$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft File: K1F8a3njzrA4nUGrxeziEH_sU_s.mft (raw, json) Hash identifier: pGXQhTKKy+EP2u/DCAsxsrdhztTnrBYKQBkZUcyw5Tw= Subject key identifier: EA:B9:6C:D8:D5:DD:DD:60:5D:42:76:1E:41:21:9F:AB:27:2B:C0:26 Authority key identifier: 2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB Certificate issuer: /CN=A91E2A61/serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB Certificate serial: 03E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft Manifest number: 03D5 Signing time: Sat 23 Aug 2025 00:50:07 +0000 Manifest this update: Sat 23 Aug 2025 00:50:07 +0000 Manifest next update: Sat 30 Aug 2025 00:50:07 +0000 Files and hashes: 1: K1F8a3njzrA4nUGrxeziEH_sU_s.crl (hash: hPKhRMpA366v7vnfYA3gHHJvW7XrswckDo4ZR/5NHzs=) 2: B0F9178297B811ECA8AA4230C4F9AE02.roa (hash: 7UvGO2r60JLS/okHiWx8rHAHMyUcsuX/jNwXXCmMBho=) 3: 0E1EAB66961011ECA540626AC4F9AE02.roa (hash: TzVnkqN0tq39UUa2lfdZqlKLVdLg+S4NlfoqQ2G24uU=) 4: 457D2B5A28DC11ED839D6243C4F9AE02.roa (hash: 4G2u0IIjNz0CyenUMTN7OBV5SwfSrRJSXkJu6HMP/+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:50:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 994 (0x3e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2A61, serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB Validity Not Before: Aug 23 00:50:07 2025 GMT Not After : Aug 30 00:50:07 2025 GMT Subject: CN=68a9103f-a59d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:35:ab:56:09:35:86:f3:32:06:27:75:a9:30: ed:f0:28:0e:21:c3:3f:55:89:d4:d8:b9:4f:88:d7: 5f:93:7c:c8:a8:62:8e:06:c7:06:0d:f8:05:39:bc: 22:52:a6:5d:b2:ec:d6:5b:bf:cf:ff:30:0c:26:2b: bb:b8:e1:c4:6e:a3:4e:35:41:1e:30:4c:ad:e2:09: ed:86:8c:fe:fa:32:df:f0:ca:77:1e:ec:9c:9b:9b: bb:29:58:89:48:3f:1e:5a:4f:45:4e:5f:fa:64:56: 5c:b1:2e:49:23:b2:bc:62:6b:9b:da:13:f0:18:c6: 85:42:37:15:b7:6a:f2:ab:73:2d:37:67:de:a4:5f: 39:eb:d1:9c:2c:33:4a:ed:6c:fd:54:d7:7d:a8:5f: fb:7d:c7:5e:6e:5f:a9:dd:aa:47:93:73:cd:0f:d7: 5b:d7:6d:9f:65:4d:14:41:b0:cc:4e:54:a7:40:41: b7:36:0e:aa:bc:27:c3:89:2d:80:f4:e3:66:26:f4: a8:75:f6:16:2d:1a:5c:66:23:9f:f0:01:74:68:26: a0:7a:5b:aa:7e:ed:c8:de:84:89:b5:24:e8:25:22: 5f:bd:09:7f:7c:3f:a8:dc:c4:e1:47:c7:41:27:fb: 6a:5c:10:e0:46:5c:5c:27:22:8c:b0:17:40:aa:91: 26:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:B9:6C:D8:D5:DD:DD:60:5D:42:76:1E:41:21:9F:AB:27:2B:C0:26 X509v3 Authority Key Identifier: keyid:2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:70:e8:29:d9:ba:d3:57:25:9b:36:f9:46:72:2d:17:3a:80: 98:4f:d8:63:3a:4f:54:4d:fd:24:e2:58:c2:3b:f5:80:fa:e4: 5a:61:5c:66:6e:e6:c0:92:89:fc:95:d6:71:a5:9d:11:89:89: 19:2e:b9:61:69:79:ea:1c:98:78:d1:54:28:ed:db:73:33:2c: 8c:28:e2:43:64:11:3e:2c:23:20:85:bd:5f:47:b6:3a:01:4e: 26:a2:46:fc:32:f2:ea:68:75:84:ef:67:e9:41:f4:3f:9c:96: 96:00:cb:b4:89:4e:19:5d:14:5e:84:08:31:3c:05:60:e2:de: 46:5b:93:c9:41:09:dc:5d:1a:ef:22:47:99:c6:e4:83:33:8a: 47:94:60:e9:1d:40:7d:3b:c8:b5:25:fa:2d:57:4e:40:69:99: c9:5e:21:a6:3e:4e:16:4f:18:0f:18:9d:89:48:ba:63:48:c1: e1:3b:cc:60:a1:46:13:75:fb:6d:99:a5:08:07:13:3c:42:b5: a2:e3:ac:87:48:32:46:33:13:9e:28:18:7d:a0:7e:f9:7d:59: 98:7f:2d:d9:79:c7:a8:f3:68:35:d6:09:d5:2f:83:95:e0:92: 2a:84:13:c5:59:42:65:00:9f:89:a5:bb:d9:b2:a7:50:2e:aa: 61:7b:f8:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJBNjExMTAvBgNVBAUTKDJCNTE3QzZCNzlFM0NFQjAzODlENDFBQkM1RUNFMjEw N0ZFQzUzRkIwHhcNMjUwODIzMDA1MDA3WhcNMjUwODMwMDA1MDA3WjAYMRYwFAYD VQQDEw02OGE5MTAzZi1hNTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0DWrVgk1hvMyBid1qTDt8CgOIcM/VYnU2LlPiNdfk3zIqGKOBscGDfgFObwi UqZdsuzWW7/P/zAMJiu7uOHEbqNONUEeMEyt4gnthoz++jLf8Mp3Huycm5u7KViJ SD8eWk9FTl/6ZFZcsS5JI7K8Ymub2hPwGMaFQjcVt2ryq3MtN2fepF8569GcLDNK 7Wz9VNd9qF/7fcdebl+p3apHk3PND9db122fZU0UQbDMTlSnQEG3Ng6qvCfDiS2A 9ONmJvSodfYWLRpcZiOf8AF0aCageluqfu3I3oSJtSToJSJfvQl/fD+o3MThR8dB J/tqXBDgRlxcJyKMsBdAqpEmcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOq5bNjV 3d1gXUJ2HkEhn6snK8AmMB8GA1UdIwQYMBaAFCtRfGt5486wOJ1Bq8Xs4hB/7FP7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkE2MS9FREMwOEZFNjk2 MEIxMUVDQkJFNEJFNjRDNEY5QUUwMi9LMUY4YTNuanpyQTRuVUdyeGV6aUVIX3NV X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0sxRjhhM25qenJBNG5VR3J4ZXppRUhfc1Vfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkE2MS9FREMwOEZFNjk2MEIxMUVDQkJFNEJFNjRDNEY5QUUwMi9LMUY4YTNuanpy QTRuVUdyeGV6aUVIX3NVX3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+cOgp2brTVyWbNvlGci0XOoCYT9hjOk9UTf0k4ljCO/WA+uRaYVxm bubAkon8ldZxpZ0RiYkZLrlhaXnqHJh40VQo7dtzMyyMKOJDZBE+LCMghb1fR7Y6 AU4mokb8MvLqaHWE72fpQfQ/nJaWAMu0iU4ZXRRehAgxPAVg4t5GW5PJQQncXRrv IkeZxuSDM4pHlGDpHUB9O8i1JfotV05AaZnJXiGmPk4WTxgPGJ2JSLpjSMHhO8xg oUYTdfttmaUIBxM8QrWi46yHSDJGMxOeKBh9oH75fVmYfy3Zeceo82g11gnVL4OV 4JIqhBPFWUJlAJ+JpbvZsqdQLqphe/gd -----END CERTIFICATE-----Generated at Sun Aug 24 09:02:26 2025 by rpki-client