkQyMTU4NDc3 RUIxMUVFOTNCNjhCM0FDNEY5QUUwMi9iODE0R2FqNVA2OUEwT09IOGh0RzZFM3Ax d3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I4MTRHYWo1UDY5QTBPT0g4aHRHNkUzcDF3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDJBMi9FRkQyMTU4NDc3RUIxMUVFOTNCNjhCM0FDNEY5QUUwMi9iODE0R2FqNVA2 OUEwT09IOGh0RzZFM3Axd3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9yDvF//FnFCks1y0xka0Cl3pNvM1lPAqIoK/tqfVb8pbzpGkzu4qw Z19+nG6HGkQBN7BqMYtgSyxJ+EVG1m89Nkn+YtgLq62RUC8FLKBduAQyP0epqKqh 0Sw0j0Jbjm94OZoExiaQlBLBMrS2SpCOLZuoH9fr22OMpKeU7mb/TK7PLe3MdXsO KeyeTmVLAaPXAvx0kAp3dOzkVNoi/CETAahg5W9p8I+7vTeJQ6RGOxquXenv/sJW pr63Zj9YnznkA+ry+n965fdPaV1WklZbjWR1vZ0VPf02Ipk79GVARXFyp3yCVdPC y/NEHO8GeZbvm2uuF6oO/CbGi9QMa5zq -----END CERTIFICATE-----Generated at Sat Aug 23 14:16:07 2025 by rpki-client