$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft File: fBlP7bilyMl2697IST3zw_CMyOI.mft (raw, json) Hash identifier: IikhpaUvXj1BKxtAsT9Gbi0TsHvtXerjAaF/2bQqJuY= Subject key identifier: 57:06:A4:41:2D:FC:FD:A6:DC:CC:35:2A:E2:18:6B:88:B3:12:21:55 Authority key identifier: 7C:19:4F:ED:B8:A5:C8:C9:76:EB:DE:C8:49:3D:F3:C3:F0:8C:C8:E2 Certificate issuer: /CN=A91BE056/serialNumber=7C194FEDB8A5C8C976EBDEC8493DF3C3F08CC8E2 Certificate serial: 0124 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft Manifest number: 011E Signing time: Fri 22 Aug 2025 23:33:57 +0000 Manifest this update: Fri 22 Aug 2025 23:33:56 +0000 Manifest next update: Fri 29 Aug 2025 23:33:56 +0000 Files and hashes: 1: fBlP7bilyMl2697IST3zw_CMyOI.crl (hash: rDMSiWPwg3gZOf45MLjbWSePGQyJvL1AdowhJ2cH2GQ=) 2: C7AAEA76637311EF97465324C4F9AE02.roa (hash: 7qAgqeHaZPQYvPPHuv1+My9lZgN4hj2uJJ26C3QxuHc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.crl rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 292 (0x124) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE056, serialNumber=7C194FEDB8A5C8C976EBDEC8493DF3C3F08CC8E2 Validity Not Before: Aug 22 23:33:56 2025 GMT Not After : Aug 29 23:33:56 2025 GMT Subject: CN=68a8fe65-ea11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2a:84:18:c3:cf:ce:b0:77:8b:c1:d6:5d:cd: cc:2f:ca:ae:9f:5d:ea:91:a7:d9:6d:61:c1:ad:01: 3f:a7:52:aa:b3:c6:2b:22:68:60:07:57:13:e2:73: 48:e4:73:1f:2d:c6:16:da:b8:eb:86:43:e5:2a:e9: 1e:e3:04:0a:ce:6e:e6:ce:30:ea:39:ce:52:90:10: 4c:ef:bc:88:fb:f7:e6:dd:54:9e:c4:c4:95:58:f4: 7a:ff:bc:a4:5a:e9:71:12:a9:d7:a4:69:54:b0:8f: 1c:ce:b6:9c:9a:73:ca:38:a3:91:64:c7:7e:b3:61: a4:20:7b:1e:1c:b5:ad:f7:2f:34:2d:a0:95:90:e6: a5:e0:ca:cf:c8:bb:44:f4:c9:cd:c0:e6:f3:d5:fb: 00:a9:31:43:76:f9:de:7c:0c:0a:ed:50:56:95:0c: d4:71:a6:a7:f6:a8:49:ff:cc:3a:88:af:56:a5:a9: 12:30:f7:75:57:4a:39:5f:05:d9:0d:79:f2:d8:9e: d8:ff:e8:17:ce:31:c0:3a:c4:b2:39:9e:d9:03:c6: 92:bb:9a:1f:29:91:9e:26:cc:45:48:55:e3:e4:a3: 14:1b:05:77:c6:94:5e:1c:d8:59:4d:36:84:83:29: dc:b4:95:4f:4d:ac:b9:86:e8:ed:73:72:7d:ba:23: c1:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:06:A4:41:2D:FC:FD:A6:DC:CC:35:2A:E2:18:6B:88:B3:12:21:55 X509v3 Authority Key Identifier: keyid:7C:19:4F:ED:B8:A5:C8:C9:76:EB:DE:C8:49:3D:F3:C3:F0:8C:C8:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:3e:09:61:6b:3f:f7:17:ba:2d:47:c1:14:a5:ab:f9:1c:14: 