$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft File: -4BdU3nLB9UqQR7__QSRyjm3vyc.mft (raw, json) Hash identifier: FkcO0sQ+YWhG4wZAOM4MdHq4LwNx36tQEBarstnOz5Y= Subject key identifier: 90:D0:A4:2C:09:DD:E1:68:E1:13:F0:AA:B1:B6:9F:35:65:AB:F1:96 Authority key identifier: FB:80:5D:53:79:CB:07:D5:2A:41:1E:FF:FD:04:91:CA:39:B7:BF:27 Certificate issuer: /CN=A91D5ECA/serialNumber=FB805D5379CB07D52A411EFFFD0491CA39B7BF27 Certificate serial: 0611 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4BdU3nLB9UqQR7__QSRyjm3vyc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft Manifest number: 060A Signing time: Fri 22 Aug 2025 23:02:07 +0000 Manifest this update: Fri 22 Aug 2025 23:02:07 +0000 Manifest next update: Fri 29 Aug 2025 23:02:07 +0000 Files and hashes: 1: -4BdU3nLB9UqQR7__QSRyjm3vyc.crl (hash: p6PQsZeV2G1yL8mWmbJBNlXPW2SzbFqVW4s492masW4=) 2: F4740B2CB92711EBA6B43A86C4F9AE02.roa (hash: LrOS5vT6G1w5nCu4oa5LHxalQDErRntPMrUYlIi++Aw=) 3: F78605D8778A11F08EDAFE28C4F9AE02.roa (hash: NMP/9h7Q+kMraIM38Dl6bwkPc4zc3AHpMdJgqonRBcg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.crl rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4BdU3nLB9UqQR7__QSRyjm3vyc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1553 (0x611) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5ECA, serialNumber=FB805D5379CB07D52A411EFFFD0491CA39B7BF27 Validity Not Before: Aug 22 23:02:07 2025 GMT Not After : Aug 29 23:02:07 2025 GMT Subject: CN=68a8f6ef-7909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:00:26:1d:7b:8a:f7:1b:38:27:26:ae:11:ce: dc:df:a7:ca:af:c3:17:83:6c:d0:9c:f2:5e:b5:65: 68:29:75:62:39:6c:90:fa:ee:53:a7:dd:e5:ae:93: e4:b3:35:e7:c6:64:da:84:32:01:4d:ee:3d:06:d2: 8d:25:fd:14:ea:ca:71:b2:29:66:5b:5b:0d:ba:30: be:00:0a:9b:8d:c2:f1:0c:0d:d3:74:0d:9f:e6:5d: 8e:8d:6a:7d:d2:70:5f:b1:f3:c6:25:50:f3:a9:d1: ce:e0:42:9e:be:c8:1d:e9:61:3d:b3:c0:d8:e9:e1: 0b:c5:60:13:ad:a2:88:a8:7a:88:b9:8b:2f:01:7a: a9:f6:c0:bb:a7:2d:ab:5d:36:df:34:e6:8e:be:f6: b4:9c:75:1d:33:79:21:ae:c7:a2:99:e1:37:1a:99: 98:5e:24:47:15:dd:83:d1:d1:a3:56:4a:98:53:cb: e4:f2:96:eb:c6:a4:a4:69:ed:e6:0b:e1:af:77:79: 8d:5e:75:41:6c:a0:43:f3:03:9f:10:47:b8:f7:63: 4c:ba:2d:be:c3:ab:5a:73:92:85:5c:93:b0:36:b1: 8f:c7:7e:f0:57:82:9b:7d:75:ec:48:55:e9:f3:7e: eb:26:94:61:a0:a3:a1:36:99:c2:c0:b9:a9:ce:0e: 61:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:D0:A4:2C:09:DD:E1:68:E1:13:F0:AA:B1:B6:9F:35:65:AB:F1:96 X509v3 Authority Key Identifier: keyid:FB:80:5D:53:79:CB:07:D5:2A:41:1E:FF:FD:04:91:CA:39:B7:BF:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4BdU3nLB9UqQR7__QSRyjm3vyc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:07:cf:9b:96:42:09:7a:25:e4:fd:5d:f8:d8:20:80:e2:eb: cd:e2:c1:05:9b:9d:0a:77:de:8f:22:c9:97:f1:fd:fc:a0:fa: b8:32:38:ef:c0:7e:a1:78:20:27:96:2f:f6:51:9a:56:92:da: 99:71:54:0f:f2:2a:56:a0:7b:f5:c3:60:e0:af:a0:32:15:7b: a3:6c:11:42:bc:9a:72:39:c9:05:aa:00:fb:af:34:21:24:4d: 6b:dd:63:31:62:7e:03:0c:71:6d:f3:d3:97:cd:0a:e0:83:6e: 50:20:e0:08:63:87:57:2c:14:d3:99:de:92:64:38:ee:c6:c4: ea:93:dd:17:de:57:17:eb:fe:9a:6a:8b:9b:95:a1:54:1e:70: 90:59:db:40:78:28:42:da:b8:e6:7f:42:3f:27:6e:21:6d:36: 25:ba:8d:dc:78:4d:5c:45:74:11:d9:52:7e:84:9d:13:55:c2: b7:b9:a2:f5:bc:72:a2:4e:98:ed:d0:3e:99:05:12:ce:f3:d0: db:2a:9a:e9:e3:f0:f9:b8:ed:23:80:9a:80:42:4c:2a:f9:3a: 1f:0b:47:14:a1:36:94:5a:0b:11:bb:65:83:6d:9f:00:4f:ea: 5a:6f:3a:48:2b:46:54:9e:b5:53:7d:5f:20:5b:b4:c7:03:7c: 91:5e:59:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVFQ0ExMTAvBgNVBAUTKEZCODA1RDUzNzlDQjA3RDUyQTQxMUVGRkZEMDQ5MUNB MzlCN0JGMjcwHhcNMjUwODIyMjMwMjA3WhcNMjUwODI5MjMwMjA3WjAYMRYwFAYD VQQDEw02OGE4ZjZlZi03OTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygAmHXuK9xs4JyauEc7c36fKr8MXg2zQnPJetWVoKXViOWyQ+u5Tp93lrpPk szXnxmTahDIBTe49BtKNJf0U6spxsilmW1sNujC+AAqbjcLxDA3TdA2f5l2OjWp9 0nBfsfPGJVDzqdHO4EKevsgd6WE9s8DY6eELxWATraKIqHqIuYsvAXqp9sC7py2r XTbfNOaOvva0nHUdM3khrseimeE3GpmYXiRHFd2D0dGjVkqYU8vk8pbrxqSkae3m C+Gvd3mNXnVBbKBD8wOfEEe492NMui2+w6tac5KFXJOwNrGPx37wV4KbfXXsSFXp 837rJpRhoKOhNpnCwLmpzg5hGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJDQpCwJ 3eFo4RPwqrG2nzVlq/GWMB8GA1UdIwQYMBaAFPuAXVN5ywfVKkEe//0Ekco5t78n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUVDQS9CRkQyMzIwNkI5 MjUxMUVCQjBFMkNCODJDNEY5QUUwMi8tNEJkVTNuTEI5VXFRUjdfX1FTUnlqbTN2 eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy00QmRVM25MQjlVcVFSN19fUVNSeWptM3Z5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUVDQS9CRkQyMzIwNkI5MjUxMUVCQjBFMkNCODJDNEY5QUUwMi8tNEJkVTNuTEI5 VXFRUjdfX1FTUnlqbTN2eWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOB8+blkIJeiXk/V342CCA4uvN4sEFm50Kd96PIsmX8f38oPq4Mjjv wH6heCAnli/2UZpWktqZcVQP8ipWoHv1w2Dgr6AyFXujbBFCvJpyOckFqgD7rzQh JE1r3WMxYn4DDHFt89OXzQrgg25QIOAIY4dXLBTTmd6SZDjuxsTqk90X3lcX6/6a aoublaFUHnCQWdtAeChC2rjmf0I/J24hbTYluo3ceE1cRXQR2VJ+hJ0TVcK3uaL1 vHKiTpjt0D6ZBRLO89DbKprp4/D5uO0jgJqAQkwq+TofC0cUoTaUWgsRu2WDbZ8A T+pabzpIK0ZUnrVTfV8gW7THA3yRXlnh -----END CERTIFICATE-----Generated at Sat Aug 23 17:05:46 2025 by rpki-client