$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft File: mD14MALFTaj4puKVg4ucrwE2Q1g.mft (raw, json) Hash identifier: yawI78ZGNCpfwoOqU6bv3gD2fGESInXzLNGdaHJqijY= Subject key identifier: 2E:87:2B:71:71:C4:C7:57:34:BE:35:96:0D:3B:ED:69:99:97:25:91 Authority key identifier: 98:3D:78:30:02:C5:4D:A8:F8:A6:E2:95:83:8B:9C:AF:01:36:43:58 Certificate issuer: /CN=A91CF77D/serialNumber=983D783002C54DA8F8A6E295838B9CAF01364358 Certificate serial: 085F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft Manifest number: 0855 Signing time: Fri 22 Aug 2025 20:50:02 +0000 Manifest this update: Fri 22 Aug 2025 20:50:01 +0000 Manifest next update: Fri 29 Aug 2025 20:50:01 +0000 Files and hashes: 1: mD14MALFTaj4puKVg4ucrwE2Q1g.crl (hash: EfJREy9mYc1LV9vl91oypSYWV2hSQO3S3GNTZ5m5Q2A=) 2: D24575B2D22E11EA9D4DDE29C4F9AE02.roa (hash: xQNJE/wFi8JMz2ss0ss1yj9BAf/VPU6rBNzmi8uV9UI=) 3: 8FADE73CA49B11EEB19E774BC4F9AE02.roa (hash: j94hdqhS8hEZkUNMK0Gy0/wMaWkISNSvPZJQcef/86U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.crl rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:50:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2143 (0x85f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF77D, serialNumber=983D783002C54DA8F8A6E295838B9CAF01364358 Validity Not Before: Aug 22 20:50:01 2025 GMT Not After : Aug 29 20:50:01 2025 GMT Subject: CN=68a8d7fa-7aa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e8:ce:32:76:a0:44:87:fc:7c:c3:1a:0d:9b: 03:ab:a4:fe:6c:99:71:8d:a8:46:03:3c:47:d1:07: 16:4c:d0:e1:cd:08:76:51:3c:2a:fc:18:83:06:00: e7:db:4d:4b:fc:88:11:e2:b9:af:bb:45:2c:e6:76: d8:ea:db:e0:7c:46:5e:2e:91:a2:d2:0b:a0:72:b9: 5f:b8:0e:cf:f9:f4:a3:2f:69:da:ec:bc:a0:09:04: 7e:a9:09:d4:9a:29:80:4d:65:b7:21:fe:16:ca:fe: 06:fd:f2:02:88:70:b5:bb:56:f2:44:78:e3:55:6d: 3a:50:c5:1a:6e:4f:7b:e2:25:f3:85:93:ef:d8:4b: 3e:9d:d7:38:6d:ca:c9:b1:00:35:19:1a:8c:79:a1: cf:2b:b0:24:a6:5e:31:c7:3f:85:8f:d4:6c:3c:37: 98:6a:c2:cc:a1:e4:24:b2:b6:0f:28:a3:fa:6f:fb: 54:3b:88:35:04:63:e0:39:4b:79:b7:b7:e6:83:44: 96:9c:f9:07:b1:3e:1f:75:06:24:1e:13:f1:fa:8c: 7f:26:3f:c2:9a:d1:a8:df:32:6b:16:29:24:c4:32: 94:e6:3c:fb:f4:01:79:0b:69:b7:3c:3d:e9:05:7c: fc:5c:4b:42:d3:30:b9:4f:73:3f:6b:3d:5b:a9:b4: fb:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:87:2B:71:71:C4:C7:57:34:BE:35:96:0D:3B:ED:69:99:97:25:91 X509v3 Authority Key Identifier: keyid:98:3D:78:30:02:C5:4D:A8:F8:A6:E2:95:83:8B:9C:AF:01:36:43:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:cd:0b:2f:7f:b9:e9:a3:95:97:ad:7a:9b:2f:ad:e0:bb:af: 