$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft File: N3hUTiRpVIvwm1Td2APX19kPfmI.mft (raw, json) Hash identifier: fjSH87ADeWR2SnK3n2R7VYrr+4beb1Df63mQh0DU6OU= Subject key identifier: CD:85:90:8D:60:16:FF:B8:D7:76:29:AF:80:E8:C3:B2:61:CD:DB:A8 Authority key identifier: 37:78:54:4E:24:69:54:8B:F0:9B:54:DD:D8:03:D7:D7:D9:0F:7E:62 Certificate issuer: /CN=A91F8CAA/serialNumber=3778544E2469548BF09B54DDD803D7D7D90F7E62 Certificate serial: 0114 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft Manifest number: 010C Signing time: Sat 23 Aug 2025 05:05:39 +0000 Manifest this update: Sat 23 Aug 2025 05:05:39 +0000 Manifest next update: Sat 30 Aug 2025 05:05:39 +0000 Files and hashes: 1: N3hUTiRpVIvwm1Td2APX19kPfmI.crl (hash: tpTy/4uoKCxaa3puWccyBbxpl28MZ2zx40xmuL1bPZI=) 2: 1EC90968E1F211EEA360BE22C4F9AE02.roa (hash: XRFVx29hjFc5pKNr7AkvLob3HQjLTaD9Ns3C1RRvN4w=) 3: 1E4548E4E1F211EEA360BE22C4F9AE02.roa (hash: elMINW9VmQY5nycCbQ/QKtRjE+I0nxMVlzRRTvQng4k=) 4: 1DDBD99AE1F211EEA360BE22C4F9AE02.roa (hash: E3gtntzxmL6luEWEYnHzIxmyJjY7WSBf3VBE5/D496g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.crl rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:05:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 276 (0x114) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8CAA, serialNumber=3778544E2469548BF09B54DDD803D7D7D90F7E62 Validity Not Before: Aug 23 05:05:39 2025 GMT Not After : Aug 30 05:05:39 2025 GMT Subject: CN=68a94c23-9f07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c7:b3:e4:30:f5:6f:b3:9d:6f:71:90:b8:fb: d2:cd:8a:18:90:95:2c:cc:05:c6:c7:2b:c7:fe:71: ed:6d:70:94:19:e4:63:db:a3:85:c0:08:09:3d:f3: b8:28:4f:72:21:4d:3f:f9:71:92:2b:39:4f:b7:3e: 08:b2:58:06:90:f9:73:48:26:68:d9:81:45:56:a1: 57:3b:53:13:4d:8c:e6:79:1c:3d:56:a1:ca:84:c8: db:9a:77:c2:17:3b:b8:45:38:38:cb:3a:31:2d:3b: ce:fc:c2:dc:61:30:5c:1f:8c:60:38:73:ca:c6:50: cd:9e:ae:c1:b1:16:ec:67:2c:bd:c4:a4:17:6c:b2: b7:65:98:05:c7:dc:ca:3f:f4:d3:36:58:af:bc:e8: ad:dc:60:00:4f:13:33:a3:90:98:ff:02:7b:01:fa: 3a:05:a4:2a:48:3e:70:2d:dc:34:a1:9a:11:4c:35: ec:0b:7b:03:e7:6c:25:07:f8:b8:ce:dc:ad:a3:58: b6:73:6e:43:d8:87:4e:3f:7e:53:e2:a6:fe:bf:d4: 5f:c6:3f:ae:63:96:39:55:a0:10:80:a0:c4:6e:e1: 22:14:14:b1:59:46:e4:20:64:0f:76:a3:38:65:b5: 40:7e:14:50:b3:43:c8:b9:27:3f:45:79:92:99:f4: 59:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:85:90:8D:60:16:FF:B8:D7:76:29:AF:80:E8:C3:B2:61:CD:DB:A8 X509v3 Authority Key Identifier: keyid:37:78:54:4E:24:69:54:8B:F0:9B:54:DD:D8:03:D7:D7:D9:0F:7E:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:e1:7e:64:30:47:e1:96:a1:8d:89:46:9a:65:a4:9e:f6:0c: 9e:72:c2:98:dc:06:00:a9:51:a1:c5:74:12:9e:9a:fb:f5:e2: 17:47:23:c1:39:89:1f:1e:67:dc:67:3b:f1:ed:20:ae:83:0b: f3:f1:60:92:b4:7f:60:ee:54:61:5f:f5:65:91:99:85:70:77: 94:f5:73:d0:c4:93:65:13:3f:e8:f0:72:25:a6:b2:ec:33:18: 86:10:1d:f4:9d:23:2d:fb:02:cc:1b:6c:16:d6:fb:12:16:49: 94:8f:ec:f9:79:fc:56:2e:c0:43:f0:ec:06:a3:68:44:04:2d: d3:f7:21:8c:a4:b9:2f:4c:4d:52:86:99:2c:bc:8f:28:dc:ff: 8e:8c:ef:83:d2:0d:cc:77:21:42:fa:0a:f4:a3:cb:aa:30:a7: 06:4f:ff:7e:6a:20:2e:d6:b2:81:21:6b:e1:6b:0c:c4:37:38: d6:4b:9b:4f:ba:32:9e:81:ea:29:f4:f2:72:c7:e6:d7:cd:25: 65:51:d5:90:ec:02:dc:4b:b8:49:71:e4:6e:0a:d5:c4:b5:7f: 59:a8:42:63:f4:0b:67:8d:fd:c8:bf:a9:7a:84:57:69:3e:52: 85:62:50:43:fe:26:44:92:1c:7a:e5:8d:28:f2:fa:76:4b:e4: e1:9f:f1:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhDQUExMTAvBgNVBAUTKDM3Nzg1NDRFMjQ2OTU0OEJGMDlCNTREREQ4MDNEN0Q3 RDkwRjdFNjIwHhcNMjUwODIzMDUwNTM5WhcNMjUwODMwMDUwNTM5WjAYMRYwFAYD VQQDEw02OGE5NGMyMy05ZjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApsez5DD1b7Odb3GQuPvSzYoYkJUszAXGxyvH/nHtbXCUGeRj26OFwAgJPfO4 KE9yIU0/+XGSKzlPtz4IslgGkPlzSCZo2YFFVqFXO1MTTYzmeRw9VqHKhMjbmnfC Fzu4RTg4yzoxLTvO/MLcYTBcH4xgOHPKxlDNnq7BsRbsZyy9xKQXbLK3ZZgFx9zK P/TTNlivvOit3GAATxMzo5CY/wJ7Afo6BaQqSD5wLdw0oZoRTDXsC3sD52wlB/i4 ztyto1i2c25D2IdOP35T4qb+v9Rfxj+uY5Y5VaAQgKDEbuEiFBSxWUbkIGQPdqM4 ZbVAfhRQs0PIuSc/RXmSmfRZ6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM2FkI1g Fv+413Ypr4Dow7JhzduoMB8GA1UdIwQYMBaAFDd4VE4kaVSL8JtU3dgD19fZD35i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOENBQS9EQ0QwMkEyMEUx RUExMUVFOTk5QzcwMkFDNEY5QUUwMi9OM2hVVGlScFZJdndtMVRkMkFQWDE5a1Bm bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04zaFVUaVJwVkl2d20xVGQyQVBYMTlrUGZtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OENBQS9EQ0QwMkEyMEUxRUExMUVFOTk5QzcwMkFDNEY5QUUwMi9OM2hVVGlScFZJ dndtMVRkMkFQWDE5a1BmbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBT4X5kMEfhlqGNiUaaZaSe9gyecsKY3AYAqVGhxXQSnpr79eIXRyPB OYkfHmfcZzvx7SCugwvz8WCStH9g7lRhX/VlkZmFcHeU9XPQxJNlEz/o8HIlprLs MxiGEB30nSMt+wLMG2wW1vsSFkmUj+z5efxWLsBD8OwGo2hEBC3T9yGMpLkvTE1S hpksvI8o3P+OjO+D0g3MdyFC+gr0o8uqMKcGT/9+aiAu1rKBIWvhawzENzjWS5tP ujKegeop9PJyx+bXzSVlUdWQ7ALcS7hJceRuCtXEtX9ZqEJj9Atnjf3Iv6l6hFdp PlKFYlBD/iZEkhx65Y0o8vp2S+Thn/FS -----END CERTIFICATE-----Generated at Sat Aug 23 21:05:28 2025 by rpki-client