$ rpki-client -vvf rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft File: -8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft (raw, json) Hash identifier: F/AwmIffK8nIgt28c72Ym0aEX9VwCqOVam94SFecvn4= Subject key identifier: 24:0D:08:35:4D:A2:EA:3B:8D:EF:00:B9:40:BF:DC:E2:89:52:02:62 Authority key identifier: FB:C5:5B:2C:0B:E0:AB:23:47:48:FB:C3:61:54:7F:64:BF:A7:51:97 Certificate issuer: /CN=A91984AC/serialNumber=FBC55B2C0BE0AB234748FBC361547F64BFA75197 Certificate serial: 010C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft Manifest number: 0102 Signing time: Sat 09 Aug 2025 05:35:13 +0000 Manifest this update: Sat 09 Aug 2025 05:35:13 +0000 Manifest next update: Sat 16 Aug 2025 05:35:13 +0000 Files and hashes: 1: -8VbLAvgqyNHSPvDYVR_ZL-nUZc.crl (hash: Tlg4SPG2OG4z+v7W4Ul96KedYTStft69xjTm9p8FKk8=) 2: 47610B18F5A811EEA84E8049C4F9AE02.roa (hash: IW95bSZsBV41wSCyDVp5L0J87U9yD7MOcR2qX+Jqshk=) 3: 628C9174B6E011EF87D3F60CC4F9AE02.roa (hash: 2lCm+k56qwvoxDHPy2MJ2gVzKL/gSEiow6ar2mDrask=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.crl rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 268 (0x10c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91984AC, serialNumber=FBC55B2C0BE0AB234748FBC361547F64BFA75197 Validity Not Before: Aug 9 05:35:13 2025 GMT Not After : Aug 16 05:35:13 2025 GMT Subject: CN=6896de11-572a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:06:ac:6d:b6:e8:5a:4a:78:02:47:cd:06:ef: eb:9f:8c:67:a8:43:f3:bd:e6:7e:ea:2b:41:1f:0d: 48:09:94:bc:69:95:8c:a3:2c:eb:d8:c3:06:96:1f: 7c:28:3e:46:e1:8b:31:05:d6:67:3e:c0:aa:0f:50: 51:74:89:a9:8f:c8:4b:56:90:43:59:b4:9e:7f:ff: 24:45:2a:a0:4e:07:0d:0b:d7:e4:dd:2b:8f:d9:db: 6c:69:33:95:90:fe:ed:61:21:e3:b6:10:b8:e2:28: 2e:f6:41:92:70:f2:a7:2f:55:8a:46:3d:8c:2b:20: b5:65:0b:37:f4:41:cd:22:83:6b:a9:85:8d:1f:e9: 3a:75:de:66:41:04:fe:e1:4b:49:76:74:e7:06:2f: b7:64:13:93:0c:1c:3b:2d:1f:24:cf:5b:a4:cd:49: da:eb:80:24:09:dc:1d:41:13:b0:58:e9:ee:23:a7: b1:48:64:46:91:05:7b:96:b3:19:b1:0f:dc:be:59: 7f:99:66:8c:52:ef:3e:63:e1:93:d0:c3:d2:44:cd: 39:ce:2c:da:08:b3:00:9f:85:cb:96:c5:38:32:37: e3:a9:c7:9a:e0:0c:e4:31:77:ee:1c:7d:30:34:3c: 08:6f:55:65:24:4b:72:54:eb:11:7f:0e:2d:a0:26: 13:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:0D:08:35:4D:A2:EA:3B:8D:EF:00:B9:40:BF:DC:E2:89:52:02:62 X509v3 Authority Key Identifier: keyid:FB:C5:5B:2C:0B:E0:AB:23:47:48:FB:C3:61:54:7F:64:BF:A7:51:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:01:9d:f5:dc:94:4a:00:75:c0:0e:9d:3d:7e:ef:a1:90:46: 30:5d:b2:80:6d:6e:5f:c8:f6:36:34:eb:91:2b:9e:de:dc:c7: 0a:ac:ae:d1:1b:88:1e:27:b3:9c:78:e9:cf:5f:5d:ac:03:57: 3e:7e:83:08:76:41:94:83:c1:4e:40:7d:e5:cd:cb:fe:17:00: ae:c1:a3:49:04:52:fc:51:7f:ff:7a:f2:40:c8:4f:62:fd:00: cf:b7:50:fb:ea:17:61:29:b5:78:29:9f:f6:f7:a2:42:63:ca: 8b:f1:5d:72:dd:52:22:52:f0:b2:f2:ee:2f:99:04:92:d7:f5: 39:04:95:b6:be:c2:ec:0e:f6:52:1f:b5:6c:38:15:af:6c:52: a1:fb:65:aa:9d:9a:9c:96:f5:46:a0:e5:c8:50:49:99:bd:a4: ba:c9:13:d5:5e:b1:61:d6:f6:c1:22:f2:cb:99:44:98:39:18: 8a:2e:ed:93:5f:12:04:25:49:69:15:ab:41:ac:f8:e7:bc:c9: 39:26:bb:d9:7c:b2:75:cc:be:6d:94:ba:05:1e:97:bc:55:35: c5:46:19:27:b4:dd:a9:99:7c:05:e1:0c:f9:a1:97:a9:c6:f3: 52:e9:6e:04:42:5f:a0:a7:f3:e2:f9:64:db:74:08:d4:66:b5: 7e:16:c7:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg0QUMxMTAvBgNVBAUTKEZCQzU1QjJDMEJFMEFCMjM0NzQ4RkJDMzYxNTQ3RjY0 QkZBNzUxOTcwHhcNMjUwODA5MDUzNTEzWhcNMjUwODE2MDUzNTEzWjAYMRYwFAYD VQQDEw02ODk2ZGUxMS01NzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApAasbbboWkp4AkfNBu/rn4xnqEPzveZ+6itBHw1ICZS8aZWMoyzr2MMGlh98 KD5G4YsxBdZnPsCqD1BRdImpj8hLVpBDWbSef/8kRSqgTgcNC9fk3SuP2dtsaTOV kP7tYSHjthC44igu9kGScPKnL1WKRj2MKyC1ZQs39EHNIoNrqYWNH+k6dd5mQQT+ 4UtJdnTnBi+3ZBOTDBw7LR8kz1ukzUna64AkCdwdQROwWOnuI6exSGRGkQV7lrMZ sQ/cvll/mWaMUu8+Y+GT0MPSRM05zizaCLMAn4XLlsU4Mjfjqcea4AzkMXfuHH0w NDwIb1VlJEtyVOsRfw4toCYTlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCQNCDVN ouo7je8AuUC/3OKJUgJiMB8GA1UdIwQYMBaAFPvFWywL4KsjR0j7w2FUf2S/p1GX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODRBQy82RDAyNkNFQ0Y1 QTExMUVFOThEQkNEMTFDNEY5QUUwMi8tOFZiTEF2Z3F5TkhTUHZEWVZSX1pMLW5V WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy04VmJMQXZncXlOSFNQdkRZVlJfWkwtblVaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODRBQy82RDAyNkNFQ0Y1QTExMUVFOThEQkNEMTFDNEY5QUUwMi8tOFZiTEF2Z3F5 TkhTUHZEWVZSX1pMLW5VWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRAZ313JRKAHXADp09fu+hkEYwXbKAbW5fyPY2NOuRK57e3McKrK7R G4geJ7OceOnPX12sA1c+foMIdkGUg8FOQH3lzcv+FwCuwaNJBFL8UX//evJAyE9i /QDPt1D76hdhKbV4KZ/296JCY8qL8V1y3VIiUvCy8u4vmQSS1/U5BJW2vsLsDvZS H7VsOBWvbFKh+2WqnZqclvVGoOXIUEmZvaS6yRPVXrFh1vbBIvLLmUSYORiKLu2T XxIEJUlpFatBrPjnvMk5JrvZfLJ1zL5tlLoFHpe8VTXFRhkntN2pmXwF4Qz5oZep xvNS6W4EQl+gp/Pi+WTbdAjUZrV+Fsdy -----END CERTIFICATE-----Generated at Sat Aug 9 10:41:17 2025 by rpki-client