$ rpki-client -vvf rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft File: cB88FPCtfu9l000APNwZJGSM3jc.mft (raw, json) Hash identifier: Sav6CXznD+QAWZy3rxW8Dz3KUEk249cXrl2NpWgzhz4= Subject key identifier: D8:A5:66:FC:FF:30:B8:08:2B:2A:E1:2C:55:95:D4:A5:0F:77:43:20 Authority key identifier: 70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37 Certificate issuer: /CN=A91C63A6/serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37 Certificate serial: 03E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft Manifest number: 03CB Signing time: Thu 07 Aug 2025 01:12:45 +0000 Manifest this update: Thu 07 Aug 2025 01:12:45 +0000 Manifest next update: Thu 14 Aug 2025 01:12:45 +0000 Files and hashes: 1: cB88FPCtfu9l000APNwZJGSM3jc.crl (hash: kdyNAjyh+G5EDoW7Wlpv0V/gc7j6Xk2UkrLzWiIwSlo=) 2: 7E16D3240B5011EE9A518C7BC4F9AE02.roa (hash: U0JaFB8CVVgKbLBmTTRMW+oeZZCXLA9kdsldXtwigwA=) 3: CDDEC562011711EEB15FDD2AC4F9AE02.roa (hash: PgsogDDZQkDovTqfqAZnCJjtewKfx64pNU23F3h3LOI=) 4: 2BF1D5F07E3511EE8CB63458C4F9AE02.roa (hash: xABbFnxjesSqqxHb5Z3LU/MaNyiAYDrCsWPlJjK46gQ=) 5: DF49B4400B4B11EEBAD3047AC4F9AE02.roa (hash: 5EplJ/qwJeqGMd35PNuR9x2zdZw/zJYIhHM0ma+2rK4=) 6: 513415BC400011EE88B66B4FC4F9AE02.roa (hash: La9bIBXUn7Pcc0HHfxEl2RzNwtBMPkoEmLR0KZnlaWs=) 7: 86550F680B4311EE8ABEE820C4F9AE02.roa (hash: yWfAEaYcbh5fjpOL87NsV9hi8Cg9epFjV+c+Su0AUew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 01:12:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 998 (0x3e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C63A6, serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37 Validity Not Before: Aug 7 01:12:45 2025 GMT Not After : Aug 14 01:12:45 2025 GMT Subject: CN=6893fd8d-a0ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3b:3c:21:f5:01:90:97:a5:bd:6f:be:bf:d7: 3e:40:35:8a:22:0a:a6:6f:ca:a9:96:94:74:f4:b6: d1:b9:4e:c7:e1:e9:47:51:b6:c3:cf:3e:f6:96:e4: bc:60:3b:3b:22:13:42:9e:89:98:a6:58:fa:94:c9: b0:92:76:e4:33:c0:48:15:73:d5:fe:4d:f5:73:ac: 99:60:04:23:d2:a2:3b:4c:c1:38:4f:c7:21:71:1a: 19:3c:f3:3f:c7:04:f4:ff:7f:68:73:57:47:6d:3d: 78:9f:36:90:4d:b6:27:ed:8a:37:24:83:c4:c3:96: 00:48:df:62:8c:33:13:48:fe:4b:9a:2f:f0:c2:df: 33:86:29:88:da:75:d5:d3:45:76:d5:2f:51:9a:1e: 64:0b:a5:5b:f1:c4:a3:a0:b1:36:f4:96:62:26:3d: b6:f4:f1:4d:06:50:22:9f:2f:d0:11:f8:8a:08:ff: d6:2b:d7:81:39:f0:d5:8f:be:94:fb:19:1c:f3:30: b8:28:63:b5:68:0f:be:a1:f2:7a:dd:67:77:f3:e9: f2:a4:6e:38:91:f8:ad:80:7e:d6:ef:65:d8:fb:d4: 8e:07:13:8a:88:c3:c3:6f:d8:ac:c5:a9:40:9c:8e: 4c:2d:42:fc:3c:4d:5b:46:3d:cc:24:37:82:93:c1: 21:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:A5:66:FC:FF:30:B8:08:2B:2A:E1:2C:55:95:D4:A5:0F:77:43:20 X509v3 Authority Key Identifier: keyid:70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:67:9c:cc:ef:36:dd:62:4f:a6:d1:1b:b1:78:37:e8:7b:82: 04:90:e9:32:bc:4f:68:cf:ea:ee:c7:f2:d6:0c:15:e7:45:ac: f7:53:a7:a9:58:75:e4:c0:c6:d8:4d:04:34:1a:e3:6b:2b:f3: 5e:70:0f:cf:01:79:93:ad:57:78:f6:d8:61:22:26:a6:72:91: 1e:9a:75:1a:a2:29:d6:1e:52:21:64:34:89:43:59:b0:4e:98: e7:ed:36:79:2c:aa:6a:ad:b4:6a:6d:ab:68:99:e1:36:7b:7b: cc:8f:26:a6:c2:80:1c:b9:6d:c9:ae:73:b1:eb:ce:9d:e1:b1: 90:ff:f2:de:2a:b5:bf:2e:16:d1:a4:ef:a8:6c:e0:24:98:e6: 25:35:bd:4e:79:67:1e:72:75:3b:2f:71:64:bc:e2:f2:b7:4d: 49:c8:a3:9c:41:75:b8:6a:02:ad:57:73:26:eb:95:a9:d5:7c: 76:48:6a:5c:fd:6d:9a:91:58:0b:bf:ee:6e:95:8f:34:ff:5a: 1a:62:ff:30:4b:61:ef:79:57:20:84:c4:6d:23:ba:38:3b:79: 3f:9b:5c:b8:a5:ca:69:e0:01:90:2f:28:cb:c6:44:dc:4e:59: 67:6a:3d:2d:ba:34:3f:ae:75:c9:8b:d9:33:7f:e2:ba:5f:b3: 2b:40:92:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYzQTYxMTAvBgNVBAUTKDcwMUYzQzE0RjBBRDdFRUY2NUQzNEQwMDNDREMxOTI0 NjQ4Q0RFMzcwHhcNMjUwODA3MDExMjQ1WhcNMjUwODE0MDExMjQ1WjAYMRYwFAYD VQQDEw02ODkzZmQ4ZC1hMGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzTs8IfUBkJelvW++v9c+QDWKIgqmb8qplpR09LbRuU7H4elHUbbDzz72luS8 YDs7IhNCnomYplj6lMmwknbkM8BIFXPV/k31c6yZYAQj0qI7TME4T8chcRoZPPM/ xwT0/39oc1dHbT14nzaQTbYn7Yo3JIPEw5YASN9ijDMTSP5Lmi/wwt8zhimI2nXV 00V21S9Rmh5kC6Vb8cSjoLE29JZiJj229PFNBlAiny/QEfiKCP/WK9eBOfDVj76U +xkc8zC4KGO1aA++ofJ63Wd38+nypG44kfitgH7W72XY+9SOBxOKiMPDb9isxalA nI5MLUL8PE1bRj3MJDeCk8EhNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNilZvz/ MLgIKyrhLFWV1KUPd0MgMB8GA1UdIwQYMBaAFHAfPBTwrX7vZdNNADzcGSRkjN43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjNBNi8wRDM5QzRFNDlB OUIxMUVDODJDNzBCMjBDNEY5QUUwMi9jQjg4RlBDdGZ1OWwwMDBBUE53WkpHU00z amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NCODhGUEN0ZnU5bDAwMEFQTndaSkdTTTNqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjNBNi8wRDM5QzRFNDlBOUIxMUVDODJDNzBCMjBDNEY5QUUwMi9jQjg4RlBDdGZ1 OWwwMDBBUE53WkpHU00zamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7Z5zM7zbdYk+m0RuxeDfoe4IEkOkyvE9oz+rux/LWDBXnRaz3U6ep WHXkwMbYTQQ0GuNrK/NecA/PAXmTrVd49thhIiamcpEemnUaoinWHlIhZDSJQ1mw Tpjn7TZ5LKpqrbRqbatomeE2e3vMjyamwoAcuW3JrnOx686d4bGQ//LeKrW/LhbR pO+obOAkmOYlNb1OeWcecnU7L3FkvOLyt01JyKOcQXW4agKtV3Mm65Wp1Xx2SGpc /W2akVgLv+5ulY80/1oaYv8wS2HveVcghMRtI7o4O3k/m1y4pcpp4AGQLyjLxkTc Tllnaj0tujQ/rnXJi9kzf+K6X7MrQJK9 -----END CERTIFICATE-----Generated at Fri Aug 8 21:01:08 2025 by rpki-client