$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft File: 9JfRcWknbUPFhSFcGYMxwzwiWnU.mft (raw, json) Hash identifier: 5UkVDDLrgloZRIB9P3tnLm8IR2BgltW1EVa3TPa/JuU= Subject key identifier: 5C:91:91:5E:BE:6F:EA:47:7C:1D:57:5F:5C:8A:C4:FE:C0:FF:39:BE Authority key identifier: F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75 Certificate issuer: /CN=A91ECC24/serialNumber=F497D17169276D43C585215C198331C33C225A75 Certificate serial: 021D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft Manifest number: 0211 Signing time: Sat 23 Aug 2025 02:25:29 +0000 Manifest this update: Sat 23 Aug 2025 02:25:28 +0000 Manifest next update: Sat 30 Aug 2025 02:25:28 +0000 Files and hashes: 1: 9JfRcWknbUPFhSFcGYMxwzwiWnU.crl (hash: VhSOvtS1WqL4z7GPL3Hk9V2Hm8ciYYiwsD0MA6OyRck=) 2: AC8A59D689D311EE81F03018C4F9AE02.roa (hash: CgMPU2zKmFQv28rwsx7lyUdY/WjeUcfrzEMiRjZzUr8=) 3: B9D8F9CE89D011EEB603FF75C4F9AE02.roa (hash: l/45mJzVlvrXkvMnYsTOqET7KEWpbH/MA+sFMBUmJ+A=) 4: C82A0778680811EE88B5527CC4F9AE02.roa (hash: FMfFksLuvdDh719tgVb78yQXrHhuawjPdGhDWuzq2VE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.crl rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:25:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 541 (0x21d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECC24, serialNumber=F497D17169276D43C585215C198331C33C225A75 Validity Not Before: Aug 23 02:25:28 2025 GMT Not After : Aug 30 02:25:28 2025 GMT Subject: CN=68a92698-bd2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8c:6c:a7:4b:85:ae:b8:7c:2c:5e:05:f2:89: 88:2a:4b:25:fe:6c:e9:11:5d:b0:3c:09:2f:66:09: 36:b4:b0:bc:ea:ee:6d:5b:da:08:33:a4:99:7d:c7: 28:3b:e2:f9:f7:5b:84:a9:58:b5:a1:9d:2e:a1:2f: ff:d1:29:cd:10:d0:7f:86:f2:cb:0f:ca:1d:6f:77: 93:fe:0a:d7:0e:a9:96:e7:d2:86:da:be:70:58:02: 3b:9e:7a:70:bb:7a:84:16:a9:9a:c1:96:23:51:f1: 26:1b:05:07:aa:82:e9:12:81:63:ca:f1:93:2d:d8: 94:c0:9e:a6:41:5c:5a:0e:4b:18:9a:42:2f:05:88: 3a:d1:93:79:e8:b6:f9:4e:c4:14:19:c5:3a:3d:8f: 77:09:1f:f7:7c:56:06:1e:fc:86:b5:fb:bc:46:84: 4f:ff:a7:46:ba:8b:49:21:42:8a:6a:46:26:6f:54: 13:27:4d:e1:00:a2:b9:69:04:21:d2:d4:33:5f:c3: ca:e1:3a:a5:6c:46:f2:ac:98:f0:cd:bc:67:01:5d: 90:9b:77:1b:41:31:50:3c:0e:37:11:b4:3b:6e:ac: 2a:b5:a5:7e:e9:2c:8e:6b:a1:04:c7:f3:dd:56:17: 5f:6f:5f:7a:fb:b8:80:67:da:b0:ed:26:c9:1f:2f: ff:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:91:91:5E:BE:6F:EA:47:7C:1D:57:5F:5C:8A:C4:FE:C0:FF:39:BE X509v3 Authority Key