2a:e5:d0:44:d2:73:eb:5d:2f:72:7b:a3:dd:80:a6:b1:1f:80: 92:cc:7c:01:77:ef:4e:8f:33:e4:12:e8:20:51:e3:26:0a:bc: 1e:bd:eb:2a:53:1d:69:0f:2a:a8:8d:08:d8:24:0f:43:5c:dc: 57:df:cb:7d:dd:fe:84:90:52:17:a7:55:fa:c9:a9:3c:41:bb: c2:17:c2:16:d6:58:66:34:31:d0:59:49:f9:8e:09:3d:99:89: d0:9b:06:03:3b:d9:11:ac:ee:d6:8e:47:e7:e5:1a:85:ef:e3: 31:c0:99:75:1e:b4:aa:39:86:68:99:d1:47:2b:cf:67:78:6d: 2a:55:42:09:08:19:69:14:56:f2:6b:eb:b1:2f:4e:93:0d:d6: 96:ec:4c:26:28:4b:55:03:5f:8e:84:57:6e:a2:8c:0e:ff:c3: 5a:16:75:b7:13:83:03:d5:d7:21:e4:1c:df:1c:d8:6e:83:50: 4d:f2:9c:e4:c8:41:92:bf:4c:d8:5d:dd:32:f6:02:ca:7d:c8: ce:68:e7:ae:0a:4e:90:a1:ac:52:4b:bb:39:00:74:70:ef:b2: 44:57:67:e1:a3:3c:41:bc:48:3e:b2:03:47:8a:59:71:63:05: ff:c9:b8:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCF8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y3N0QxMTAvBgNVBAUTKDk4M0Q3ODMwMDJDNTREQThGOEE2RTI5NTgzOEI5Q0FG MDEzNjQzNTgwHhcNMjUwODIyMjA1MDAxWhcNMjUwODI5MjA1MDAxWjAYMRYwFAYD VQQDEw02OGE4ZDdmYS03YWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwejOMnagRIf8fMMaDZsDq6T+bJlxjahGAzxH0QcWTNDhzQh2UTwq/BiDBgDn 201L/IgR4rmvu0Us5nbY6tvgfEZeLpGi0gugcrlfuA7P+fSjL2na7LygCQR+qQnU mimATWW3If4Wyv4G/fICiHC1u1byRHjjVW06UMUabk974iXzhZPv2Es+ndc4bcrJ sQA1GRqMeaHPK7Akpl4xxz+Fj9RsPDeYasLMoeQksrYPKKP6b/tUO4g1BGPgOUt5 t7fmg0SWnPkHsT4fdQYkHhPx+ox/Jj/CmtGo3zJrFikkxDKU5jz79AF5C2m3PD3p BXz8XEtC0zC5T3M/az1bqbT7hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC6HK3Fx xMdXNL41lg077WmZlyWRMB8GA1UdIwQYMBaAFJg9eDACxU2o+KbilYOLnK8BNkNY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjc3RC8xMUUyNTlEMEQy MkQxMUVBOEFFNzNEMjdDNEY5QUUwMi9tRDE0TUFMRlRhajRwdUtWZzR1Y3J3RTJR MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21EMTRNQUxGVGFqNHB1S1ZnNHVjcndFMlExZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Rjc3RC8xMUUyNTlEMEQyMkQxMUVBOEFFNzNEMjdDNEY5QUUwMi9tRDE0TUFMRlRh ajRwdUtWZzR1Y3J3RTJRMWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIzQsvf7npo5WXrXqbL63gu68q5dBE0nPrXS9ye6PdgKaxH4CSzHwB d+9OjzPkEuggUeMmCrwevesqUx1pDyqojQjYJA9DXNxX38t93f6EkFIXp1X6yak8 QbvCF8IW1lhmNDHQWUn5jgk9mYnQmwYDO9kRrO7Wjkfn5RqF7+MxwJl1HrSqOYZo mdFHK89neG0qVUIJCBlpFFbya+uxL06TDdaW7EwmKEtVA1+OhFduoowO/8NaFnW3 E4MD1dch5BzfHNhug1BN8pzkyEGSv0zYXd0y9gLKfcjOaOeuCk6QoaxSS7s5AHRw 77JEV2fhozxBvEg+sgNHillxYwX/ybgf -----END CERTIFICATE-----Generated at Sat Aug 23 19:25:54 2025 by rpki-client