$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft File: 9FMh2HhbiJfVqDS5DquRDFWQnYU.mft (raw, json) Hash identifier: XodLqSKt0JbmnXKBmck7P2unsbRhpr7grYjyCoioyMY= Subject key identifier: 6E:69:12:9A:E3:C5:7F:03:3E:C4:1D:86:CC:36:9D:16:5D:9C:16:DB Authority key identifier: F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85 Certificate issuer: /CN=A91DEDFD/serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85 Certificate serial: 0900 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft Manifest number: 08D2 Signing time: Fri 22 Aug 2025 20:36:15 +0000 Manifest this update: Fri 22 Aug 2025 20:36:14 +0000 Manifest next update: Fri 29 Aug 2025 20:36:14 +0000 Files and hashes: 1: 9FMh2HhbiJfVqDS5DquRDFWQnYU.crl (hash: 7os/L7esvUUxde3pBRxkfVqrDCViJM58IGJE2TqmsfI=) 2: 7E4270063AF011EC9E421056C4F9AE02.roa (hash: FNdfZCcbxe3V2OAQFLZGqdKXBJ6o0UkfGqCv1XFBIe4=) 3: F547BE4253EA11F08B05D02EC4F9AE02.roa (hash: 3PD/x5elGPt/NTqjyFL6QFT8slsuLxNOAQu2SL4y1Fo=) 4: 8F6A0892437611EC9E067020C4F9AE02.roa (hash: xykraSV8kLGomChcl9m8aUsM7WTxk2kDX+8/BfVDf4g=) 5: 1A7632424DA111ECA1180F87C4F9AE02.roa (hash: emHp7Xzsh3MvD05QY3vvsc/JIauIxxqNW7MxPaZ5E+I=) 6: 7AE3D13C62A111ED80F96E47C4F9AE02.roa (hash: Dx71OVIwLra0qJzFPwaosr95WYYv+7Bg/7InXVNYyaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:36:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2304 (0x900) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEDFD, serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85 Validity Not Before: Aug 22 20:36:14 2025 GMT Not After : Aug 29 20:36:14 2025 GMT Subject: CN=68a8d4be-48fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0c:a2:32:f6:bd:73:9b:42:12:a2:b8:d6:b9: a6:6a:e2:ba:40:5a:d2:0d:a4:fc:6b:96:22:cc:98: 9e:32:7f:62:63:47:5f:6c:47:ec:17:71:b6:8c:d9: 0e:f9:ed:de:c7:28:26:29:be:15:bc:a2:15:1f:ec: 4f:ee:d7:e0:21:be:9c:f5:f0:b8:f7:00:a6:40:15: 18:92:6e:79:c7:d9:20:b5:fa:c5:5a:45:d1:77:d6: 17:8d:66:c5:da:19:32:97:8e:fd:5c:07:db:11:6a: bc:94:98:3b:b5:e7:d7:4f:6e:88:2a:7c:36:87:1d: db:d7:ca:ea:45:97:68:5d:db:a8:e0:4a:49:9e:78: 4d:07:96:42:f1:a7:03:4b:88:e3:fe:ea:a5:aa:3c: f4:1b:8e:97:fc:b0:d2:e8:9b:ca:57:0e:cc:22:21: 8b:3f:af:61:b9:0e:6d:e7:a8:1f:e2:30:82:7d:76: 52:ef:c8:8d:01:fb:53:44:ba:23:31:d9:da:53:7f: 96:50:f5:0c:3c:26:e3:cb:ce:85:17:00:b0:63:27: e2:b1:41:a9:de:47:49:6a:5f:33:42:1a:35:ef:5e: ef:dc:0a:1d:5d:87:6e:64:74:78:fe:50:bf:72:75: 37:1a:b8:06:d6:88:e2:d8:b2:72:2b:3b:f8:85:45: e7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:69:12:9A:E3:C5:7F:03:3E:C4:1D:86:CC:36:9D:16:5D:9C:16:DB