$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft File: _-G3qHKaDsu-yLL9mpe3SCbM28U.mft (raw, json) Hash identifier: sFvurS/yXwKy7EuYrKBjo3Q38hqWd+GyETHnl8pbw5w= Subject key identifier: 05:9B:54:4A:95:52:56:42:90:65:92:A9:B7:B4:05:2B:BF:06:08:EE Authority key identifier: FF:E1:B7:A8:72:9A:0E:CB:BE:C8:B2:FD:9A:97:B7:48:26:CC:DB:C5 Certificate issuer: /CN=A91AE3F2/serialNumber=FFE1B7A8729A0ECBBEC8B2FD9A97B74826CCDBC5 Certificate serial: 0221 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft Manifest number: 021A Signing time: Sat 09 Aug 2025 02:31:51 +0000 Manifest this update: Sat 09 Aug 2025 02:31:51 +0000 Manifest next update: Sat 16 Aug 2025 02:31:51 +0000 Files and hashes: 1: _-G3qHKaDsu-yLL9mpe3SCbM28U.crl (hash: XGR55oywxeB3hls61B/v1Kzc2jliAkTNHf0GQ6Oj/mE=) 2: EEA8968C461A11ED898DD14FC4F9AE02.roa (hash: xvgbQt4eEZhtv3D2xw3qg4iJxZwYxghUdqa6K5JPB6M=) 3: 41669A1AFA7111EFBBC5374BC4F9AE02.roa (hash: xErCMLXYoA0hL6AVT+7fD9OFndfuVCyqiiQ1j2stZZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.crl rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 545 (0x221) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE3F2, serialNumber=FFE1B7A8729A0ECBBEC8B2FD9A97B74826CCDBC5 Validity Not Before: Aug 9 02:31:51 2025 GMT Not After : Aug 16 02:31:51 2025 GMT Subject: CN=6896b317-8378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a4:4b:07:8a:a5:2c:f9:c1:18:17:32:7d:68: f6:17:46:90:c6:0f:37:33:5f:34:f8:a9:73:2c:38: 4d:2b:65:72:88:8f:b0:48:ef:68:27:37:c9:dc:ca: 62:31:18:5b:93:1c:34:e5:7f:f3:12:7c:55:8c:05: 05:90:ed:b1:f4:7f:c2:d3:13:f2:da:d1:a3:12:f5: 2e:73:bf:64:05:46:14:3b:79:2d:a3:59:ed:ef:5a: d5:1e:83:bc:57:e6:ee:dd:e1:f0:c7:a7:d2:89:d8: f2:36:b9:fc:16:b4:d7:b4:71:36:de:01:4d:23:6e: c6:3f:cc:a9:5a:53:95:8c:1c:1d:51:bd:99:05:b1: 68:e5:cf:9d:4a:d0:9c:c8:5d:be:06:da:df:d4:d7: ee:e1:c1:e5:e9:22:20:26:ef:46:65:6a:81:c2:1a: db:f5:47:9c:f1:30:b6:8e:4a:98:ae:12:51:30:49: 70:3d:c0:dc:4d:a2:3b:0a:1e:93:b8:7e:12:b8:c4: 1e:33:15:b9:52:57:c2:2e:15:9a:82:df:b5:f6:ba: 90:54:ed:1b:88:d7:d1:44:f9:13:91:bb:64:5a:f9: 24:ee:25:f7:c8:f9:af:09:a6:6a:99:cc:7b:7b:97: bc:90:f7:e1:bb:be:7d:8b:fa:b6:7c:6e:78:bf:73: 42:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:9B:54:4A:95:52:56:42:90:65:92:A9:B7:B4:05:2B:BF:06:08:EE X509v3 Authority Key Identifier: keyid:FF:E1:B7:A8:72:9A:0E:CB:BE:C8:B2:FD:9A:97:B7:48:26:CC:DB:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:b2:69:3a:e1:2a:64:9a:1c:49:a0:61:88:87:95:b0:f7:de: c7:34:fc:ff:65:47:fa:1e:ba:dd:45:5d:fe:4a:44:ed:c5:1e: bc:65:f8:f3:82:f0:5c:32:1d:e9:ce:aa:e0:bf:7e:28:fa:71: dc:4a:e9:9f:57:8c:d5:1c:52:f0:9d:07:22:a9:48:7d:ad:d4: 83:32:0f:ed:06:a2:ce:0a:7b:ed:58:ff:63:02:35:bd:96:23: c0:cc:36:f1:db:5b:e2:51:05:0d:31:d0:19:ab:d7:3c:12:87: b3:74:cf:75:98:43:11:04:6a:22:75:76:2f:cb:3c:55:a9:c3: 86:cc:88:32:86:9a:78:16:c8:d4:35:f5:f0:dc:e8:b8:ef:6c: 49:ec:94:a9:1b:45:85:f4:02:dc:80:a1:c9:3d:50:70:70:d9: 59:d8:24:f4:83:b3:42:cc:b7:b8:3a:bd:4f:0a:f1:bf:62:fc: de:9b:83:8f:ea:9d:87:fe:83:c8:63:38:d2:2d:8f:e7:f1:5d: 6a:a0:9e:84:87:13:68:22:58:f1:8f:13:ea:3a:d1:39:3c:18: 09:ec:f8:95:46:ae:3d:21:e0:ce:4e:ef:46:55:8b:6c:56:64: 46:05:9d:e5:af:39:8c:ab:c9:cd:8c:a2:ab:f0:a4:4e:24:5f: f3:d3:a9:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUUzRjIxMTAvBgNVBAUTKEZGRTFCN0E4NzI5QTBFQ0JCRUM4QjJGRDlBOTdCNzQ4 MjZDQ0RCQzUwHhcNMjUwODA5MDIzMTUxWhcNMjUwODE2MDIzMTUxWjAYMRYwFAYD VQQDEw02ODk2YjMxNy04Mzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwaRLB4qlLPnBGBcyfWj2F0aQxg83M180+KlzLDhNK2VyiI+wSO9oJzfJ3Mpi MRhbkxw05X/zEnxVjAUFkO2x9H/C0xPy2tGjEvUuc79kBUYUO3kto1nt71rVHoO8 V+bu3eHwx6fSidjyNrn8FrTXtHE23gFNI27GP8ypWlOVjBwdUb2ZBbFo5c+dStCc yF2+Btrf1Nfu4cHl6SIgJu9GZWqBwhrb9Uec8TC2jkqYrhJRMElwPcDcTaI7Ch6T uH4SuMQeMxW5UlfCLhWagt+19rqQVO0biNfRRPkTkbtkWvkk7iX3yPmvCaZqmcx7 e5e8kPfhu759i/q2fG54v3NCzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAWbVEqV UlZCkGWSqbe0BSu/BgjuMB8GA1UdIwQYMBaAFP/ht6hymg7Lvsiy/ZqXt0gmzNvF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTNGMi84NkEwRkIyODQ2 MTYxMUVEOTJFQUFEMjBDNEY5QUUwMi9fLUczcUhLYURzdS15TEw5bXBlM1NDYk0y OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18tRzNxSEthRHN1LXlMTDltcGUzU0NiTTI4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTNGMi84NkEwRkIyODQ2MTYxMUVEOTJFQUFEMjBDNEY5QUUwMi9fLUczcUhLYURz dS15TEw5bXBlM1NDYk0yOFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIsmk64SpkmhxJoGGIh5Ww997HNPz/ZUf6HrrdRV3+SkTtxR68Zfjz gvBcMh3pzqrgv34o+nHcSumfV4zVHFLwnQciqUh9rdSDMg/tBqLOCnvtWP9jAjW9 liPAzDbx21viUQUNMdAZq9c8EoezdM91mEMRBGoidXYvyzxVqcOGzIgyhpp4FsjU NfXw3Oi472xJ7JSpG0WF9ALcgKHJPVBwcNlZ2CT0g7NCzLe4Or1PCvG/Yvzem4OP 6p2H/oPIYzjSLY/n8V1qoJ6EhxNoIljxjxPqOtE5PBgJ7PiVRq49IeDOTu9GVYts VmRGBZ3lrzmMq8nNjKKr8KROJF/z06lE -----END CERTIFICATE-----Generated at Sat Aug 9 23:20:13 2025 by rpki-client