$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft File: x-37dX9ZS98jrdcSH12-PSWuAPw.mft (raw, json) Hash identifier: SpVdKwXvaNqP0fzNzxL6COcJUktbqrUNzlGEbKfClLE= Subject key identifier: 0F:1E:54:B6:00:45:2A:53:ED:C7:77:0F:23:49:9F:7B:92:EE:20:27 Authority key identifier: C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC Certificate issuer: /CN=A91F8579/serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC Certificate serial: 036C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft Manifest number: 0351 Signing time: Sat 23 Aug 2025 01:17:14 +0000 Manifest this update: Sat 23 Aug 2025 01:17:14 +0000 Manifest next update: Sat 30 Aug 2025 01:17:14 +0000 Files and hashes: 1: x-37dX9ZS98jrdcSH12-PSWuAPw.crl (hash: mx53YOnUWuVxh3pKl79X2LK2n19HvS7lPvNKhk68fnk=) 2: C38C54A2650411EE89EC7112C4F9AE02.roa (hash: vXzSIXZBaXcIq7HGAv3/KzQ/zFxGEtVsxyV8BgD55Xg=) 3: EA2C5116450411F09738105FC4F9AE02.roa (hash: mDgnt/g1+zuzz/Dldep3lhpu+guK6efPn+25tb2sN6w=) 4: 2872E3EEB78511EFACBD807DC4F9AE02.roa (hash: kZzMXdkHsbeWhqQo08LJANq63hJpAGNo4uFVGoBwQ/0=) 5: EB1C709C450411F09738105FC4F9AE02.roa (hash: O/x91LtvdsHnu6UD+9TxpNdI3pzLLK+i+0wDI9cj5DI=) 6: 27DC7846B78511EFACBD807DC4F9AE02.roa (hash: b5B3lzxVsrZlixjiSWlcyQY2EuLiKocCaABGFArbDwM=) 7: EAAF7884450411F09738105FC4F9AE02.roa (hash: tBvhikagp7Nt4A+RvXoPttqaLGkwIsP8h24We8nhn+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:17:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 876 (0x36c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8579, serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC Validity Not Before: Aug 23 01:17:14 2025 GMT Not After : Aug 30 01:17:14 2025 GMT Subject: CN=68a9169a-dd57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1a:c9:ad:af:80:3e:99:c5:e8:01:ad:c7:84: d6:8e:04:bf:09:fb:f3:74:0d:89:2b:e2:1d:d4:90: b8:5b:15:a3:f7:9c:8f:fe:6e:7c:86:bd:36:f9:3a: 24:59:7f:0c:96:00:d7:ae:86:33:9d:f4:be:f7:46: c2:d3:16:90:dd:a6:a2:22:4b:d1:4d:a8:32:fe:34: 95:0c:a3:ec:80:0b:75:ae:3e:6a:8c:56:55:5a:c7: 6e:5e:a2:07:d1:62:9f:91:59:67:bc:f2:ef:ed:43: 72:d2:f8:b2:3d:6a:07:c5:b5:ff:d1:18:5b:09:dc: 61:83:d7:0b:dd:29:1d:54:bb:b0:a8:2b:12:d5:45: 0a:45:24:e6:09:5b:94:39:4d:f7:a1:aa:0f:a1:ad: 49:cc:6b:49:51:d9:bf:84:94:fc:e2:ea:79:16:dc: b9:e3:89:5f:4a:1f:76:6e:e5:b5:63:c9:9b:0b:eb: 9f:58:6f:37:90:29:c0:40:83:4d:6f:f9:5a:c4:85: b6:e0:90:00:d1:71:57:3e:3d:6e:eb:51:05:78:cc: 45:4a:15:6b:3a:0e:09:e7:0d:81:40:0a:67:cd:ef: 4b:e3:96:48:1d:a0:44:b5:c7:2c:e4:43:bb:c6:2f: 36:17:13:0a:a0:85:28:cf:2e:2c:63:d0:d9:f2:da: ff:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:1E:54:B6:00:45:2A:53:ED:C7:77:0F:23:49:9F:7B:92:EE:20:27 X509v3 Authority Key Identifier: keyid:C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:72:0a:e3:d3:fc:a5:59:38:a0:5c:f9:94:12:97:f1:51:4d: 18:89:23:f8:99:18:01:5a:89:b6:bb:0d:d7:77:3f:7c:09:45: 0d:55:b0:53:c6:4e:35:1b:b7:a3:4b:8a:95:56:d7:08:7c:7a: 74:92:bf:7d:72:49:49:f7:19:3e:fe:17:3e:53:67:ae:0a:ef: 89:9f:c0:c8:c0:26:e3:4e:6d:a4:78:15:19:c9:7b:09:d7:76: 78:0c:c3:f8:fb:67:6d:a6:92:b7:4e:f8:cb:03:b0:96:2c:41: d3:7d:ac:00:58:85:2f:4e:1b:0e:2a:d7:46:f5:98:4b:d2:15: af:12:f1:aa:af:29:da:b7:64:d3:64:f9:00:ae:da:21:72:4a: d4:63:ca:f1:47:ce:0e:9c:e1:e6:6c:9f:b0:de:9f:db:fb:ae: e4:12:45:77:7d:8f:28:1a:d2:ae:33:12:9a:03:96:a0:ff:bd: 77:c9:70:58:01:b0:30:c0:6e:c3:4e:1c:be:0c:cb:fc:88:33: 19:e4:4b:32:72:e4:06:32:10:db:2e:f1:c1:4d:8b:de:d8:7a: 47:36:aa:42:21:06:16:e2:a6:bc:ff:1e:19:93:b9:40:59:6b: 0d:cc:8a:04:93:d9:81:5d:02:67:27:53:2c:b0:aa:ee:7a:0e: f5:cb:ee:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg1NzkxMTAvBgNVBAUTKEM3RURGQjc1N0Y1OTRCREYyM0FERDcxMjFGNURCRTNE MjVBRTAwRkMwHhcNMjUwODIzMDExNzE0WhcNMjUwODMwMDExNzE0WjAYMRYwFAYD VQQDEw02OGE5MTY5YS1kZDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwxrJra+APpnF6AGtx4TWjgS/CfvzdA2JK+Id1JC4WxWj95yP/m58hr02+Tok WX8MlgDXroYznfS+90bC0xaQ3aaiIkvRTagy/jSVDKPsgAt1rj5qjFZVWsduXqIH 0WKfkVlnvPLv7UNy0viyPWoHxbX/0RhbCdxhg9cL3SkdVLuwqCsS1UUKRSTmCVuU OU33oaoPoa1JzGtJUdm/hJT84up5Fty544lfSh92buW1Y8mbC+ufWG83kCnAQINN b/laxIW24JAA0XFXPj1u61EFeMxFShVrOg4J5w2BQApnze9L45ZIHaBEtccs5EO7 xi82FxMKoIUozy4sY9DZ8tr/hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA8eVLYA RSpT7cd3DyNJn3uS7iAnMB8GA1UdIwQYMBaAFMft+3V/WUvfI63XEh9dvj0lrgD8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODU3OS8wMTc2MDNGQ0NF QjIxMUVDQUUwMDE4MjNDNEY5QUUwMi94LTM3ZFg5WlM5OGpyZGNTSDEyLVBTV3VB UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gtMzdkWDlaUzk4anJkY1NIMTItUFNXdUFQdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODU3OS8wMTc2MDNGQ0NFQjIxMUVDQUUwMDE4MjNDNEY5QUUwMi94LTM3ZFg5WlM5 OGpyZGNTSDEyLVBTV3VBUHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/cgrj0/ylWTigXPmUEpfxUU0YiSP4mRgBWom2uw3Xdz98CUUNVbBT xk41G7ejS4qVVtcIfHp0kr99cklJ9xk+/hc+U2euCu+Jn8DIwCbjTm2keBUZyXsJ 13Z4DMP4+2dtppK3TvjLA7CWLEHTfawAWIUvThsOKtdG9ZhL0hWvEvGqrynat2TT ZPkArtohckrUY8rxR84OnOHmbJ+w3p/b+67kEkV3fY8oGtKuMxKaA5ag/713yXBY AbAwwG7DThy+DMv8iDMZ5EsycuQGMhDbLvHBTYve2HpHNqpCIQYW4qa8/x4Zk7lA WWsNzIoEk9mBXQJnJ1MssKrueg71y+6p -----END CERTIFICATE-----Generated at Sat Aug 23 17:09:43 2025 by rpki-client