$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/m1wSv5mrKIql16PWPDWI906bJtE.mft File: m1wSv5mrKIql16PWPDWI906bJtE.mft (raw, json) Hash identifier: UUjh3bQ5ZEqxVheYfm49hhGprtrvoGRBn/vCMwlL2k4= Subject key identifier: B7:B5:63:2C:9C:E4:47:2E:69:57:33:CF:26:21:0B:B0:39:1B:B1:9F Authority key identifier: 9B:5C:12:BF:99:AB:28:8A:A5:D7:A3:D6:3C:35:88:F7:4E:9B:26:D1 Certificate issuer: /CN=A91BB246/serialNumber=9B5C12BF99AB288AA5D7A3D63C3588F74E9B26D1 Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1wSv5mrKIql16PWPDWI906bJtE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/m1wSv5mrKIql16PWPDWI906bJtE.mft Manifest number: 30 Signing time: Sat 23 Aug 2025 07:56:30 +0000 Manifest this update: Sat 23 Aug 2025 07:56:29 +0000 Manifest next update: Sat 30 Aug 2025 07:56:29 +0000 Files and hashes: 1: m1wSv5mrKIql16PWPDWI906bJtE.crl (hash: pbr2I3oYJDqfrFIMN7SyTNBgSXKLbSs7sIoFgcLfaGI=) 2: 898E9EA83C0E11F093CFD060C4F9AE02.roa (hash: opFiT1AJRvuZEtPnqLFXpMlXJ+kJ3W1jD9M7G0TVPCk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/m1wSv5mrKIql16PWPDWI906bJtE.crl rsync://rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/m1wSv5mrKIql16PWPDWI906bJtE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1wSv5mrKIql16PWPDWI906bJtE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB246, serialNumber=9B5C12BF99AB288AA5D7A3D63C3588F74E9B26D1 Validity Not Before: Aug 23 07:56:29 2025 GMT Not After : Aug 30 07:56:29 2025 GMT Subject: CN=68a9742d-848a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a0:20:53:10:e8:32:14:d3:71:3e:04:bd:fa: 64:cd:5d:98:13:c2:8b:bd:85:c6:50:ce:b9:61:0d: e2:ca:fe:cb:7c:7e:69:4d:21:eb:91:4c:11:0b:00: 58:f1:59:57:4b:44:da:1c:8a:33:f2:03:c0:d7:50: f7:40:b8:51:eb:e3:b3:6c:34:21:24:b3:79:64:11: c1:36:c8:53:90:24:b3:30:81:50:32:39:a5:cb:78: e6:4e:0d:8f:da:37:a2:27:40:a3:de:40:99:03:7f: a7:c6:e0:e9:ee:46:18:65:5c:7c:ab:be:c9:6b:70: 5b:4e:89:d9:dd:5e:68:4a:f1:5d:c5:79:08:17:30: 02:e2:51:a6:1f:80:77:8c:cd:13:24:09:f4:a1:60: e8:47:71:32:8f:e4:5b:55:78:a6:e9:9f:27:f6:ea: 3b:9c:21:8a:d7:1f:71:d3:d1:81:d0:9a:3d:f3:dc: ba:16:aa:4d:d0:4c:ca:60:8a:c2:35:ed:57:d9:e3: e3:8b:8c:21:4a:f1:4b:aa:83:f0:bf:cd:81:90:69: 61:e0:be:2a:9c:a0:b4:60:e3:ae:28:87:ee:fa:08: 95:e6:f1:64:58:ab:e4:20:99:22:71:9d:35:c1:15: ce:80:2f:46:6b:4d:cc:28:3b:94:4d:09:95:f1:11: 8b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:B5:63:2C:9C:E4:47:2E:69:57:33:CF:26:21:0B:B0:39:1B:B1:9F X509v3 Authority Key Identifier: keyid:9B:5C:12:BF:99:AB:28:8A:A5:D7:A3:D6:3C:35:88:F7:4E:9B:26:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/m1wSv5mrKIql16PWPDWI906bJtE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1wSv5mrKIql16PWPDWI906bJtE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/m1wSv5mrKIql16PWPDWI906bJtE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:08:b9:c3:ec:92:ea:15:16:5c:9b:e1:c0:7a:36:81:81:5c: 64:db:55:87:61:52:92:33:d4:ff:84:d2:8a:1f:7e:cc:ca:63: 07:97:eb:a6:5b:f5:23:5a:98:1c:65:f6:9e:bd:f4:43:76:0b: 24:ee:de:7b:d0:37:f0:d7:34:9d:47:ad:52:2b:81:37:d7:76: 65:e6:3c:47:a4:5e:d4:8d:39:c8:46:1d:8e:f3:e9:55:d8:23: d9:4d:25:dd:ed:ca:6e:61:7e:66:48:51:56:58:ab:21:35:f8: c6:fb:cb:44:b6:17:62:8b:66:fe:ac:3b:61:2f:87:34:19:87: 39:16:60:84:8e:a5:a7:dd:a9:81:a2:fe:be:f0:31:b2:d7:9f: 52:85:bb:c5:ed:cb:d5:4a:81:c5:a8:8a:31:2d:e2:73:d6:65: 6e:1e:c7:e1:53:e4:1c:a8:28:c3:c4:0e:4e:65:c2:fd:60:81: f8:ca:c0:0a:01:56:02:dd:e4:f2:64:c8:e7:85:57:bc:ef:49: 32:ca:69:68:16:b8:39:7f:d4:61:0a:cf:98:32:12:57:88:8f: 80:03:1a:e9:ee:72:1d:7e:25:06:99:49:ff:80:27:c5:a6:28: 14:af:2c:54:18:50:ad:8d:b4:04:c1:fc:d2:91:9d:1c:c8:78: 5e:95:a0:5d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QjI0NjExMC8GA1UEBRMoOUI1QzEyQkY5OUFCMjg4QUE1RDdBM0Q2M0MzNTg4Rjc0 RTlCMjZEMTAeFw0yNTA4MjMwNzU2MjlaFw0yNTA4MzAwNzU2MjlaMBgxFjAUBgNV BAMTDTY4YTk3NDJkLTg0OGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwoCBTEOgyFNNxPgS9+mTNXZgTwou9hcZQzrlhDeLK/st8fmlNIeuRTBELAFjx WVdLRNocijPyA8DXUPdAuFHr47NsNCEks3lkEcE2yFOQJLMwgVAyOaXLeOZODY/a N6InQKPeQJkDf6fG4OnuRhhlXHyrvslrcFtOidndXmhK8V3FeQgXMALiUaYfgHeM zRMkCfShYOhHcTKP5FtVeKbpnyf26jucIYrXH3HT0YHQmj3z3LoWqk3QTMpgisI1 7VfZ4+OLjCFK8Uuqg/C/zYGQaWHgviqcoLRg464oh+76CJXm8WRYq+QgmSJxnTXB Fc6AL0ZrTcwoO5RNCZXxEYsvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUt7VjLJzk Ry5pVzPPJiELsDkbsZ8wHwYDVR0jBBgwFoAUm1wSv5mrKIql16PWPDWI906bJtEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCMjQ2L0ZBMDAwMzgwM0Mw RDExRjA5NkNDREI1RkM0RjlBRTAyL20xd1N2NW1yS0lxbDE2UFdQRFdJOTA2Ykp0 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbTF3U3Y1bXJLSXFsMTZQV1BEV0k5MDZiSnRFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC MjQ2L0ZBMDAwMzgwM0MwRDExRjA5NkNDREI1RkM0RjlBRTAyL20xd1N2NW1yS0lx bDE2UFdQRFdJOTA2Ykp0RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA8IucPskuoVFlyb4cB6NoGBXGTbVYdhUpIz1P+E0ooffszKYweX66Zb 9SNamBxl9p699EN2CyTu3nvQN/DXNJ1HrVIrgTfXdmXmPEekXtSNOchGHY7z6VXY I9lNJd3tym5hfmZIUVZYqyE1+Mb7y0S2F2KLZv6sO2EvhzQZhzkWYISOpafdqYGi /r7wMbLXn1KFu8Xty9VKgcWoijEt4nPWZW4ex+FT5ByoKMPEDk5lwv1ggfjKwAoB VgLd5PJkyOeFV7zvSTLKaWgWuDl/1GEKz5gyEleIj4ADGunuch1+JQaZSf+AJ8Wm KBSvLFQYUK2NtATB/NKRnRzIeF6VoF0= -----END CERTIFICATE-----Generated at Sat Aug 23 16:27:28 2025 by rpki-client