$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft File: eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft (raw, json) Hash identifier: 2z5AUKJDRFFeAqXaBN7/sqmw1IV6vIxrFOjyJKOWo3s= Subject key identifier: D8:FA:AA:63:0A:FA:1B:E5:7E:69:0D:D5:24:B6:47:86:7A:9B:26:91 Authority key identifier: 79:75:03:3D:C5:D4:54:0F:16:AE:C1:21:28:6E:C4:14:CA:78:7D:6F Certificate issuer: /CN=A91BC5BC/serialNumber=7975033DC5D4540F16AEC121286EC414CA787D6F Certificate serial: 09DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eXUDPcXUVA8WrsEhKG7EFMp4fW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft Manifest number: 09D7 Signing time: Fri 22 Aug 2025 20:05:26 +0000 Manifest this update: Fri 22 Aug 2025 20:05:25 +0000 Manifest next update: Fri 29 Aug 2025 20:05:25 +0000 Files and hashes: 1: eXUDPcXUVA8WrsEhKG7EFMp4fW8.crl (hash: c9tK+d7kM/Sr0q61iY5PafURs+Lg7cMOeULPrgfuv+c=) 2: B1AF1C9C862311EA9052C281C4F9AE02.roa (hash: j3TvpWzSPFDlAyo3sD7Pw75i2w5zEIxOHyTqJM4+nXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.crl rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eXUDPcXUVA8WrsEhKG7EFMp4fW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:05:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2526 (0x9de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC5BC, serialNumber=7975033DC5D4540F16AEC121286EC414CA787D6F Validity Not Before: Aug 22 20:05:25 2025 GMT Not After : Aug 29 20:05:25 2025 GMT Subject: CN=68a8cd85-8006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a0:90:06:b8:92:08:94:3a:87:d0:11:1a:9d: e1:1c:c7:95:ba:e2:bb:68:5d:ab:24:24:6d:bd:23: b6:d9:31:e8:d8:78:eb:a2:99:48:35:01:f6:66:a7: 62:a8:5e:69:28:9b:95:9a:7b:47:99:11:8e:aa:8b: d2:32:41:d3:31:a5:63:2e:4c:0e:86:73:9d:64:1b: a5:71:fe:02:f0:7a:df:25:6a:b9:6f:c8:7f:3a:8c: a0:20:d7:6f:66:7e:56:66:c5:c9:82:a6:df:79:f5: 34:cc:19:0f:c2:31:37:6f:a6:f8:f6:0a:b6:de:b7: 50:7a:26:e9:59:7e:dd:50:f9:42:06:66:81:40:a3: 7c:b3:07:c5:09:fe:bd:91:09:ce:31:f9:3e:28:1a: 9d:7d:ef:38:ec:82:e7:97:c8:f7:73:ed:59:19:df: ab:dd:3f:48:2e:37:00:4c:4d:88:cc:90:77:21:a5: ca:67:df:a0:26:6f:42:f1:dd:23:a9:91:5b:bd:62: 42:e2:a1:e8:4a:4f:01:99:6c:78:8f:97:4e:0f:57: d1:83:1d:c3:06:52:8c:60:ac:08:35:15:f7:01:d5: a9:ea:bb:bf:ce:b1:92:ba:34:86:4e:3d:36:d8:be: 46:46:8c:ac:84:70:96:b6:f4:9a:4d:a7:48:4e:26: 5c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:FA:AA:63:0A:FA:1B:E5:7E:69:0D:D5:24:B6:47:86:7A:9B:26:91 X509v3 Authority Key Identifier: keyid:79:75:03:3D:C5:D4:54:0F:16:AE:C1:21:28:6E:C4:14:CA:78:7D:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eXUDPcXUVA8WrsEhKG7EFMp4fW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:32:0b:c6:40:18:45:b9:7f:1b:11:83:e2:25:f3:e3:77:33: 79:d6:a5:33:32:d6:81:6e:aa:43:88:80:0d:98:97:15:b1:f9: 3e:55:c4:26:7b:b8:90:11:9e:e6:e5:6e:c7:e9:1f:88:15:33: 47:b7:46:3d:61:e7:6e:5f:b5:8c:e7:b9:a6:c9:d9:61:23:e0: 02:d8:11:93:e0:0e:05:27:ba:6a:07:39:02:ca:ca:3e:9d:01: c0:31:51:5b:57:c5:56:cf:7c:c3:1f:b4:8e:02:45:8f:86:20: 3d:91:8a:aa:e9:e8:f7:91:90:3a:10:1e:b3:e1:83:7f:f4:42: 60:e7:83:95:75:58:0f:a4:b0:2e:41:63:d1:0f:ef:b6:fb:cf: 5c:cc:70:0f:ba:b2:20:cd:6c:ba:c3:f2:e0:d5:76:14:21:18: d1:7a:70:75:9f:e7:0c:7c:bf:7c:cd:c9:30:df:ef:f1:6d:10: 1d:cf:9b:80:16:ff:87:3b:70:e9:48:97:f4:09:7f:40:cc:4d: 9c:dd:72:54:6b:08:f0:29:be:67:b0:ed:12:dd:1e:dc:fd:29: af:6e:38:17:5e:14:c9:81:8f:a1:57:88:80:87:97:44:f0:1a: 44:40:c7:8e:83:c0:36:ae:3e:22:4c:7e:a7:7e:f3:02:c3:5f: 9a:da:69:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM1QkMxMTAvBgNVBAUTKDc5NzUwMzNEQzVENDU0MEYxNkFFQzEyMTI4NkVDNDE0 Q0E3ODdENkYwHhcNMjUwODIyMjAwNTI1WhcNMjUwODI5MjAwNTI1WjAYMRYwFAYD VQQDEw02OGE4Y2Q4NS04MDA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz6CQBriSCJQ6h9ARGp3hHMeVuuK7aF2rJCRtvSO22THo2HjroplINQH2Zqdi qF5pKJuVmntHmRGOqovSMkHTMaVjLkwOhnOdZBulcf4C8HrfJWq5b8h/OoygINdv Zn5WZsXJgqbfefU0zBkPwjE3b6b49gq23rdQeibpWX7dUPlCBmaBQKN8swfFCf69 kQnOMfk+KBqdfe847ILnl8j3c+1ZGd+r3T9ILjcATE2IzJB3IaXKZ9+gJm9C8d0j qZFbvWJC4qHoSk8BmWx4j5dOD1fRgx3DBlKMYKwINRX3AdWp6ru/zrGSujSGTj02 2L5GRoyshHCWtvSaTadITiZc5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNj6qmMK +hvlfmkN1SS2R4Z6myaRMB8GA1UdIwQYMBaAFHl1Az3F1FQPFq7BIShuxBTKeH1v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzVCQy8xM0VBQTQ3Qzg2 MjMxMUVBQTAwNTk4ODFDNEY5QUUwMi9lWFVEUGNYVVZBOFdyc0VoS0c3RUZNcDRm VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VYVURQY1hVVkE4V3JzRWhLRzdFRk1wNGZXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzVCQy8xM0VBQTQ3Qzg2MjMxMUVBQTAwNTk4ODFDNEY5QUUwMi9lWFVEUGNYVVZB OFdyc0VoS0c3RUZNcDRmVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNMgvGQBhFuX8bEYPiJfPjdzN51qUzMtaBbqpDiIANmJcVsfk+VcQm e7iQEZ7m5W7H6R+IFTNHt0Y9YeduX7WM57mmydlhI+AC2BGT4A4FJ7pqBzkCyso+ nQHAMVFbV8VWz3zDH7SOAkWPhiA9kYqq6ej3kZA6EB6z4YN/9EJg54OVdVgPpLAu QWPRD++2+89czHAPurIgzWy6w/Lg1XYUIRjRenB1n+cMfL98zckw3+/xbRAdz5uA Fv+HO3DpSJf0CX9AzE2c3XJUawjwKb5nsO0S3R7c/SmvbjgXXhTJgY+hV4iAh5dE 8BpEQMeOg8A2rj4iTH6nfvMCw1+a2mkW -----END CERTIFICATE-----Generated at Sun Aug 24 00:15:56 2025 by rpki-client