$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft File: d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft (raw, json) Hash identifier: BA3uO8o+4drVm0YmAloDkWOF727jPbKZW3mmspcmCgo= Subject key identifier: 7C:EF:5B:73:52:81:FC:77:3C:AE:2A:10:4F:48:29:2F:9C:71:1E:FA Authority key identifier: 77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92 Certificate issuer: /CN=A91DEB81/serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892 Certificate serial: 0477 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft Manifest number: 044F Signing time: Sat 23 Aug 2025 00:31:42 +0000 Manifest this update: Sat 23 Aug 2025 00:31:42 +0000 Manifest next update: Sat 30 Aug 2025 00:31:42 +0000 Files and hashes: 1: d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl (hash: M/en5o4tlr6QG056OYc7z8na1T3T+Z8Q0/tjHew010s=) 2: EEECC55A8C3611EFA07E612DC4F9AE02.roa (hash: S448nKM+pkzyKAVAq+QLZ6c2Rwj7lMGOSqjzi17yKYo=) 3: 216DB034DE9711EC9289256FC4F9AE02.roa (hash: +Y2vKS8CZ7xVCXV7DmrOc6o0OVVkIHves16LK2wsX2I=) 4: 204E25DADE9711EC9289256FC4F9AE02.roa (hash: Nm0NB5K/NvPqifGuFp/i7DvZfN/unt+xIyxa1mf1Ru8=) 5: E184C6F48F2C11EEA361B22FC4F9AE02.roa (hash: m7hFb23btwRa7iUoc5sSfQwuK6EzzQbsJrT19RdsUzA=) 6: 1FBEA1EEDE9711EC9289256FC4F9AE02.roa (hash: wFyDTsNGRzgAv8mhqHHalbGpjw+H79Gqqrm8IklHVfE=) 7: E0C5B7148F2C11EEA361B22FC4F9AE02.roa (hash: Aqyl2hhEx5BpBctkE5rWM8Kv0ZDOqQAIfUrt5yWaYks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:31:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1143 (0x477) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEB81, serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892 Validity Not Before: Aug 23 00:31:42 2025 GMT Not After : Aug 30 00:31:42 2025 GMT Subject: CN=68a90bee-ce2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d2:e4:e0:19:05:59:4e:22:cd:d0:55:84:25: bd:14:63:eb:de:d1:5b:1a:f6:f0:98:9c:5a:99:cc: a4:33:66:c7:93:24:ea:1c:32:a1:82:30:02:a0:f7: 05:e6:3d:a1:af:c1:0b:00:ea:6a:7d:ff:87:f0:64: 36:01:6c:64:03:9c:35:df:99:a0:b4:19:12:ee:20: 9e:ea:6c:2f:41:83:c8:01:37:4c:4c:b9:f2:fc:9b: 16:92:a9:06:d4:35:90:59:d5:c4:fc:ba:30:07:50: 69:1d:70:2a:27:36:0f:77:e6:16:9d:41:de:72:e5: 66:cb:11:1f:ab:a0:9a:f9:3d:ab:42:a4:a4:81:e2: 26:8c:00:ed:ac:72:74:e5:3d:00:1e:1e:96:10:a6: fa:09:93:d6:94:f4:f4:c8:04:7a:98:a9:aa:94:4e: 15:3b:e3:1d:15:21:6e:0c:a1:16:fa:3a:b2:4d:32: 92:06:90:f5:9d:6e:d3:20:0d:0f:90:de:54:df:f7: cd:6c:88:69:e1:d9:b0:b4:f4:1d:99:fa:63:44:4e: 53:f7:30:f8:aa:24:e9:cc:e9:9d:d6:4d:dd:29:bc: b4:91:aa:f0:27:ac:2c:9d:7a:00:48:b5:c6:41:b1: 9c:88:4a:39:3c:98:5a:bf:36:ea:54:37:bf:32:cf: