$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft File: -SrbMNtsD5zpgLXbl3FF-MGcgks.mft (raw, json) Hash identifier: +3R8GciF/EjuEPY/raWSD9ScUjhahsI69zDCYVzt/G0= Subject key identifier: D2:A2:6F:55:CE:07:1A:FF:21:50:97:CE:CA:F2:04:7F:6D:D2:E9:79 Authority key identifier: F9:2A:DB:30:DB:6C:0F:9C:E9:80:B5:DB:97:71:45:F8:C1:9C:82:4B Certificate issuer: /CN=A91C0FCC/serialNumber=F92ADB30DB6C0F9CE980B5DB977145F8C19C824B Certificate serial: 094A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft Manifest number: 0943 Signing time: Fri 22 Aug 2025 20:20:10 +0000 Manifest this update: Fri 22 Aug 2025 20:20:09 +0000 Manifest next update: Fri 29 Aug 2025 20:20:09 +0000 Files and hashes: 1: -SrbMNtsD5zpgLXbl3FF-MGcgks.crl (hash: r6S8vGvMGcj5Ke5hXWmyzunTTy+OT5IAccfuKVsGASc=) 2: A778AAF6A42111EAB3108934C4F9AE02.roa (hash: nYjWOytssQAvKUrx53OAPZHiEKpRdEsbmRx5MJFOOy4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.crl rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:20:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2378 (0x94a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0FCC, serialNumber=F92ADB30DB6C0F9CE980B5DB977145F8C19C824B Validity Not Before: Aug 22 20:20:09 2025 GMT Not After : Aug 29 20:20:09 2025 GMT Subject: CN=68a8d0fa-ce9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7f:62:18:20:8b:d2:e6:9b:c6:00:d0:6e:34: 4e:82:2a:83:c9:59:e1:88:ae:ee:2b:7b:da:70:f8: 7b:c1:f9:8d:de:f5:89:46:b4:e0:31:77:a1:d5:67: 5b:40:a3:e4:de:ed:c0:fa:e8:ad:4a:a3:20:7d:e8: d8:75:6c:39:4b:96:c9:b0:86:2b:58:3d:73:c5:8f: 8d:40:b1:e2:fe:5d:a7:6c:4e:7f:7b:09:0e:41:c8: c3:4f:be:66:f7:9d:d4:5a:5a:23:5d:7d:44:3f:58: 3c:07:b9:75:f1:6a:e3:e0:71:1a:b0:c2:58:7d:21: 7f:aa:70:03:5b:4b:2e:43:e8:4d:7d:d8:13:fe:3d: 8a:2f:74:65:59:73:c6:39:6f:aa:a4:11:0f:4d:d1: e9:73:9b:69:c7:fb:82:ef:9f:72:ee:d3:a4:6b:98: bc:3f:ef:76:dc:21:eb:bb:b9:f5:ef:8f:01:21:99: a4:0a:d3:d4:6a:8b:2d:bd:c6:a1:8b:61:91:5a:f5: e2:2e:9b:be:34:0e:81:6c:bc:29:65:ca:84:c3:b8: 88:c0:f0:e2:2a:f2:1c:d6:a5:24:28:cc:95:e1:57: 13:5b:91:c3:08:4d:29:23:24:ad:45:b2:c4:b2:28: 37:3c:3b:6a:c9:2b:16:0a:f9:95:51:08:f2:4d:e8: d3:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:A2:6F:55:CE:07:1A:FF:21:50:97:CE:CA:F2:04:7F:6D:D2:E9:79 X509v3 Authority Key Identifier: keyid:F9:2A:DB:30:DB:6C:0F:9C:E9:80:B5:DB:97:71:45:F8:C1:9C:82:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:9f:5c:c9:1b:d9:e8:d4:9e:c8:59:26:f8:9b:87:42:78:b1: 