$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft File: mK6VbUJuFgLO2LtyWI9io9oSqVU.mft (raw, json) Hash identifier: mSCpq0aObQw0EUt+8HsMZ/f98PC8qoV9cDmIlajgmrk= Subject key identifier: D2:5C:FE:57:04:81:58:5A:6C:C4:0D:B7:AB:69:50:8F:FA:AF:CB:87 Authority key identifier: 98:AE:95:6D:42:6E:16:02:CE:D8:BB:72:58:8F:62:A3:DA:12:A9:55 Certificate issuer: /CN=A91A5FCF/serialNumber=98AE956D426E1602CED8BB72588F62A3DA12A955 Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft Manifest number: 37 Signing time: Thu 07 Aug 2025 08:12:51 +0000 Manifest this update: Thu 07 Aug 2025 08:12:50 +0000 Manifest next update: Thu 14 Aug 2025 08:12:50 +0000 Files and hashes: 1: mK6VbUJuFgLO2LtyWI9io9oSqVU.crl (hash: f+T09ydWlB+KtGDICclBZ1i9SQNQ88uRTrH6jiTsqcY=) 2: 943B92961E6011F0B81D3A54C4F9AE02.roa (hash: OpKLsw9gUBvgDq3xLq9YboZIcPYYkBwvYdkkqKU3FB4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.crl rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5FCF, serialNumber=98AE956D426E1602CED8BB72588F62A3DA12A955 Validity Not Before: Aug 7 08:12:50 2025 GMT Not After : Aug 14 08:12:50 2025 GMT Subject: CN=68946002-318e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:99:a3:b6:f4:ae:57:21:3a:f5:de:6d:7a:03: a2:80:40:c4:26:68:81:53:a4:52:fc:3d:6b:51:1d: 3f:d5:75:27:c3:68:1c:ef:9a:3f:33:14:6f:53:ec: 15:bd:bb:e0:28:e1:d9:42:ff:ec:b6:85:e2:ad:e1: 24:9b:4e:f7:3d:af:36:b5:4c:ce:5b:88:32:be:1d: f8:83:e1:4f:a5:17:23:53:10:bf:e2:24:4c:d8:8b: f6:0c:bf:f0:0a:63:5f:6b:77:bf:b3:0d:66:72:83: 1b:6d:0d:cf:40:61:9e:df:91:a6:67:f5:ce:19:b1: 21:23:0c:92:61:35:99:22:bd:47:c3:7d:b8:9d:8a: c7:a8:88:de:f2:a0:dd:fd:84:4b:2b:be:fe:86:b2: 2e:53:f1:be:f2:ec:f7:a7:29:fc:9f:ab:fa:0e:96: 2d:d5:de:d8:2c:20:1d:71:bd:61:c6:0b:e1:33:3c: 70:9f:80:6e:ed:57:f9:fe:93:88:e2:78:a8:5c:a0: d7:e5:50:9a:77:5c:1e:18:52:a1:ae:85:53:71:90: 53:e7:52:c4:9c:fc:30:bb:58:3d:b6:0d:8a:99:89: bc:d9:f3:58:a8:62:e5:28:1d:85:a4:dc:75:c1:96: 25:c4:1d:29:92:c8:6f:7e:4e:e2:7d:96:3b:d9:9f: 85:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:5C:FE:57:04:81:58:5A:6C:C4:0D:B7:AB:69:50:8F:FA:AF:CB:87 X509v3 Authority Key Identifier: keyid:98:AE:95:6D:42:6E:16:02:CE:D8:BB:72:58:8F:62:A3:DA:12:A9:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:8f:c4:ca:c9:c0:a8:c3:4d:39:de:5f:97:48:4e:67:e2:0d: 