$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.mft File: cFWB1AyVgaJlHlMlI42zvcs6fQU.mft (raw, json) Hash identifier: EutmlLKIqNcO3/Xp3y0KUdzinhWKmL1r4COTS07irZo= Subject key identifier: 6B:13:89:0B:94:39:29:8A:F6:BB:5A:98:AD:C7:5D:FA:76:DE:29:69 Authority key identifier: 70:55:81:D4:0C:95:81:A2:65:1E:53:25:23:8D:B3:BD:CB:3A:7D:05 Certificate issuer: /CN=A91E1D91/serialNumber=705581D40C9581A2651E5325238DB3BDCB3A7D05 Certificate serial: 03C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFWB1AyVgaJlHlMlI42zvcs6fQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.mft Manifest number: 03BE Signing time: Sat 23 Aug 2025 00:57:31 +0000 Manifest this update: Sat 23 Aug 2025 00:57:30 +0000 Manifest next update: Sat 30 Aug 2025 00:57:30 +0000 Files and hashes: 1: cFWB1AyVgaJlHlMlI42zvcs6fQU.crl (hash: Ltcj2E54jQEpptjzfcfoK6mVVJtMvGimmUVFBuXZW1M=) 2: 6CDC639EA04411EC8A7E5E2CC4F9AE02.roa (hash: WktAZLAHSw7QkU+hNH84sEG4OXo+/tq5XSlAqKGLv18=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.crl rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFWB1AyVgaJlHlMlI42zvcs6fQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:57:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 967 (0x3c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1D91, serialNumber=705581D40C9581A2651E5325238DB3BDCB3A7D05 Validity Not Before: Aug 23 00:57:30 2025 GMT Not After : Aug 30 00:57:30 2025 GMT Subject: CN=68a911fb-0947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6a:fb:37:45:78:2b:a5:30:0f:3c:b2:da:a1: 08:ab:95:48:1c:79:35:81:05:4e:38:c7:f1:4e:d8: 17:83:48:88:31:5f:c9:ce:67:34:29:e5:96:5d:f2: 20:e8:0f:3f:77:aa:d3:87:0d:7c:68:90:28:48:d2: 5a:25:0a:a5:54:04:dc:e1:04:06:02:17:52:7d:d1: 78:78:b0:50:60:a0:c1:10:14:37:40:30:28:17:6c: c1:0e:ce:24:59:5e:cf:62:8c:fd:b7:c9:b2:10:46: c3:dc:4f:35:a5:cc:22:7c:39:0d:c5:4c:77:eb:b8: e0:17:7a:0c:73:e7:cc:eb:26:17:a5:8d:25:bc:92: d3:08:a8:8a:64:5b:5f:7e:15:b9:ef:51:ce:9b:83: 89:fb:8f:16:e1:6e:68:9b:56:91:e0:37:9e:66:28: 17:15:51:59:70:70:0a:a8:eb:2a:cb:ec:2f:91:93: ca:2d:97:01:55:61:19:d9:ce:6d:c8:c7:d1:7f:93: 76:dc:36:ed:4b:36:64:95:2e:1c:3c:d1:b3:be:b1: c7:1a:60:0d:14:a1:b8:c2:49:97:f3:a3:67:e5:3b: 23:d7:57:bd:74:35:14:c6:db:f3:7a:d6:e2:34:fe: 05:14:da:2f:c5:d3:ab:27:ee:84:b5:f2:88:a5:ed: f1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:13:89:0B:94:39:29:8A:F6:BB:5A:98:AD:C7:5D:FA:76:DE:29:69 X509v3 Authority Key Identifier: keyid:70:55:81:D4:0C:95:81:A2:65:1E:53:25:23:8D:B3:BD:CB:3A:7D:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFWB1AyVgaJlHlMlI42zvcs6fQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:57:60:f7:48:df:93:dc:4e:bf:08:9f:0a:33:55:10:44:9a: 5b:78:31:9f:ae:90:d1:62:d8:fb:90:f6:31:6d:3b:78:c7:8f: ac:43:4f:2e:03:07:b8:13:fc:94:50:d8:b8:b0:c4:5d:c9:04: cb:b8:fa:6f:d2:a7:73:e4:8d:10:b0:30:b6:36:a4:f7:3a:98: b1:60:50:f4:2d:2a:18:90:af:f7:17:29:92:40:e1:f7:90:5a: c1:51:1a:a3:18:b9:49:aa:16:87:04:86:66:97:8c:b1:46:b5: 47:a8:b8:fb:78:38:cd:92:67:b5:2e:df:8a:c9:23:88:34:d8: 88:e4:ac:a8:16:8c:b3:ba:0e:6d:4c:14:18:da:fc:64:b6:b5: 8d:a1:0d:3d:c3:5c:a7:d5:25:77:79:a8:bd:8f:1a:d3:16:90: 4a:61:7e:20:b3:c3:d2:21:01:92:6c:61:71:ec:73:66:a2:9f: 7e:91:c0:43:f2:3d:e6:39:be:7e:85:b0:51:2a:55:e0:12:fa: ef:b0:66:30:2a:34:7a:f8:95:94:ba:60:96:51:9f:9f:ad:2c: f5:30:97:c0:ad:d8:ea:9e:3f:17:b5:55:92:03:3c:5c:d5:e8: 7c:42:21:09:87:68:87:b0:9a:27:63:36:49:df:1a:ad:eb:f9: de:6c:cf:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFEOTExMTAvBgNVBAUTKDcwNTU4MUQ0MEM5NTgxQTI2NTFFNTMyNTIzOERCM0JE Q0IzQTdEMDUwHhcNMjUwODIzMDA1NzMwWhcNMjUwODMwMDA1NzMwWjAYMRYwFAYD VQQDEw02OGE5MTFmYi0wOTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv2r7N0V4K6UwDzyy2qEIq5VIHHk1gQVOOMfxTtgXg0iIMV/Jzmc0KeWWXfIg 6A8/d6rThw18aJAoSNJaJQqlVATc4QQGAhdSfdF4eLBQYKDBEBQ3QDAoF2zBDs4k WV7PYoz9t8myEEbD3E81pcwifDkNxUx367jgF3oMc+fM6yYXpY0lvJLTCKiKZFtf fhW571HOm4OJ+48W4W5om1aR4DeeZigXFVFZcHAKqOsqy+wvkZPKLZcBVWEZ2c5t yMfRf5N23DbtSzZklS4cPNGzvrHHGmANFKG4wkmX86Nn5Tsj11e9dDUUxtvzetbi NP4FFNovxdOrJ+6EtfKIpe3xYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGsTiQuU OSmK9rtamK3HXfp23ilpMB8GA1UdIwQYMBaAFHBVgdQMlYGiZR5TJSONs73LOn0F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUQ5MS81RDhDMTcxMkEw NDAxMUVDODQ1QUU5MjZDNEY5QUUwMi9jRldCMUF5VmdhSmxIbE1sSTQyenZjczZm UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NGV0IxQXlWZ2FKbEhsTWxJNDJ6dmNzNmZRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUQ5MS81RDhDMTcxMkEwNDAxMUVDODQ1QUU5MjZDNEY5QUUwMi9jRldCMUF5Vmdh SmxIbE1sSTQyenZjczZmUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHV2D3SN+T3E6/CJ8KM1UQRJpbeDGfrpDRYtj7kPYxbTt4x4+sQ08u Awe4E/yUUNi4sMRdyQTLuPpv0qdz5I0QsDC2NqT3OpixYFD0LSoYkK/3FymSQOH3 kFrBURqjGLlJqhaHBIZml4yxRrVHqLj7eDjNkme1Lt+KySOINNiI5KyoFoyzug5t TBQY2vxktrWNoQ09w1yn1SV3eai9jxrTFpBKYX4gs8PSIQGSbGFx7HNmop9+kcBD 8j3mOb5+hbBRKlXgEvrvsGYwKjR6+JWUumCWUZ+frSz1MJfArdjqnj8XtVWSAzxc 1eh8QiEJh2iHsJonYzZJ3xqt6/nebM9t -----END CERTIFICATE-----Generated at Sun Aug 24 00:49:38 2025 by rpki-client