0a:b6:10:3c:07:03:b8:c6:15:66:ea:3a:6f:57:3e:68:49:9c: 50:4d:c4:cc:49:11:d2:5f:7d:65:f5:aa:b6:e0:de:e7:25:f2: 66:59:0b:9b:50:04:03:fd:67:81:74:36:46:54:06:ac:9c:cb: 30:75:09:89:3c:7e:f8:4b:ba:d1:ea:1c:fb:2b:ee:b5:bc:47: 16:83:de:c8:56:9b:3b:a8:60:2f:76:34:6a:6e:ee:be:55:93: 4f:69:70:94:65:e3:8b:5e:7d:65:1d:ed:c7:02:da:02:2b:89: 60:ea:aa:06:66:30:1c:b5:d6:1c:cb:71:7c:d8:a3:8e:39:48: d4:b0:a0:06:4f:93:7f:71:12:c5:38:3c:fd:9f:36:9e:a0:13: c2:a5:f4:6b:dc:e8:e1:6e:39:46:e9:1f:13:79:c7:3b:aa:20: 5c:f2:11:ea:fa:f4:04:8a:d4:39:1e:30:4e:77:c9:06:22:f4: 37:5e:de:30:97:32:2f:3e:5e:58:10:00:b4:4f:a1:c5:12:93: 3b:cf:c4:5f:53:35:63:74:8f:65:ad:f9:3b:7f:6b:3f:9a:1e: aa:56:1b:77:4c:bb:a7:37:92:77:d5:46:e8:e6:26:26:7a:2f: 70:f0:9d:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBGQ0MxMTAvBgNVBAUTKEY5MkFEQjMwREI2QzBGOUNFOTgwQjVEQjk3NzE0NUY4 QzE5QzgyNEIwHhcNMjUwODIyMjAyMDA5WhcNMjUwODI5MjAyMDA5WjAYMRYwFAYD VQQDEw02OGE4ZDBmYS1jZTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu39iGCCL0uabxgDQbjROgiqDyVnhiK7uK3vacPh7wfmN3vWJRrTgMXeh1Wdb QKPk3u3A+uitSqMgfejYdWw5S5bJsIYrWD1zxY+NQLHi/l2nbE5/ewkOQcjDT75m 953UWlojXX1EP1g8B7l18Wrj4HEasMJYfSF/qnADW0suQ+hNfdgT/j2KL3RlWXPG OW+qpBEPTdHpc5tpx/uC759y7tOka5i8P+923CHru7n1748BIZmkCtPUaostvcah i2GRWvXiLpu+NA6BbLwpZcqEw7iIwPDiKvIc1qUkKMyV4VcTW5HDCE0pIyStRbLE sig3PDtqySsWCvmVUQjyTejT7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNKib1XO Bxr/IVCXzsryBH9t0ul5MB8GA1UdIwQYMBaAFPkq2zDbbA+c6YC125dxRfjBnIJL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEZDQy9GNUM0MjQwOEE0 MUYxMUVBQkRDMkY1MzFDNEY5QUUwMi8tU3JiTU50c0Q1enBnTFhibDNGRi1NR2Nn a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1TcmJNTnRzRDV6cGdMWGJsM0ZGLU1HY2drcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEZDQy9GNUM0MjQwOEE0MUYxMUVBQkRDMkY1MzFDNEY5QUUwMi8tU3JiTU50c0Q1 enBnTFhibDNGRi1NR2Nna3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjn1zJG9no1J7IWSb4m4dCeLEKthA8BwO4xhVm6jpvVz5oSZxQTcTM SRHSX31l9aq24N7nJfJmWQubUAQD/WeBdDZGVAasnMswdQmJPH74S7rR6hz7K+61 vEcWg97IVps7qGAvdjRqbu6+VZNPaXCUZeOLXn1lHe3HAtoCK4lg6qoGZjActdYc y3F82KOOOUjUsKAGT5N/cRLFODz9nzaeoBPCpfRr3OjhbjlG6R8Tecc7qiBc8hHq +vQEitQ5HjBOd8kGIvQ3Xt4wlzIvPl5YEAC0T6HFEpM7z8RfUzVjdI9lrfk7f2s/ mh6qVht3TLunN5J31Ubo5iYmei9w8J0M -----END CERTIFICATE-----Generated at Sat Aug 23 19:03:22 2025 by rpki-client