$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/m1wSv5mrKIql16PWPDWI906bJtE.mft File: m1wSv5mrKIql16PWPDWI906bJtE.mft (raw, json) Hash identifier: 5m4ph4BTC7LiggUrgJgMO+ZBkKFTopr12BDIdjawZ7k= Subject key identifier: F4:DA:50:01:8A:6C:BB:5F:05:DA:90:3C:63:0E:2D:86:BD:04:7C:99 Authority key identifier: 9B:5C:12:BF:99:AB:28:8A:A5:D7:A3:D6:3C:35:88:F7:4E:9B:26:D1 Certificate issuer: /CN=A91BB246/serialNumber=9B5C12BF99AB288AA5D7A3D63C3588F74E9B26D1 Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1wSv5mrKIql16PWPDWI906bJtE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/m1wSv5mrKIql16PWPDWI906bJtE.mft Manifest number: 25 Signing time: Tue 05 Aug 2025 08:29:34 +0000 Manifest this update: Tue 05 Aug 2025 08:29:33 +0000 Manifest next update: Tue 12 Aug 2025 08:29:33 +0000 Files and hashes: 1: m1wSv5mrKIql16PWPDWI906bJtE.crl (hash: 5+NE23FOK7ddTTSh/TqcFmWFbgLHLh7LrThmzSG28eU=) 2: 898E9EA83C0E11F093CFD060C4F9AE02.roa (hash: pCu6+WJeqtvS7Tcl3+9JWLKb1zyqA9V6h4uJDrGt8GQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/m1wSv5mrKIql16PWPDWI906bJtE.crl rsync://rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/m1wSv5mrKIql16PWPDWI906bJtE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1wSv5mrKIql16PWPDWI906bJtE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 08:29:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB246, serialNumber=9B5C12BF99AB288AA5D7A3D63C3588F74E9B26D1 Validity Not Before: Aug 5 08:29:33 2025 GMT Not After : Aug 12 08:29:33 2025 GMT Subject: CN=6891c0ee-bced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:25:6d:4e:a0:04:ff:ad:d2:b8:6b:e5:9f:b0: c8:0b:92:23:cc:1c:77:b5:c3:88:ba:b8:e3:af:7d: 4f:9f:68:94:88:1f:1c:e3:4d:b4:b3:41:ed:c9:f2: 86:f0:ea:ee:18:23:a0:a5:f1:42:18:5f:8e:fc:9e: 7f:c8:bb:88:b9:75:ce:82:16:fb:84:c6:cb:93:2a: 44:6c:84:cb:92:0d:71:1d:f2:14:d4:5d:5f:36:4a: c8:07:43:c0:fa:ac:68:22:29:92:f7:88:6a:eb:51: 95:3f:b0:19:19:74:16:14:82:8f:14:c5:a8:09:2b: 5c:37:2a:a9:34:49:c2:22:58:db:6a:9f:87:00:01: d6:1d:09:81:b0:d1:7d:d0:83:ae:26:93:90:19:20: 3a:bf:13:22:12:6b:b0:fe:54:27:b3:51:1a:83:7e: c4:f8:a2:c6:93:23:50:84:d2:2c:45:84:a4:5c:d8: c0:a2:63:56:09:4e:61:ce:c2:10:a6:98:05:69:78: 87:db:3a:29:97:03:e3:8f:8e:8e:d8:30:ec:77:ed: 5f:58:5c:d0:3d:e9:41:d0:f4:f4:f1:81:dc:f5:4d: fa:6d:9d:88:74:bd:96:9d:7f:4c:2b:e0:dc:24:26: 21:34:63:65:7a:aa:d0:fd:16:ea:ca:0c:4a:1a:e0: 6a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:DA:50:01:8A:6C:BB:5F:05:DA:90:3C:63:0E:2D:86:BD:04:7C:99 X509v3 Authority Key Identifier: keyid:9B:5C:12:BF:99:AB:28:8A:A5:D7:A3:D6:3C:35:88:F7:4E:9B:26:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/m1wSv5mrKIql16PWPDWI906bJtE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1wSv5mrKIql16PWPDWI906bJtE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/m1wSv5mrKIql16PWPDWI906bJtE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:40:34:c0:e7:ac:6b:3b:29:0d:f6:9d:0a:f7:28:4b:1d:0a: 3d:21:3a:15:63:a7:cc:73:eb:cd:a3:ff:00:f2:b5:a6:1f:ba: 6a:f3:31:28:67:e0:9b:fb:e9:e5:53:9f:90:fb:a3:ee:b2:d9: 8b:a9:05:b5:2d:7d:d9:2f:0d:bb:d4:64:98:5b:10:bd:06:c1: 7d:a8:50:e5:54:64:9a:36:4d:25:a5:9e:0b:6c:d8:51:b5:ea: 4d:0f:bd:d2:06:66:b9:80:f1:f9:55:89:4f:7a:51:15:4b:07: 86:0b:16:13:7e:99:38:8d:5f:ea:5c:20:f9:df:97:d8:22:67: a1:71:b5:6f:c0:e2:74:3b:9a:24:42:b5:89:ce:1a:e0:d8:92: 57:d0:e7:0d:16:32:99:0a:95:8d:ab:28:e0:32:f2:b5:b9:f8: 8c:57:a7:04:d4:17:eb:7c:b0:b5:77:3f:df:c7:a4:71:1e:74: 19:cf:61:72:01:c9:d0:11:69:60:b1:57:df:d2:87:5d:50:73: f2:ef:5d:a6:8d:37:45:1c:d9:18:b8:49:c0:09:40:fb:ce:4b: d4:db:dc:a0:a3:c0:3c:99:19:dd:b7:26:76:45:e0:0e:67:62: 4b:2e:0f:e4:d0:55:29:d3:39:66:38:0e:b8:5e:38:1a:83:db: 9e:43:0e:46 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QjI0NjExMC8GA1UEBRMoOUI1QzEyQkY5OUFCMjg4QUE1RDdBM0Q2M0MzNTg4Rjc0 RTlCMjZEMTAeFw0yNTA4MDUwODI5MzNaFw0yNTA4MTIwODI5MzNaMBgxFjAUBgNV BAMTDTY4OTFjMGVlLWJjZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDeJW1OoAT/rdK4a+WfsMgLkiPMHHe1w4i6uOOvfU+faJSIHxzjTbSzQe3J8obw 6u4YI6Cl8UIYX478nn/Iu4i5dc6CFvuExsuTKkRshMuSDXEd8hTUXV82SsgHQ8D6 rGgiKZL3iGrrUZU/sBkZdBYUgo8UxagJK1w3Kqk0ScIiWNtqn4cAAdYdCYGw0X3Q g64mk5AZIDq/EyISa7D+VCezURqDfsT4osaTI1CE0ixFhKRc2MCiY1YJTmHOwhCm mAVpeIfbOimXA+OPjo7YMOx37V9YXNA96UHQ9PTxgdz1TfptnYh0vZadf0wr4Nwk JiE0Y2V6qtD9FurKDEoa4GqNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9NpQAYps u18F2pA8Yw4thr0EfJkwHwYDVR0jBBgwFoAUm1wSv5mrKIql16PWPDWI906bJtEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCMjQ2L0ZBMDAwMzgwM0Mw RDExRjA5NkNDREI1RkM0RjlBRTAyL20xd1N2NW1yS0lxbDE2UFdQRFdJOTA2Ykp0 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbTF3U3Y1bXJLSXFsMTZQV1BEV0k5MDZiSnRFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC MjQ2L0ZBMDAwMzgwM0MwRDExRjA5NkNDREI1RkM0RjlBRTAyL20xd1N2NW1yS0lx bDE2UFdQRFdJOTA2Ykp0RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAFANMDnrGs7KQ32nQr3KEsdCj0hOhVjp8xz682j/wDytaYfumrzMShn 4Jv76eVTn5D7o+6y2YupBbUtfdkvDbvUZJhbEL0GwX2oUOVUZJo2TSWlngts2FG1 6k0PvdIGZrmA8flViU96URVLB4YLFhN+mTiNX+pcIPnfl9giZ6FxtW/A4nQ7miRC tYnOGuDYklfQ5w0WMpkKlY2rKOAy8rW5+IxXpwTUF+t8sLV3P9/HpHEedBnPYXIB ydARaWCxV9/Sh11Qc/LvXaaNN0Uc2Ri4ScAJQPvOS9Tb3KCjwDyZGd23JnZF4A5n YksuD+TQVSnTOWY4DrheOBqD255DDkY= -----END CERTIFICATE-----Generated at Thu Aug 7 03:58:01 2025 by rpki-client