$ rpki-client -vvf rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.mft File: 91rI3ARJV7GxWgsVxu2jGLI7QDM.mft (raw, json) Hash identifier: yD0Y+jtbciQ+t5zukmYzaLhUHY3SieWNcGln7fxNDY8= Subject key identifier: AB:98:C4:7B:32:29:6D:4D:FB:34:35:B4:42:AA:8F:6A:EF:CA:65:F6 Authority key identifier: F7:5A:C8:DC:04:49:57:B1:B1:5A:0B:15:C6:ED:A3:18:B2:3B:40:33 Certificate issuer: /CN=A919CDE4/serialNumber=F75AC8DC044957B1B15A0B15C6EDA318B23B4033 Certificate serial: 01C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91rI3ARJV7GxWgsVxu2jGLI7QDM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.mft Manifest number: 01C0 Signing time: Sat 09 Aug 2025 03:22:14 +0000 Manifest this update: Sat 09 Aug 2025 03:22:13 +0000 Manifest next update: Sat 16 Aug 2025 03:22:13 +0000 Files and hashes: 1: 91rI3ARJV7GxWgsVxu2jGLI7QDM.crl (hash: 2u+0qLBh43C8SDdwvNmPkJDwKmWRnr3BEwjEezNERA0=) 2: 955C43AAC99E11ED98E9BE5BC4F9AE02.roa (hash: sO+2+/cvQ7fG/IUMq+A+e08x9da5+jbIe5T9qmjARBg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.crl rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91rI3ARJV7GxWgsVxu2jGLI7QDM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 451 (0x1c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CDE4, serialNumber=F75AC8DC044957B1B15A0B15C6EDA318B23B4033 Validity Not Before: Aug 9 03:22:13 2025 GMT Not After : Aug 16 03:22:13 2025 GMT Subject: CN=6896bee5-fb33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:63:ec:2d:2e:e3:ac:87:07:c6:50:1c:a3:46: a5:f9:d5:52:c0:88:43:26:6c:a7:7b:c2:d8:a1:52: f3:12:3f:ad:ff:b4:6b:d2:6d:42:ba:72:55:b0:4b: d4:c6:fa:10:67:db:9e:ff:eb:40:ac:ca:42:e7:00: 22:bc:f8:14:24:da:34:29:f6:3e:88:28:a5:37:60: 62:5d:f4:be:a7:8d:d2:a1:4a:f8:89:bd:77:3f:84: d5:37:47:31:09:7a:1e:95:19:e7:d2:54:bb:30:aa: 4e:6e:27:fe:c7:73:30:52:2b:50:95:d8:fc:40:38: 4b:4b:2e:de:f4:d2:bc:3f:ef:dc:9e:11:6c:80:41: b2:bd:a6:45:79:bb:51:71:02:64:70:39:65:58:44: 45:f4:bf:b1:2f:06:b0:3f:bc:3e:72:72:5d:0b:19: 6a:0d:fb:64:3a:e6:9d:b4:f5:be:05:82:99:6c:5c: ca:53:e0:cf:80:24:3e:7d:ec:b5:fc:d8:1e:7b:10: 95:81:51:2d:a1:bb:cb:5d:e5:80:ed:0c:5a:5d:ea: 98:0b:8b:ed:d3:a2:aa:ac:10:a6:34:62:71:3e:ab: 05:7a:24:9a:89:aa:84:d9:84:db:d0:10:b0:45:b0: 68:25:12:c6:e0:5c:9b:54:a9:f1:e4:66:1c:28:cf: d8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:98:C4:7B:32:29:6D:4D:FB:34:35:B4:42:AA:8F:6A:EF:CA:65:F6 X509v3 Authority Key Identifier: keyid:F7:5A:C8:DC:04:49:57:B1:B1:5A:0B:15:C6:ED:A3:18:B2:3B:40:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91rI3ARJV7GxWgsVxu2jGLI7QDM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:41:f5:58:20:23:ea:74:60:10:e8:bd:64:8a:75:b5:c0:24: 0a:b6:7b:b2:14:35:b3:89:5a:f5:37:24:dd:1f:33:fc:2f:b7: 2b:29:73:66:91:95:f0:4e:73:f0:0f:7a:46:31:46:f7:c2:3f: f1:7a:34:e3:37:31:a6:0b:da:2c:93:7b:8c:1f:de:37:a3:5c: 6b:c4:3f:28:b6:89:a8:c5:ea:ab:86:64:88:6e:d7:8d:dc:3b: cb:af:1b:19:b6:86:48:48:74:f0:c6:47:6f:12:3b:e8:7d:6f: f4:95:50:de:6a:45:3e:5f:52:9f:e8:4a:39:40:8b:63:b1:bc: a6:72:d4:ac:82:4d:74:b8:3f:f2:4c:20:d0:c1:f5:55:de:de: 44:00:d3:78:ac:05:31:df:33:07:83:be:69:8c:38:a8:b4:ec: 91:2e:28:a3:6e:d4:1e:4c:f4:c5:fc:5e:5a:47:ad:a5:b0:96: 55:ea:51:86:72:28:85:c3:4a:2e:de:a6:0b:01:f5:76:e3:9a: fd:05:4c:6d:44:38:2c:9e:eb:1a:1e:5d:a0:81:9f:f8:8b:06: b6:fa:a2:6e:5c:23:2e:6b:22:e7:db:f5:ec:0e:78:95:af:a4: 6b:04:00:b0:4d:53:72:b2:44:8e:d7:ec:d9:96:60:45:12:45: c7:67:4b:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNERTQxMTAvBgNVBAUTKEY3NUFDOERDMDQ0OTU3QjFCMTVBMEIxNUM2RURBMzE4 QjIzQjQwMzMwHhcNMjUwODA5MDMyMjEzWhcNMjUwODE2MDMyMjEzWjAYMRYwFAYD VQQDEw02ODk2YmVlNS1mYjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv2PsLS7jrIcHxlAco0al+dVSwIhDJmyne8LYoVLzEj+t/7Rr0m1CunJVsEvU xvoQZ9ue/+tArMpC5wAivPgUJNo0KfY+iCilN2BiXfS+p43SoUr4ib13P4TVN0cx CXoelRnn0lS7MKpObif+x3MwUitQldj8QDhLSy7e9NK8P+/cnhFsgEGyvaZFebtR cQJkcDllWERF9L+xLwawP7w+cnJdCxlqDftkOuadtPW+BYKZbFzKU+DPgCQ+fey1 /NgeexCVgVEtobvLXeWA7QxaXeqYC4vt06KqrBCmNGJxPqsFeiSaiaqE2YTb0BCw RbBoJRLG4FybVKnx5GYcKM/YSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKuYxHsy KW1N+zQ1tEKqj2rvymX2MB8GA1UdIwQYMBaAFPdayNwESVexsVoLFcbtoxiyO0Az MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0RFNC9CNUE0NzM5MEM5 OTMxMUVEOUI0QjNCMTBDNEY5QUUwMi85MXJJM0FSSlY3R3hXZ3NWeHUyakdMSTdR RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkxckkzQVJKVjdHeFdnc1Z4dTJqR0xJN1FETS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0RFNC9CNUE0NzM5MEM5OTMxMUVEOUI0QjNCMTBDNEY5QUUwMi85MXJJM0FSSlY3 R3hXZ3NWeHUyakdMSTdRRE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+QfVYICPqdGAQ6L1kinW1wCQKtnuyFDWziVr1NyTdHzP8L7crKXNm kZXwTnPwD3pGMUb3wj/xejTjNzGmC9osk3uMH943o1xrxD8otomoxeqrhmSIbteN 3DvLrxsZtoZISHTwxkdvEjvofW/0lVDeakU+X1Kf6Eo5QItjsbymctSsgk10uD/y TCDQwfVV3t5EANN4rAUx3zMHg75pjDiotOyRLiijbtQeTPTF/F5aR62lsJZV6lGG ciiFw0ou3qYLAfV245r9BUxtRDgsnusaHl2ggZ/4iwa2+qJuXCMuayLn2/XsDniV r6RrBACwTVNyskSO1+zZlmBFEkXHZ0sz -----END CERTIFICATE-----Generated at Sun Aug 10 18:54:48 2025 by rpki-client