$ rpki-client -vvf rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft File: cB88FPCtfu9l000APNwZJGSM3jc.mft (raw, json) Hash identifier: KNBt2oY0aCdK5lsYvWk63iNUCI6UpbLg1174DAX6N5A= Subject key identifier: 7A:11:FC:E1:2A:5E:79:2F:48:4D:11:9F:16:12:30:FC:CA:55:64:B2 Authority key identifier: 70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37 Certificate issuer: /CN=A91C63A6/serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37 Certificate serial: 03EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft Manifest number: 03D3 Signing time: Sat 23 Aug 2025 00:52:13 +0000 Manifest this update: Sat 23 Aug 2025 00:52:13 +0000 Manifest next update: Sat 30 Aug 2025 00:52:12 +0000 Files and hashes: 1: cB88FPCtfu9l000APNwZJGSM3jc.crl (hash: 6m606lqRTRV9CxV+i+Z8iv7yNSur0+YWD/dmmg/Na1k=) 2: 7E16D3240B5011EE9A518C7BC4F9AE02.roa (hash: U0JaFB8CVVgKbLBmTTRMW+oeZZCXLA9kdsldXtwigwA=) 3: CDDEC562011711EEB15FDD2AC4F9AE02.roa (hash: PgsogDDZQkDovTqfqAZnCJjtewKfx64pNU23F3h3LOI=) 4: 2BF1D5F07E3511EE8CB63458C4F9AE02.roa (hash: xABbFnxjesSqqxHb5Z3LU/MaNyiAYDrCsWPlJjK46gQ=) 5: DF49B4400B4B11EEBAD3047AC4F9AE02.roa (hash: 5EplJ/qwJeqGMd35PNuR9x2zdZw/zJYIhHM0ma+2rK4=) 6: 513415BC400011EE88B66B4FC4F9AE02.roa (hash: La9bIBXUn7Pcc0HHfxEl2RzNwtBMPkoEmLR0KZnlaWs=) 7: 86550F680B4311EE8ABEE820C4F9AE02.roa (hash: yWfAEaYcbh5fjpOL87NsV9hi8Cg9epFjV+c+Su0AUew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:52:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1006 (0x3ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C63A6, serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37 Validity Not Before: Aug 23 00:52:13 2025 GMT Not After : Aug 30 00:52:12 2025 GMT Subject: CN=68a910bd-2ab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:21:cd:8c:0a:d0:5f:25:43:f8:bb:ab:3b:60: d2:dc:e4:fb:8a:2b:c4:80:96:98:f2:fe:67:fa:12: a6:ba:d3:89:f5:0c:99:f2:fc:e0:86:ec:c0:4f:5d: 11:c8:72:d6:0d:0d:52:29:28:0f:d2:80:b1:4d:05: 3b:3c:46:32:96:f9:b7:8a:d3:80:72:fd:36:07:cb: 9d:90:fc:17:fa:93:61:48:1c:1e:7b:96:fe:8c:83: 19:c1:af:c4:73:63:43:e3:d3:ea:4b:98:4d:8f:e1: 5a:97:1b:67:06:85:b7:27:dd:fa:d8:66:82:84:60: e3:9f:cd:ba:e3:db:07:2d:32:34:d8:93:20:34:51: a3:14:a9:12:2b:ad:51:ee:aa:7d:bf:61:5e:c7:76: 59:25:ac:1e:e9:71:70:39:fb:bf:ab:0b:81:b5:b0: ea:ce:a1:9e:c0:be:73:f2:31:f7:1d:b9:ad:30:14: 24:b3:1f:25:8e:da:d8:61:f6:c5:d1:75:f8:7f:d3: 7b:4d:53:f5:42:c0:f9:da:39:99:cd:be:7a:4d:33: bc:4d:b2:b0:b4:e4:95:c2:56:50:ba:14:df:10:36: 24:da:81:f0:6f:a9:05:36:14:a3:9b:bb:32:9c:c9: e4:55:a2:b9:94:5b:bb:93:f1:c1:28:4a:89:40:8a: