$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft File: 1fbdY8A4EGCv-8nSDtMPB_veiOo.mft (raw, json) Hash identifier: rW5lXzn9XCDNCdIt3BF7SeKAbDxDdKPRiV81hqb6hvk= Subject key identifier: 91:C0:BB:1B:93:E5:2F:84:86:94:74:7C:83:CA:C5:7F:C6:DE:FB:96 Authority key identifier: D5:F6:DD:63:C0:38:10:60:AF:FB:C9:D2:0E:D3:0F:07:FB:DE:88:EA Certificate issuer: /CN=A91BBF7F/serialNumber=D5F6DD63C0381060AFFBC9D20ED30F07FBDE88EA Certificate serial: 0F12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft Manifest number: 0EFA Signing time: Fri 22 Aug 2025 17:45:22 +0000 Manifest this update: Fri 22 Aug 2025 17:45:21 +0000 Manifest next update: Fri 29 Aug 2025 17:45:21 +0000 Files and hashes: 1: 1fbdY8A4EGCv-8nSDtMPB_veiOo.crl (hash: 5m1HaV0oyz21UWedA09R4S2pcPaqJ7YDUOyst6mmSMs=) 2: 656CB24EC9F611ED9853C583C4F9AE02.roa (hash: w9f85Y+KRBnRa0YJSmsDyyhylh1UfaYw453pU7HjF1A=) 3: 64554290C9F611ED9853C583C4F9AE02.roa (hash: OKUbU8IYBtUlB8hYEhyLNWGvkxYq3YMYoLZU29fzMeU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.crl rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:45:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3858 (0xf12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBF7F, serialNumber=D5F6DD63C0381060AFFBC9D20ED30F07FBDE88EA Validity Not Before: Aug 22 17:45:21 2025 GMT Not After : Aug 29 17:45:21 2025 GMT Subject: CN=68a8acb1-6e9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:74:d5:bc:dc:3a:cc:35:c5:83:84:86:18:1c: 1f:d1:e0:6d:34:ed:f5:22:79:36:fe:ac:1c:62:8c: 7f:1a:58:3a:8e:4f:aa:92:a6:e0:0a:ba:24:2f:b3: 28:eb:77:ba:74:5f:45:18:1c:8d:b2:6c:cf:2b:c4: db:d5:0a:46:b1:6c:8e:43:3e:dd:fe:70:45:3f:bd: 79:80:02:22:15:73:16:b4:31:3e:1e:9c:70:83:d9: bf:34:74:6c:6d:75:25:a9:bb:11:16:fc:d5:45:11: db:26:ab:a0:91:1c:ee:0c:64:d7:3b:7a:e5:72:f7: 18:17:07:85:f6:90:df:63:94:fe:57:ed:1e:0a:38: 37:a9:33:ee:12:e4:ce:8d:0a:c5:b7:1a:48:2e:75: 84:e9:80:db:d6:23:d2:6b:23:62:8e:60:a6:02:fa: 86:01:be:54:fd:ff:98:3a:47:00:c6:44:4a:af:42: 68:b2:ec:01:bc:b1:2e:39:97:34:ae:33:4b:78:2d: d7:b5:e2:0b:1e:45:60:db:2e:68:02:37:2b:55:9e: 26:6e:ec:2e:7d:d9:e3:dc:d4:4a:20:50:69:85:7b: 41:f7:48:42:ee:9a:23:8e:90:a4:c5:7b:82:ea:7d: 0f:b3:e0:04:cb:c6:85:11:10:9f:59:86:d5:fb:95: 10:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:C0:BB:1B:93:E5:2F:84:86:94:74:7C:83:CA:C5:7F:C6:DE:FB:96 X509v3 Authority Key Identifier: keyid:D5:F6:DD:63:C0:38:10:60:AF:FB:C9:D2:0E:D3:0F:07:FB:DE:88:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:f0:d0:d6:68:6d:c8:b9:4c:67:93:6b:52:e7:a5:c6:10:4d: 