X509v3 Authority Key Identifier: keyid:F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:6e:22:fc:be:80:3b:da:2e:3d:18:34:d3:ae:3f:7b:6a:c6: 2a:30:2a:30:2f:1f:cb:46:d1:89:37:52:a4:38:d2:9d:8e:b9: f4:e8:91:96:07:4b:c7:a4:c8:5c:5e:64:eb:15:ec:81:d5:c5: f3:8f:5c:c4:c5:6a:8b:1f:56:64:14:aa:08:6a:db:de:15:a5: 99:72:ad:41:7d:51:60:c2:14:e1:6d:a8:ac:94:00:9b:25:01: 3d:2e:13:6b:d0:41:3c:c3:5a:46:b8:72:89:29:d4:8e:ac:cf: 02:a8:65:4f:f1:4b:76:7a:4f:b4:8f:d4:b3:66:ef:b0:73:5c: 77:95:93:d3:ad:3e:a8:5a:5a:77:d3:2b:99:3d:ca:63:9d:ff: c5:29:72:97:aa:1c:8d:39:9a:90:0b:ea:50:1a:49:a8:9e:e2: ff:e6:64:2b:12:b1:54:81:ae:76:c1:8a:9a:1a:21:70:b2:49: 4f:1a:d5:a6:e9:b0:7e:b4:24:15:f5:81:d9:b0:5e:53:77:3c: 84:7c:a7:ad:a8:88:d2:fb:f1:ed:9d:10:29:b7:67:5c:b5:d4: ea:da:3a:e9:55:f3:64:d2:a3:8d:d2:df:71:99:5e:f4:58:a5: ab:99:c9:69:f1:61:8b:d6:23:1d:aa:c7:10:c2:ab:33:98:9e: 4f:ce:64:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVERkQxMTAvBgNVBAUTKEY0NTMyMUQ4Nzg1Qjg4OTdENUE4MzRCOTBFQUI5MTBD NTU5MDlEODUwHhcNMjUwODIyMjAzNjE0WhcNMjUwODI5MjAzNjE0WjAYMRYwFAYD VQQDEw02OGE4ZDRiZS00OGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqwyiMva9c5tCEqK41rmmauK6QFrSDaT8a5YizJieMn9iY0dfbEfsF3G2jNkO +e3exygmKb4VvKIVH+xP7tfgIb6c9fC49wCmQBUYkm55x9kgtfrFWkXRd9YXjWbF 2hkyl479XAfbEWq8lJg7tefXT26IKnw2hx3b18rqRZdoXduo4EpJnnhNB5ZC8acD S4jj/uqlqjz0G46X/LDS6JvKVw7MIiGLP69huQ5t56gf4jCCfXZS78iNAftTRLoj MdnaU3+WUPUMPCbjy86FFwCwYyfisUGp3kdJal8zQho1717v3AodXYduZHR4/lC/ cnU3GrgG1oji2LJyKzv4hUXnrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG5pEprj xX8DPsQdhsw2nRZdnBbbMB8GA1UdIwQYMBaAFPRTIdh4W4iX1ag0uQ6rkQxVkJ2F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERURGRC81NDUzNkIzRUJD ODgxMUVBODhFRjNENDlDNEY5QUUwMi85Rk1oMkhoYmlKZlZxRFM1RHF1UkRGV1Fu WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGTWgySGhiaUpmVnFEUzVEcXVSREZXUW5ZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RURGRC81NDUzNkIzRUJDODgxMUVBODhFRjNENDlDNEY5QUUwMi85Rk1oMkhoYmlK ZlZxRFM1RHF1UkRGV1FuWVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbbiL8voA72i49GDTTrj97asYqMCowLx/LRtGJN1KkONKdjrn06JGW B0vHpMhcXmTrFeyB1cXzj1zExWqLH1ZkFKoIatveFaWZcq1BfVFgwhThbaislACb JQE9LhNr0EE8w1pGuHKJKdSOrM8CqGVP8Ut2ek+0j9SzZu+wc1x3lZPTrT6oWlp3 0yuZPcpjnf/FKXKXqhyNOZqQC+pQGkmonuL/5mQrErFUga52wYqaGiFwsklPGtWm 6bB+tCQV9YHZsF5TdzyEfKetqIjS+/HtnRApt2dctdTq2jrpVfNk0qON0t9xmV70 WKWrmclp8WGL1iMdqscQwqszmJ5PzmSS -----END CERTIFICATE-----Generated at Sun Aug 24 03:11:21 2025 by rpki-client