$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.mft File: 9LfQRDuM_5tAmLuM7L7Yf86putI.mft (raw, json) Hash identifier: fKxTTJ4jmKpBjRZczHdsCkZ+cOU2TdOhRlcshPOT5+0= Subject key identifier: E2:8F:70:29:1E:0F:0C:4A:0C:EF:B2:FE:B5:A6:C5:99:FE:77:C8:6F Authority key identifier: F4:B7:D0:44:3B:8C:FF:9B:40:98:BB:8C:EC:BE:D8:7F:CE:A9:BA:D2 Certificate issuer: /CN=A91E5481/serialNumber=F4B7D0443B8CFF9B4098BB8CECBED87FCEA9BAD2 Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LfQRDuM_5tAmLuM7L7Yf86putI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.mft Manifest number: 37 Signing time: Sat 23 Aug 2025 07:48:28 +0000 Manifest this update: Sat 23 Aug 2025 07:48:28 +0000 Manifest next update: Sat 30 Aug 2025 07:48:28 +0000 Files and hashes: 1: 9LfQRDuM_5tAmLuM7L7Yf86putI.crl (hash: PsWBi1SvuTOWI2Vd8vIrslCP7TkxruCekOExjOK36U4=) 2: 67F6AC6C2BD911F09AF6B821C4F9AE02.roa (hash: wYtQWk7ttHPhjt8DRgJvmS9ClmgD+cfxZKN75n4cmjU=) 3: 67818EF02BD911F09AF6B821C4F9AE02.roa (hash: GrE2T3QoH3KUCtrNxzC9H+t8cncgZrWD5zuytXWYaOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.crl rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LfQRDuM_5tAmLuM7L7Yf86putI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:48:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5481, serialNumber=F4B7D0443B8CFF9B4098BB8CECBED87FCEA9BAD2 Validity Not Before: Aug 23 07:48:28 2025 GMT Not After : Aug 30 07:48:28 2025 GMT Subject: CN=68a9724c-1b7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7f:d9:6e:e9:04:a8:5b:0e:43:f8:6b:aa:bd: e7:1c:90:26:31:97:d4:66:b5:a6:41:4c:ae:92:13: 62:91:65:a5:7d:0c:98:b6:7e:d8:93:d2:ac:a0:ae: 71:11:e2:8d:48:b5:1a:9c:15:fd:23:01:37:7f:76: 3a:16:6b:2e:0b:e9:85:b1:4e:45:b5:0d:93:54:eb: 4a:39:0c:17:f3:ae:14:9e:56:cd:f3:a1:1d:f4:4d: 30:6c:df:9f:0c:d3:17:99:f0:8d:91:6b:44:e2:65: a1:6e:e7:fe:65:b2:bb:f2:c8:49:66:e2:9e:b3:43: 38:52:f8:69:dc:ea:f7:e9:bb:c9:af:93:4c:df:57: 31:7e:80:02:11:68:76:00:4c:fc:da:75:12:24:1b: 7b:f2:72:4d:8b:1f:d5:f5:1f:ee:44:a2:a2:87:7a: cd:23:7b:18:45:22:88:eb:1d:b9:b0:11:8a:98:9d: 38:01:f6:60:99:e2:2f:fe:81:88:cf:98:d3:1a:09: ec:25:91:75:8f:1b:42:f3:d1:16:a1:b2:b0:2a:95: dc:9d:3d:4d:c5:bf:2f:07:80:f1:92:33:3a:00:43: 75:5a:5d:bb:36:59:2e:ed:78:2d:b3:cb:e7:44:b1: 84:f3:0b:48:3e:75:d1:df:55:de:bf:2f:80:d9:94: 5d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:8F:70:29:1E:0F:0C:4A:0C:EF:B2:FE:B5:A6:C5:99:FE:77:C8:6F X509v3 Authority Key Identifier: keyid:F4:B7:D0:44:3B:8C:FF:9B:40:98:BB:8C:EC:BE:D8:7F:CE:A9:BA:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LfQRDuM_5tAmLuM7L7Yf86putI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:06:bc:f4:dc:49:d8:2e:f6:47:d7:fd:25:83:eb:06:90:4e: 55:b1:7a:ef:ce:6d:81:f3:8b:cf:0e:c0:9d:92:e5:ca:75:bc: 04:7b:b8:66:44:56:50:5c:05:0f:a2:a6:68:43:d0:f9:c9:d5: cf:cf:41:d9:1d:ab:2c:a7:d3:46:49:9d:16:c2:06:10:39:a1: 8e:14:46:e6:55:5f:3e:b7:7e:51:75:51:b6:95:21:de:44:0e: a7:53:8a:5b:cd:6a:a0:ec:63:f7:b7:53:8c:5e:a9:e0:87:a5: d3:ea:28:7a:cd:9d:48:76:32:e0:a8:66:84:0d:74:d7:b8:33: 06:d9:f7:b5:a7:a8:d7:80:69:62:64:97:a6:6f:94:71:75:b7: 8c:1d:3a:c1:ae:bd:fb:f3:8a:54:dd:b1:ec:8c:9b:ca:6f:53: 18:af:51:a5:a4:c0:33:d8:eb:14:29:b1:2c:11:08:42:50:71: 29:5f:4a:e9:69:97:10:89:f1:b5:e7:bc:f4:b9:b8:c8:dc:9c: d7:7f:d6:3f:d3:f2:c2:dd:18:d6:47:d6:d7:d7:33:ff:4e:e5: 6b:39:8a:6a:0b:eb:0a:98:6b:f1:c8:f4:94:34:82:02:c1:66: 49:96:eb:3c:8d:d8:c8:a7:b6:65:54:ab:35:56:59:d0:d1:29: 65:6b:16:d4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NTQ4MTExMC8GA1UEBRMoRjRCN0QwNDQzQjhDRkY5QjQwOThCQjhDRUNCRUQ4N0ZD RUE5QkFEMjAeFw0yNTA4MjMwNzQ4MjhaFw0yNTA4MzAwNzQ4MjhaMBgxFjAUBgNV BAMTDTY4YTk3MjRjLTFiN2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvf9lu6QSoWw5D+GuqvecckCYxl9RmtaZBTK6SE2KRZaV9DJi2ftiT0qygrnER 4o1ItRqcFf0jATd/djoWay4L6YWxTkW1DZNU60o5DBfzrhSeVs3zoR30TTBs358M 0xeZ8I2Ra0TiZaFu5/5lsrvyyElm4p6zQzhS+Gnc6vfpu8mvk0zfVzF+gAIRaHYA TPzadRIkG3vyck2LH9X1H+5EoqKHes0jexhFIojrHbmwEYqYnTgB9mCZ4i/+gYjP mNMaCewlkXWPG0Lz0RahsrAqldydPU3Fvy8HgPGSMzoAQ3VaXbs2WS7teC2zy+dE sYTzC0g+ddHfVd6/L4DZlF3XAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4o9wKR4P DEoM77L+tabFmf53yG8wHwYDVR0jBBgwFoAU9LfQRDuM/5tAmLuM7L7Yf86putIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1NDgxL0ExODU0REUwMkJE ODExRjBBQjYxNzMyMEM0RjlBRTAyLzlMZlFSRHVNXzV0QW1MdU03TDdZZjg2cHV0 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOUxmUVJEdU1fNXRBbUx1TTdMN1lmODZwdXRJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1 NDgxL0ExODU0REUwMkJEODExRjBBQjYxNzMyMEM0RjlBRTAyLzlMZlFSRHVNXzV0 QW1MdU03TDdZZjg2cHV0SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADAGvPTcSdgu9kfX/SWD6waQTlWxeu/ObYHzi88OwJ2S5cp1vAR7uGZE VlBcBQ+ipmhD0PnJ1c/PQdkdqyyn00ZJnRbCBhA5oY4URuZVXz63flF1UbaVId5E DqdTilvNaqDsY/e3U4xeqeCHpdPqKHrNnUh2MuCoZoQNdNe4MwbZ97WnqNeAaWJk l6ZvlHF1t4wdOsGuvfvzilTdseyMm8pvUxivUaWkwDPY6xQpsSwRCEJQcSlfSulp lxCJ8bXnvPS5uMjcnNd/1j/T8sLdGNZH1tfXM/9O5Ws5imoL6wqYa/HI9JQ0ggLB ZkmW6zyN2MintmVUqzVWWdDRKWVrFtQ= -----END CERTIFICATE-----Generated at Sun Aug 24 00:09:16 2025 by rpki-client