$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft File: rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft (raw, json) Hash identifier: TgiCtvRppuwpe5jDKKLxj5+3z51GLfSONOIGrQXTHDU= Subject key identifier: D9:85:6C:F3:C4:78:D9:89:A4:8D:78:39:02:16:5F:BE:2A:6D:4D:43 Authority key identifier: AD:F3:12:EA:68:B7:F0:5D:A6:10:10:80:F9:83:22:FB:D6:59:18:B2 Certificate issuer: /CN=A91CB765/serialNumber=ADF312EA68B7F05DA6101080F98322FBD65918B2 Certificate serial: 0518 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft Manifest number: 0509 Signing time: Fri 22 Aug 2025 23:50:59 +0000 Manifest this update: Fri 22 Aug 2025 23:50:59 +0000 Manifest next update: Fri 29 Aug 2025 23:50:59 +0000 Files and hashes: 1: rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl (hash: 9HNkCQ2Vji10FB44RcWmgpjlNUhRrUshbKa5DU0H7q8=) 2: F9A8F3561F3D11ECB2E88C32C4F9AE02.roa (hash: VeKl0MHR8TI54m6waTajw/toZ1ifpbQZ1lUNcn/xegU=) 3: E66070EE36F911F0B0111510C4F9AE02.roa (hash: s0fTkj19sRTx/+BDg72CnNonlKPiE7C9YigY/ZfS3pw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:50:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1304 (0x518) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB765, serialNumber=ADF312EA68B7F05DA6101080F98322FBD65918B2 Validity Not Before: Aug 22 23:50:59 2025 GMT Not After : Aug 29 23:50:59 2025 GMT Subject: CN=68a90263-4b6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7a:e5:ce:68:83:4f:05:bc:1f:78:fe:11:85: 70:3a:b4:62:eb:07:a4:02:e6:96:70:bf:c6:0e:12: b9:9b:f2:12:47:6a:83:e2:a1:6e:11:cd:51:a8:78: 76:53:a9:6c:83:68:1d:87:56:ed:ce:a1:e0:77:8c: 97:3b:d6:e7:40:be:13:25:1a:9d:e3:15:6a:49:b2: 66:60:af:95:bd:20:68:7e:95:f2:60:4e:0f:d1:0d: 5a:7a:e9:1a:85:f9:ef:51:68:e1:8c:52:b7:1e:4f: 3d:80:e4:ef:9a:ac:35:c4:62:e6:7f:18:23:49:bf: 74:5d:03:f7:6e:af:0a:ce:8f:0d:e0:f6:ac:54:83: f3:67:dc:34:0a:c0:e7:aa:d6:56:ae:b4:83:09:3c: 0d:a3:7c:09:a4:af:1a:12:07:30:c8:c3:f9:c4:08: 3b:a0:7d:05:fa:ed:6d:72:b7:64:ae:06:a0:d4:5f: 47:32:e0:2a:cf:f7:df:75:58:2d:1e:79:57:16:87: 34:8f:5a:41:b0:9c:ee:37:18:96:d8:6d:d6:d8:6e: 00:30:a6:68:af:c2:17:b2:b1:cb:93:61:8f:30:08: 2e:36:58:2f:92:7e:d2:eb:37:a8:92:d4:f7:5b:87: fc:37:a8:27:4c:85:fa:dd:b1:d3:78:41:c1:35:d9: 46:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:85:6C:F3:C4:78:D9:89:A4:8D:78:39:02:16:5F:BE:2A:6D:4D:43 X509v3 Authority Key Identifier: keyid:AD:F3:12:EA:68:B7:F0:5D:A6:10:10:80:F9:83:22:FB:D6:59:18:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:22:e4:35:90:3e:64:c8:dc:cd:f1:44:12:29:d3:e4:36:7b: 71:92:4e:de:f8:2b:87:81:fd:9e:62:c4:36:24:cc:fc:a5:90: 77:5d:38:70:4a:2c:cf:5e:9a:28:d4:b5:91:fd:b3:17:0c:39: ff:a2:b9:13:6c:ab:e7:eb:6f:5c:b8:df:8b:01:f2:43:98:3a: 81:63:16:15:9b:dd:2a:c3:b1:ae:05:02:6e:98:7f:8e:8f:3a: dc:e1:96:51:55:77:cb:9c:90:5e:f4:ac:5e:58:28:14:a6:b9: 2d:90:82:e5:f4:4a:37:ae:ee:88:32:92:69:4b:64:82:45:e8: d0:15:0a:d9:bf:0a:cc:6a:23:9b:43:47:12:71:18:fe:16:88: e7:4c:12:52:1e:a9:08:05:2d:28:ac:6f:30:19:66:33:60:fa: 98:22:e1:6d:2e:8d:b8:9e:61:c5:f3:c7:64:02:6c:33:1d:5d: df:e8:90:fa:e7:ea:24:bb:cc:6c:62:95:a2:a0:3f:06:91:9d: 43:d4:eb:b1:57:59:be:67:e7:44:18:e0:ef:91:c5:38:e4:15: 15:f9:fd:4a:44:7b:30:ee:39:4b:63:09:5d:a5:1f:cd:2d:2e: f2:f8:60:b1:75:91:98:51:1c:7e:77:d2:9b:ae:3a:26:14:a5: 65:64:21:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I3NjUxMTAvBgNVBAUTKEFERjMxMkVBNjhCN0YwNURBNjEwMTA4MEY5ODMyMkZC RDY1OTE4QjIwHhcNMjUwODIyMjM1MDU5WhcNMjUwODI5MjM1MDU5WjAYMRYwFAYD VQQDEw02OGE5MDI2My00YjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzXrlzmiDTwW8H3j+EYVwOrRi6wekAuaWcL/GDhK5m/ISR2qD4qFuEc1RqHh2 U6lsg2gdh1btzqHgd4yXO9bnQL4TJRqd4xVqSbJmYK+VvSBofpXyYE4P0Q1aeuka hfnvUWjhjFK3Hk89gOTvmqw1xGLmfxgjSb90XQP3bq8Kzo8N4PasVIPzZ9w0CsDn qtZWrrSDCTwNo3wJpK8aEgcwyMP5xAg7oH0F+u1tcrdkrgag1F9HMuAqz/ffdVgt HnlXFoc0j1pBsJzuNxiW2G3W2G4AMKZor8IXsrHLk2GPMAguNlgvkn7S6zeoktT3 W4f8N6gnTIX63bHTeEHBNdlGxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNmFbPPE eNmJpI14OQIWX74qbU1DMB8GA1UdIwQYMBaAFK3zEupot/BdphAQgPmDIvvWWRiy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjc2NS9BNERERkE5NDFG M0IxMUVDQjdEQzQ1MkZDNEY5QUUwMi9yZk1TNm1pMzhGMm1FQkNBLVlNaS05WlpH TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JmTVM2bWkzOEYybUVCQ0EtWU1pLTlaWkdMSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Qjc2NS9BNERERkE5NDFGM0IxMUVDQjdEQzQ1MkZDNEY5QUUwMi9yZk1TNm1pMzhG Mm1FQkNBLVlNaS05WlpHTEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDMIuQ1kD5kyNzN8UQSKdPkNntxkk7e+CuHgf2eYsQ2JMz8pZB3XThw SizPXpoo1LWR/bMXDDn/orkTbKvn629cuN+LAfJDmDqBYxYVm90qw7GuBQJumH+O jzrc4ZZRVXfLnJBe9KxeWCgUprktkILl9Eo3ru6IMpJpS2SCRejQFQrZvwrMaiOb Q0cScRj+FojnTBJSHqkIBS0orG8wGWYzYPqYIuFtLo24nmHF88dkAmwzHV3f6JD6 5+oku8xsYpWioD8GkZ1D1OuxV1m+Z+dEGODvkcU45BUV+f1KRHsw7jlLYwldpR/N LS7y+GCxdZGYURx+d9KbrjomFKVlZCEi -----END CERTIFICATE-----Generated at Sat Aug 23 17:18:44 2025 by rpki-client