$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft File: b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft (raw, json) Hash identifier: ucgMAF25WRC9qmAF2Uvcd4Ll2YclU4IKKXvGMEqRr8U= Subject key identifier: 14:9F:D7:7D:D4:BB:F3:29:5F:F2:D5:7E:19:E5:94:1D:80:F0:4D:36 Authority key identifier: 6F:F1:A2:4E:7F:54:F2:EF:0C:60:5E:0E:06:FC:8A:46:C5:44:D6:D3 Certificate issuer: /CN=A91CBE4E/serialNumber=6FF1A24E7F54F2EF0C605E0E06FC8A46C544D6D3 Certificate serial: 0178 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft Manifest number: 0171 Signing time: Sat 23 Aug 2025 03:59:29 +0000 Manifest this update: Sat 23 Aug 2025 03:59:29 +0000 Manifest next update: Sat 30 Aug 2025 03:59:29 +0000 Files and hashes: 1: b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl (hash: P8FYsjCg2gDV1YGgnA0jcyws88Mqmq0VHP549dvKT6w=) 2: 273A3FAAF3FC11EFB697C52FC4F9AE02.roa (hash: W2nP9JOONlKqK4NCPj/Qx89sx6/xDl/kU79SU2cQL5s=) 3: 13713EBA7CF011F0A1556D56C4F9AE02.roa (hash: T9ZQW9KI45+yftMg3AeOLdDC7qadlsWAl60UTn6wQQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:59:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 376 (0x178) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBE4E, serialNumber=6FF1A24E7F54F2EF0C605E0E06FC8A46C544D6D3 Validity Not Before: Aug 23 03:59:29 2025 GMT Not After : Aug 30 03:59:29 2025 GMT Subject: CN=68a93ca1-d96f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6f:f8:be:07:a3:5a:ce:ca:80:98:8e:f2:09: 1c:ce:b1:00:96:78:4e:0f:30:4e:20:78:5d:e4:03: e8:67:be:da:36:24:c9:2b:08:d7:0f:af:5c:87:8c: 9b:de:2e:67:7b:bd:f4:77:49:cf:10:a9:fb:15:b3: e6:d9:d6:46:a6:7e:70:98:8c:e1:33:53:ab:e7:23: 9f:75:99:ab:3a:1b:19:d7:91:db:5c:fb:a0:fc:a5: a9:fb:19:3e:3f:cb:fa:f4:9e:15:c3:22:12:77:89: 09:4f:f2:7f:ce:56:90:0a:6b:2e:28:de:6d:20:f1: 51:1b:9e:09:fc:d6:3d:23:d2:26:f2:a4:0a:f8:03: 4e:5a:b6:8a:9e:7b:f6:01:ae:54:31:8f:de:b3:f3: 34:d6:79:c9:d3:d3:fa:7c:4c:b1:67:54:52:0b:44: 03:9d:12:98:dd:27:9d:ba:4c:16:a5:5d:3a:31:c5: 58:11:06:b7:c5:f7:19:63:57:bc:48:59:b4:f8:47: 5b:88:06:62:d8:3a:dc:1e:06:eb:86:b9:df:45:e3: 14:1f:32:51:1c:4c:ed:a9:01:21:59:e8:43:6b:ae: 11:b2:e3:e5:1d:e2:cf:5e:ca:57:8d:76:b7:b6:67: 1e:85:ee:61:99:01:0e:99:d3:1e:39:ef:96:84:fb: 3d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:9F:D7:7D:D4:BB:F3:29:5F:F2:D5:7E:19:E5:94:1D:80:F0:4D:36 X509v3 Authority Key Identifier: keyid:6F:F1:A2:4E:7F:54:F2:EF:0C:60:5E:0E:06:FC:8A:46:C5:44:D6:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:2d:64:ee:0a:22:30:99:74:5b:38:0d:ac:c3:f6:3b:e3:7b: aa:00:c5:2f:e2:45:ba:d9:2b:6b:7e:1b:f9:48:3d:e8:5b:93: 64:9f:5d:03:35:28:bc:db:8f:8c:af:28:26:f9:3e:d0:a2:c8: c3:67:71:05:67:03:ab:c5:05:ac:83:54:c5:40:27:13:9c:87: 69:1b:f4:78:f6:f7:74:34:23:ed:20:90:be:d4:29:24:12:fc: 69:85:9d:d0:b2:3a:5d:68:b7:a1:11:b4:06:7f:74:6d:6c:5b: 87:0d:9e:17:36:c0:48:da:9d:be:4c:3b:b1:e3:e8:f2:a0:85: f7:2d:ab:d8:02:b4:06:32:99:d0:83:7f:59:6b:72:92:2d:1c: 5b:79:f8:da:a7:16:1e:ce:b8:8f:c2:89:d8:4d:48:e9:07:74: a6:80:e1:aa:4c:7c:5f:03:bc:1b:4e:7d:f6:38:ca:aa:fd:f5: 78:30:25:9a:44:6a:de:f5:33:ee:d3:3c:1d:f9:41:bc:fe:4b: 83:01:06:ce:a1:6e:ec:5a:81:03:42:fe:98:cb:bf:36:57:13: 0c:19:93:9c:e1:cc:ed:6f:60:30:c9:aa:fa:97:b5:fe:55:51: 7f:47:d8:ab:42:36:08:7e:24:41:3f:2c:5a:91:8e:02:26:82: 0e:d6:7a:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JFNEUxMTAvBgNVBAUTKDZGRjFBMjRFN0Y1NEYyRUYwQzYwNUUwRTA2RkM4QTQ2 QzU0NEQ2RDMwHhcNMjUwODIzMDM1OTI5WhcNMjUwODMwMDM1OTI5WjAYMRYwFAYD VQQDEw02OGE5M2NhMS1kOTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0m/4vgejWs7KgJiO8gkczrEAlnhODzBOIHhd5APoZ77aNiTJKwjXD69ch4yb 3i5ne730d0nPEKn7FbPm2dZGpn5wmIzhM1Or5yOfdZmrOhsZ15HbXPug/KWp+xk+ P8v69J4VwyISd4kJT/J/zlaQCmsuKN5tIPFRG54J/NY9I9Im8qQK+ANOWraKnnv2 Aa5UMY/es/M01nnJ09P6fEyxZ1RSC0QDnRKY3SedukwWpV06McVYEQa3xfcZY1e8 SFm0+EdbiAZi2DrcHgbrhrnfReMUHzJRHEztqQEhWehDa64RsuPlHeLPXspXjXa3 tmcehe5hmQEOmdMeOe+WhPs9HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBSf133U u/MpX/LVfhnllB2A8E02MB8GA1UdIwQYMBaAFG/xok5/VPLvDGBeDgb8ikbFRNbT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkU0RS9EQjAzRjY1QTUy QzkxMUVFOTAzMjhGMTRDNEY5QUUwMi9iX0dpVG45VTh1OE1ZRjRPQnZ5S1JzVkUx dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JfR2lUbjlVOHU4TVlGNE9CdnlLUnNWRTF0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkU0RS9EQjAzRjY1QTUyQzkxMUVFOTAzMjhGMTRDNEY5QUUwMi9iX0dpVG45VTh1 OE1ZRjRPQnZ5S1JzVkUxdE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXLWTuCiIwmXRbOA2sw/Y743uqAMUv4kW62Strfhv5SD3oW5Nkn10D NSi824+Mrygm+T7QosjDZ3EFZwOrxQWsg1TFQCcTnIdpG/R49vd0NCPtIJC+1Ckk EvxphZ3QsjpdaLehEbQGf3RtbFuHDZ4XNsBI2p2+TDux4+jyoIX3LavYArQGMpnQ g39Za3KSLRxbefjapxYezriPwonYTUjpB3SmgOGqTHxfA7wbTn32OMqq/fV4MCWa RGre9TPu0zwd+UG8/kuDAQbOoW7sWoEDQv6Yy782VxMMGZOc4cztb2Awyar6l7X+ VVF/R9irQjYIfiRBPyxakY4CJoIO1npM -----END CERTIFICATE-----Generated at Sat Aug 23 19:42:05 2025 by rpki-client