$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft File: F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft (raw, json) Hash identifier: zfk6CueOKp3LyXDVVqWHg9FyG4dERVrpwNiXz2vwzHI= Subject key identifier: A1:C2:69:4D:32:FA:0D:3F:9F:B5:A5:F0:F1:16:9E:52:7F:73:ED:89 Authority key identifier: 17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01 Certificate issuer: /CN=A91B5073/serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01 Certificate serial: 0902 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft Manifest number: 1971 Signing time: Sun 10 Aug 2025 17:20:30 +0000 Manifest this update: Sun 10 Aug 2025 17:20:29 +0000 Manifest next update: Sun 17 Aug 2025 17:20:29 +0000 Files and hashes: 1: F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl (hash: ftTGfGljTZbeJDhZbSvRiSm+QpueYwpD06bsEkoZV7A=) 2: E864BB28711111F0AB5B373CC4F9AE02.roa (hash: iYcDINyCrpgRlPat4N3nqbkCgHIiFTbqdTNSDBYjpsw=) 3: 8CB86F5AC21A11EFAB75870CC4F9AE02.roa (hash: WQb8lcNBaBBkPoF6ncdjgRAg3hdCvuxgxSDRSWRx1cY=) 4: 13C3DD4E711211F0982E3257C4F9AE02.roa (hash: ZD3FeOvWZIdy5qMctGftHFy+iG+271qaPYPQ7cYZfGM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2306 (0x902) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5073, serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01 Validity Not Before: Aug 10 17:20:29 2025 GMT Not After : Aug 17 17:20:29 2025 GMT Subject: CN=6898d4de-60fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a7:99:b6:57:cc:bb:5f:42:f6:49:80:35:e5: 42:6d:0c:40:77:1a:fb:21:8f:99:7e:c0:3e:35:8b: e2:ae:f8:93:79:ce:ff:e2:e7:57:f8:c2:f1:fc:7e: cc:b8:4a:51:95:38:de:f7:46:91:27:68:9c:de:f0: ab:fb:b2:58:26:cc:e5:7f:60:4c:52:c5:ae:0b:18: ca:05:1d:a2:db:af:38:e6:16:f8:de:13:1e:7d:c2: 07:d5:31:b8:a9:c9:e2:26:55:13:22:96:49:f2:5d: 28:b9:54:8b:80:db:c4:58:02:96:3a:9d:d5:17:94: d1:fc:6c:be:dc:64:94:1c:5c:3a:b6:6b:e9:70:24: dd:85:3f:9b:fb:c9:64:3a:90:ec:1a:03:d1:84:2b: ac:46:7d:0e:1e:b8:16:77:de:cb:e6:fc:00:a0:f5: 25:f4:e1:b9:60:b3:24:8d:75:57:ab:a6:52:7a:95: 27:9b:f0:b3:8a:50:ba:bf:d8:5b:bf:57:91:cc:f3: 19:f0:cd:c4:33:57:29:a5:2f:0f:81:d1:4c:da:80: 77:f6:2f:2c:df:1a:6c:7a:7d:f6:3b:45:90:de:b1: 47:0c:8b:bb:6b:be:6b:1a:58:2c:a0:4f:08:5f:f1: e1:bc:60:39:3e:cf:c0:08:13:34:f6:5b:95:6c:fa: 49:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:C2:69:4D:32:FA:0D:3F:9F:B5:A5:F0:F1:16:9E:52:7F:73:ED:89 X509v3 Authority Key Identifier: keyid:17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:c5:df:30:7e:bc:75:a4:60:3a:93:63:e9:82:36:1f:3b:2c: 1c:42:f1:7a:d1:74:3b:01:d8:dc:71:eb:eb:c8:50:fc:d1:12: 55:16:92:83:38:a9:be:1f:f2:9d:d6:80:b1:02:37:38:17:8e: 40:5a:e1:68:3c:cf:ec:b6:8e:39:04:3a:48:ed:f5:85:78:8c: 60:95:3a:fe:d5:59:b6:ee:00:66:fa:85:06:44:54:7d:ea:d2: 2e:dc:62:69:f8:17:94:0a:68:6d:33:bb:56:9e:ce:50:7c:99: af:75:2d:81:69:ac:8f:81:e0:0d:06:e6:21:e1:f9:2b:11:d9: b7:9a:e4:96:15:33:cb:86:9a:91:eb:d7:88:2c:af:ec:5e:35: d7:bf:b1:7c:3e:c3:17:cc:d7:6d:c7:f6:7f:a4:97:6a:46:ab: 39:96:e5:2e:78:06:b2:b7:e0:b0:3e:ad:40:a5:46:6e:3c:be: 4b:05:2e:7e:b5:06:b0:13:93:3a:42:fc:56:db:bc:13:9b:8b: 33:60:02:59:88:5a:b3:c5:ab:04:d4:96:18:22:80:24:db:90: 1e:bb:f0:01:ce:fb:3c:92:12:e0:41:82:20:86:7d:c5:1a:88: fd:f5:d1:10:51:34:d7:b4:1e:ca:42:fd:3f:dc:13:dd:cc:ca: 4a:ed:e6:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUwNzMxMTAvBgNVBAUTKDE3ODE3Q0I4Mjg5MjMxQjQ3MDdFOUQ1QjQwNkQ1OEFG Rjc5RDFFMDEwHhcNMjUwODEwMTcyMDI5WhcNMjUwODE3MTcyMDI5WjAYMRYwFAYD VQQDEw02ODk4ZDRkZS02MGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyaeZtlfMu19C9kmANeVCbQxAdxr7IY+ZfsA+NYvirviTec7/4udX+MLx/H7M uEpRlTje90aRJ2ic3vCr+7JYJszlf2BMUsWuCxjKBR2i26845hb43hMefcIH1TG4 qcniJlUTIpZJ8l0ouVSLgNvEWAKWOp3VF5TR/Gy+3GSUHFw6tmvpcCTdhT+b+8lk OpDsGgPRhCusRn0OHrgWd97L5vwAoPUl9OG5YLMkjXVXq6ZSepUnm/CzilC6v9hb v1eRzPMZ8M3EM1cppS8PgdFM2oB39i8s3xpsen32O0WQ3rFHDIu7a75rGlgsoE8I X/HhvGA5Ps/ACBM09luVbPpJqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKHCaU0y +g0/n7Wl8PEWnlJ/c+2JMB8GA1UdIwQYMBaAFBeBfLgokjG0cH6dW0BtWK/3nR4B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTA3My80M0YxNjI2NDMz OTUxMUU5QkZCMUMyMUFDNEY5QUUwMi9GNEY4dUNpU01iUndmcDFiUUcxWXJfZWRI Z0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Y0Rjh1Q2lTTWJSd2ZwMWJRRzFZcl9lZEhnRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTA3My80M0YxNjI2NDMzOTUxMUU5QkZCMUMyMUFDNEY5QUUwMi9GNEY4dUNpU01i UndmcDFiUUcxWXJfZWRIZ0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlxd8wfrx1pGA6k2PpgjYfOywcQvF60XQ7AdjccevryFD80RJVFpKD OKm+H/Kd1oCxAjc4F45AWuFoPM/sto45BDpI7fWFeIxglTr+1Vm27gBm+oUGRFR9 6tIu3GJp+BeUCmhtM7tWns5QfJmvdS2BaayPgeANBuYh4fkrEdm3muSWFTPLhpqR 69eILK/sXjXXv7F8PsMXzNdtx/Z/pJdqRqs5luUueAayt+CwPq1ApUZuPL5LBS5+ tQawE5M6QvxW27wTm4szYAJZiFqzxasE1JYYIoAk25Aeu/ABzvs8khLgQYIghn3F Goj99dEQUTTXtB7KQv0/3BPdzMpK7eZd -----END CERTIFICATE-----Generated at Sun Aug 10 19:02:38 2025 by rpki-client