d0:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:11:FC:E1:2A:5E:79:2F:48:4D:11:9F:16:12:30:FC:CA:55:64:B2 X509v3 Authority Key Identifier: keyid:70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:98:cf:cc:d6:c5:44:60:aa:20:21:de:08:ad:d0:b7:15:21: e2:2e:75:16:26:ed:4a:2d:41:a9:77:90:8a:b6:84:8f:6c:18: 34:e8:b0:de:9a:93:6b:10:c3:14:d7:a0:c3:53:84:e7:88:fe: 8a:88:f0:2b:a9:31:7d:b5:8d:bd:5c:47:5d:8d:d7:bd:83:d1: 9c:a7:e5:98:ea:85:35:d6:40:82:44:e8:ec:e2:b3:da:92:30: f6:bd:74:88:f2:83:75:30:d7:32:36:b5:a9:ee:72:23:94:d5: 99:e5:23:7a:11:57:aa:6c:d8:28:34:07:8d:f9:37:23:06:59: ba:e1:7d:dd:3c:65:cb:fd:01:6d:37:38:62:9e:48:46:d5:d5: 4c:be:63:8a:fd:3a:82:d9:f7:2a:5e:41:54:62:45:32:e5:b7: 22:ec:12:c7:90:31:a0:b8:c3:87:16:e3:ec:9f:d3:ba:05:40: 9a:b8:46:c1:37:85:6b:e8:f7:af:be:fb:aa:57:c7:a7:aa:58: f8:b1:99:07:0e:da:10:53:1b:97:f4:4d:67:57:d3:ab:d1:c6: 4b:78:9c:a3:8a:46:cb:f9:ab:11:52:27:71:54:14:91:ad:93: 23:5d:f5:81:9d:c8:61:0b:b3:78:9d:fa:c5:ee:a1:16:ab:35: 8e:ba:80:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYzQTYxMTAvBgNVBAUTKDcwMUYzQzE0RjBBRDdFRUY2NUQzNEQwMDNDREMxOTI0 NjQ4Q0RFMzcwHhcNMjUwODIzMDA1MjEzWhcNMjUwODMwMDA1MjEyWjAYMRYwFAYD VQQDEw02OGE5MTBiZC0yYWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5SHNjArQXyVD+LurO2DS3OT7iivEgJaY8v5n+hKmutOJ9QyZ8vzghuzAT10R yHLWDQ1SKSgP0oCxTQU7PEYylvm3itOAcv02B8udkPwX+pNhSBwee5b+jIMZwa/E c2ND49PqS5hNj+FalxtnBoW3J9362GaChGDjn82649sHLTI02JMgNFGjFKkSK61R 7qp9v2Fex3ZZJawe6XFwOfu/qwuBtbDqzqGewL5z8jH3HbmtMBQksx8ljtrYYfbF 0XX4f9N7TVP1QsD52jmZzb56TTO8TbKwtOSVwlZQuhTfEDYk2oHwb6kFNhSjm7sy nMnkVaK5lFu7k/HBKEqJQIrQpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHoR/OEq XnkvSE0RnxYSMPzKVWSyMB8GA1UdIwQYMBaAFHAfPBTwrX7vZdNNADzcGSRkjN43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjNBNi8wRDM5QzRFNDlB OUIxMUVDODJDNzBCMjBDNEY5QUUwMi9jQjg4RlBDdGZ1OWwwMDBBUE53WkpHU00z amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NCODhGUEN0ZnU5bDAwMEFQTndaSkdTTTNqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjNBNi8wRDM5QzRFNDlBOUIxMUVDODJDNzBCMjBDNEY5QUUwMi9jQjg4RlBDdGZ1 OWwwMDBBUE53WkpHU00zamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0mM/M1sVEYKogId4IrdC3FSHiLnUWJu1KLUGpd5CKtoSPbBg06LDe mpNrEMMU16DDU4TniP6KiPArqTF9tY29XEddjde9g9Gcp+WY6oU11kCCROjs4rPa kjD2vXSI8oN1MNcyNrWp7nIjlNWZ5SN6EVeqbNgoNAeN+TcjBlm64X3dPGXL/QFt NzhinkhG1dVMvmOK/TqC2fcqXkFUYkUy5bci7BLHkDGguMOHFuPsn9O6BUCauEbB N4Vr6PevvvuqV8enqlj4sZkHDtoQUxuX9E1nV9Or0cZLeJyjikbL+asRUidxVBSR rZMjXfWBnchhC7N4nfrF7qEWqzWOuoCa -----END CERTIFICATE-----Generated at Sat Aug 23 16:42:57 2025 by rpki-client