8d:c5:b0:d6:f0:3d:6a:13:38:22:e6:bd:09:8a:c7:e8:78:a2: 96:19:7d:a6:09:b4:04:ff:54:c1:06:a3:5d:b0:e1:b9:ff:89: ec:2a:9c:f9:23:4c:89:72:75:a3:93:01:52:11:ef:5b:75:2e: 85:da:8a:75:84:3b:ee:13:86:ba:67:ec:5b:39:54:40:4b:64: 3f:4e:76:3b:e5:65:80:ce:79:d3:a5:3f:f0:db:1b:bb:86:68: e7:67:bc:72:d3:4c:95:37:28:21:9a:2a:e7:a4:32:98:5d:ea: c5:3b:47:97:a0:b8:a8:cc:d9:df:df:00:16:c5:8d:0b:13:f5: 09:58:0d:66:87:c1:1b:19:df:0a:bd:9e:ff:23:e6:0a:7b:5f: d1:0c:c8:92:d9:ff:17:e0:05:b0:21:89:b0:95:be:a6:a0:34: 7e:e0:bd:e2:8b:54:cb:5a:18:bb:d3:66:6d:09:a1:cb:d4:4e: e2:19:01:b3:7d:95:4d:15:24:f3:d0:16:09:2a:c5:f2:17:ab: e7:02:7e:91:40:a8:d3:f7:93:3a:ac:f8:c9:b4:39:c6:c9:4e: b4:04:8e:94:d5:e2:d3:75:cc:30:ef:b6:27:31:d7:fe:f5:99: 29:99:4a:56 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NUZDRjExMC8GA1UEBRMoOThBRTk1NkQ0MjZFMTYwMkNFRDhCQjcyNTg4RjYyQTNE QTEyQTk1NTAeFw0yNTA4MDcwODEyNTBaFw0yNTA4MTQwODEyNTBaMBgxFjAUBgNV BAMTDTY4OTQ2MDAyLTMxOGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFmaO29K5XITr13m16A6KAQMQmaIFTpFL8PWtRHT/VdSfDaBzvmj8zFG9T7BW9 u+Ao4dlC/+y2heKt4SSbTvc9rza1TM5biDK+HfiD4U+lFyNTEL/iJEzYi/YMv/AK Y19rd7+zDWZygxttDc9AYZ7fkaZn9c4ZsSEjDJJhNZkivUfDfbidiseoiN7yoN39 hEsrvv6Gsi5T8b7y7PenKfyfq/oOli3V3tgsIB1xvWHGC+EzPHCfgG7tV/n+k4ji eKhcoNflUJp3XB4YUqGuhVNxkFPnUsSc/DC7WD22DYqZibzZ81ioYuUoHYWk3HXB liXEHSmSyG9+TuJ9ljvZn4UVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0lz+VwSB WFpsxA23q2lQj/qvy4cwHwYDVR0jBBgwFoAUmK6VbUJuFgLO2LtyWI9io9oSqVUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1RkNGL0I4NEM2MDNBMUU1 RjExRjA5RTZBNkI0RkM0RjlBRTAyL21LNlZiVUp1RmdMTzJMdHlXSTlpbzlvU3FW VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbUs2VmJVSnVGZ0xPMkx0eVdJOWlvOW9TcVZVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1 RkNGL0I4NEM2MDNBMUU1RjExRjA5RTZBNkI0RkM0RjlBRTAyL21LNlZiVUp1RmdM TzJMdHlXSTlpbzlvU3FWVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH+PxMrJwKjDTTneX5dITmfiDY3FsNbwPWoTOCLmvQmKx+h4opYZfaYJ tAT/VMEGo12w4bn/iewqnPkjTIlydaOTAVIR71t1LoXainWEO+4Thrpn7Fs5VEBL ZD9OdjvlZYDOedOlP/DbG7uGaOdnvHLTTJU3KCGaKuekMphd6sU7R5eguKjM2d/f ABbFjQsT9QlYDWaHwRsZ3wq9nv8j5gp7X9EMyJLZ/xfgBbAhibCVvqagNH7gveKL VMtaGLvTZm0JocvUTuIZAbN9lU0VJPPQFgkqxfIXq+cCfpFAqNP3kzqs+Mm0OcbJ TrQEjpTV4tN1zDDvticx1/71mSmZSlY= -----END CERTIFICATE-----Generated at Fri Aug 8 20:52:53 2025 by rpki-client