$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft File: -kF5Yn9bJllOVjA1Ogt3heDWksU.mft (raw, json) Hash identifier: wvZyGEz8As7kACxWpCjgcqJ9UJaH4Mp+6BU0d1wLnkU= Subject key identifier: 9E:BF:45:EC:10:5E:3C:04:2C:06:56:66:1E:56:05:FA:20:A0:21:E4 Authority key identifier: FA:41:79:62:7F:5B:26:59:4E:56:30:35:3A:0B:77:85:E0:D6:92:C5 Certificate issuer: /CN=A91C1621/serialNumber=FA4179627F5B26594E5630353A0B7785E0D692C5 Certificate serial: 34DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft Manifest number: 34C7 Signing time: Fri 08 Aug 2025 14:16:11 +0000 Manifest this update: Fri 08 Aug 2025 14:16:11 +0000 Manifest next update: Fri 15 Aug 2025 14:16:11 +0000 Files and hashes: 1: -kF5Yn9bJllOVjA1Ogt3heDWksU.crl (hash: +qrDUa+0d1rVg2SW7q6IeIbGF/iuL6Z9p0NjmvZl980=) 2: CDE36D52DB9511E99F3F673EC4F9AE02.roa (hash: zbmIG6CT7ypIn3HcTtsDFC7ihfXsVyZlUb242ctePDw=) 3: BB8F87B4D4B011ECAA427351C4F9AE02.roa (hash: V6xVQh9iUu5NDnwtI8z/zA2tAozAKTEZViih6UdSdQ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.crl rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13534 (0x34de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1621, serialNumber=FA4179627F5B26594E5630353A0B7785E0D692C5 Validity Not Before: Aug 8 14:16:11 2025 GMT Not After : Aug 15 14:16:11 2025 GMT Subject: CN=689606ab-c07a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0a:c4:6a:91:3f:74:57:1e:48:53:ae:01:25: 4f:90:fe:0c:3d:5b:48:b6:64:35:98:3e:37:77:7c: 6c:72:3d:d5:cd:68:23:af:61:4e:43:1b:2b:bd:c0: d2:6d:0e:c7:59:73:6a:d0:18:54:f4:7b:3a:80:06: c7:54:59:be:fa:27:8e:e7:69:40:20:dd:6b:4f:3f: 9b:62:e0:52:a5:fa:67:7c:fe:78:7e:1f:8f:9b:73: b5:8c:a0:15:de:ef:0b:ca:66:b1:6b:72:f7:45:8a: 26:fd:63:74:8e:a6:2d:b8:c6:35:8d:fb:ed:26:c0: 70:b4:62:f4:08:9b:51:ea:82:b9:b6:54:e2:c6:db: 64:3f:75:d6:b6:f2:36:2d:89:85:5b:90:2e:06:12: 6e:d9:89:29:94:61:d5:93:07:8f:11:ee:8e:2b:bb: de:bf:28:8e:b4:b9:be:b2:24:16:de:a3:6d:2a:af: 6e:26:98:1d:8a:8f:e3:41:74:35:ef:b3:b1:34:cc: 23:1a:a2:86:48:4d:3a:4e:73:64:c2:23:11:8c:f8: c5:83:d6:a4:25:33:2d:1a:0d:0b:49:09:6c:02:e0: a3:35:d5:8d:bf:f9:71:c3:25:91:29:7b:bd:63:e8: a2:8c:20:12:67:b3:42:40:5a:7c:15:9a:27:a0:21: 54:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:BF:45:EC:10:5E:3C:04:2C:06:56:66:1E:56:05:FA:20:A0:21:E4 X509v3 Authority Key Identifier: keyid:FA:41:79:62:7F:5B:26:59:4E:56:30:35:3A:0B:77:85:E0:D6:92:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:b2:14:39:93:5e:2a:ba:05:62:ef:3f:54:03:23:09:e0:44: 