$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft File: 0m38xFnFMcUEmANsxs5nBrgGF1I.mft (raw, json) Hash identifier: qLL214lYQKqo+qq1SgpIsAh8zNbj3YvtjLbRPqDrQGs= Subject key identifier: E0:46:88:BD:8C:2B:ED:47:A7:1A:54:8B:E9:BB:0B:00:43:EF:FF:2F Authority key identifier: D2:6D:FC:C4:59:C5:31:C5:04:98:03:6C:C6:CE:67:06:B8:06:17:52 Certificate issuer: /CN=A91C1DA6/serialNumber=D26DFCC459C531C50498036CC6CE6706B8061752 Certificate serial: 0D42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft Manifest number: 0D38 Signing time: Fri 22 Aug 2025 18:08:27 +0000 Manifest this update: Fri 22 Aug 2025 18:08:26 +0000 Manifest next update: Fri 29 Aug 2025 18:08:26 +0000 Files and hashes: 1: 0m38xFnFMcUEmANsxs5nBrgGF1I.crl (hash: 1m5leeYDla5WpEUbqCqKESQ9s4jNM14+Q/iXtI1HC0U=) 2: 5563895C378911EABB08EC0EC4F9AE02.roa (hash: WnvG/G2ljF/bLCjnLck6amfr8nqRxURnaP7xF6JQcoo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.crl rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3394 (0xd42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1DA6, serialNumber=D26DFCC459C531C50498036CC6CE6706B8061752 Validity Not Before: Aug 22 18:08:26 2025 GMT Not After : Aug 29 18:08:26 2025 GMT Subject: CN=68a8b21b-1d46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ca:b6:52:17:25:76:d0:de:c2:13:88:fa:b1: 54:59:04:eb:7b:47:5b:71:80:ba:f2:23:dc:bc:b5: 1e:a6:76:e3:2b:8f:ce:96:49:55:10:b1:d4:c3:03: 9e:72:42:57:ca:77:31:d1:d9:09:48:72:15:da:b9: 5f:43:11:c3:6e:ca:94:d5:5d:9f:07:06:eb:6b:b2: fb:e0:48:76:95:a1:30:2e:b8:ff:90:28:f3:2f:13: 60:7f:e6:5e:65:ec:d2:15:d8:e7:28:0d:d3:af:b8: 22:81:f4:df:94:c3:f7:3f:29:32:9e:a0:70:c7:f4: 0d:4c:76:da:21:1b:84:ad:4e:dc:c7:c7:10:42:93: 8f:f1:8a:09:08:51:71:92:3d:a4:f5:80:95:2b:a1: a7:20:81:28:0f:ab:1b:bb:0b:62:03:75:90:1a:8d: 94:0e:23:e4:f2:85:5e:5f:6c:f8:e5:60:ce:dc:a4: 7d:64:0f:ac:77:54:d6:8f:ee:fc:f2:fa:60:a1:26: 1b:da:a1:2b:9e:6e:98:6a:1f:61:d7:f7:52:37:c6: 8a:1b:8c:00:6b:f3:97:c6:f7:92:19:65:9f:ee:23: 67:aa:5b:64:2d:99:82:bd:1d:ac:23:d8:0d:a7:af: 13:aa:59:aa:c7:aa:0e:be:3f:4f:5c:18:78:a5:70: 56:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:46:88:BD:8C:2B:ED:47:A7:1A:54:8B:E9:BB:0B:00:43:EF:FF:2F X509v3 Authority Key Identifier: keyid:D2:6D:FC:C4:59:C5:31:C5:04:98:03:6C:C6:CE:67:06:B8:06:17:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:ec:2f:2c:88:d7:dd:a4:68:8a:fd:ce:72:9a:79:ed:01:35: 