$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft File: 1vBnJNCWhwftHfr9uyJYArPaoZQ.mft (raw, json) Hash identifier: N+FU+RTb8u4WxwQ/yi1gYjiZen09MCYj30v2YzTK/ak= Subject key identifier: 4A:BC:53:A7:17:7B:7F:48:B6:14:DB:83:01:DF:A9:68:F9:B2:00:AC Authority key identifier: D6:F0:67:24:D0:96:87:07:ED:1D:FA:FD:BB:22:58:02:B3:DA:A1:94 Certificate issuer: /CN=A91D1F95/serialNumber=D6F06724D0968707ED1DFAFDBB225802B3DAA194 Certificate serial: 0288 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft Manifest number: 0280 Signing time: Thu 07 Aug 2025 02:19:14 +0000 Manifest this update: Thu 07 Aug 2025 02:19:14 +0000 Manifest next update: Thu 14 Aug 2025 02:19:14 +0000 Files and hashes: 1: 1vBnJNCWhwftHfr9uyJYArPaoZQ.crl (hash: mHmI/fJDL8VbNic7ZZ4vy2BN36MJW4n3Ifw+IuC/zvQ=) 2: 834FFE88679911EEB8243436C4F9AE02.roa (hash: Yrv7ZBN66aHo1fxboSYdyeMXxVo+vZh3rt3Di282sAw=) 3: C965E8C4679911EEB466ED36C4F9AE02.roa (hash: 4shhW+hfwKEr12lvGKCQFs6BqumTNDAweN+QTLEQJao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.crl rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 02:19:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 648 (0x288) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1F95, serialNumber=D6F06724D0968707ED1DFAFDBB225802B3DAA194 Validity Not Before: Aug 7 02:19:14 2025 GMT Not After : Aug 14 02:19:14 2025 GMT Subject: CN=68940d22-bd86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:42:2c:fc:f3:99:47:0e:13:d7:1b:49:fa:f4: fd:2c:67:87:ff:1d:e6:98:66:21:cc:69:b7:06:d5: 3e:23:de:92:9c:fb:87:be:38:64:fb:81:4d:8d:94: 46:d8:83:33:bc:d3:ee:8f:6c:50:6c:be:2f:64:4a: dc:3e:4f:12:d6:48:21:fa:99:f7:aa:8c:9f:ff:3a: 1d:b1:d1:d9:68:ae:38:25:2c:73:39:5c:9a:ca:bd: af:1f:8b:04:6f:97:96:b8:87:ec:bc:59:7e:ef:40: be:ec:34:d4:b5:b2:8c:29:3d:b9:fd:38:1f:67:4b: 76:59:c0:33:e9:ca:58:1a:05:8c:7a:f9:dd:ef:47: 70:48:bf:06:aa:0d:59:8a:96:22:57:90:92:d6:48: 02:da:20:a0:e6:cf:51:bd:a0:35:aa:3e:54:86:22: 3f:15:f3:08:4e:42:3b:f6:47:ec:bb:19:81:24:84: 71:cf:a8:6d:ee:90:3a:bb:f6:49:87:b1:b3:7c:e1: 6a:69:a0:1e:e8:c6:73:42:dd:f1:66:7f:e5:b1:31: 44:90:6f:11:e1:20:a2:4c:c0:d1:9b:bd:02:86:38: 71:1b:d3:8b:ed:40:ed:50:f5:0f:7d:5c:f1:cf:33: 32:2b:47:96:5c:37:dc:49:03:d3:57:57:83:06:d1: 01:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:BC:53:A7:17:7B:7F:48:B6:14:DB:83:01:DF:A9:68:F9:B2:00:AC X509v3 Authority Key Identifier: keyid:D6:F0:67:24:D0:96:87:07:ED:1D:FA:FD:BB:22:58:02:B3:DA:A1:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:ea:12:27:4d:6f:0d:d7:de:f2:e5:61:ce:2f:ec:54:d5:a6: 6e:61:80:57:08:29:56:9e:80:71:6e:f8:d3:30:d8:11:41:62: d5:03:b8:10:54:91:06:59:dd:a1:2e:ac:66:32:5b:0a:b7:4b: d7:7c:bb:dd:4a:de:2e:c0:35:25:af:3a:09:42:0a:9f:d3:a2: 8b:ab:4a:e6:37:ab:86:ba:b5:48:f3:f6:49:ed:ce:4f:5e:cf: 2a:7d:21:c9:16:f2:37:60:2d:ca:49:1d:c8:4a:3d:d0:08:d8: 5b:8a:c9:55:6a:da:4e:b0:f7:fc:0a:b5:59:b3:40:a9:28:c1: ed:fa:71:e6:84:7b:47:d4:9b:f0:2d:b3:5a:92:8b:97:84:b0: d3:a4:9c:7d:27:33:7b:12:40:4b:6e:11:cc:d2:52:f7:3e:7e: 74:ad:be:e9:93:5c:6d:4c:5a:4a:d0:00:92:97:67:fe:78:72: bf:12:b9:7e:bb:b2:4b:7b:3a:b0:78:8c:91:78:96:04:6e:63: b4:5b:fd:b6:21:a7:af:e8:be:68:4f:35:dd:a8:ec:13:32:c9: 33:5e:f3:49:03:9b:2c:a5:ca:93:19:2a:8f:e7:36:a3:ed:bc: 84:0b:42:6c:4d:f3:13:55:98:df:4a:fe:76:28:cf:19:f6:82: 67:c0:e7:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFGOTUxMTAvBgNVBAUTKEQ2RjA2NzI0RDA5Njg3MDdFRDFERkFGREJCMjI1ODAy QjNEQUExOTQwHhcNMjUwODA3MDIxOTE0WhcNMjUwODE0MDIxOTE0WjAYMRYwFAYD VQQDEw02ODk0MGQyMi1iZDg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuEIs/POZRw4T1xtJ+vT9LGeH/x3mmGYhzGm3BtU+I96SnPuHvjhk+4FNjZRG 2IMzvNPuj2xQbL4vZErcPk8S1kgh+pn3qoyf/zodsdHZaK44JSxzOVyayr2vH4sE b5eWuIfsvFl+70C+7DTUtbKMKT25/TgfZ0t2WcAz6cpYGgWMevnd70dwSL8Gqg1Z ipYiV5CS1kgC2iCg5s9RvaA1qj5UhiI/FfMITkI79kfsuxmBJIRxz6ht7pA6u/ZJ h7GzfOFqaaAe6MZzQt3xZn/lsTFEkG8R4SCiTMDRm70ChjhxG9OL7UDtUPUPfVzx zzMyK0eWXDfcSQPTV1eDBtEBzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEq8U6cX e39IthTbgwHfqWj5sgCsMB8GA1UdIwQYMBaAFNbwZyTQlocH7R36/bsiWAKz2qGU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUY5NS9GRjkzRUM3MjE5 NUYxMUVEQjJCREY5NUVDNEY5QUUwMi8xdkJuSk5DV2h3ZnRIZnI5dXlKWUFyUGFv WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF2Qm5KTkNXaHdmdEhmcjl1eUpZQXJQYW9aUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUY5NS9GRjkzRUM3MjE5NUYxMUVEQjJCREY5NUVDNEY5QUUwMi8xdkJuSk5DV2h3 ZnRIZnI5dXlKWUFyUGFvWlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA06hInTW8N197y5WHOL+xU1aZuYYBXCClWnoBxbvjTMNgRQWLVA7gQ VJEGWd2hLqxmMlsKt0vXfLvdSt4uwDUlrzoJQgqf06KLq0rmN6uGurVI8/ZJ7c5P Xs8qfSHJFvI3YC3KSR3ISj3QCNhbislVatpOsPf8CrVZs0CpKMHt+nHmhHtH1Jvw LbNakouXhLDTpJx9JzN7EkBLbhHM0lL3Pn50rb7pk1xtTFpK0ACSl2f+eHK/Erl+ u7JLezqweIyReJYEbmO0W/22Iaev6L5oTzXdqOwTMskzXvNJA5sspcqTGSqP5zaj 7byEC0JsTfMTVZjfSv52KM8Z9oJnwOcP -----END CERTIFICATE-----Generated at Sat Aug 9 01:00:42 2025 by rpki-client