$ rpki-client -vvf rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.mft File: fLBjBy0uSJJZhhStW6tT4d6v9wE.mft (raw, json) Hash identifier: jvV30SZ7VvLQZsQZCSxMHm5pSdgz1QQNSoP17wb9QIE= Subject key identifier: 62:E5:5F:11:D8:8C:C7:B9:17:B4:C2:02:B9:89:4C:B6:0C:DF:7C:A3 Authority key identifier: 7C:B0:63:07:2D:2E:48:92:59:86:14:AD:5B:AB:53:E1:DE:AF:F7:01 Certificate issuer: /CN=A91B994F/serialNumber=7CB063072D2E4892598614AD5BAB53E1DEAFF701 Certificate serial: 0826 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLBjBy0uSJJZhhStW6tT4d6v9wE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.mft Manifest number: 081C Signing time: Sun 10 Aug 2025 20:52:12 +0000 Manifest this update: Sun 10 Aug 2025 20:52:12 +0000 Manifest next update: Sun 17 Aug 2025 20:52:12 +0000 Files and hashes: 1: fLBjBy0uSJJZhhStW6tT4d6v9wE.crl (hash: v99kKtVqwAp3hBfXmobBECeCE2iRxRjFpl2JpuptbBk=) 2: 2B24D5DC854511EB9B57240FC4F9AE02.roa (hash: Gbqi/30snlG70x9ANTB06c1PKeyR99Ii/Ej/rBkuNcg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.crl rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLBjBy0uSJJZhhStW6tT4d6v9wE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 Aug 2025 20:52:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2086 (0x826) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B994F, serialNumber=7CB063072D2E4892598614AD5BAB53E1DEAFF701 Validity Not Before: Aug 10 20:52:12 2025 GMT Not After : Aug 17 20:52:12 2025 GMT Subject: CN=6899067c-0053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9b:77:5f:29:e0:fe:46:66:92:d1:1e:25:4f: 43:06:01:a0:68:25:28:1f:86:9b:de:ab:8d:89:06: cd:b7:ea:b1:44:2f:29:5d:7c:40:e9:65:8f:af:51: 22:4f:a5:cb:45:0f:c3:43:cf:e2:df:e5:cc:5c:d4: 34:3f:89:61:3a:fe:ed:fd:bb:cc:47:30:a5:f4:cb: a4:a6:05:f3:65:1d:4e:92:21:32:91:ca:08:93:3b: e6:13:6b:4e:7e:1b:54:5c:11:c2:24:05:17:2e:97: e8:b6:ca:f6:6d:f4:4e:2f:2c:91:b8:5d:95:36:ea: c1:c5:1c:58:e2:3e:eb:0d:01:51:74:30:fe:ff:45: 0b:32:44:b6:2d:64:3a:e2:14:ae:2b:ee:92:44:d8: 08:d9:51:dc:ca:8d:c2:d7:c4:41:28:0e:ff:07:f9: fe:1f:50:a6:8d:30:fe:73:f2:ba:d5:98:17:b3:b1: 98:62:fa:7a:ed:ee:b5:61:ee:f2:f8:87:f0:24:77: df:f6:f4:2e:a1:58:69:89:50:84:15:99:3f:ca:8e: 20:e6:77:1f:8f:87:ff:76:8e:63:78:ed:d0:15:25: 43:6d:fb:92:01:25:5e:d5:fe:32:f5:97:da:2c:0c: 81:7b:7c:bf:2e:9c:f5:6f:64:7c:83:c2:b2:db:a4: d4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:E5:5F:11:D8:8C:C7:B9:17:B4:C2:02:B9:89:4C:B6:0C:DF:7C:A3 X509v3 Authority Key Identifier: keyid:7C:B0:63:07:2D:2E:48:92:59:86:14:AD:5B:AB:53:E1:DE:AF:F7:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLBjBy0uSJJZhhStW6tT4d6v9wE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:c6:4b:65:3a:61:d6:06:7c:0f:dd:e9:de:70:82:67:54:ec: 63:38:59:57:66:c7:30:1d:8d:d8:57:18:20:ef:99:e9:5a:72: b1:e3:79:73:ac:2d:0b:6d:6d:cf:35:be:39:4e:15:a7:a2:f8: 3c:84:fa:76:dd:fa:e5:ed:f1:97:1b:50:04:99:2b:97:8a:f3: 29:70:b4:1f:01:27:bd:d8:57:06:55:31:53:e9:87:09:18:9f: c2:89:a6:3f:79:d6:fe:e0:74:09:0f:5b:5f:88:1f:e8:ea:3a: 7b:d1:1f:59:cb:69:bf:57:1d:3e:2b:46:7e:2c:51:20:95:ee: 84:56:d6:93:60:23:b7:38:5d:be:9b:b6:ee:78:20:a3:3f:d9: 58:83:a9:2a:d3:3e:02:66:c6:10:54:77:a7:55:11:54:c4:52: be:3c:26:d6:48:16:51:7b:ca:fb:d3:95:38:fa:6c:54:15:36: d2:f1:46:d3:fd:50:cc:db:2d:e5:e9:54:f9:a1:15:90:76:9f: ea:f3:c7:fd:3f:1e:1f:1e:b1:97:18:6b:ea:86:7a:e4:52:da: 2f:2d:be:8b:73:49:f3:fd:21:bc:5a:3b:e6:a5:13:db:49:5c: 9d:74:31:cc:16:38:56:6f:7f:ee:f2:f5:ef:94:6b:40:79:c3: 62:8f:90:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjk5NEYxMTAvBgNVBAUTKDdDQjA2MzA3MkQyRTQ4OTI1OTg2MTRBRDVCQUI1M0Ux REVBRkY3MDEwHhcNMjUwODEwMjA1MjEyWhcNMjUwODE3MjA1MjEyWjAYMRYwFAYD VQQDEw02ODk5MDY3Yy0wMDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArJt3Xyng/kZmktEeJU9DBgGgaCUoH4ab3quNiQbNt+qxRC8pXXxA6WWPr1Ei T6XLRQ/DQ8/i3+XMXNQ0P4lhOv7t/bvMRzCl9MukpgXzZR1OkiEykcoIkzvmE2tO fhtUXBHCJAUXLpfotsr2bfROLyyRuF2VNurBxRxY4j7rDQFRdDD+/0ULMkS2LWQ6 4hSuK+6SRNgI2VHcyo3C18RBKA7/B/n+H1CmjTD+c/K61ZgXs7GYYvp67e61Ye7y +IfwJHff9vQuoVhpiVCEFZk/yo4g5ncfj4f/do5jeO3QFSVDbfuSASVe1f4y9Zfa LAyBe3y/Lpz1b2R8g8Ky26TU0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGLlXxHY jMe5F7TCArmJTLYM33yjMB8GA1UdIwQYMBaAFHywYwctLkiSWYYUrVurU+Her/cB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTk0Ri9BQUZEMTRFQ0U1 QTIxMUVBODlBMzYwNkRDNEY5QUUwMi9mTEJqQnkwdVNKSlpoaFN0VzZ0VDRkNnY5 d0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZMQmpCeTB1U0pKWmhoU3RXNnRUNGQ2djl3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTk0Ri9BQUZEMTRFQ0U1QTIxMUVBODlBMzYwNkRDNEY5QUUwMi9mTEJqQnkwdVNK SlpoaFN0VzZ0VDRkNnY5d0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5xktlOmHWBnwP3enecIJnVOxjOFlXZscwHY3YVxgg75npWnKx43lz rC0LbW3PNb45ThWnovg8hPp23frl7fGXG1AEmSuXivMpcLQfASe92FcGVTFT6YcJ GJ/CiaY/edb+4HQJD1tfiB/o6jp70R9Zy2m/Vx0+K0Z+LFEgle6EVtaTYCO3OF2+ m7bueCCjP9lYg6kq0z4CZsYQVHenVRFUxFK+PCbWSBZRe8r705U4+mxUFTbS8UbT /VDM2y3l6VT5oRWQdp/q88f9Px4fHrGXGGvqhnrkUtovLb6Lc0nz/SG8WjvmpRPb SVyddDHMFjhWb3/u8vXvlGtAecNij5AT -----END CERTIFICATE-----Generated at Tue Aug 12 18:14:33 2025 by rpki-client