$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft File: -SrbMNtsD5zpgLXbl3FF-MGcgks.mft (raw, json) Hash identifier: lX4fE6G8rDxbO3AB39aztpJZ2IZr2mBfr4KQy+IirdI= Subject key identifier: D8:F2:70:BD:31:D9:77:32:84:7B:9F:D7:77:07:94:24:8F:83:A3:EE Authority key identifier: F9:2A:DB:30:DB:6C:0F:9C:E9:80:B5:DB:97:71:45:F8:C1:9C:82:4B Certificate issuer: /CN=A91C0FCC/serialNumber=F92ADB30DB6C0F9CE980B5DB977145F8C19C824B Certificate serial: 0945 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft Manifest number: 093E Signing time: Tue 12 Aug 2025 20:29:42 +0000 Manifest this update: Tue 12 Aug 2025 20:29:41 +0000 Manifest next update: Tue 19 Aug 2025 20:29:41 +0000 Files and hashes: 1: -SrbMNtsD5zpgLXbl3FF-MGcgks.crl (hash: n3q1A+em83v6apY6C3fqoMH+GCfU2msR60aXnv30Rks=) 2: A778AAF6A42111EAB3108934C4F9AE02.roa (hash: nYjWOytssQAvKUrx53OAPZHiEKpRdEsbmRx5MJFOOy4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.crl rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2373 (0x945) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0FCC, serialNumber=F92ADB30DB6C0F9CE980B5DB977145F8C19C824B Validity Not Before: Aug 12 20:29:41 2025 GMT Not After : Aug 19 20:29:41 2025 GMT Subject: CN=689ba435-7bd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:65:6b:55:a2:c0:8c:5b:e0:33:7c:1c:02:c4: a5:bb:0b:1a:fa:57:aa:11:2a:f8:a9:c7:c1:c2:8c: 3c:7e:f3:0a:c0:77:64:4e:f9:02:4e:8f:d6:49:d3: 77:a2:8a:5e:3f:09:29:39:8b:7b:59:bc:07:bf:c0: 11:04:57:1d:cf:53:40:92:fc:5e:fd:7e:a1:13:f9: 79:16:33:cc:ee:b9:f6:78:a5:5b:1d:78:44:a8:bd: d9:19:f8:d4:90:c7:bf:e2:04:19:03:4a:8d:b1:2a: b1:95:57:0f:3c:8f:74:f0:a0:15:61:8c:d6:cc:52: 5c:54:4b:51:2a:e4:c9:f2:d0:76:bd:9c:82:2a:0c: a3:4c:24:ee:6a:9e:d2:c9:a5:91:d0:1e:d5:c8:a7: 40:0c:2a:87:f5:23:7c:86:02:4b:f0:79:da:13:2f: 59:c2:23:cc:27:a2:fb:9b:9d:72:5a:f0:11:e1:e7: 95:7f:ae:6d:ed:07:c5:72:a1:b4:79:17:f9:b2:92: d4:2c:57:ee:c8:84:47:d8:61:c2:2b:49:3e:e5:9c: 37:3c:22:3c:02:b9:b1:55:72:4a:e7:03:24:72:56: 18:56:d2:56:8b:1a:4c:3b:c6:b2:67:ed:bd:50:2a: 4a:32:e6:04:f2:8f:34:77:9d:c3:24:d5:85:a7:22: 5d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:F2:70:BD:31:D9:77:32:84:7B:9F:D7:77:07:94:24:8F:83:A3:EE X509v3 Authority Key Identifier: keyid:F9:2A:DB:30:DB:6C:0F:9C:E9:80:B5:DB:97:71:45:F8:C1:9C:82:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:32:7a:13:0e:a3:5a:52:33:cd:f2:c2:01:29:ca:98:2f:5a: 