$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft File: cJbvn454MDQ56aHksDgYgaQy9Ns.mft (raw, json) Hash identifier: QRcoM6luoqyiKXXJbCJFBxDmyLWpYrP0inuQXSrEhOI= Subject key identifier: AF:90:DE:09:AE:E2:3A:A5:47:20:DA:62:8E:91:0A:79:95:B6:AF:ED Authority key identifier: 70:96:EF:9F:8E:78:30:34:39:E9:A1:E4:B0:38:18:81:A4:32:F4:DB Certificate issuer: /CN=A91A8F8A/serialNumber=7096EF9F8E78303439E9A1E4B0381881A432F4DB Certificate serial: 03BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJbvn454MDQ56aHksDgYgaQy9Ns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft Manifest number: 03B9 Signing time: Mon 11 Aug 2025 00:52:06 +0000 Manifest this update: Mon 11 Aug 2025 00:52:05 +0000 Manifest next update: Mon 18 Aug 2025 00:52:05 +0000 Files and hashes: 1: cJbvn454MDQ56aHksDgYgaQy9Ns.crl (hash: kKfCe8f8V3M26wADQhHbROAC9YRjobCF7h+ivXTymBc=) 2: AFED106A9E1511ECA4B98E73C4F9AE02.roa (hash: IKsBlPoiBaV1Y/8FMivKysodYXv24LUe7kGHbrSaUFc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.crl rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJbvn454MDQ56aHksDgYgaQy9Ns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 00:52:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 957 (0x3bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8F8A, serialNumber=7096EF9F8E78303439E9A1E4B0381881A432F4DB Validity Not Before: Aug 11 00:52:05 2025 GMT Not After : Aug 18 00:52:05 2025 GMT Subject: CN=68993eb5-a73c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:be:76:eb:a9:44:20:70:00:de:af:95:0a:cc: 1a:0b:a4:ac:0c:56:17:95:d9:92:08:60:44:14:4a: 4c:aa:76:0f:47:6c:e6:60:d3:f5:0f:87:2c:3c:73: 0d:3e:fb:6e:79:62:82:5e:65:0f:8a:77:3b:27:da: c6:10:a1:bb:23:96:72:11:b4:80:ca:79:48:e0:ae: e9:07:27:10:68:be:9d:70:67:e5:75:86:b0:44:0d: 6b:4f:af:dd:b5:ac:b0:b7:7c:25:19:a7:fe:7a:31: e3:b5:8f:5a:44:1f:8a:98:fd:f5:f3:6e:73:b8:a5: a4:68:24:38:56:9e:90:a8:af:7d:ab:fc:25:b8:ac: 8a:09:f7:fc:2c:e3:1d:31:e7:e3:38:3d:36:94:70: ef:1c:ba:41:ab:04:d2:6a:2a:67:d6:34:6b:1a:d1: 33:60:49:0f:ae:01:fc:3a:ae:66:aa:d4:91:da:e3: ae:83:12:0b:a6:3a:3d:c7:75:06:01:d6:30:d0:5e: 12:c0:9f:40:5b:5e:f3:ea:02:39:c9:88:18:4a:98: 7c:e8:f6:2c:fb:8e:a6:76:fd:e5:af:60:0a:c1:46: 80:c3:f9:ab:11:f9:5f:2c:49:93:25:8f:35:65:fc: 78:12:25:94:97:38:6c:03:b1:29:74:05:c8:32:24: 8d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:90:DE:09:AE:E2:3A:A5:47:20:DA:62:8E:91:0A:79:95:B6:AF:ED X509v3 Authority Key Identifier: keyid:70:96:EF:9F:8E:78:30:34:39:E9:A1:E4:B0:38:18:81:A4:32:F4:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJbvn454MDQ56aHksDgYgaQy9Ns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:01:a7:7e:92:56:ef:6c:e7:d0:f0:a1:4a:28:ef:01:5a:cf: a9:cf:55:81:4b:82:9a:46:a1:f0:73:a7:46:d1:da:92:c8:84: ed:42:48:9e:ea:21:f6:60:dc:ad:15:3d:87:de:e1:58:a6:9b: d7:9f:41:07:29:d3:ce:f5:23:4a:8f:c6:c6:d5:82:a0:5e:86: ea:26:6a:27:ab:ce:b3:30:49:be:72:99:cb:be:98:eb:cc:96: e1:98:cb:29:46:89:3a:7f:7a:63:15:50:45:04:a1:a7:1a:0d: dc:72:fb:98:62:36:8e:5c:ff:0d:4e:0e:ee:fe:4a:0b:64:07: 61:e7:ef:33:dc:d9:ec:b6:57:20:e0:22:d1:f1:24:7c:0c:14: 45:dc:80:2b:99:c2:90:35:1d:bb:6e:68:d1:28:68:9b:ae:b7: 51:e3:8a:69:24:67:65:59:a6:bb:64:4f:d0:ed:d5:b3:7e:67: 5e:71:b6:80:58:96:78:64:87:60:ac:44:a5:4d:52:03:77:9a: 2c:c3:d2:83:7b:e9:2b:a5:63:f0:b8:81:b8:e6:95:31:5a:cb: ab:a3:22:6b:ae:02:44:6b:e8:9f:e0:49:66:44:38:81:08:f8: 72:1a:da:a7:b3:bc:39:51:32:ac:fd:d4:c8:8d:09:b9:c5:a2: bc:dd:9f:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA70wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThGOEExMTAvBgNVBAUTKDcwOTZFRjlGOEU3ODMwMzQzOUU5QTFFNEIwMzgxODgx QTQzMkY0REIwHhcNMjUwODExMDA1MjA1WhcNMjUwODE4MDA1MjA1WjAYMRYwFAYD VQQDEw02ODk5M2ViNS1hNzNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqL5266lEIHAA3q+VCswaC6SsDFYXldmSCGBEFEpMqnYPR2zmYNP1D4csPHMN PvtueWKCXmUPinc7J9rGEKG7I5ZyEbSAynlI4K7pBycQaL6dcGfldYawRA1rT6/d taywt3wlGaf+ejHjtY9aRB+KmP31825zuKWkaCQ4Vp6QqK99q/wluKyKCff8LOMd MefjOD02lHDvHLpBqwTSaipn1jRrGtEzYEkPrgH8Oq5mqtSR2uOugxILpjo9x3UG AdYw0F4SwJ9AW17z6gI5yYgYSph86PYs+46mdv3lr2AKwUaAw/mrEflfLEmTJY81 Zfx4EiWUlzhsA7EpdAXIMiSN5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK+Q3gmu 4jqlRyDaYo6RCnmVtq/tMB8GA1UdIwQYMBaAFHCW75+OeDA0Oemh5LA4GIGkMvTb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEY4QS83MjE5NUFENDlF MTMxMUVDQjA5MUNFNzJDNEY5QUUwMi9jSmJ2bjQ1NE1EUTU2YUhrc0RnWWdhUXk5 TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NKYnZuNDU0TURRNTZhSGtzRGdZZ2FReTlOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEY4QS83MjE5NUFENDlFMTMxMUVDQjA5MUNFNzJDNEY5QUUwMi9jSmJ2bjQ1NE1E UTU2YUhrc0RnWWdhUXk5TnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6Aad+klbvbOfQ8KFKKO8BWs+pz1WBS4KaRqHwc6dG0dqSyITtQkie 6iH2YNytFT2H3uFYppvXn0EHKdPO9SNKj8bG1YKgXobqJmonq86zMEm+cpnLvpjr zJbhmMspRok6f3pjFVBFBKGnGg3ccvuYYjaOXP8NTg7u/koLZAdh5+8z3Nnstlcg 4CLR8SR8DBRF3IArmcKQNR27bmjRKGibrrdR44ppJGdlWaa7ZE/Q7dWzfmdecbaA WJZ4ZIdgrESlTVIDd5osw9KDe+krpWPwuIG45pUxWsuroyJrrgJEa+if4ElmRDiB CPhyGtqns7w5UTKs/dTIjQm5xaK83Z8E -----END CERTIFICATE-----Generated at Tue Aug 12 18:54:21 2025 by rpki-client