Identifier: keyid:F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:7d:e7:f4:91:c4:46:6b:a1:20:cb:93:7f:67:40:f8:f0:9c: 8a:03:a1:f2:1e:6e:2d:55:77:7e:c5:29:7f:36:dd:7c:7c:62: 57:65:f5:df:a0:92:97:9b:ec:1b:b9:39:a9:5c:15:6c:63:8f: a8:f0:1b:6e:44:28:db:6e:d0:0a:27:1e:e1:07:22:95:35:68: 1d:67:36:03:29:fd:9c:44:95:c4:b3:02:8a:21:ae:27:88:c2: 82:37:a4:09:58:a2:82:92:86:22:06:52:48:53:68:3d:1e:aa: ee:53:03:29:56:d8:9c:e5:e1:a0:04:e0:00:23:18:1f:09:d5: 2c:cd:97:ad:c7:59:18:06:df:2e:fb:b5:9c:68:2b:f1:26:4a: 44:1c:29:26:b6:1d:2d:1f:f3:15:f0:b7:de:61:92:66:49:90: 31:1a:8a:66:ba:cf:6a:0e:00:0d:a4:49:14:58:79:ca:13:41: 97:f2:2a:05:89:12:69:83:f2:51:75:b3:1d:f3:17:21:9a:7e: 6c:b3:72:ec:76:4f:0b:1a:6b:d0:b7:67:3c:6a:82:90:93:4e: 43:7f:56:2f:b7:25:91:ed:f0:f9:af:bb:d1:e8:54:e0:23:6f: eb:a1:ab:3f:2c:90:ec:43:9d:5f:71:b5:45:30:9d:bc:33:a9: 03:69:2a:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNDMjQxMTAvBgNVBAUTKEY0OTdEMTcxNjkyNzZENDNDNTg1MjE1QzE5ODMzMUMz M0MyMjVBNzUwHhcNMjUwODIzMDIyNTI4WhcNMjUwODMwMDIyNTI4WjAYMRYwFAYD VQQDEw02OGE5MjY5OC1iZDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs4xsp0uFrrh8LF4F8omIKksl/mzpEV2wPAkvZgk2tLC86u5tW9oIM6SZfcco O+L591uEqVi1oZ0uoS//0SnNENB/hvLLD8odb3eT/grXDqmW59KG2r5wWAI7nnpw u3qEFqmawZYjUfEmGwUHqoLpEoFjyvGTLdiUwJ6mQVxaDksYmkIvBYg60ZN56Lb5 TsQUGcU6PY93CR/3fFYGHvyGtfu8RoRP/6dGuotJIUKKakYmb1QTJ03hAKK5aQQh 0tQzX8PK4TqlbEbyrJjwzbxnAV2Qm3cbQTFQPA43EbQ7bqwqtaV+6SyOa6EEx/Pd Vhdfb196+7iAZ9qw7SbJHy//rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFyRkV6+ b+pHfB1XX1yKxP7A/zm+MB8GA1UdIwQYMBaAFPSX0XFpJ21DxYUhXBmDMcM8Ilp1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0MyNC8xNkM2MTMxNjZB RkExMUVEQjcwNkZGM0NDNEY5QUUwMi85SmZSY1drbmJVUEZoU0ZjR1lNeHd6d2lX blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlKZlJjV2tuYlVQRmhTRmNHWU14d3p3aVduVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Q0MyNC8xNkM2MTMxNjZBRkExMUVEQjcwNkZGM0NDNEY5QUUwMi85SmZSY1drbmJV UEZoU0ZjR1lNeHd6d2lXblUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtfef0kcRGa6Egy5N/Z0D48JyKA6HyHm4tVXd+xSl/Nt18fGJXZfXf oJKXm+wbuTmpXBVsY4+o8BtuRCjbbtAKJx7hByKVNWgdZzYDKf2cRJXEswKKIa4n iMKCN6QJWKKCkoYiBlJIU2g9HqruUwMpVtic5eGgBOAAIxgfCdUszZetx1kYBt8u +7WcaCvxJkpEHCkmth0tH/MV8LfeYZJmSZAxGopmus9qDgANpEkUWHnKE0GX8ioF iRJpg/JRdbMd8xchmn5ss3Lsdk8LGmvQt2c8aoKQk05Df1YvtyWR7fD5r7vR6FTg I2/roas/LJDsQ51fcbVFMJ28M6kDaSrZ -----END CERTIFICATE-----Generated at Sat Aug 23 17:00:47 2025 by rpki-client