28:08:e4:9f:9b:87:9f:b0:07:24:5e:19:43:41:50:f5:a0:b2: 22:04:3d:85:70:6e:cd:78:9a:fe:df:9d:b4:8a:a6:08:1e:ae: 2e:de:ca:b7:24:27:95:f0:aa:99:e0:29:67:d4:42:f5:7e:27: 22:13:6b:49:a2:18:8c:38:97:0c:e1:ed:73:a1:68:db:49:c2: ea:75:4a:1e:10:55:f7:c8:ab:e6:10:22:af:69:17:2f:20:b7: 79:c1:80:31:9b:5c:64:e2:4e:2b:78:14:bc:13:62:6c:cc:34: ef:91:5d:02:f3:fe:0a:f1:45:f3:04:69:99:3f:75:d0:65:e9: f3:6f:1e:1a:cf:81:ab:7c:b1:ba:be:d6:7a:4d:bd:ae:92:bb: 2e:bc:72:fb:b5:46:ff:78:a0:a1:2b:4a:c2:2b:e0:1e:94:7e: 98:69:a1:4f:ca:e2:fd:81:51:60:43:62:0e:d0:c3:49:85:59: 68:49:62:76:ad:92:50:3a:dc:17:53:29:fc:dd:bd:46:7c:5b: be:a9:5c:73:46:cc:0c:81:ad:ed:89:af:e7:33:88:41:23:1e: 08:c4:0a:9d:83:da:8a:40:92:4b:6a:c3:d0:07:98:a1:dc:92: 3e:03:4f:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE2MjExMTAvBgNVBAUTKEZBNDE3OTYyN0Y1QjI2NTk0RTU2MzAzNTNBMEI3Nzg1 RTBENjkyQzUwHhcNMjUwODA4MTQxNjExWhcNMjUwODE1MTQxNjExWjAYMRYwFAYD VQQDEw02ODk2MDZhYi1jMDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQrEapE/dFceSFOuASVPkP4MPVtItmQ1mD43d3xscj3VzWgjr2FOQxsrvcDS bQ7HWXNq0BhU9Hs6gAbHVFm++ieO52lAIN1rTz+bYuBSpfpnfP54fh+Pm3O1jKAV 3u8Lymaxa3L3RYom/WN0jqYtuMY1jfvtJsBwtGL0CJtR6oK5tlTixttkP3XWtvI2 LYmFW5AuBhJu2YkplGHVkwePEe6OK7vevyiOtLm+siQW3qNtKq9uJpgdio/jQXQ1 77OxNMwjGqKGSE06TnNkwiMRjPjFg9akJTMtGg0LSQlsAuCjNdWNv/lxwyWRKXu9 Y+iijCASZ7NCQFp8FZonoCFUMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ6/RewQ XjwELAZWZh5WBfogoCHkMB8GA1UdIwQYMBaAFPpBeWJ/WyZZTlYwNToLd4Xg1pLF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTYyMS85OUQ2OERDRTFE NjkxMUUyQTQ2NDBEQTcwOEIwMkNEMi8ta0Y1WW45YkpsbE9WakExT2d0M2hlRFdr c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1rRjVZbjliSmxsT1ZqQTFPZ3QzaGVEV2tzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTYyMS85OUQ2OERDRTFENjkxMUUyQTQ2NDBEQTcwOEIwMkNEMi8ta0Y1WW45Ykps bE9WakExT2d0M2hlRFdrc1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/shQ5k14qugVi7z9UAyMJ4EQoCOSfm4efsAckXhlDQVD1oLIiBD2F cG7NeJr+3520iqYIHq4u3sq3JCeV8KqZ4Cln1EL1ficiE2tJohiMOJcM4e1zoWjb ScLqdUoeEFX3yKvmECKvaRcvILd5wYAxm1xk4k4reBS8E2JszDTvkV0C8/4K8UXz BGmZP3XQZenzbx4az4GrfLG6vtZ6Tb2ukrsuvHL7tUb/eKChK0rCK+AelH6YaaFP yuL9gVFgQ2IO0MNJhVloSWJ2rZJQOtwXUyn83b1GfFu+qVxzRswMga3tia/nM4hB Ix4IxAqdg9qKQJJLasPQB5ih3JI+A0/K -----END CERTIFICATE-----Generated at Sun Aug 10 04:58:00 2025 by rpki-client