07:59:0e:b5:d5:e7:b5:5b:33:b2:d8:90:5a:46:28:03:1b:fa: a9:0e:37:8a:1d:32:65:07:70:74:63:52:11:47:b3:f3:11:a9: 80:d8:9d:42:2b:da:21:4f:c1:c3:6f:fc:5b:b4:95:fc:3c:9d: 3c:bc:20:f8:ab:79:cf:52:78:e0:58:14:8c:f6:3f:13:3b:ea: f6:ff:68:e4:3b:0d:d4:c0:58:db:f8:49:29:a6:15:47:17:cf: 65:93:cf:43:ca:07:b4:ea:39:e6:9d:7b:07:9e:94:9f:67:0c: 03:33:9a:5f:b3:d1:84:44:d4:39:c2:2b:c0:41:8e:29:3d:0e: c7:04:c4:ce:53:1a:f4:79:78:77:c7:fd:bc:df:df:1f:e7:a1: 28:d7:26:af:fd:67:80:4c:02:db:95:27:df:ac:2b:08:01:af: 12:9f:35:99:12:3e:76:b2:f9:34:e9:7b:ec:ee:d7:43:cc:dd: 9a:df:c8:8b:32:1b:f4:b7:c4:be:0e:6c:e1:1d:f4:d3:39:01: 29:0b:9a:96:ae:24:d1:32:84:f5:80:af:92:dd:83:e7:98:e7: aa:b9:cd:1d:4e:17:6e:14:fc:2b:56:5a:14:cc:d5:80:d7:0a: 69:57:d5:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUwNTYxMTAvBgNVBAUTKDdDMTk0RkVEQjhBNUM4Qzk3NkVCREVDODQ5M0RGM0Mz RjA4Q0M4RTIwHhcNMjUwODIyMjMzMzU2WhcNMjUwODI5MjMzMzU2WjAYMRYwFAYD VQQDEw02OGE4ZmU2NS1lYTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuyqEGMPPzrB3i8HWXc3ML8qun13qkafZbWHBrQE/p1Kqs8YrImhgB1cT4nNI 5HMfLcYW2rjrhkPlKuke4wQKzm7mzjDqOc5SkBBM77yI+/fm3VSexMSVWPR6/7yk WulxEqnXpGlUsI8czracmnPKOKORZMd+s2GkIHseHLWt9y80LaCVkOal4MrPyLtE 9MnNwObz1fsAqTFDdvnefAwK7VBWlQzUcaan9qhJ/8w6iK9WpakSMPd1V0o5XwXZ DXny2J7Y/+gXzjHAOsSyOZ7ZA8aSu5ofKZGeJsxFSFXj5KMUGwV3xpReHNhZTTaE gynctJVPTay5hujtc3J9uiPBqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFcGpEEt /P2m3Mw1KuIYa4izEiFVMB8GA1UdIwQYMBaAFHwZT+24pcjJduveyEk988PwjMji MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTA1Ni8wMDNFMTE1OEQ3 OEIxMUVFQTJFQkQ3MTJDNEY5QUUwMi9mQmxQN2JpbHlNbDI2OTdJU1QzendfQ015 T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZCbFA3YmlseU1sMjY5N0lTVDN6d19DTXlPSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTA1Ni8wMDNFMTE1OEQ3OEIxMUVFQTJFQkQ3MTJDNEY5QUUwMi9mQmxQN2JpbHlN bDI2OTdJU1QzendfQ015T0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLPglhaz/3F7otR8EUpav5HBQHWQ611ee1WzOy2JBaRigDG/qpDjeK HTJlB3B0Y1IRR7PzEamA2J1CK9ohT8HDb/xbtJX8PJ08vCD4q3nPUnjgWBSM9j8T O+r2/2jkOw3UwFjb+EkpphVHF89lk89Dyge06jnmnXsHnpSfZwwDM5pfs9GERNQ5 wivAQY4pPQ7HBMTOUxr0eXh3x/28398f56Eo1yav/WeATALblSffrCsIAa8SnzWZ Ej52svk06Xvs7tdDzN2a38iLMhv0t8S+DmzhHfTTOQEpC5qWriTRMoT1gK+S3YPn mOequc0dThduFPwrVloUzNWA1wppV9UG -----END CERTIFICATE-----Generated at Sat Aug 23 12:44:22 2025 by rpki-client