$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft File: F_M9uCahQtM3xeuZhL4txPm8ZCk.mft (raw, json) Hash identifier: oaWJx7STJvlowhNwkhbABe+ASKCKhMu5rKQ5KK1wq0g= Subject key identifier: 65:9E:99:94:7F:04:57:DD:FC:0D:B5:79:BF:C5:A0:0E:BC:DC:32:41 Authority key identifier: 17:F3:3D:B8:26:A1:42:D3:37:C5:EB:99:84:BE:2D:C4:F9:BC:64:29 Certificate issuer: /CN=A91BFA29/serialNumber=17F33DB826A142D337C5EB9984BE2DC4F9BC6429 Certificate serial: 34D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft Manifest number: 34BF Signing time: Fri 22 Aug 2025 15:18:54 +0000 Manifest this update: Fri 22 Aug 2025 15:18:54 +0000 Manifest next update: Fri 29 Aug 2025 15:18:54 +0000 Files and hashes: 1: F_M9uCahQtM3xeuZhL4txPm8ZCk.crl (hash: FjUVvg+0pKIahXJkI1mcFsxzdoUeePLE5FZ2Pqtytp8=) 2: 3A42DAB8DE6311E8BFB1BF16C4F9AE02.roa (hash: diz+Mu2U4uCFECF4R8aohazh+vKfN3ig2+OPcHe2dC8=) 3: 91268A4A06F311F09EDDC851C4F9AE02.roa (hash: 7uOB6N38ardleWnTuq1RJZwPlZnlnhINCIW0PLcMR9s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.crl rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:18:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13524 (0x34d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFA29, serialNumber=17F33DB826A142D337C5EB9984BE2DC4F9BC6429 Validity Not Before: Aug 22 15:18:54 2025 GMT Not After : Aug 29 15:18:54 2025 GMT Subject: CN=68a88a5e-a597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d9:f0:dd:ca:fc:da:bd:15:9b:a6:97:fa:d6: 74:63:65:3f:88:f9:e2:f9:c8:47:7a:d9:84:9f:3f: 01:2c:c2:b7:e3:e6:aa:08:11:ca:51:7f:f6:d9:3d: 16:af:03:d7:7d:57:99:6d:71:63:0c:42:a2:23:b1: ed:c7:93:37:ca:0b:de:31:9d:73:c8:86:87:5f:10: 10:72:bd:b0:2e:87:60:f3:6c:57:1e:5e:d7:5f:a8: a0:31:9e:98:b2:49:a1:dc:be:83:0b:f6:84:a3:b5: 94:5f:f2:77:d9:b6:f9:67:d3:1d:07:7f:0e:0b:99: a6:2e:f4:02:cf:8f:c9:98:38:ab:a8:6f:d1:2d:2f: 46:70:72:00:89:46:8a:d4:e8:30:5b:04:f4:ba:ea: cd:56:af:09:36:1e:76:9f:6d:48:19:bd:25:74:ef: 31:21:e1:bc:02:b6:d9:bb:37:94:28:29:cd:32:04: 1c:37:f4:da:cb:bd:01:12:73:77:91:04:1f:75:c9: 99:6b:f9:00:60:cc:54:68:c5:3e:8b:06:ff:6f:cf: d7:d5:58:7a:80:d7:b9:94:a3:bd:df:be:c7:08:8e: 9a:82:96:44:e5:e1:15:54:65:16:32:af:18:00:c0: 52:7c:bd:f9:d5:2c:b7:05:76:06:01:3e:3c:43:51: 80:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:9E:99:94:7F:04:57:DD:FC:0D:B5:79:BF:C5:A0:0E:BC:DC:32:41 X509v3 Authority Key Identifier: keyid:17:F3:3D:B8:26:A1:42:D3:37:C5:EB:99:84:BE:2D:C4:F9:BC:64:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:f1:30:1f:15:20:c4:f7:06:b7:75:64:12:7e:6e:d2:aa:62: b1:04:02:d3:47:90:84:0e:6a:6e:21:f1:8c:a7:82:cd:f8:f5: 78:b4:59:4f:59:05:e1:6e:51:e0:29:0f:6b:34:39:1f:50:a5: ac:fc:6b:3d:13:6d:7f:6a:fc:c9:18:b2:6e:24:15:bc:80:8d: e7:21:27:ea:8e:dd:6c:46:31:4e:95:49:c1:7d:c0:da:2f:03: 59:6f:23:ff:b3:48:52:12:39:df:f1:7a:a8:76:7e:1e:89:08: 07:1a:b9:24:ba:8b:9f:67:fe:81:7e:dc:e6:0e:99:26:b3:1c: 1c:6a:a0:cc:63:93:04:57:9c:30:a9:f4:0c:68:9b:71:37:99: 67:b6:8c:22:62:4d:a3:a6:7c:c2:82:fa:7e:2e:32:45:0f:99: 89:be:77:14:c3:45:d7:ec:dc:a1:5f:4e:a8:3e:8c:04:b8:90: 9f:bd:d4:0e:d1:94:11:06:d3:63:02:5c:8f:e4:48:55:a5:58: 8a:54:07:11:15:22:03:7a:9c:62:56:ac:f0:15:58:06:9c:35: fe:fc:d6:46:10:9d:e0:92:9f:c0:83:43:d7:8f:5f:79:a0:ea: 04:d0:4a:7a:73:5d:c0:b1:81:a3:eb:74:0c:41:ba:ac:9c:b3: 52:1f:7c:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZBMjkxMTAvBgNVBAUTKDE3RjMzREI4MjZBMTQyRDMzN0M1RUI5OTg0QkUyREM0 RjlCQzY0MjkwHhcNMjUwODIyMTUxODU0WhcNMjUwODI5MTUxODU0WjAYMRYwFAYD VQQDEw02OGE4OGE1ZS1hNTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAydnw3cr82r0Vm6aX+tZ0Y2U/iPni+chHetmEnz8BLMK34+aqCBHKUX/22T0W rwPXfVeZbXFjDEKiI7Htx5M3ygveMZ1zyIaHXxAQcr2wLodg82xXHl7XX6igMZ6Y skmh3L6DC/aEo7WUX/J32bb5Z9MdB38OC5mmLvQCz4/JmDirqG/RLS9GcHIAiUaK 1OgwWwT0uurNVq8JNh52n21IGb0ldO8xIeG8ArbZuzeUKCnNMgQcN/Tay70BEnN3 kQQfdcmZa/kAYMxUaMU+iwb/b8/X1Vh6gNe5lKO9377HCI6agpZE5eEVVGUWMq8Y AMBSfL351Sy3BXYGAT48Q1GAOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGWemZR/ BFfd/A21eb/FoA683DJBMB8GA1UdIwQYMBaAFBfzPbgmoULTN8XrmYS+LcT5vGQp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkEyOS8wRjFBNEU2NDFE QUExMUUyOEU3MjdEQTUwOEIwMkNEMi9GX005dUNhaFF0TTN4ZXVaaEw0dHhQbTha Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZfTTl1Q2FoUXRNM3hldVpoTDR0eFBtOFpDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkEyOS8wRjFBNEU2NDFEQUExMUUyOEU3MjdEQTUwOEIwMkNEMi9GX005dUNhaFF0 TTN4ZXVaaEw0dHhQbThaQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAx8TAfFSDE9wa3dWQSfm7SqmKxBALTR5CEDmpuIfGMp4LN+PV4tFlP WQXhblHgKQ9rNDkfUKWs/Gs9E21/avzJGLJuJBW8gI3nISfqjt1sRjFOlUnBfcDa LwNZbyP/s0hSEjnf8Xqodn4eiQgHGrkkuoufZ/6BftzmDpkmsxwcaqDMY5MEV5ww qfQMaJtxN5lntowiYk2jpnzCgvp+LjJFD5mJvncUw0XX7NyhX06oPowEuJCfvdQO 0ZQRBtNjAlyP5EhVpViKVAcRFSIDepxiVqzwFVgGnDX+/NZGEJ3gkp/Ag0PXj195 oOoE0Ep6c13AsYGj63QMQbqsnLNSH3yI -----END CERTIFICATE-----Generated at Sat Aug 23 19:10:16 2025 by rpki-client