$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft File: T_-scXgTOS7hyHajIWceHWwqubQ.mft (raw, json) Hash identifier: tpizAwdhin6ez4osPLruocXU5ZUaL1Gymc9dWiKdAsQ= Subject key identifier: 08:A4:33:44:6F:16:2C:BB:86:E2:FE:F7:2E:5C:E0:B9:F6:EC:89:EC Authority key identifier: 4F:FF:AC:71:78:13:39:2E:E1:C8:76:A3:21:67:1E:1D:6C:2A:B9:B4 Certificate issuer: /CN=A91CE39F/serialNumber=4FFFAC717813392EE1C876A321671E1D6C2AB9B4 Certificate serial: 0800 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft Manifest number: 07EC Signing time: Fri 22 Aug 2025 21:11:27 +0000 Manifest this update: Fri 22 Aug 2025 21:11:27 +0000 Manifest next update: Fri 29 Aug 2025 21:11:27 +0000 Files and hashes: 1: T_-scXgTOS7hyHajIWceHWwqubQ.crl (hash: uuwT4ULrCrsJ7cgpiPHA5XbjVlxKomigTtFlShYcCkQ=) 2: CAF5CED2E1A511EC8AB72944C4F9AE02.roa (hash: zbiYtUOfzyp7ptHvHbV0SU4d4rP1mH83ebF8pRuNsx0=) 3: CC57D98CE1A511EC8AB72944C4F9AE02.roa (hash: ZYqL2fHcbNd2tSbNDmjF+dD/m7i54Wfd/1i3In6hhsU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.crl rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:11:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2048 (0x800) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE39F, serialNumber=4FFFAC717813392EE1C876A321671E1D6C2AB9B4 Validity Not Before: Aug 22 21:11:27 2025 GMT Not After : Aug 29 21:11:27 2025 GMT Subject: CN=68a8dcff-9f22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:fc:26:c7:54:8c:13:2a:ba:41:38:0b:a9:9c: 0a:37:c2:b5:d6:55:7d:c9:e4:45:59:90:4c:70:27: e3:aa:c3:ad:54:43:2a:e8:ea:97:8a:93:16:08:56: e3:d4:34:8a:35:14:1b:17:fe:89:50:71:36:a4:0c: 0a:09:7d:54:7c:50:0d:13:72:c7:6a:ea:fb:0c:b0: 89:2d:2a:04:da:16:54:db:e6:4a:9c:f1:64:9e:b4: 3e:5f:22:bc:42:dd:b9:7c:4d:bf:cf:d4:98:dd:c8: f9:7f:f7:81:b1:60:eb:e5:1a:fd:00:70:86:13:10: 43:3a:28:82:0e:1d:c7:90:bf:c5:3e:67:73:5d:a0: 2b:0e:06:d2:fe:6c:01:6b:25:d3:9e:b3:39:10:1a: 56:c2:8a:10:56:47:2e:29:49:a7:2d:23:9d:2a:31: f6:eb:ee:48:ef:dc:1d:e0:d5:58:e5:ed:cb:24:53: f2:60:c3:28:b0:80:3a:56:a8:69:c7:05:b6:bc:4c: bd:ee:f3:8c:34:59:91:77:f4:39:92:38:e1:b6:59: 98:e9:32:ba:3a:a5:b6:20:b3:62:5f:25:df:90:bf: 0b:47:ac:02:8f:be:52:ee:70:21:19:e9:84:2c:77: 8d:04:3c:40:ce:7e:32:9a:7b:72:4c:88:91:79:b7: d1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:A4:33:44:6F:16:2C:BB:86:E2:FE:F7:2E:5C:E0:B9:F6:EC:89:EC X509v3 Authority Key Identifier: keyid:4F:FF:AC:71:78:13:39:2E:E1:C8:76:A3:21:67:1E:1D:6C:2A:B9:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:31:f2:b7:ce:66:76:ad:bc:88:f3:1a:d2:f1:96:47:8e:eb: a3:54:10:1f:20:ee:65:cc:11:b4:3d:f8:83:67:6a:0c:b7:2f: d6:6b:a5:dc:25:c8:07:d6:c6:67:ba:f8:e1:81:46:44:ed:64: e5:e6:54:9f:a6:26:3b:0d:b2:f3:a7:bc:e5:15:50:b8:e7:26: 42:43:0c:29:20:1e:de:3b:da:6d:59:8b:b0:70:75:2a:5d:17: 30:68:00:1f:b9:89:4b:3e:70:a0:29:1c:4b:78:75:ff:f3:84: 84:ca:8a:9e:5f:ad:82:05:a9:76:d6:b3:5a:53:d9:4d:02:6a: e7:a7:68:e2:10:42:88:1e:30:59:83:58:ba:61:cc:19:ae:41: cb:1c:32:03:a6:56:4f:2b:70:c2:42:c6:23:79:36:1f:6e:5d: 51:6d:8f:b6:f0:79:f8:d9:d6:54:a3:c2:14:26:c9:08:79:c1: 8c:02:99:77:a6:0f:70:c2:a5:da:09:f9:9c:48:c7:be:b5:77: 76:1e:8e:d7:79:37:9c:49:d8:e6:4b:da:9a:93:f9:f7:a5:36: fd:2b:24:3b:2e:71:98:7e:23:fd:b0:99:81:c9:af:6c:39:cd: 42:0a:69:d1:25:ed:3d:0c:ae:e3:7a:53:33:22:fa:a4:52:55: e5:65:a1:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzOUYxMTAvBgNVBAUTKDRGRkZBQzcxNzgxMzM5MkVFMUM4NzZBMzIxNjcxRTFE NkMyQUI5QjQwHhcNMjUwODIyMjExMTI3WhcNMjUwODI5MjExMTI3WjAYMRYwFAYD VQQDEw02OGE4ZGNmZi05ZjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0vwmx1SMEyq6QTgLqZwKN8K11lV9yeRFWZBMcCfjqsOtVEMq6OqXipMWCFbj 1DSKNRQbF/6JUHE2pAwKCX1UfFANE3LHaur7DLCJLSoE2hZU2+ZKnPFknrQ+XyK8 Qt25fE2/z9SY3cj5f/eBsWDr5Rr9AHCGExBDOiiCDh3HkL/FPmdzXaArDgbS/mwB ayXTnrM5EBpWwooQVkcuKUmnLSOdKjH26+5I79wd4NVY5e3LJFPyYMMosIA6Vqhp xwW2vEy97vOMNFmRd/Q5kjjhtlmY6TK6OqW2ILNiXyXfkL8LR6wCj75S7nAhGemE LHeNBDxAzn4ymntyTIiRebfR4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAikM0Rv Fiy7huL+9y5c4Ln27InsMB8GA1UdIwQYMBaAFE//rHF4Ezku4ch2oyFnHh1sKrm0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTM5Ri9DMTVDNDFCNEZE NTcxMUVBQkMzQ0EyNERDNEY5QUUwMi9UXy1zY1hnVE9TN2h5SGFqSVdjZUhXd3F1 YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RfLXNjWGdUT1M3aHlIYWpJV2NlSFd3cXViUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTM5Ri9DMTVDNDFCNEZENTcxMUVBQkMzQ0EyNERDNEY5QUUwMi9UXy1zY1hnVE9T N2h5SGFqSVdjZUhXd3F1YlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbMfK3zmZ2rbyI8xrS8ZZHjuujVBAfIO5lzBG0PfiDZ2oMty/Wa6Xc JcgH1sZnuvjhgUZE7WTl5lSfpiY7DbLzp7zlFVC45yZCQwwpIB7eO9ptWYuwcHUq XRcwaAAfuYlLPnCgKRxLeHX/84SEyoqeX62CBal21rNaU9lNAmrnp2jiEEKIHjBZ g1i6YcwZrkHLHDIDplZPK3DCQsYjeTYfbl1RbY+28Hn42dZUo8IUJskIecGMApl3 pg9wwqXaCfmcSMe+tXd2Ho7XeTecSdjmS9qak/n3pTb9KyQ7LnGYfiP9sJmBya9s Oc1CCmnRJe09DK7jelMzIvqkUlXlZaGU -----END CERTIFICATE-----Generated at Sat Aug 23 10:25:00 2025 by rpki-client