54:e6:67:c6:76:58:3a:90:91:f7:f5:dd:2c:d5:2a:7a:ff:78: d0:dc:9a:c4:b5:7d:60:d5:f2:3a:73:b8:9a:94:94:b7:8c:1d: c4:a5:7e:e6:e5:11:8b:2d:01:86:9b:b4:84:09:17:ec:f5:0c: a7:2f:42:20:0b:fd:19:c5:57:14:11:70:3b:36:6e:97:2b:9a: 56:3f:91:c1:99:3f:ca:89:ac:41:e0:5d:ad:70:f2:e5:67:93: 33:6f:a1:09:03:fd:df:48:58:62:d2:73:b4:85:4f:4f:4e:ba: b3:f7:97:c4:a8:97:5e:21:fd:60:43:e7:b4:4b:e6:ab:80:15: 2a:57:28:0f:59:0f:dc:e7:68:0f:f3:0e:ad:6c:37:a9:2d:52: 06:3f:e7:99:2b:ff:db:5e:1f:04:e4:4b:5a:aa:e8:d0:59:54: 01:8d:2a:4a:68:f9:a3:5a:cc:e4:ce:9d:f6:8f:8c:84:ea:a3: 48:15:55:c6:ac:8c:01:06:96:27:75:b2:00:26:f3:30:d3:20: bd:e9:1b:55:72:08:49:f3:86:bf:01:dd:68:9a:5a:0c:20:f1: 67:9f:33:16:95:c8:25:3b:33:69:e1:e1:90:ba:58:ab:93:02: 1f:7f:b3:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDxIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJGN0YxMTAvBgNVBAUTKEQ1RjZERDYzQzAzODEwNjBBRkZCQzlEMjBFRDMwRjA3 RkJERTg4RUEwHhcNMjUwODIyMTc0NTIxWhcNMjUwODI5MTc0NTIxWjAYMRYwFAYD VQQDEw02OGE4YWNiMS02ZTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAynTVvNw6zDXFg4SGGBwf0eBtNO31Ink2/qwcYox/Glg6jk+qkqbgCrokL7Mo 63e6dF9FGByNsmzPK8Tb1QpGsWyOQz7d/nBFP715gAIiFXMWtDE+Hpxwg9m/NHRs bXUlqbsRFvzVRRHbJqugkRzuDGTXO3rlcvcYFweF9pDfY5T+V+0eCjg3qTPuEuTO jQrFtxpILnWE6YDb1iPSayNijmCmAvqGAb5U/f+YOkcAxkRKr0JosuwBvLEuOZc0 rjNLeC3XteILHkVg2y5oAjcrVZ4mbuwufdnj3NRKIFBphXtB90hC7pojjpCkxXuC 6n0Ps+AEy8aFERCfWYbV+5UQHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJHAuxuT 5S+EhpR0fIPKxX/G3vuWMB8GA1UdIwQYMBaAFNX23WPAOBBgr/vJ0g7TDwf73ojq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkY3Ri80NTNFQjZGNDg3 NDUxMUU5QkY4NjQ0NUNDNEY5QUUwMi8xZmJkWThBNEVHQ3YtOG5TRHRNUEJfdmVp T28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFmYmRZOEE0RUdDdi04blNEdE1QQl92ZWlPby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkY3Ri80NTNFQjZGNDg3NDUxMUU5QkY4NjQ0NUNDNEY5QUUwMi8xZmJkWThBNEVH Q3YtOG5TRHRNUEJfdmVpT28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCB8NDWaG3IuUxnk2tS56XGEE1U5mfGdlg6kJH39d0s1Sp6/3jQ3JrE tX1g1fI6c7ialJS3jB3EpX7m5RGLLQGGm7SECRfs9QynL0IgC/0ZxVcUEXA7Nm6X K5pWP5HBmT/KiaxB4F2tcPLlZ5Mzb6EJA/3fSFhi0nO0hU9PTrqz95fEqJdeIf1g Q+e0S+argBUqVygPWQ/c52gP8w6tbDepLVIGP+eZK//bXh8E5EtaqujQWVQBjSpK aPmjWszkzp32j4yE6qNIFVXGrIwBBpYndbIAJvMw0yC96RtVcghJ84a/Ad1omloM IPFnnzMWlcglOzNp4eGQulirkwIff7OF -----END CERTIFICATE-----Generated at Sat Aug 23 13:39:48 2025 by rpki-client