$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft File: 83YJDdec9qJZrioXAgNy6eYWC7Y.mft (raw, json) Hash identifier: ka1svH97kNu4tLDQkpluRwzke4zbnmxkR84vu1ItkMk= Subject key identifier: 1F:76:6A:02:27:C8:2D:F6:77:03:36:BA:1A:D3:C5:13:98:C8:17:91 Authority key identifier: F3:76:09:0D:D7:9C:F6:A2:59:AE:2A:17:02:03:72:E9:E6:16:0B:B6 Certificate issuer: /CN=A91E8EAD/serialNumber=F376090DD79CF6A259AE2A17020372E9E6160BB6 Certificate serial: 09AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83YJDdec9qJZrioXAgNy6eYWC7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft Manifest number: 09A5 Signing time: Fri 22 Aug 2025 20:11:14 +0000 Manifest this update: Fri 22 Aug 2025 20:11:13 +0000 Manifest next update: Fri 29 Aug 2025 20:11:13 +0000 Files and hashes: 1: 83YJDdec9qJZrioXAgNy6eYWC7Y.crl (hash: ukNs2xR+6YML43TmHu2OQlfR9QfirjAnopKmgEnrd74=) 2: 16F7FB3E8FAF11EA96738C46C4F9AE02.roa (hash: FDVevWofhV4OBWCY3mCV+bPsuc2xoyahcfyBo3UC3vE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.crl rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83YJDdec9qJZrioXAgNy6eYWC7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:11:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2477 (0x9ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8EAD, serialNumber=F376090DD79CF6A259AE2A17020372E9E6160BB6 Validity Not Before: Aug 22 20:11:13 2025 GMT Not After : Aug 29 20:11:13 2025 GMT Subject: CN=68a8cee2-e626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:eb:d0:80:60:4d:da:f7:36:d3:d8:d2:0b:e0: f0:e1:54:ab:3c:ae:48:d6:f6:da:0d:da:49:60:32: 98:ce:1a:ec:92:8e:49:41:4e:02:cf:d8:0b:f8:47: 65:89:bd:c1:57:9c:52:64:84:9a:62:4e:f8:1a:a3: 15:74:c4:ee:1d:ea:7d:46:fb:10:b8:5f:44:68:b6: fe:00:96:ad:9d:63:8b:41:22:46:09:47:58:3b:83: b8:67:d5:bb:d6:c7:94:71:86:e5:ed:50:64:23:e4: 21:94:f6:f0:f9:c4:71:dd:a4:71:da:3b:fa:6b:f1: ba:a7:b6:c8:25:ce:bd:69:f6:8c:a1:af:ac:54:fc: 10:80:46:88:1a:c7:3c:35:5d:98:b8:06:11:c6:ef: f6:f9:76:65:73:43:ee:9c:df:92:c2:23:00:86:75: 6f:67:67:33:8c:f8:40:d7:53:68:97:c3:b1:d2:d2: d0:98:0f:8f:9e:90:85:d5:ed:a2:79:5d:47:f7:90: a4:cb:b1:01:65:0c:b4:ea:09:61:19:2d:c3:ad:45: b3:0b:c9:ba:04:29:03:3f:2b:25:4d:5a:2e:90:2b: 27:96:ea:9b:8f:d6:d3:d5:60:9e:8a:28:ee:e0:22: 6e:bb:e1:44:6f:9f:85:ae:01:c7:01:db:b5:49:15: be:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:76:6A:02:27:C8:2D:F6:77:03:36:BA:1A:D3:C5:13:98:C8:17:91 X509v3 Authority Key Identifier: keyid:F3:76:09:0D:D7:9C:F6:A2:59:AE:2A:17:02:03:72:E9:E6:16:0B:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83YJDdec9qJZrioXAgNy6eYWC7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:a5:84:80:a1:79:db:73:20:a7:61:a1:7f:b2:08:3e:20:42: d8:e1:2f:57:7c:30:a8:69:e5:39:31:bf:59:1f:1e:f0:98:aa: 09:99:10:51:f9:f5:05:97:52:3b:20:11:4d:ad:8d:24:86:40: 05:a5:ef:ec:01:71:17:2f:cb:49:70:b3:9d:33:57:67:fb:90: 91:6c:1e:ba:11:d9:e5:18:d9:49:20:66:20:64:05:c0:fe:94: a2:ce:bb:18:cc:4b:18:9a:08:1e:7b:77:e1:3c:0d:ae:71:a5: 61:10:6d:47:1e:0b:b5:20:2a:8a:47:7b:4d:49:2b:2e:94:1c: 04:56:dc:b1:9d:15:81:8e:9c:6a:93:0a:0f:c0:0a:e8:b3:3a: 4a:3b:f4:f2:3f:7f:36:d0:7b:81:f4:61:9f:16:b2:ab:db:33: ea:f0:4b:a3:d9:84:6b:86:16:5b:3b:01:be:2f:e8:03:0b:93: fe:f4:38:91:70:e3:92:81:66:95:3d:79:80:87:9c:17:cc:57: d3:0a:33:cd:70:ea:09:17:bc:85:c5:5f:83:45:9a:04:39:e4: f0:05:c6:02:ae:78:2b:d0:2e:4d:fb:9d:c7:22:4b:98:b6:1e: 97:f2:6b:fd:d1:73:ba:07:2e:fe:f1:08:05:be:7c:33:89:34: 87:70:90:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThFQUQxMTAvBgNVBAUTKEYzNzYwOTBERDc5Q0Y2QTI1OUFFMkExNzAyMDM3MkU5 RTYxNjBCQjYwHhcNMjUwODIyMjAxMTEzWhcNMjUwODI5MjAxMTEzWjAYMRYwFAYD VQQDEw02OGE4Y2VlMi1lNjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwOvQgGBN2vc209jSC+Dw4VSrPK5I1vbaDdpJYDKYzhrsko5JQU4Cz9gL+Edl ib3BV5xSZISaYk74GqMVdMTuHep9RvsQuF9EaLb+AJatnWOLQSJGCUdYO4O4Z9W7 1seUcYbl7VBkI+QhlPbw+cRx3aRx2jv6a/G6p7bIJc69afaMoa+sVPwQgEaIGsc8 NV2YuAYRxu/2+XZlc0PunN+SwiMAhnVvZ2czjPhA11Nol8Ox0tLQmA+PnpCF1e2i eV1H95Cky7EBZQy06glhGS3DrUWzC8m6BCkDPyslTVoukCsnluqbj9bT1WCeiiju 4CJuu+FEb5+FrgHHAdu1SRW+6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB92agIn yC32dwM2uhrTxROYyBeRMB8GA1UdIwQYMBaAFPN2CQ3XnPaiWa4qFwIDcunmFgu2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEVBRC8zQzI0REFEMjhG QUQxMUVBOTJEMUY2NDJDNEY5QUUwMi84M1lKRGRlYzlxSlpyaW9YQWdOeTZlWVdD N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgzWUpEZGVjOXFKWnJpb1hBZ055NmVZV0M3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEVBRC8zQzI0REFEMjhGQUQxMUVBOTJEMUY2NDJDNEY5QUUwMi84M1lKRGRlYzlx SlpyaW9YQWdOeTZlWVdDN1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRpYSAoXnbcyCnYaF/sgg+IELY4S9XfDCoaeU5Mb9ZHx7wmKoJmRBR +fUFl1I7IBFNrY0khkAFpe/sAXEXL8tJcLOdM1dn+5CRbB66EdnlGNlJIGYgZAXA /pSizrsYzEsYmggee3fhPA2ucaVhEG1HHgu1ICqKR3tNSSsulBwEVtyxnRWBjpxq kwoPwAroszpKO/TyP3820HuB9GGfFrKr2zPq8Euj2YRrhhZbOwG+L+gDC5P+9DiR cOOSgWaVPXmAh5wXzFfTCjPNcOoJF7yFxV+DRZoEOeTwBcYCrngr0C5N+53HIkuY th6X8mv90XO6By7+8QgFvnwziTSHcJAj -----END CERTIFICATE-----Generated at Sun Aug 24 03:05:15 2025 by rpki-client