15:d9:40:a3:7b:fe:17:3b:25:07:07:6a:85:b5:5b:1f:19:47: 47:c5:17:4a:d7:aa:8e:bd:a3:c9:08:6d:b1:4c:ed:b9:49:3a: 14:7e:c0:b9:42:b8:ea:0d:a4:c2:f6:6c:e6:7f:3b:47:61:4d: 8e:0d:72:41:00:af:61:2b:36:39:ea:08:bc:47:d0:a1:b8:f9: 88:7c:45:95:40:0f:f7:12:06:6d:28:44:9e:d1:86:31:60:f5: 58:0d:5e:11:86:a4:02:e1:24:4c:76:ed:21:81:af:4d:ce:15: 94:64:11:cc:7d:e5:38:d8:bc:3e:e8:06:a5:4e:35:01:56:6c: 42:eb:3d:6a:c5:d4:cc:59:8e:f2:34:87:0e:8f:e1:24:a6:16: 19:fa:e7:aa:76:c7:a4:82:65:b4:a3:94:81:7d:9f:26:ed:aa: 6a:a8:89:10:b5:e0:23:5d:d8:d8:67:5b:25:a5:3c:5e:57:42: 62:c0:24:75:06:37:82:3d:b8:6e:39:7d:1a:81:24:32:5c:34: a7:46:8e:7a:af:27:6c:1a:33:ec:4a:df:e1:5d:dc:2f:b1:84: b6:a0:d2:23:1d:b2:7d:77:16:5b:12:97:81:8b:85:6b:32:d0: 53:3c:f4:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBGQ0MxMTAvBgNVBAUTKEY5MkFEQjMwREI2QzBGOUNFOTgwQjVEQjk3NzE0NUY4 QzE5QzgyNEIwHhcNMjUwODEyMjAyOTQxWhcNMjUwODE5MjAyOTQxWjAYMRYwFAYD VQQDEw02ODliYTQzNS03YmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA52VrVaLAjFvgM3wcAsSluwsa+leqESr4qcfBwow8fvMKwHdkTvkCTo/WSdN3 oopePwkpOYt7WbwHv8ARBFcdz1NAkvxe/X6hE/l5FjPM7rn2eKVbHXhEqL3ZGfjU kMe/4gQZA0qNsSqxlVcPPI908KAVYYzWzFJcVEtRKuTJ8tB2vZyCKgyjTCTuap7S yaWR0B7VyKdADCqH9SN8hgJL8HnaEy9ZwiPMJ6L7m51yWvAR4eeVf65t7QfFcqG0 eRf5spLULFfuyIRH2GHCK0k+5Zw3PCI8ArmxVXJK5wMkclYYVtJWixpMO8ayZ+29 UCpKMuYE8o80d53DJNWFpyJdpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNjycL0x 2XcyhHuf13cHlCSPg6PuMB8GA1UdIwQYMBaAFPkq2zDbbA+c6YC125dxRfjBnIJL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEZDQy9GNUM0MjQwOEE0 MUYxMUVBQkRDMkY1MzFDNEY5QUUwMi8tU3JiTU50c0Q1enBnTFhibDNGRi1NR2Nn a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1TcmJNTnRzRDV6cGdMWGJsM0ZGLU1HY2drcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEZDQy9GNUM0MjQwOEE0MUYxMUVBQkRDMkY1MzFDNEY5QUUwMi8tU3JiTU50c0Q1 enBnTFhibDNGRi1NR2Nna3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9MnoTDqNaUjPN8sIBKcqYL1oV2UCje/4XOyUHB2qFtVsfGUdHxRdK 16qOvaPJCG2xTO25SToUfsC5QrjqDaTC9mzmfztHYU2ODXJBAK9hKzY56gi8R9Ch uPmIfEWVQA/3EgZtKESe0YYxYPVYDV4RhqQC4SRMdu0hga9NzhWUZBHMfeU42Lw+ 6AalTjUBVmxC6z1qxdTMWY7yNIcOj+EkphYZ+ueqdsekgmW0o5SBfZ8m7apqqIkQ teAjXdjYZ1slpTxeV0JiwCR1BjeCPbhuOX0agSQyXDSnRo56rydsGjPsSt/hXdwv sYS2oNIjHbJ9dxZbEpeBi4VrMtBTPPQd -----END CERTIFICATE-----Generated at Wed Aug 13 05:53:09 2025 by rpki-client