$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft File: _K1GEVffaBwFC9O-7qLqzfttUks.mft (raw, json) Hash identifier: woMNR8JrSc7N1DRit2rpKMcPoqcGRqyigfOQEJJ/oFE= Subject key identifier: 6C:06:B4:D0:59:77:76:99:C1:85:76:1A:1E:BF:07:3E:8C:9A:98:62 Authority key identifier: FC:AD:46:11:57:DF:68:1C:05:0B:D3:BE:EE:A2:EA:CD:FB:6D:52:4B Certificate issuer: /CN=A91CE3C4/serialNumber=FCAD461157DF681C050BD3BEEEA2EACDFB6D524B Certificate serial: 06D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft Manifest number: 06AF Signing time: Fri 22 Aug 2025 22:25:26 +0000 Manifest this update: Fri 22 Aug 2025 22:25:24 +0000 Manifest next update: Fri 29 Aug 2025 22:25:24 +0000 Files and hashes: 1: _K1GEVffaBwFC9O-7qLqzfttUks.crl (hash: vSh38NCbd45ey/1gB9OeQt7S6gzg7Q7z6k0WoncmfMA=) 2: D55D5DE2F07011EDAD0F5D62C4F9AE02.roa (hash: /1MqSHd9nBk2qp9htlm8FxJMAo4wrus2nnyIHoN3C0s=) 3: BC582AA44FEA11EFBFC72970C4F9AE02.roa (hash: LDQwB/Aaa/EPGkedxIat/R/y9ZuThpBdxq2PBP79Mgo=) 4: 26F87D4A272711EC88E40644C4F9AE02.roa (hash: hPYxf/s2MeHBMdE9aQ/4MQvo1zAB47EkXGZaUhlKPWs=) 5: 50D705A87FA911EBA8C11D63C4F9AE02.roa (hash: XPZflDMOHrz8WA93u6KTrDyNAlgfVwGC6hkcyOuXo4w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.crl rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:25:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1745 (0x6d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE3C4, serialNumber=FCAD461157DF681C050BD3BEEEA2EACDFB6D524B Validity Not Before: Aug 22 22:25:24 2025 GMT Not After : Aug 29 22:25:24 2025 GMT Subject: CN=68a8ee55-2450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:41:5c:e4:41:79:df:72:60:4f:7f:22:68:5a: d2:ed:ee:bf:b0:fb:90:54:d5:4f:c3:a7:c2:57:1e: 8c:11:34:0e:1a:7a:07:53:f9:d7:ae:86:e7:3a:90: af:ec:cc:4c:4e:b3:7d:2f:13:ba:40:aa:f7:a9:53: b5:95:de:29:a6:70:01:53:5c:86:77:1f:67:50:92: ba:cd:04:be:57:18:1a:bb:8b:2c:e5:7f:86:60:ce: 87:c7:83:b8:6b:52:5f:59:20:a4:dd:c4:e8:d7:80: da:42:82:70:0f:46:ae:b1:60:f8:74:ff:36:47:42: 74:c7:69:57:bd:89:32:56:b7:1e:8b:1d:7e:8b:d7: 26:2c:be:91:d9:04:c5:7b:31:3d:a1:87:6d:aa:d2: b1:7a:fc:56:99:67:c5:7c:00:ca:2b:d7:5e:46:9a: 8a:a5:d1:74:8b:56:04:83:8d:7c:5f:3c:56:62:29: 73:db:48:f5:b3:5d:6b:17:7b:43:c3:b5:8e:f1:00: 9b:0d:66:0e:24:06:c7:6b:f2:2c:49:a0:fd:20:08: 06:b2:68:9b:20:d1:57:f2:e3:ee:b3:eb:3f:1f:d5: 3d:ee:a0:95:e6:46:0f:74:76:a3:69:ef:05:0b:a7: 7f:95:ed:01:b8:f6:b4:e8:eb:1e:8e:69:ce:fe:f8: 0c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:06:B4:D0:59:77:76:99:C1:85:76:1A:1E:BF:07:3E:8C:9A:98:62 