$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft File: mFjOS0vHLnbmaMR9RImMCQiWq-s.mft (raw, json) Hash identifier: KfD62Cydt61wUiFTpbURPLFhPPdHpuV5Se004JIklSU= Subject key identifier: C1:6E:69:25:CA:B3:20:E1:4C:75:84:48:54:43:2B:A3:5F:F8:F5:FB Authority key identifier: 98:58:CE:4B:4B:C7:2E:76:E6:68:C4:7D:44:89:8C:09:08:96:AB:EB Certificate issuer: /CN=A91A4B1A/serialNumber=9858CE4B4BC72E76E668C47D44898C090896ABEB Certificate serial: 0200 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft Manifest number: 01FA Signing time: Wed 06 Aug 2025 16:10:13 +0000 Manifest this update: Wed 06 Aug 2025 16:10:12 +0000 Manifest next update: Wed 13 Aug 2025 16:10:12 +0000 Files and hashes: 1: mFjOS0vHLnbmaMR9RImMCQiWq-s.crl (hash: oV8tAqsDPoF73KBwZC62bV9FBekPVMmY6T2ewlWiUSg=) 2: 4C3A869614DF11EEAB46A86DC4F9AE02.roa (hash: lu38CDRBmX2eL86FuDGblRO37V7hVT/nMCfbmUIJkQk=) 3: 4BC4F6A614DF11EEAB46A86DC4F9AE02.roa (hash: UFLmIYqMMQZsSlXO+J3Nx0+Pb9WqTG32RlxuAiHOUdE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.crl rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 16:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 512 (0x200) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4B1A, serialNumber=9858CE4B4BC72E76E668C47D44898C090896ABEB Validity Not Before: Aug 6 16:10:12 2025 GMT Not After : Aug 13 16:10:12 2025 GMT Subject: CN=68937e64-98f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ef:eb:23:ab:97:9e:55:67:f0:e1:d9:db:41: fb:46:cc:c6:b7:8a:4b:2f:7b:f8:bb:db:de:af:2c: ea:c3:87:9a:98:3c:f8:74:87:08:4b:b1:f9:22:1c: 0e:6a:3b:66:45:94:dd:0d:35:96:16:56:a0:a2:07: 34:6f:18:74:1f:52:7b:cd:ae:37:79:05:8b:3a:58: ef:0f:c5:2c:0d:5e:a4:e0:54:58:e5:1f:c6:a1:c0: 0d:8a:40:58:bb:2c:1b:25:96:7c:b1:7b:e8:3b:88: 4e:08:9b:27:46:9d:f0:00:a8:e5:f6:c6:a0:95:51: e2:8e:64:ce:19:ed:d7:c9:c8:7b:ef:71:ad:88:b3: ad:8f:92:a5:14:3f:af:e7:a0:02:41:05:b4:54:bc: 65:fc:3a:1a:a6:c8:ab:1a:7c:1f:18:c1:59:aa:d7: a3:01:dc:c6:29:dd:34:b5:86:71:38:97:f9:a8:23: ba:71:8f:80:0c:d3:e7:16:13:c3:cc:fc:88:01:45: 10:d4:f0:07:42:b1:a6:4f:6c:01:56:bd:ea:86:a7: 82:ea:02:7a:6e:c3:1c:3a:79:7e:d3:dd:2e:b7:d5: 36:c8:9f:c2:b2:ed:63:ab:49:c6:5b:07:d5:c2:3d: 9d:f5:05:63:c5:44:1a:fb:6a:72:6f:a0:0b:f7:43: 24:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:6E:69:25:CA:B3:20:E1:4C:75:84:48:54:43:2B:A3:5F:F8:F5:FB X509v3 Authority Key Identifier: keyid:98:58:CE:4B:4B:C7:2E:76:E6:68:C4:7D:44:89:8C:09:08:96:AB:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:1b:19:f3:f3:70:21:a5:32:8d:f4:6f:3a:19:a1:6b:c8:15: 3f:37:2c:61:bf:1c:81:14:5c:c5:db:8c:55:ed:00:8b:24:c4: 55:fa:3a:32:29:7e:dd:50:e9:43:73:66:a1:46:d1:1a:55:a4: 06:cc:54:a7:68:fe:d9:84:13:f3:aa:e1:13:d7:ef:f2:ba:ce: e1:9d:15:8f:1a:23:cf:67:72:47:aa:85:9b:2b:fe:fc:ce:7c: 9d:c7:30:bc:80:8d:c6:e8:f9:94:89:5f:62:55:eb:45:0d:9e: 10:c7:dc:9b:75:f6:77:96:d6:27:8b:3d:51:d7:d1:66:f3:05: c1:c5:e8:23:6c:a3:67:1e:a5:4a:c0:8f:4b:f7:37:42:1d:11: 2c:1a:3e:44:84:3b:13:08:0c:c7:72:f8:ec:1d:f6:4c:87:0d: 20:5d:6c:79:2c:d2:92:8a:eb:33:c8:9d:c0:80:32:73:e1:f8: 35:9b:ca:23:11:7c:6f:d2:38:4b:e0:3f:e5:55:e5:b6:70:bb: 60:eb:9b:b6:d2:02:4e:d9:1c:34:32:2a:98:98:dd:77:51:ed: 3b:b5:b3:e4:ff:2b:d9:32:92:69:65:c5:2b:0f:04:56:cb:a7: fc:8d:6e:3b:67:8c:fd:ad:31:a7:4d:19:04:6c:c7:20:6a:c3: 62:4f:ce:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRCMUExMTAvBgNVBAUTKDk4NThDRTRCNEJDNzJFNzZFNjY4QzQ3RDQ0ODk4QzA5 MDg5NkFCRUIwHhcNMjUwODA2MTYxMDEyWhcNMjUwODEzMTYxMDEyWjAYMRYwFAYD VQQDEw02ODkzN2U2NC05OGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4e/rI6uXnlVn8OHZ20H7RszGt4pLL3v4u9veryzqw4eamDz4dIcIS7H5IhwO ajtmRZTdDTWWFlagogc0bxh0H1J7za43eQWLOljvD8UsDV6k4FRY5R/GocANikBY uywbJZZ8sXvoO4hOCJsnRp3wAKjl9saglVHijmTOGe3Xych773GtiLOtj5KlFD+v 56ACQQW0VLxl/DoapsirGnwfGMFZqtejAdzGKd00tYZxOJf5qCO6cY+ADNPnFhPD zPyIAUUQ1PAHQrGmT2wBVr3qhqeC6gJ6bsMcOnl+090ut9U2yJ/Csu1jq0nGWwfV wj2d9QVjxUQa+2pyb6AL90Mk4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMFuaSXK syDhTHWESFRDK6Nf+PX7MB8GA1UdIwQYMBaAFJhYzktLxy525mjEfUSJjAkIlqvr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEIxQS9CNDVGM0ZDNDgx OUExMUVEOEQ2MUJBMkJDNEY5QUUwMi9tRmpPUzB2SExuYm1hTVI5UkltTUNRaVdx LXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21Gak9TMHZITG5ibWFNUjlSSW1NQ1FpV3Etcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEIxQS9CNDVGM0ZDNDgxOUExMUVEOEQ2MUJBMkJDNEY5QUUwMi9tRmpPUzB2SExu Ym1hTVI5UkltTUNRaVdxLXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6Gxnz83AhpTKN9G86GaFryBU/NyxhvxyBFFzF24xV7QCLJMRV+joy KX7dUOlDc2ahRtEaVaQGzFSnaP7ZhBPzquET1+/yus7hnRWPGiPPZ3JHqoWbK/78 znydxzC8gI3G6PmUiV9iVetFDZ4Qx9ybdfZ3ltYniz1R19Fm8wXBxegjbKNnHqVK wI9L9zdCHREsGj5EhDsTCAzHcvjsHfZMhw0gXWx5LNKSiuszyJ3AgDJz4fg1m8oj EXxv0jhL4D/lVeW2cLtg65u20gJO2Rw0MiqYmN13Ue07tbPk/yvZMpJpZcUrDwRW y6f8jW47Z4z9rTGnTRkEbMcgasNiT85z -----END CERTIFICATE-----Generated at Thu Aug 7 04:35:30 2025 by rpki-client