$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft File: 88hJQLK99AJViHBvWcHm7D0hR_A.mft (raw, json) Hash identifier: CFALGwx4SKlKWoFe2zZGdlkPTSlO7O/kSgPnLpbKaBY= Subject key identifier: 61:E5:13:E2:29:51:6A:8B:C5:B0:7F:1B:91:26:01:C9:96:3B:A1:91 Authority key identifier: F3:C8:49:40:B2:BD:F4:02:55:88:70:6F:59:C1:E6:EC:3D:21:47:F0 Certificate issuer: /CN=A91BCC23/serialNumber=F3C84940B2BDF4025588706F59C1E6EC3D2147F0 Certificate serial: 0152 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft Manifest number: 014D Signing time: Sat 23 Aug 2025 04:20:35 +0000 Manifest this update: Sat 23 Aug 2025 04:20:34 +0000 Manifest next update: Sat 30 Aug 2025 04:20:34 +0000 Files and hashes: 1: 88hJQLK99AJViHBvWcHm7D0hR_A.crl (hash: rIwWAd/UQMJ5Mf3bGLEaw38rKM4zOt6ztRA9K6wFtp8=) 2: D36C048A81E211EEAF423C87C4F9AE02.roa (hash: V7HVXcdZqekDWFKQPL+tYLxRmvuZTdFk8E168KA3XsM=) 3: FC3C8A6A81E211EE963BAB87C4F9AE02.roa (hash: JbS9HkiswWZnIjVLHQ7U/IfLENyl8w12PWlq4/4YX4g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.crl rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:20:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 338 (0x152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCC23, serialNumber=F3C84940B2BDF4025588706F59C1E6EC3D2147F0 Validity Not Before: Aug 23 04:20:34 2025 GMT Not After : Aug 30 04:20:34 2025 GMT Subject: CN=68a94192-acaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:cd:82:97:d6:cb:c8:2c:2c:f5:b8:76:a9:b9: 08:74:ff:7b:e6:83:9a:4d:92:f6:b7:64:53:67:7d: c3:51:a8:79:3e:20:64:57:69:66:09:ba:51:3b:ad: d6:36:dc:d6:ab:88:95:b3:fb:ee:df:bb:58:7f:a4: 22:a9:03:d4:ae:7b:85:6a:c4:9f:ca:36:27:3e:3f: df:10:13:1c:71:1d:9c:8b:eb:9d:b1:09:3c:cf:76: 42:c4:a6:4e:a9:10:3a:d6:32:32:3b:0c:df:16:71: 27:d8:4d:46:5b:e2:41:2f:74:ff:f6:48:81:de:1f: 94:f2:20:dc:65:f2:d5:2a:18:f9:2c:26:72:d0:8f: 44:e4:10:6d:a2:6c:d7:0e:60:99:30:ee:52:20:3a: 98:48:05:f8:81:f0:92:56:ea:c3:00:44:08:1f:87: 21:df:e8:26:f6:58:68:f1:50:99:23:e7:b3:5f:c7: 8d:0e:67:44:59:6a:1c:80:2c:e4:dd:ed:7a:5d:56: 6b:4f:05:4d:27:e8:3a:05:7d:ad:bd:41:67:3f:7c: db:c2:c9:7b:d9:32:c9:95:d4:c1:65:3a:cd:ae:5d: 77:7d:81:79:3e:0b:22:0d:91:4b:b2:a5:65:96:4b: 58:aa:8c:4e:62:13:ec:22:89:0b:5e:40:6f:bf:95: b8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:E5:13:E2:29:51:6A:8B:C5:B0:7F:1B:91:26:01:C9:96:3B:A1:91 X509v3 Authority Key Identifier: keyid:F3:C8:49:40:B2:BD:F4:02:55:88:70:6F:59:C1:E6:EC:3D:21:47:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:df:b3:be:78:e8:7c:46:88:de:1a:ee:4e:c2:e5:48:0c:0b: e0:a3:03:4c:ef:90:f5:6b:fc:f2:79:90:75:61:04:42:be:9f: 1a:9c:6a:ef:7d:f9:f5:7c:83:e7:61:25:88:d7:52:49:ea:88: 4b:bb:ac:a5:92:d3:fa:d5:89:fc:05:d6:ac:8c:73:11:26:d0: 7c:55:8f:53:07:29:80:15:ee:91:c6:8a:4a:7b:16:75:85:e0: 3f:b9:ba:3b:92:4d:76:ef:be:36:6e:94:6f:16:cc:ba:2a:a5: 73:6f:4d:db:99:da:4a:53:61:72:86:6d:51:3e:78:3a:75:c4: 13:fa:e8:ba:e5:13:a1:ea:ac:c8:85:f0:1e:5c:61:44:d7:88: 64:eb:c3:51:f9:d2:b1:95:e1:d3:46:9f:47:37:93:3f:ec:b9: 7e:be:2c:53:12:8e:59:15:75:08:c4:4f:ef:d6:03:bf:ec:4e: c1:9c:c3:b9:0f:fb:d2:64:fa:5d:7b:07:84:85:2c:05:b5:41: 44:62:26:b2:ef:56:53:08:98:17:6f:bc:9d:1b:12:43:7a:a3: 84:ff:1a:80:e5:fb:62:95:1d:39:f9:bd:97:f8:ad:cc:1b:70: 50:0b:f1:92:5e:7a:53:09:bb:ff:92:78:97:b4:26:3d:7e:84: a9:e0:9b:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkNDMjMxMTAvBgNVBAUTKEYzQzg0OTQwQjJCREY0MDI1NTg4NzA2RjU5QzFFNkVD M0QyMTQ3RjAwHhcNMjUwODIzMDQyMDM0WhcNMjUwODMwMDQyMDM0WjAYMRYwFAYD VQQDEw02OGE5NDE5Mi1hY2FmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6M2Cl9bLyCws9bh2qbkIdP975oOaTZL2t2RTZ33DUah5PiBkV2lmCbpRO63W NtzWq4iVs/vu37tYf6QiqQPUrnuFasSfyjYnPj/fEBMccR2ci+udsQk8z3ZCxKZO qRA61jIyOwzfFnEn2E1GW+JBL3T/9kiB3h+U8iDcZfLVKhj5LCZy0I9E5BBtomzX DmCZMO5SIDqYSAX4gfCSVurDAEQIH4ch3+gm9lho8VCZI+ezX8eNDmdEWWocgCzk 3e16XVZrTwVNJ+g6BX2tvUFnP3zbwsl72TLJldTBZTrNrl13fYF5PgsiDZFLsqVl lktYqoxOYhPsIokLXkBvv5W4hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGHlE+Ip UWqLxbB/G5EmAcmWO6GRMB8GA1UdIwQYMBaAFPPISUCyvfQCVYhwb1nB5uw9IUfw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0MyMy85MjVDODBDRTgx RTExMUVFOENGNjZCMEFDNEY5QUUwMi84OGhKUUxLOTlBSlZpSEJ2V2NIbTdEMGhS X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg4aEpRTEs5OUFKVmlIQnZXY0htN0QwaFJfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Q0MyMy85MjVDODBDRTgxRTExMUVFOENGNjZCMEFDNEY5QUUwMi84OGhKUUxLOTlB SlZpSEJ2V2NIbTdEMGhSX0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDH37O+eOh8RojeGu5OwuVIDAvgowNM75D1a/zyeZB1YQRCvp8anGrv ffn1fIPnYSWI11JJ6ohLu6ylktP61Yn8BdasjHMRJtB8VY9TBymAFe6RxopKexZ1 heA/ubo7kk127742bpRvFsy6KqVzb03bmdpKU2Fyhm1RPng6dcQT+ui65ROh6qzI hfAeXGFE14hk68NR+dKxleHTRp9HN5M/7Ll+vixTEo5ZFXUIxE/v1gO/7E7BnMO5 D/vSZPpdeweEhSwFtUFEYiay71ZTCJgXb7ydGxJDeqOE/xqA5ftilR05+b2X+K3M G3BQC/GSXnpTCbv/kniXtCY9foSp4Jsz -----END CERTIFICATE-----Generated at Sat Aug 23 18:35:41 2025 by rpki-client