$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.mft File: F4SvaM922Ze5n3dAY3gNspm1SpM.mft (raw, json) Hash identifier: u+3AYp5VKyQK4qT6TS5cfqS8iRaXidT5WufIiSYRsEY= Subject key identifier: B3:42:D9:44:A5:A1:DF:D0:47:78:5D:C7:CE:64:D1:32:1C:79:31:D7 Authority key identifier: 17:84:AF:68:CF:76:D9:97:B9:9F:77:40:63:78:0D:B2:99:B5:4A:93 Certificate issuer: /CN=A91EC3C9/serialNumber=1784AF68CF76D997B99F774063780DB299B54A93 Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4SvaM922Ze5n3dAY3gNspm1SpM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.mft Manifest number: 35 Signing time: Sat 23 Aug 2025 07:51:23 +0000 Manifest this update: Sat 23 Aug 2025 07:51:23 +0000 Manifest next update: Sat 30 Aug 2025 07:51:23 +0000 Files and hashes: 1: F4SvaM922Ze5n3dAY3gNspm1SpM.crl (hash: MgrD/qc/cEGZmExBsofS2f6PUkobdOyKnj5k/iWCFr0=) 2: 00DDE7DA3AD311F09AB8AF3EC4F9AE02.roa (hash: S6XJldwVWEMnmvJiGl/r0iO9V7JTGSk9MMM8z1zA1+0=) 3: 7B6FCB36340B11F0B358096BC4F9AE02.roa (hash: KBbDfS3aaIsenqMIDTBfa9Z6EFC3wO32oIY+laKdQAc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.crl rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4SvaM922Ze5n3dAY3gNspm1SpM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC3C9, serialNumber=1784AF68CF76D997B99F774063780DB299B54A93 Validity Not Before: Aug 23 07:51:23 2025 GMT Not After : Aug 30 07:51:23 2025 GMT Subject: CN=68a972fb-289c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7d:62:36:61:db:d7:95:39:f2:a9:d4:fc:81: fd:12:73:1d:11:3a:9f:de:a7:7d:8a:0d:73:88:ef: 64:16:29:bb:aa:f0:64:e2:55:3c:43:07:e1:6e:05: db:5c:0a:1d:a9:82:7d:72:b2:53:95:c1:7b:7b:22: 95:c9:75:29:9f:b4:74:c8:f4:ae:cc:15:b2:23:64: 67:2e:bc:73:7e:99:a7:50:32:57:d2:b1:75:60:b3: 8d:9f:6b:a6:fc:0b:d8:f1:57:ce:f2:a8:a0:d7:e6: 7a:06:95:0f:63:08:12:55:bd:53:2c:81:1c:04:61: 33:9a:c8:ca:d2:ab:b4:a3:2b:63:29:16:f4:04:6b: 78:9f:8a:21:4c:ed:d0:86:20:70:22:9e:1d:00:da: a7:f4:82:89:42:e1:56:13:22:d7:4c:d7:08:3e:32: 8f:11:d0:03:77:12:50:8f:6b:db:ab:9a:12:21:f3: 39:fc:8a:9a:60:34:d9:a7:18:2e:26:4a:35:07:8b: d8:9e:01:7a:27:50:9e:fa:ee:45:30:10:fa:5e:51: 06:60:bf:c1:3f:b8:73:f3:08:d4:fb:1f:39:80:38: ec:ec:13:03:b2:3f:92:92:e0:9a:e0:16:6c:e4:a2: 7b:2d:18:a0:2f:90:9b:f7:82:ec:8a:a4:a5:4e:d1: 38:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:42:D9:44:A5:A1:DF:D0:47:78:5D:C7:CE:64:D1:32:1C:79:31:D7 X509v3 Authority Key Identifier: keyid:17:84:AF:68:CF:76:D9:97:B9:9F:77:40:63:78:0D:B2:99:B5:4A:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4SvaM922Ze5n3dAY3gNspm1SpM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:0c:6e:29:67:26:c9:bf:6c:0f:37:98:d8:46:42:b1:98:ba: 70:e6:b0:f0:28:c2:32:bb:0a:e5:d0:02:6c:5f:d8:eb:3e:c0: 38:f4:37:54:ce:1d:bc:c3:65:87:59:92:67:1a:4c:f7:96:a2: ab:a1:91:10:88:47:0b:77:5f:54:e7:ce:49:ae:83:a6:8a:b1: 0e:d5:db:26:7e:fa:4a:29:d1:ac:71:43:1e:0c:d9:a7:b9:62: 96:1c:2b:00:b0:13:75:83:ec:92:70:45:39:11:95:bb:79:fd: f2:e4:56:51:6c:54:a9:b8:a7:ae:2f:e6:22:e8:c6:23:3d:d4: a2:a7:dc:88:b6:1e:a6:c3:bf:70:0a:ce:67:2f:f2:c1:6b:6d: f6:07:4d:33:48:a5:55:44:ce:80:1a:64:42:d0:7e:51:b2:cb: 9a:eb:4c:81:18:0c:e0:ee:78:c5:79:dc:d9:a0:62:a9:a1:d3: 8d:fa:a0:81:e8:db:36:f3:81:cd:dd:ea:34:4f:e3:c6:91:57: 47:f0:1f:b8:e7:9d:67:37:4f:03:19:c9:15:36:9e:ed:23:1f: b4:fb:f7:bc:f3:7d:ed:4b:24:a9:61:c6:bf:f6:40:35:18:19: 0a:ae:36:05:20:21:97:f6:bf:48:1a:1e:d4:c2:93:bf:78:57: ce:aa:75:85 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QzNDOTExMC8GA1UEBRMoMTc4NEFGNjhDRjc2RDk5N0I5OUY3NzQwNjM3ODBEQjI5 OUI1NEE5MzAeFw0yNTA4MjMwNzUxMjNaFw0yNTA4MzAwNzUxMjNaMBgxFjAUBgNV BAMTDTY4YTk3MmZiLTI4OWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCifWI2YdvXlTnyqdT8gf0Scx0ROp/ep32KDXOI72QWKbuq8GTiVTxDB+FuBdtc Ch2pgn1yslOVwXt7IpXJdSmftHTI9K7MFbIjZGcuvHN+madQMlfSsXVgs42fa6b8 C9jxV87yqKDX5noGlQ9jCBJVvVMsgRwEYTOayMrSq7SjK2MpFvQEa3ifiiFM7dCG IHAinh0A2qf0golC4VYTItdM1wg+Mo8R0AN3ElCPa9urmhIh8zn8ippgNNmnGC4m SjUHi9ieAXonUJ767kUwEPpeUQZgv8E/uHPzCNT7HzmAOOzsEwOyP5KS4JrgFmzk onstGKAvkJv3guyKpKVO0TiVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUs0LZRKWh 39BHeF3HzmTRMhx5MdcwHwYDVR0jBBgwFoAUF4SvaM922Ze5n3dAY3gNspm1SpMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVDM0M5LzE0QTdCMjYyMzNG RjExRjA5OEFCOEYyMEM0RjlBRTAyL0Y0U3ZhTTkyMlplNW4zZEFZM2dOc3BtMVNw TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRjRTdmFNOTIyWmU1bjNkQVkzZ05zcG0xU3BNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVD M0M5LzE0QTdCMjYyMzNGRjExRjA5OEFCOEYyMEM0RjlBRTAyL0Y0U3ZhTTkyMlpl NW4zZEFZM2dOc3BtMVNwTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADcMbilnJsm/bA83mNhGQrGYunDmsPAowjK7CuXQAmxf2Os+wDj0N1TO HbzDZYdZkmcaTPeWoquhkRCIRwt3X1Tnzkmug6aKsQ7V2yZ++kop0axxQx4M2ae5 YpYcKwCwE3WD7JJwRTkRlbt5/fLkVlFsVKm4p64v5iLoxiM91KKn3Ii2HqbDv3AK zmcv8sFrbfYHTTNIpVVEzoAaZELQflGyy5rrTIEYDODueMV53NmgYqmh0436oIHo 2zbzgc3d6jRP48aRV0fwH7jnnWc3TwMZyRU2nu0jH7T797zzfe1LJKlhxr/2QDUY GQquNgUgIZf2v0gaHtTCk794V86qdYU= -----END CERTIFICATE-----Generated at Sat Aug 23 10:35:13 2025 by rpki-client