$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft File: F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft (raw, json) Hash identifier: R0Y9ukjzHE2V2lMLytF3fGl+6QfxgtLd7K1V7luZIZ0= Subject key identifier: 36:A5:85:58:97:1E:65:FF:32:0D:5D:62:B3:71:59:B2:10:C1:10:C0 Authority key identifier: 17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01 Certificate issuer: /CN=A91B5073/serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01 Certificate serial: 0908 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft Manifest number: 197D Signing time: Fri 22 Aug 2025 17:27:36 +0000 Manifest this update: Fri 22 Aug 2025 17:27:36 +0000 Manifest next update: Fri 29 Aug 2025 17:27:36 +0000 Files and hashes: 1: F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl (hash: g23dtGDyzPQ0C6QNbOe7I8JbpcLO4fy/ET3ktK2tV7M=) 2: E864BB28711111F0AB5B373CC4F9AE02.roa (hash: iYcDINyCrpgRlPat4N3nqbkCgHIiFTbqdTNSDBYjpsw=) 3: 8CB86F5AC21A11EFAB75870CC4F9AE02.roa (hash: WQb8lcNBaBBkPoF6ncdjgRAg3hdCvuxgxSDRSWRx1cY=) 4: 13C3DD4E711211F0982E3257C4F9AE02.roa (hash: ZD3FeOvWZIdy5qMctGftHFy+iG+271qaPYPQ7cYZfGM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:27:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2312 (0x908) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5073, serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01 Validity Not Before: Aug 22 17:27:36 2025 GMT Not After : Aug 29 17:27:36 2025 GMT Subject: CN=68a8a888-fd71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0b:c4:d6:72:cc:4e:99:ec:d8:5d:cf:62:34: c0:0d:90:c9:06:96:57:c2:d7:84:19:b6:d9:de:a7: 5e:45:b2:c1:b9:df:50:20:49:99:a0:a2:9b:fe:a1: 76:43:8b:5d:fb:23:83:1f:18:01:e0:d2:5b:e2:4d: c3:ac:b8:31:0f:7a:14:ca:8c:91:d3:ee:e8:3e:68: 85:04:bd:d5:77:17:ba:41:2a:68:c9:32:01:c0:54: 6a:b5:a5:55:b5:a8:10:1f:35:70:11:76:2c:29:fc: 2b:d8:8b:3f:b6:e9:e9:6e:0e:38:c5:b9:de:73:a6: f8:73:32:74:85:ae:50:ac:06:fc:d8:64:0e:8c:2b: f6:1f:a6:e3:c1:b2:9f:f3:83:27:ee:a3:7b:8a:b1: cf:47:69:03:8b:37:7f:4d:d4:0c:1d:cf:81:8e:02: 9f:56:19:88:34:31:5b:fc:6e:34:02:eb:b0:28:54: a2:0f:fe:f8:c5:b6:f9:a2:aa:bc:1d:55:a9:92:23: b6:e9:6f:ea:75:4f:e7:8e:c3:25:72:66:bc:b2:ab: d9:db:a5:08:eb:c8:9f:9f:71:b1:e5:b6:0d:39:29: ea:6b:19:75:ba:ab:aa:85:bb:42:0d:db:03:ba:55: 51:67:9f:f1:49:84:ea:19:43:d5:3e:27:4e:fc:4e: 91:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:A5:85:58:97:1E:65:FF:32:0D:5D:62:B3:71:59:B2:10:C1:10:C0 X509v3 Authority Key