$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft File: d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft (raw, json) Hash identifier: VGh89yOSZETZ9e4YEhibv+DNKOVwBf1bM31oPFUglxA= Subject key identifier: 42:88:49:C5:FF:C1:B3:71:6C:C9:EC:DC:ED:6D:B0:FC:10:9E:C5:F6 Authority key identifier: 77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49 Certificate issuer: /CN=A91C2CC7/serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49 Certificate serial: 1008 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft Manifest number: 0F87 Signing time: Fri 22 Aug 2025 17:43:59 +0000 Manifest this update: Fri 22 Aug 2025 17:43:59 +0000 Manifest next update: Fri 29 Aug 2025 17:43:59 +0000 Files and hashes: 1: d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl (hash: mZkGQ+KdAT4LRkLPB4f/OMdEwtSIFOWWALc5ydEitA4=) 2: B35E5B46334111EF9770A542C4F9AE02.roa (hash: peBWFc4X0iFG+O27BNeyO583I2fDfVq9k0IwtcGVyuo=) 3: B2AB6010721811F09FD98A22C4F9AE02.roa (hash: wIEPKrCJxeZRSiZdLH1odZTLGWweMxawrTUKzvXI4fM=) 4: B1F39E9C334111EF9770A542C4F9AE02.roa (hash: iEmTyBeOju9PtJnx00CmNtgmOZLVlNs//ZqqWislRCI=) 5: 2F787ACA71DC11F0B648E61EC4F9AE02.roa (hash: wE9Ja7ZzAfw7/oCX8jXb3Mmdvu+AmH7Xr6q2xftQxQg=) 6: 6AB0F2A2892611EEB5E27D69C4F9AE02.roa (hash: nicSmvXStk5YSg3xIJcJaFbSV0F719Jx8dhmknr9Hs0=) 7: B2A71CE2334111EF9770A542C4F9AE02.roa (hash: 2Ywvb7sewrJUK65Z9m1HnVKU4OlGnMWcWy/A4SYw1WY=) 8: 2EFFC95471DC11F0B648E61EC4F9AE02.roa (hash: IrKqf3WwcP3c1t/kdOeFbTBkd7MIU0BN08Rqrji/qUU=) 9: 931E0F7681C911EFA5B1D80BC4F9AE02.roa (hash: HvCeCNMd3cDYBcsUNmnAZgRE0yTF+p8FgFeiy4l06fs=) 10: 7BD12E3A480811EE8C512B0DC4F9AE02.roa (hash: PTHJR1ja6PHKnchzMzvjSZlwBo+yBYxt/AqG4ozJw5A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:43:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4104 (0x1008) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2CC7, serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49 Validity Not Before: Aug 22 17:43:59 2025 GMT Not After : Aug 29 17:43:59 2025 GMT Subject: CN=68a8ac5f-9cda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f7:b8:d2:a0:f3:27:e7:14:ae:f8:14:f0:e2: e8:ac:6d:9f:cc:b2:e1:27:a2:f2:11:72:1f:a5:23: 4a:a1:3f:91:e0:4b:99:3b:72:2c:d1:b4:c2:fa:d9: ca:70:ba:00:03:18:97:41:d8:46:03:fc:91:2d:c0: 98:86:56:27:a0:a1:69:41:83:cd:ad:04:63:62:eb: a9:79:fc:7e:5d:6a:27:7c:74:09:05:6e:4f:a1:dc: 1e:9b:39:83:21:0c:5c:35:36:69:66:5a:17:7b:4c: d5:c3:f2:08:ca:e8:4a:3d:12:c7:46:15:2b:74:ed: 0f:70:d9:90:55:ff:1a:4f:bf:0f:02:73:85:90:df: 1a:8b:28:46:07:d7:36:7c:0d:cb:bd:0d:44:8b:b2: 2b:a4:31:28:c0:38:fc:57:db:6f:3c:6a:93:55:9e: b5:b8:a7:b4:b4:8b:7e:f4:59:82:9f:97:71:49:24: 73:b1:c4:a1:08:bc:a7:6f:f7:57:18:a7:8b:10:e4: d6:14:fd:84:80:38:6d:23:ee:d5:44:a3:4b:45:1a: eb:33:cb:cb:6b:cb:1d:90:9e:aa:07:df:ad:d8:f6: 4e:df:8d:b9:0c:95:9a:a0:c1:af:24:49:a3:0d:1d: 93:9e:55:6f:72:15:9f:25:0f:23:be:7f:89:80:a7: c4:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:88:49:C5:FF:C1:B3:71:6C:C9:EC:DC:ED:6D:B0:FC:10:9E:C5:F6 X509v3 Authority Key Identifier: keyid:77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:d1:ea:6c:32:a8:25:09:63:df:46:ef:f7:04:04:92:24:3a: 2b:52:28:94:d3:5e:15:24:a2:8e:80:ce:0d:7a:9b:94:0b:eb: ed:24:78:db:0b:b3:36:0c:f6:3b:73:56:19:19:ba:4e:48:93: 55:e0:c8:bf:3c:5c:13:ba:6f:e2:cc:7f:88:d9:cb:5d:49:28: b8:d4:9a:e3:2e:fd:30:be:74:9f:7e:36:21:a0:58:67:5f:50: a2:a6:52:0b:11:78:74:c0:72:e9:a9:45:12:a4:5e:ea:e8:b7: 93:13:19:db:ee:09:2c:6d:d5:b6:0b:5a:be:b7:55:47:65:7e: 38:0b:69:80:0f:9f:5f:f9:c5:72:54:6f:b3:6d:0a:39:48:65: c2:2b:d5:69:7e:44:cf:b4:4e:5a:4c:f8:2c:ea:c1:37:2e:a1: 4b:40:f2:9f:4a:20:b4:38:b3:77:5d:4a:31:28:2c:a4:29:de: 3f:c8:78:ed:71:80:dc:6e:9e:48:1c:5b:e0:29:33:5c:0e:ee: 76:9e:52:51:fc:1d:55:cd:97:c2:a2:ea:81:b4:e3:58:d3:e5: aa:02:24:d4:42:e7:37:b4:65:a1:81:06:5b:e2:72:7a:b8:57: bd:79:01:5c:08:75:7f:b3:06:05:51:4b:d1:d0:bb:55:c7:54: 30:99:f1:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEAgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJDQzcxMTAvBgNVBAUTKDc3NDg2QjYxMEQzMzNBRUJEQThGMjU1QzUwMTQxMUIw MUYxOEZGNDkwHhcNMjUwODIyMTc0MzU5WhcNMjUwODI5MTc0MzU5WjAYMRYwFAYD VQQDEw02OGE4YWM1Zi05Y2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw/e40qDzJ+cUrvgU8OLorG2fzLLhJ6LyEXIfpSNKoT+R4EuZO3Is0bTC+tnK cLoAAxiXQdhGA/yRLcCYhlYnoKFpQYPNrQRjYuupefx+XWonfHQJBW5PodwemzmD IQxcNTZpZloXe0zVw/IIyuhKPRLHRhUrdO0PcNmQVf8aT78PAnOFkN8aiyhGB9c2 fA3LvQ1Ei7IrpDEowDj8V9tvPGqTVZ61uKe0tIt+9FmCn5dxSSRzscShCLynb/dX GKeLEOTWFP2EgDhtI+7VRKNLRRrrM8vLa8sdkJ6qB9+t2PZO3425DJWaoMGvJEmj DR2TnlVvchWfJQ8jvn+JgKfEgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEKIScX/ wbNxbMns3O1tsPwQnsX2MB8GA1UdIwQYMBaAFHdIa2ENMzrr2o8lXFAUEbAfGP9J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkNDNy83OTFDNkEzNDdC MzgxMUU5QkMwRDNCMzJDNEY5QUUwMi9kMGhyWVEwek91dmFqeVZjVUJRUnNCOFlf MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QwaHJZUTB6T3V2YWp5VmNVQlFSc0I4WV8way5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkNDNy83OTFDNkEzNDdCMzgxMUU5QkMwRDNCMzJDNEY5QUUwMi9kMGhyWVEwek91 dmFqeVZjVUJRUnNCOFlfMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDE0epsMqglCWPfRu/3BASSJDorUiiU014VJKKOgM4NepuUC+vtJHjb C7M2DPY7c1YZGbpOSJNV4Mi/PFwTum/izH+I2ctdSSi41JrjLv0wvnSffjYhoFhn X1CiplILEXh0wHLpqUUSpF7q6LeTExnb7gksbdW2C1q+t1VHZX44C2mAD59f+cVy VG+zbQo5SGXCK9VpfkTPtE5aTPgs6sE3LqFLQPKfSiC0OLN3XUoxKCykKd4/yHjt cYDcbp5IHFvgKTNcDu52nlJR/B1VzZfCouqBtONY0+WqAiTUQuc3tGWhgQZb4nJ6 uFe9eQFcCHV/swYFUUvR0LtVx1QwmfH9 -----END CERTIFICATE-----Generated at Sat Aug 23 10:56:58 2025 by rpki-client