$ rpki-client -vvf rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft File: mPVq6odEo9Few5KtBtYIN3BGJUE.mft (raw, json) Hash identifier: Kd8TwVOa5woZuH8yCou2zebhhPQprlB9JrnHC6Me07Q= Subject key identifier: 44:F9:66:22:8A:B5:E5:F9:DF:9C:3B:2C:64:F2:AD:C7:57:1D:B3:67 Authority key identifier: 98:F5:6A:EA:87:44:A3:D1:5E:C3:92:AD:06:D6:08:37:70:46:25:41 Certificate issuer: /CN=A91D774B/serialNumber=98F56AEA8744A3D15EC392AD06D6083770462541 Certificate serial: 04BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft Manifest number: 04AF Signing time: Sat 23 Aug 2025 00:09:58 +0000 Manifest this update: Sat 23 Aug 2025 00:09:58 +0000 Manifest next update: Sat 30 Aug 2025 00:09:58 +0000 Files and hashes: 1: mPVq6odEo9Few5KtBtYIN3BGJUE.crl (hash: vdT8ogQAk4Z3lK9oP1qK21lvyk+M/kqFhFuGllaQm+8=) 2: 30B8A186DBEF11EFAF6FF37AC4F9AE02.roa (hash: C2tgoi4ndceE+FSZfwDXIED+n+ZW+4Wp1mUo8nhP9gw=) 3: CB7E6CF0DBEF11EF9FC5007CC4F9AE02.roa (hash: jv1ungDFXqLOGYMpTJjaYjynG3firC0fxKibhbmN4oA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.crl rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:09:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1211 (0x4bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D774B, serialNumber=98F56AEA8744A3D15EC392AD06D6083770462541 Validity Not Before: Aug 23 00:09:58 2025 GMT Not After : Aug 30 00:09:58 2025 GMT Subject: CN=68a906d6-06f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:85:02:d8:1d:6c:38:a8:4c:76:f2:55:1f:71: 46:e8:77:49:29:da:8f:55:f4:fa:c9:c6:e7:d3:b0: db:d3:19:35:2a:ec:13:da:5d:ac:3d:34:00:94:46: ff:4a:7a:87:2e:17:97:b6:51:6c:9d:c9:da:3a:c0: 01:0f:c4:14:9c:d9:21:f1:11:b8:c2:ac:89:7c:be: 10:38:a9:d5:e2:85:5a:7e:55:33:2c:1f:f2:00:9b: ae:a5:36:f1:0e:35:76:03:3a:69:ed:b4:9b:8d:ad: 64:7e:53:5d:47:c1:ae:a3:98:35:88:b8:25:3c:7a: 25:d0:79:2f:45:62:d9:45:c4:9e:2e:8e:72:cc:50: 67:49:76:0c:60:fb:41:38:88:9e:f7:23:91:58:74: f5:24:0f:82:68:c0:20:bf:eb:76:16:93:fd:4b:c8: 28:7e:fb:5a:91:7f:e9:44:0a:67:48:6d:f3:87:9e: 90:16:65:2f:e8:de:7c:93:30:72:dc:2f:cd:04:52: 36:41:d4:b3:82:b6:2e:92:eb:09:f6:9e:a7:23:91: d0:90:78:f8:86:fd:e4:38:e5:fc:b5:2d:f1:06:14: 86:af:bc:f5:63:ba:7d:e5:a0:38:5c:a7:b9:76:2b: f9:e3:b1:e7:b5:1f:e7:5e:8d:3b:0a:b1:b3:79:b4: c1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:F9:66:22:8A:B5:E5:F9:DF:9C:3B:2C:64:F2:AD:C7:57:1D:B3:67 X509v3 Authority Key Identifier: keyid:98:F5:6A:EA:87:44:A3:D1:5E:C3:92:AD:06:D6:08:37:70:46:25:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:61:2f:9a:e5:36:07:6a:18:f3:66:a0:6c:a3:27:5f:de:ee: cd:cc:84:3b:85:37:a6:cc:52:2f:77:63:59:83:c2:67:a3:8f: d1:32:59:7a:d6:a1:58:83:97:a8:11:26:91:ff:2e:47:49:ad: 0a:3d:f8:2d:22:fc:2b:59:9a:f4:e2:91:cf:36:2e:7f:86:ae: ef:fb:1d:4e:13:38:d5:92:33:19:bc:f2:8c:1c:66:61:34:7f: 46:85:eb:85:82:82:72:b3:3f:3a:b9:1c:a0:b9:1d:4e:fd:04: c9:6b:26:6a:8c:59:95:f6:d4:c2:15:a2:19:ba:35:f2:51:28: 14:30:ba:c2:c4:85:8d:b2:c8:53:df:91:a9:08:66:26:7c:f5: 24:25:a7:5a:0a:4e:1f:d4:37:5c:09:dd:b3:62:a5:12:e5:ed: 0b:30:e2:f9:1c:00:ed:8d:c0:b1:57:51:28:e7:b7:c2:d7:f3: e9:0e:20:df:3e:2e:a5:cd:df:fc:37:bf:6a:8a:35:7f:64:73: 1d:f7:a7:1a:4f:a9:b0:5c:69:c5:02:2b:94:46:66:8d:4c:b7: a0:13:73:74:9d:9f:2c:94:5e:91:7c:fb:e8:70:01:f2:e7:30: e6:71:3a:36:42:33:78:65:d7:b3:a3:4d:83:d7:06:4a:ab:cb: 38:0f:55:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc3NEIxMTAvBgNVBAUTKDk4RjU2QUVBODc0NEEzRDE1RUMzOTJBRDA2RDYwODM3 NzA0NjI1NDEwHhcNMjUwODIzMDAwOTU4WhcNMjUwODMwMDAwOTU4WjAYMRYwFAYD VQQDEw02OGE5MDZkNi0wNmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4oUC2B1sOKhMdvJVH3FG6HdJKdqPVfT6ycbn07Db0xk1KuwT2l2sPTQAlEb/ SnqHLheXtlFsncnaOsABD8QUnNkh8RG4wqyJfL4QOKnV4oVaflUzLB/yAJuupTbx DjV2Azpp7bSbja1kflNdR8Guo5g1iLglPHol0HkvRWLZRcSeLo5yzFBnSXYMYPtB OIie9yORWHT1JA+CaMAgv+t2FpP9S8gofvtakX/pRApnSG3zh56QFmUv6N58kzBy 3C/NBFI2QdSzgrYukusJ9p6nI5HQkHj4hv3kOOX8tS3xBhSGr7z1Y7p95aA4XKe5 div547HntR/nXo07CrGzebTBKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFET5ZiKK teX535w7LGTyrcdXHbNnMB8GA1UdIwQYMBaAFJj1auqHRKPRXsOSrQbWCDdwRiVB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzc0Qi84RkFCMjE2NjQz QjExMUVDOUE1MUE1MkVDNEY5QUUwMi9tUFZxNm9kRW85RmV3NUt0QnRZSU4zQkdK VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21QVnE2b2RFbzlGZXc1S3RCdFlJTjNCR0pVRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Nzc0Qi84RkFCMjE2NjQzQjExMUVDOUE1MUE1MkVDNEY5QUUwMi9tUFZxNm9kRW85 RmV3NUt0QnRZSU4zQkdKVUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtYS+a5TYHahjzZqBsoydf3u7NzIQ7hTemzFIvd2NZg8Jno4/RMll6 1qFYg5eoESaR/y5HSa0KPfgtIvwrWZr04pHPNi5/hq7v+x1OEzjVkjMZvPKMHGZh NH9GheuFgoJysz86uRyguR1O/QTJayZqjFmV9tTCFaIZujXyUSgUMLrCxIWNsshT 35GpCGYmfPUkJadaCk4f1DdcCd2zYqUS5e0LMOL5HADtjcCxV1Eo57fC1/PpDiDf Pi6lzd/8N79qijV/ZHMd96caT6mwXGnFAiuURmaNTLegE3N0nZ8slF6RfPvocAHy 5zDmcTo2QjN4Zdezo02D1wZKq8s4D1W4 -----END CERTIFICATE-----Generated at Sat Aug 23 23:51:16 2025 by rpki-client