X509v3 Authority Key Identifier: keyid:FC:AD:46:11:57:DF:68:1C:05:0B:D3:BE:EE:A2:EA:CD:FB:6D:52:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:11:21:d9:42:27:5b:73:7a:ff:2f:e0:bb:93:1a:ce:d8:5f: 78:1a:21:34:94:9f:2d:3b:a4:f5:f3:d0:11:ee:2f:fa:ec:e8: 1e:6a:a6:02:de:98:50:30:89:31:c8:00:9d:77:84:ee:11:32: 3f:ca:d1:64:2e:59:27:fd:af:48:22:76:ef:2c:f3:3b:12:10: 23:db:03:10:0d:f9:4d:2e:0a:7a:dc:ba:b2:f0:60:51:36:ba: eb:91:34:06:e7:a1:4d:2d:b6:47:a3:ff:18:df:82:5a:89:3d: 99:83:06:ff:cf:35:92:ba:5a:5b:13:cb:8a:13:33:10:9d:13: 5d:c4:66:fc:25:da:76:4e:3d:1e:65:69:2c:60:99:c3:92:e8: 64:ec:2b:00:7a:61:d7:41:74:f7:eb:b7:20:4e:0e:c0:11:f8: de:cb:df:49:9e:9b:6b:95:f8:69:0e:56:b4:f7:b7:8e:fe:de: df:a1:b6:b3:64:6a:25:c1:ce:af:a6:fe:89:be:86:fb:18:b3: d8:81:73:86:95:65:29:33:e5:5f:7a:d8:82:27:58:73:b6:99: 4a:cc:e6:66:25:7a:8c:24:12:16:1a:ba:a9:9b:d3:e9:15:c4: 52:e4:b9:51:d9:a4:d5:75:8c:3e:a6:79:d1:20:67:b9:21:0c: 68:e1:5d:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzQzQxMTAvBgNVBAUTKEZDQUQ0NjExNTdERjY4MUMwNTBCRDNCRUVFQTJFQUNE RkI2RDUyNEIwHhcNMjUwODIyMjIyNTI0WhcNMjUwODI5MjIyNTI0WjAYMRYwFAYD VQQDEw02OGE4ZWU1NS0yNDUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvEFc5EF533JgT38iaFrS7e6/sPuQVNVPw6fCVx6METQOGnoHU/nXrobnOpCv 7MxMTrN9LxO6QKr3qVO1ld4ppnABU1yGdx9nUJK6zQS+Vxgau4ss5X+GYM6Hx4O4 a1JfWSCk3cTo14DaQoJwD0ausWD4dP82R0J0x2lXvYkyVrceix1+i9cmLL6R2QTF ezE9oYdtqtKxevxWmWfFfADKK9deRpqKpdF0i1YEg418XzxWYilz20j1s11rF3tD w7WO8QCbDWYOJAbHa/IsSaD9IAgGsmibINFX8uPus+s/H9U97qCV5kYPdHajae8F C6d/le0BuPa06OsejmnO/vgMGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGwGtNBZ d3aZwYV2Gh6/Bz6MmphiMB8GA1UdIwQYMBaAFPytRhFX32gcBQvTvu6i6s37bVJL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTNDNC83NjkyMjc4QTdG OTcxMUVCQUREQzVGMTVDNEY5QUUwMi9fSzFHRVZmZmFCd0ZDOU8tN3FMcXpmdHRV a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19LMUdFVmZmYUJ3RkM5Ty03cUxxemZ0dFVrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTNDNC83NjkyMjc4QTdGOTcxMUVCQUREQzVGMTVDNEY5QUUwMi9fSzFHRVZmZmFC d0ZDOU8tN3FMcXpmdHRVa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyESHZQidbc3r/L+C7kxrO2F94GiE0lJ8tO6T189AR7i/67OgeaqYC 3phQMIkxyACdd4TuETI/ytFkLlkn/a9IInbvLPM7EhAj2wMQDflNLgp63Lqy8GBR NrrrkTQG56FNLbZHo/8Y34JaiT2Zgwb/zzWSulpbE8uKEzMQnRNdxGb8Jdp2Tj0e ZWksYJnDkuhk7CsAemHXQXT367cgTg7AEfjey99JnptrlfhpDla097eO/t7fobaz ZGolwc6vpv6Jvob7GLPYgXOGlWUpM+VfetiCJ1hztplKzOZmJXqMJBIWGrqpm9Pp FcRS5LlR2aTVdYw+pnnRIGe5IQxo4V1Q -----END CERTIFICATE-----Generated at Sat Aug 23 16:35:53 2025 by rpki-client