8d:1c:35:3f:42:e5:de:50:2b:9e:3e:1a:6b:6b:ad:17:ec:3b: 3c:25:47:38:6c:80:f0:46:b1:15:96:ef:c7:40:08:3d:51:fc: 4f:93:0e:65:ff:c5:16:36:5c:38:84:52:7b:82:6f:99:ff:03: 16:f1:6c:de:a0:ed:51:07:b0:02:bd:89:a4:17:fc:76:33:d5: b6:69:22:d1:fd:e1:f4:7a:56:b7:fd:b7:50:32:c5:6a:88:52: e7:79:2e:7b:04:ad:f4:1c:dc:0f:03:32:b0:b9:49:8e:c0:27: 64:c6:45:5c:c7:74:43:80:a8:f5:b1:3c:aa:36:a2:1c:7b:cc: 6b:a5:b8:5a:6d:c1:cb:38:8f:41:b1:86:44:cb:00:12:1a:f2: 47:78:59:10:cd:9e:94:8f:ca:e4:79:62:17:e4:78:87:de:bc: 96:11:6e:3a:93:b0:6a:79:dc:ac:a9:f5:69:33:76:e7:b2:9a: 06:d2:8e:9d:0d:24:b5:e7:eb:d9:18:df:d9:19:c4:5d:d2:4c: 33:3e:9a:d4:50:41:23:52:7c:ce:e9:12:c7:54:22:e0:f4:19: 19:6e:06:7d:84:32:a5:ff:7b:de:03:cb:dd:6f:20:d3:2d:87: 7f:1f:a2:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFEQTYxMTAvBgNVBAUTKEQyNkRGQ0M0NTlDNTMxQzUwNDk4MDM2Q0M2Q0U2NzA2 QjgwNjE3NTIwHhcNMjUwODIyMTgwODI2WhcNMjUwODI5MTgwODI2WjAYMRYwFAYD VQQDEw02OGE4YjIxYi0xZDQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmcq2UhcldtDewhOI+rFUWQTre0dbcYC68iPcvLUepnbjK4/OlklVELHUwwOe ckJXyncx0dkJSHIV2rlfQxHDbsqU1V2fBwbra7L74Eh2laEwLrj/kCjzLxNgf+Ze ZezSFdjnKA3Tr7gigfTflMP3PykynqBwx/QNTHbaIRuErU7cx8cQQpOP8YoJCFFx kj2k9YCVK6GnIIEoD6sbuwtiA3WQGo2UDiPk8oVeX2z45WDO3KR9ZA+sd1TWj+78 8vpgoSYb2qErnm6Yah9h1/dSN8aKG4wAa/OXxveSGWWf7iNnqltkLZmCvR2sI9gN p68Tqlmqx6oOvj9PXBh4pXBWuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOBGiL2M K+1HpxpUi+m7CwBD7/8vMB8GA1UdIwQYMBaAFNJt/MRZxTHFBJgDbMbOZwa4BhdS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMURBNi9EQjE4QjhFNkRE REYxMUU5OTkzQ0YyNjVDNEY5QUUwMi8wbTM4eEZuRk1jVUVtQU5zeHM1bkJyZ0dG MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBtMzh4Rm5GTWNVRW1BTnN4czVuQnJnR0YxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MURBNi9EQjE4QjhFNkREREYxMUU5OTkzQ0YyNjVDNEY5QUUwMi8wbTM4eEZuRk1j VUVtQU5zeHM1bkJyZ0dGMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCt7C8siNfdpGiK/c5ymnntATWNHDU/QuXeUCuePhpra60X7Ds8JUc4 bIDwRrEVlu/HQAg9UfxPkw5l/8UWNlw4hFJ7gm+Z/wMW8WzeoO1RB7ACvYmkF/x2 M9W2aSLR/eH0ela3/bdQMsVqiFLneS57BK30HNwPAzKwuUmOwCdkxkVcx3RDgKj1 sTyqNqIce8xrpbhabcHLOI9BsYZEywASGvJHeFkQzZ6Uj8rkeWIX5HiH3ryWEW46 k7BqedysqfVpM3bnspoG0o6dDSS15+vZGN/ZGcRd0kwzPprUUEEjUnzO6RLHVCLg 9BkZbgZ9hDKl/3veA8vdbyDTLYd/H6J3 -----END CERTIFICATE-----Generated at Sun Aug 24 00:46:53 2025 by rpki-client