Identifier: keyid:17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:17:1d:3f:16:db:6d:7a:49:7a:37:8f:92:56:c9:c7:15:20: 2c:29:45:27:34:18:5a:c9:24:48:75:e0:ed:8b:dc:36:15:1b: fd:7b:53:12:51:75:d1:99:49:d7:ea:b4:a1:04:ca:21:f1:65: 4a:05:61:2a:97:fe:4e:98:ed:64:64:73:05:76:65:93:3b:04: 60:25:0a:65:2c:32:55:31:92:4e:7b:85:3d:7b:4a:90:66:fb: 44:39:83:20:cb:e1:ef:20:ab:dc:ad:94:6f:f4:64:cb:56:27: 5b:c0:86:cf:81:64:33:08:0f:3a:ae:57:a7:e2:3a:42:8f:f7: c7:c7:ae:cd:21:2c:ab:45:49:18:f0:63:c8:ec:e5:48:47:51: 7d:e0:de:03:1c:92:65:d7:8b:66:e7:42:71:94:7a:53:74:9d: d0:45:58:99:be:20:16:10:25:2f:c8:ff:d1:18:3a:2d:6b:e8: b7:e9:bb:37:f8:66:6c:b1:18:be:14:c2:04:d2:bf:ab:a5:e2: 44:83:c1:c3:d8:ac:0e:61:36:4d:1d:bf:84:a4:6e:46:2f:06: 7a:f8:64:9e:d4:db:0d:90:c9:8f:0f:21:8a:7a:0e:bd:09:ac: b8:51:ea:26:0b:d5:95:a8:74:98:d7:2d:7f:0e:ce:65:a7:6c: fe:5c:75:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUwNzMxMTAvBgNVBAUTKDE3ODE3Q0I4Mjg5MjMxQjQ3MDdFOUQ1QjQwNkQ1OEFG Rjc5RDFFMDEwHhcNMjUwODIyMTcyNzM2WhcNMjUwODI5MTcyNzM2WjAYMRYwFAYD VQQDEw02OGE4YTg4OC1mZDcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAywvE1nLMTpns2F3PYjTADZDJBpZXwteEGbbZ3qdeRbLBud9QIEmZoKKb/qF2 Q4td+yODHxgB4NJb4k3DrLgxD3oUyoyR0+7oPmiFBL3Vdxe6QSpoyTIBwFRqtaVV tagQHzVwEXYsKfwr2Is/tunpbg44xbnec6b4czJ0ha5QrAb82GQOjCv2H6bjwbKf 84Mn7qN7irHPR2kDizd/TdQMHc+BjgKfVhmINDFb/G40AuuwKFSiD/74xbb5oqq8 HVWpkiO26W/qdU/njsMlcma8sqvZ26UI68ifn3Gx5bYNOSnqaxl1uquqhbtCDdsD ulVRZ5/xSYTqGUPVPidO/E6R1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDalhViX HmX/Mg1dYrNxWbIQwRDAMB8GA1UdIwQYMBaAFBeBfLgokjG0cH6dW0BtWK/3nR4B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTA3My80M0YxNjI2NDMz OTUxMUU5QkZCMUMyMUFDNEY5QUUwMi9GNEY4dUNpU01iUndmcDFiUUcxWXJfZWRI Z0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Y0Rjh1Q2lTTWJSd2ZwMWJRRzFZcl9lZEhnRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTA3My80M0YxNjI2NDMzOTUxMUU5QkZCMUMyMUFDNEY5QUUwMi9GNEY4dUNpU01i UndmcDFiUUcxWXJfZWRIZ0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3Fx0/Ftttekl6N4+SVsnHFSAsKUUnNBhaySRIdeDti9w2FRv9e1MS UXXRmUnX6rShBMoh8WVKBWEql/5OmO1kZHMFdmWTOwRgJQplLDJVMZJOe4U9e0qQ ZvtEOYMgy+HvIKvcrZRv9GTLVidbwIbPgWQzCA86rlen4jpCj/fHx67NISyrRUkY 8GPI7OVIR1F94N4DHJJl14tm50JxlHpTdJ3QRViZviAWECUvyP/RGDota+i36bs3 +GZssRi+FMIE0r+rpeJEg8HD2KwOYTZNHb+EpG5GLwZ6+GSe1NsNkMmPDyGKeg69 Cay4UeomC9WVqHSY1y1/Ds5lp2z+XHVb -----END CERTIFICATE-----Generated at Sun Aug 24 01:01:58 2025 by rpki-client