f8:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:EF:5B:73:52:81:FC:77:3C:AE:2A:10:4F:48:29:2F:9C:71:1E:FA X509v3 Authority Key Identifier: keyid:77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:b4:3f:a1:28:bb:1a:c3:ad:eb:30:88:85:6d:9d:15:2a:4a: c6:81:da:29:8a:03:cb:45:3b:a2:52:fe:9d:92:05:df:f5:1f: 7d:d3:64:bf:3b:d3:68:9b:fc:5b:7f:32:19:9a:69:50:0c:f9: 9d:12:ca:e5:3f:99:6d:56:61:23:7f:91:0e:fe:7a:fd:3b:8b: d1:41:db:2f:77:59:1a:3e:90:8e:5a:7e:2f:92:d0:e4:20:0c: 47:eb:82:2b:b5:71:83:95:d3:24:ce:80:ef:35:91:af:7c:22: 32:dd:ee:8a:e7:b6:9d:1d:57:66:74:f1:ce:f0:b9:d8:b4:98: 61:4d:b2:62:b8:fc:57:72:7d:bf:d2:be:79:63:6f:2e:09:fc: 69:02:7f:7c:53:e3:12:c7:b0:09:0e:0d:0f:ab:80:47:fc:bd: 33:bf:f1:ac:a7:7f:04:0d:11:ca:4c:25:57:0a:74:c9:18:b1: 9d:7f:ea:0c:73:a7:26:24:8e:94:0c:19:b3:01:bb:1b:87:29: 98:24:73:59:e8:f1:76:57:62:a6:5a:08:1c:d8:96:a5:91:9e: 1c:8b:cb:f9:a5:6d:e6:37:f5:3d:0d:9a:e0:30:3d:19:30:a6: bb:a8:5b:4d:ab:a1:6c:e2:d0:e3:46:02:4b:a1:5a:17:58:ef: 78:fa:1f:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVCODExMTAvBgNVBAUTKDc3NzY2MTJBNDNDMjJEMEE2NkI4RjEzNjgwQjMwNThC RUQ1RDk4OTIwHhcNMjUwODIzMDAzMTQyWhcNMjUwODMwMDAzMTQyWjAYMRYwFAYD VQQDEw02OGE5MGJlZS1jZTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArdLk4BkFWU4izdBVhCW9FGPr3tFbGvbwmJxamcykM2bHkyTqHDKhgjACoPcF 5j2hr8ELAOpqff+H8GQ2AWxkA5w135mgtBkS7iCe6mwvQYPIATdMTLny/JsWkqkG 1DWQWdXE/LowB1BpHXAqJzYPd+YWnUHecuVmyxEfq6Ca+T2rQqSkgeImjADtrHJ0 5T0AHh6WEKb6CZPWlPT0yAR6mKmqlE4VO+MdFSFuDKEW+jqyTTKSBpD1nW7TIA0P kN5U3/fNbIhp4dmwtPQdmfpjRE5T9zD4qiTpzOmd1k3dKby0karwJ6wsnXoASLXG QbGciEo5PJhavzbqVDe/Ms/4/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHzvW3NS gfx3PK4qEE9IKS+ccR76MB8GA1UdIwQYMBaAFHd2YSpDwi0KZrjxNoCzBYvtXZiS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUI4MS9DRjk2NjNDNjcw RjcxMUVDQjMxOEU0M0FDNEY5QUUwMi9kM1poS2tQQ0xRcG11UEUyZ0xNRmktMWRt SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QzWmhLa1BDTFFwbXVQRTJnTE1GaS0xZG1KSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUI4MS9DRjk2NjNDNjcwRjcxMUVDQjMxOEU0M0FDNEY5QUUwMi9kM1poS2tQQ0xR cG11UEUyZ0xNRmktMWRtSkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCptD+hKLsaw63rMIiFbZ0VKkrGgdopigPLRTuiUv6dkgXf9R9902S/ O9Nom/xbfzIZmmlQDPmdEsrlP5ltVmEjf5EO/nr9O4vRQdsvd1kaPpCOWn4vktDk IAxH64IrtXGDldMkzoDvNZGvfCIy3e6K57adHVdmdPHO8LnYtJhhTbJiuPxXcn2/ 0r55Y28uCfxpAn98U+MSx7AJDg0Pq4BH/L0zv/Gsp38EDRHKTCVXCnTJGLGdf+oM c6cmJI6UDBmzAbsbhymYJHNZ6PF2V2KmWggc2JalkZ4ci8v5pW3mN/U9DZrgMD0Z MKa7qFtNq6Fs4tDjRgJLoVoXWO94+h9N -----END CERTIFICATE-----Generated at Sat Aug 23 17:23:49 2025 by rpki-client