$ rpki-client -vvf rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft File: b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft (raw, json) Hash identifier: p2QE+JJVAGvtzEs0BopVZKQfddhDa4xv4q+FdyBCvos= Subject key identifier: 6C:97:D2:95:DF:67:9F:94:12:FF:71:12:3D:33:9C:A0:93:C5:69:84 Authority key identifier: 6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8 Certificate issuer: /CN=A91A54FE/serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8 Certificate serial: 0107 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft Manifest number: 0101 Signing time: Tue 05 Aug 2025 05:40:43 +0000 Manifest this update: Tue 05 Aug 2025 05:40:43 +0000 Manifest next update: Tue 12 Aug 2025 05:40:43 +0000 Files and hashes: 1: b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl (hash: aIQaE5PNaklMlotla180hlEVG+KCDAdffeWVn273zrE=) 2: 4034878C531411F0B5969F4DC4F9AE02.roa (hash: AU3yamyux9/p0ToAAMhAyNL8bseyjrWTlbYkE9w/k9M=) 3: 3F5C47A0531411F0B5969F4DC4F9AE02.roa (hash: mPhmdB3u77MjPIXuTMC6SqVuUpltsogHZVo7FcoDq+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 05:40:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 263 (0x107) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A54FE, serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8 Validity Not Before: Aug 5 05:40:43 2025 GMT Not After : Aug 12 05:40:43 2025 GMT Subject: CN=6891995b-289b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:96:87:f6:eb:b9:09:22:34:5e:1d:74:96:56: 01:c2:f2:f4:8c:76:9f:7a:8b:51:99:6b:e7:84:b6: 34:e2:b1:de:94:a6:7a:30:2b:e7:ab:99:71:e6:84: 4d:49:5d:1b:83:c6:91:50:43:16:8f:6a:0e:10:2c: af:3a:e1:0e:aa:95:ff:f9:b3:f1:fe:95:30:20:79: a6:58:bf:76:af:7a:7f:64:bb:b6:d2:9b:c9:ea:e7: 61:42:9b:1c:34:64:a6:b4:34:05:92:db:2c:9b:8b: d1:96:50:ed:79:f5:af:fd:32:06:44:6f:4e:4f:60: b7:90:68:96:e4:57:61:19:b7:ef:ec:7b:71:22:96: 3a:90:7b:4a:28:09:2f:a1:55:51:54:74:b5:0f:3c: 5f:88:02:2c:bf:75:58:03:84:03:bb:f8:47:af:e6: 72:ff:24:ff:ed:10:1a:66:f9:71:d0:5a:fb:68:76: 52:8e:e1:40:8b:1d:1d:dc:a0:e2:97:cf:52:f5:93: 99:29:32:89:cb:99:65:73:b3:3a:0b:01:63:5d:c5: e8:21:04:a2:59:93:a5:5d:a7:4c:79:2b:24:c5:1a: 39:8e:97:ec:63:c0:ed:99:96:e4:d7:5f:b8:c3:ff: 15:ec:ea:42:bf:eb:d1:0d:ac:c6:6d:30:65:1d:3a: 66:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:97:D2:95:DF:67:9F:94:12:FF:71:12:3D:33:9C:A0:93:C5:69:84 X509v3 Authority Key Identifier: keyid:6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:11:4a:90:8f:d6:a5:fc:de:6a:e4:ef:b7:1f:91:ef:28:d5: 37:9d:f7:02:b6:b3:cf:53:59:cc:49:b7:97:ee:ba:16:8a:d8: ed:90:5f:7b:a0:bc:a8:c3:9c:e1:2e:74:54:fe:1f:0a:e1:ba: 07:8a:51:2a:89:a2:ef:d8:5c:5f:db:c4:ea:44:59:fe:4f:ca: 6f:76:19:10:9f:b5:6f:ad:ce:cd:d4:a8:b1:8f:43:5d:ab:2d: e4:3b:40:ab:4d:d7:c9:4e:5f:40:e2:84:9b:b8:a0:81:49:26: a5:55:63:9a:8c:18:f4:d5:d0:47:79:06:6d:70:ce:2b:98:de: 1f:7a:a9:77:89:98:0e:57:66:43:55:82:4b:6e:21:c3:68:74: db:d1:e8:e4:ca:45:82:15:a0:f0:15:8a:71:44:c4:15:1f:01: 5a:d0:f4:7c:43:ce:35:dc:3e:49:7c:d0:4b:46:4e:f3:66:cd: 52:1b:e5:28:25:d4:70:73:c6:df:ca:15:4b:a0:d6:a4:ad:fb: dd:92:6d:50:d8:e9:7d:98:62:22:76:e6:b0:74:42:d1:7b:1a: fc:c6:63:e2:ab:47:d1:c7:9e:d4:81:d0:07:be:27:cb:d2:96: 5a:c5:58:bd:84:59:ed:c2:6a:f7:ba:e3:6e:b5:d0:4c:40:32: 66:b8:26:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU0RkUxMTAvBgNVBAUTKDZGQzcwOTA2RkJBNkY0NTM5NDUyMDkxOTMyQzQ1RkZB NEQ4NTcyQjgwHhcNMjUwODA1MDU0MDQzWhcNMjUwODEyMDU0MDQzWjAYMRYwFAYD VQQDEw02ODkxOTk1Yi0yODliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJaH9uu5CSI0Xh10llYBwvL0jHafeotRmWvnhLY04rHelKZ6MCvnq5lx5oRN SV0bg8aRUEMWj2oOECyvOuEOqpX/+bPx/pUwIHmmWL92r3p/ZLu20pvJ6udhQpsc NGSmtDQFktssm4vRllDtefWv/TIGRG9OT2C3kGiW5FdhGbfv7HtxIpY6kHtKKAkv oVVRVHS1DzxfiAIsv3VYA4QDu/hHr+Zy/yT/7RAaZvlx0Fr7aHZSjuFAix0d3KDi l89S9ZOZKTKJy5llc7M6CwFjXcXoIQSiWZOlXadMeSskxRo5jpfsY8DtmZbk11+4 w/8V7OpCv+vRDazGbTBlHTpm7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGyX0pXf Z5+UEv9xEj0znKCTxWmEMB8GA1UdIwQYMBaAFG/HCQb7pvRTlFIJGTLEX/pNhXK4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTRGRS9ENjExN0RGNkY2 RTkxMUVFQURCRkZCNTJDNEY5QUUwMi9iOGNKQnZ1bTlGT1VVZ2taTXNSZi1rMkZj cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I4Y0pCdnVtOUZPVVVna1pNc1JmLWsyRmNyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTRGRS9ENjExN0RGNkY2RTkxMUVFQURCRkZCNTJDNEY5QUUwMi9iOGNKQnZ1bTlG T1VVZ2taTXNSZi1rMkZjcmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfEUqQj9al/N5q5O+3H5HvKNU3nfcCtrPPU1nMSbeX7roWitjtkF97 oLyow5zhLnRU/h8K4boHilEqiaLv2Fxf28TqRFn+T8pvdhkQn7Vvrc7N1Kixj0Nd qy3kO0CrTdfJTl9A4oSbuKCBSSalVWOajBj01dBHeQZtcM4rmN4feql3iZgOV2ZD VYJLbiHDaHTb0ejkykWCFaDwFYpxRMQVHwFa0PR8Q8413D5JfNBLRk7zZs1SG+Uo JdRwc8bfyhVLoNakrfvdkm1Q2Ol9mGIiduawdELRexr8xmPiq0fRx57UgdAHvifL 0pZaxVi9hFntwmr3uuNutdBMQDJmuCb/ -----END CERTIFICATE-----Generated at Thu Aug 7 04:29:16 2025 by rpki-client