$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.mft File: 379fgwtQs7_B5TULnGBbt1YSLhE.mft (raw, json) Hash identifier: 4JTFYJiM0WNq8OcBKLZTFZcr3Y0CzL7Euwl+5W4aFtA= Subject key identifier: 88:EF:28:CF:1C:1D:84:9A:00:F8:12:38:2B:F4:81:03:B0:31:5B:A0 Authority key identifier: DF:BF:5F:83:0B:50:B3:BF:C1:E5:35:0B:9C:60:5B:B7:56:12:2E:11 Certificate issuer: /CN=A91DBB7D/serialNumber=DFBF5F830B50B3BFC1E5350B9C605BB756122E11 Certificate serial: 04F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/379fgwtQs7_B5TULnGBbt1YSLhE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.mft Manifest number: 04EB Signing time: Fri 22 Aug 2025 23:56:12 +0000 Manifest this update: Fri 22 Aug 2025 23:56:11 +0000 Manifest next update: Fri 29 Aug 2025 23:56:11 +0000 Files and hashes: 1: 379fgwtQs7_B5TULnGBbt1YSLhE.crl (hash: PP6CfXiiKAF4e9sC9e2ik7QNRcUX3r7gKSAg2qtI6ZM=) 2: D5C4A54A617B11EC82058668C4F9AE02.roa (hash: lRFgE9XZ6iDD+G2GlIBwvnuaHaRG9VvqEjSSiJJQVDA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.crl rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/379fgwtQs7_B5TULnGBbt1YSLhE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:56:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1266 (0x4f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBB7D, serialNumber=DFBF5F830B50B3BFC1E5350B9C605BB756122E11 Validity Not Before: Aug 22 23:56:11 2025 GMT Not After : Aug 29 23:56:11 2025 GMT Subject: CN=68a9039c-98c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:68:d3:f3:58:6a:44:39:17:f1:df:67:01:8a: af:48:63:3f:5f:b9:c8:10:6d:cc:db:20:5e:9e:bf: 3d:76:a5:07:83:b9:1a:e2:89:a4:01:3c:f7:0e:32: b2:35:77:d3:c5:a5:de:52:c5:62:fd:19:3f:91:74: db:bf:8d:e6:70:82:3c:d0:3d:e6:97:b3:a0:94:8f: 55:c7:d7:dd:3f:99:ef:90:f0:9d:11:82:95:d2:e3: 29:2e:a1:31:0f:d7:56:e0:82:91:da:89:53:e4:dd: 18:de:4b:67:f7:f6:cd:38:7a:8a:9b:cc:8a:7e:63: 68:f2:9e:d1:a6:52:92:f6:c3:9c:88:c9:f4:6a:cf: b7:ba:01:f2:44:bf:dd:5a:ab:9a:37:43:5e:4f:e3: 85:d2:eb:70:de:f2:d5:76:54:1e:4e:26:ad:55:12: 2c:49:14:a4:a4:ad:94:88:ed:5a:f0:c0:a6:69:3f: 39:5e:fd:f4:6d:f5:cf:d2:8f:59:b3:91:21:eb:3b: 69:1b:80:a0:f8:c4:ac:1b:cf:c8:88:2f:ee:05:50: 52:69:b5:86:15:8b:a0:e3:fd:51:32:29:02:68:b3: 36:52:05:d7:0d:35:b0:81:48:c6:a3:ed:1e:21:ee: a5:d7:aa:66:eb:e6:5c:7d:7a:76:83:ae:32:84:71: 35:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:EF:28:CF:1C:1D:84:9A:00:F8:12:38:2B:F4:81:03:B0:31:5B:A0 X509v3 Authority Key Identifier: keyid:DF:BF:5F:83:0B:50:B3:BF:C1:E5:35:0B:9C:60:5B:B7:56:12:2E:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/379fgwtQs7_B5TULnGBbt1YSLhE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:a1:fe:ad:c9:c0:6a:62:b8:72:86:cf:cb:14:fa:b1:5f:e7: ab:d5:2a:31:aa:52:e2:58:14:d1:08:da:fe:0e:13:47:01:3b: 86:07:0f:2c:10:b4:f7:18:6c:c5:e7:f4:4e:ed:f5:22:fa:96: b1:db:ae:4a:c8:67:a5:96:fc:d4:fb:90:51:09:ed:15:7e:74: 5a:cb:f7:e3:ab:c3:35:a8:a5:94:8e:e7:18:6e:09:79:32:b8: 9b:78:c1:7f:fe:4b:b9:b1:94:27:3c:d0:f9:a3:fe:95:0a:1f: 05:84:17:31:63:a5:81:d8:cd:e6:16:41:b9:27:d8:61:1c:75: 1f:31:15:93:0e:38:5b:02:59:39:c6:c4:51:64:b0:7b:d0:e6: 55:25:5e:fd:1e:3f:9d:47:ab:88:f8:b1:b1:91:a5:62:6b:d6: f9:b1:93:e6:7c:ca:05:85:dd:ba:6c:a1:88:fe:2d:fb:d7:f6: 02:09:8e:25:4e:1e:2b:8f:3f:e2:6d:84:02:9c:3a:d8:fc:39: c5:b8:ed:5e:96:56:9f:14:b5:a4:22:2e:85:10:98:e1:42:ba: bf:d1:ee:f8:a4:af:fb:fd:4e:11:25:ea:0a:f9:97:7c:e2:42: d9:d6:7c:15:ea:f3:9b:6d:b0:b5:6d:57:a4:c4:2a:07:4a:bc: c7:3e:b1:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJCN0QxMTAvBgNVBAUTKERGQkY1RjgzMEI1MEIzQkZDMUU1MzUwQjlDNjA1QkI3 NTYxMjJFMTEwHhcNMjUwODIyMjM1NjExWhcNMjUwODI5MjM1NjExWjAYMRYwFAYD VQQDEw02OGE5MDM5Yy05OGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuWjT81hqRDkX8d9nAYqvSGM/X7nIEG3M2yBenr89dqUHg7ka4omkATz3DjKy NXfTxaXeUsVi/Rk/kXTbv43mcII80D3ml7OglI9Vx9fdP5nvkPCdEYKV0uMpLqEx D9dW4IKR2olT5N0Y3ktn9/bNOHqKm8yKfmNo8p7RplKS9sOciMn0as+3ugHyRL/d WquaN0NeT+OF0utw3vLVdlQeTiatVRIsSRSkpK2UiO1a8MCmaT85Xv30bfXP0o9Z s5Eh6ztpG4Cg+MSsG8/IiC/uBVBSabWGFYug4/1RMikCaLM2UgXXDTWwgUjGo+0e Ie6l16pm6+ZcfXp2g64yhHE1HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIjvKM8c HYSaAPgSOCv0gQOwMVugMB8GA1UdIwQYMBaAFN+/X4MLULO/weU1C5xgW7dWEi4R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkI3RC8zMDE3MDk2RTJC QjkxMUVDQjJCMzY3NEZDNEY5QUUwMi8zNzlmZ3d0UXM3X0I1VFVMbkdCYnQxWVNM aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM3OWZnd3RRczdfQjVUVUxuR0JidDFZU0xoRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkI3RC8zMDE3MDk2RTJCQjkxMUVDQjJCMzY3NEZDNEY5QUUwMi8zNzlmZ3d0UXM3 X0I1VFVMbkdCYnQxWVNMaEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2of6tycBqYrhyhs/LFPqxX+er1SoxqlLiWBTRCNr+DhNHATuGBw8s ELT3GGzF5/RO7fUi+pax265KyGellvzU+5BRCe0VfnRay/fjq8M1qKWUjucYbgl5 MribeMF//ku5sZQnPND5o/6VCh8FhBcxY6WB2M3mFkG5J9hhHHUfMRWTDjhbAlk5 xsRRZLB70OZVJV79Hj+dR6uI+LGxkaVia9b5sZPmfMoFhd26bKGI/i371/YCCY4l Th4rjz/ibYQCnDrY/DnFuO1ellafFLWkIi6FEJjhQrq/0e74pK/7/U4RJeoK+Zd8 4kLZ1nwV6vObbbC1bVekxCoHSrzHPrHK -----END CERTIFICATE-----Generated at Sun Aug 24 04:35:38 2025 by rpki-client