$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.mft File: exUBXdufhEEqZ9s-Jv7LTdy72YA.mft (raw, json) Hash identifier: gIZB6WXputtateVpRg82E/B6GRwi2pA+urQoC+xx8O8= Subject key identifier: A7:44:FB:8F:88:E4:50:62:18:54:62:BC:20:91:6B:53:77:CE:FC:8A Authority key identifier: 7B:15:01:5D:DB:9F:84:41:2A:67:DB:3E:26:FE:CB:4D:DC:BB:D9:80 Certificate issuer: /CN=A91F6B3D/serialNumber=7B15015DDB9F84412A67DB3E26FECB4DDCBBD980 Certificate serial: 0708 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exUBXdufhEEqZ9s-Jv7LTdy72YA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.mft Manifest number: 06F8 Signing time: Fri 22 Aug 2025 22:06:14 +0000 Manifest this update: Fri 22 Aug 2025 22:06:14 +0000 Manifest next update: Fri 29 Aug 2025 22:06:14 +0000 Files and hashes: 1: exUBXdufhEEqZ9s-Jv7LTdy72YA.crl (hash: kN3aGo5K4uC1XAM4TO2bXMww7vxpMlIMHOHBuIYB+NU=) 2: 0F83E674B45611EC8D43DA35C4F9AE02.roa (hash: 44B6YCXFFFx+bCdGIykmPbtlTvIuZVPUkL4VeJYbwxg=) 3: 76F636C6C13111EC8B2DD839C4F9AE02.roa (hash: ji78Z3bYDne8h3ntfFAr2jh173VOiqckcY3Gt5rpLOI=) 4: 4FB0329A827311EBAB565A86C4F9AE02.roa (hash: gFcpYNnFwW2L/eMps8n5pMtg1/xMFxUVZSJLx7s2gUc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.crl rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exUBXdufhEEqZ9s-Jv7LTdy72YA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:06:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1800 (0x708) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6B3D, serialNumber=7B15015DDB9F84412A67DB3E26FECB4DDCBBD980 Validity Not Before: Aug 22 22:06:14 2025 GMT Not After : Aug 29 22:06:14 2025 GMT Subject: CN=68a8e9d6-043d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b7:d2:a2:88:97:5e:36:e0:6d:bd:e0:28:1e: e0:0f:5b:fd:d2:72:c7:30:ff:c7:3e:f7:87:2f:11: 47:90:d9:37:fa:ca:df:6b:66:df:31:93:92:41:81: 0f:f0:19:cc:d3:9c:c8:c8:bf:4b:f9:85:36:b4:87: 53:ab:0a:88:07:61:d8:e9:a2:c1:ae:94:51:30:e8: 6a:c1:c5:5a:78:9b:c0:5b:f8:22:f6:58:1e:3e:89: 87:0b:9e:c8:8f:a5:58:3b:66:55:f0:f4:c8:45:02: 2b:ce:e5:29:26:83:6e:1d:55:20:85:5a:b9:13:28: 70:df:57:19:30:34:f1:94:76:84:cd:a3:a1:1f:c1: b7:e2:a7:2f:97:5a:6c:0d:7b:02:ed:b4:1e:8f:8b: 8c:8d:12:94:78:ec:a2:1b:21:dd:66:d5:22:59:05: e3:1c:22:61:aa:9a:39:74:88:f9:04:43:9e:a8:18: 14:55:60:91:e7:8a:bf:db:46:46:12:3a:73:15:5f: 63:a0:6e:70:53:f2:90:72:16:e4:95:cd:e0:57:0d: b5:8e:97:1c:d8:aa:36:2d:79:d8:ae:3e:0f:21:3b: 81:6b:1f:88:ae:cd:aa:fc:8c:5a:63:be:a3:4f:f1: 92:b8:bf:a8:20:67:4d:39:1c:6c:e5:3e:0a:be:3c: 78:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:44:FB:8F:88:E4:50:62:18:54:62:BC:20:91:6B:53:77:CE:FC:8A X509v3 Authority Key Identifier: keyid:7B:15:01:5D:DB:9F:84:41:2A:67:DB:3E:26:FE:CB:4D:DC:BB:D9:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exUBXdufhEEqZ9s-Jv7LTdy72YA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:fc:15:7a:be:07:60:a4:68:dc:21:60:a3:af:5d:7c:ce:db: 2e:c3:a8:28:b3:38:0a:c4:78:dd:75:35:b3:86:f8:78:62:61: 93:22:c3:90:83:46:0f:2a:92:0a:0d:38:a3:b2:27:fc:94:af: 5b:35:5e:0a:68:c8:8c:82:9f:f4:b3:eb:5b:ce:8a:39:9d:bb: 0a:bc:42:7c:77:b7:92:bf:fc:a4:29:70:6f:48:71:5b:a6:a5: 32:f7:7d:19:15:cb:76:b2:66:03:50:04:20:e7:92:fb:bc:e8: 54:55:81:45:d1:e9:2d:d4:50:31:ac:20:6b:e9:42:af:c1:9e: e0:ed:63:e0:d1:e3:c3:61:c0:9e:ba:cb:7a:aa:10:8e:22:e8: 34:26:81:cb:c5:53:55:ee:6a:e8:b1:af:c5:68:5f:39:c1:9d: 3a:36:35:66:c7:59:c8:07:bf:a6:72:b3:d0:0a:96:f1:42:43: a6:3c:35:30:cf:f7:ab:da:15:e5:7d:f3:4d:96:cd:fc:19:92: 2c:6c:96:19:b7:65:73:db:02:2f:e8:26:b2:23:d6:61:b6:1a: 52:45:56:79:b6:13:56:4e:d6:58:4a:61:3a:54:62:b1:44:5d: 39:9a:e6:2c:9e:42:48:f7:a2:99:ce:9d:cb:9f:01:4a:d0:85: 44:62:73:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZCM0QxMTAvBgNVBAUTKDdCMTUwMTVEREI5Rjg0NDEyQTY3REIzRTI2RkVDQjRE RENCQkQ5ODAwHhcNMjUwODIyMjIwNjE0WhcNMjUwODI5MjIwNjE0WjAYMRYwFAYD VQQDEw02OGE4ZTlkNi0wNDNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA07fSooiXXjbgbb3gKB7gD1v90nLHMP/HPveHLxFHkNk3+srfa2bfMZOSQYEP 8BnM05zIyL9L+YU2tIdTqwqIB2HY6aLBrpRRMOhqwcVaeJvAW/gi9lgePomHC57I j6VYO2ZV8PTIRQIrzuUpJoNuHVUghVq5Eyhw31cZMDTxlHaEzaOhH8G34qcvl1ps DXsC7bQej4uMjRKUeOyiGyHdZtUiWQXjHCJhqpo5dIj5BEOeqBgUVWCR54q/20ZG EjpzFV9joG5wU/KQchbklc3gVw21jpcc2Ko2LXnYrj4PITuBax+Irs2q/IxaY76j T/GSuL+oIGdNORxs5T4Kvjx4nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKdE+4+I 5FBiGFRivCCRa1N3zvyKMB8GA1UdIwQYMBaAFHsVAV3bn4RBKmfbPib+y03cu9mA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkIzRC8wRTk3OEU2NDU5 NjIxMUVCQTQwQjVDODVDNEY5QUUwMi9leFVCWGR1ZmhFRXFaOXMtSnY3TFRkeTcy WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4VUJYZHVmaEVFcVo5cy1KdjdMVGR5NzJZQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkIzRC8wRTk3OEU2NDU5NjIxMUVCQTQwQjVDODVDNEY5QUUwMi9leFVCWGR1ZmhF RXFaOXMtSnY3TFRkeTcyWUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDA/BV6vgdgpGjcIWCjr118ztsuw6goszgKxHjddTWzhvh4YmGTIsOQ g0YPKpIKDTijsif8lK9bNV4KaMiMgp/0s+tbzoo5nbsKvEJ8d7eSv/ykKXBvSHFb pqUy930ZFct2smYDUAQg55L7vOhUVYFF0ekt1FAxrCBr6UKvwZ7g7WPg0ePDYcCe ust6qhCOIug0JoHLxVNV7mrosa/FaF85wZ06NjVmx1nIB7+mcrPQCpbxQkOmPDUw z/er2hXlffNNls38GZIsbJYZt2Vz2wIv6CayI9ZhthpSRVZ5thNWTtZYSmE6VGKx RF05muYsnkJI96KZzp3LnwFK0IVEYnNj -----END CERTIFICATE-----Generated at Sat Aug 23 17:05:31 2025 by rpki-client