$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft File: f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft (raw, json) Hash identifier: Eolm6hmnHzshEuWEahtMGvC1UQXBFruFHTEzfVV5ev0= Subject key identifier: 68:0D:95:4E:8B:48:F5:3A:AE:EA:49:E4:FD:9C:F8:04:AF:F2:74:DC Authority key identifier: 7F:FC:80:56:50:74:2C:EA:50:98:6D:11:AB:CB:73:E0:F5:50:58:F9 Certificate issuer: /CN=A91D8DD9/serialNumber=7FFC805650742CEA50986D11ABCB73E0F55058F9 Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft Manifest number: 2C Signing time: Thu 07 Aug 2025 08:20:18 +0000 Manifest this update: Thu 07 Aug 2025 08:20:17 +0000 Manifest next update: Thu 14 Aug 2025 08:20:17 +0000 Files and hashes: 1: f_yAVlB0LOpQmG0Rq8tz4PVQWPk.crl (hash: tl3+InK8eOxu59tVsjW18D7nAGu9OvD7rxp2dwQI81o=) 2: 9BCD7C8E2FD311F0A93F2250C4F9AE02.roa (hash: vDWq5W9RCH51uCc7RR26CZCfoA3jrfAEXK2LnEYPwlQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.crl rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8DD9, serialNumber=7FFC805650742CEA50986D11ABCB73E0F55058F9 Validity Not Before: Aug 7 08:20:17 2025 GMT Not After : Aug 14 08:20:17 2025 GMT Subject: CN=689461c2-87b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3e:cc:bb:18:6e:b3:70:49:9d:af:43:14:34: f0:b6:a2:b3:a6:f0:5c:7c:d3:6d:f2:ea:3f:65:f5: 8d:90:6b:fb:7b:26:d3:a8:9c:35:5d:28:0f:0b:1d: 70:ed:75:0c:06:c9:a5:61:69:bd:a7:85:44:f8:8d: 15:8b:6e:2a:f3:a1:01:54:5a:7c:5c:c9:04:75:b2: 72:63:77:b1:7b:21:94:06:41:af:df:4d:8e:04:ea: 0e:58:8e:19:66:6c:29:70:ad:0b:89:47:f7:f7:e7: fd:76:91:40:bf:cb:58:25:c7:cf:2f:c5:28:f7:f1: 60:b4:ff:a0:ed:58:29:08:66:6f:f5:6d:95:f9:1b: 52:33:80:73:a8:5e:69:5a:6e:ac:ae:e3:34:6d:6f: 6e:d3:56:43:9e:92:0d:b2:60:f5:00:bc:ed:a7:a9: 08:d5:2d:6f:90:78:f7:fb:e6:5b:c0:51:bd:7d:c5: 97:95:f5:5c:68:df:a2:9c:cb:f5:b6:53:92:d1:c7: e8:84:ae:66:6f:18:56:ee:c3:89:1b:b3:f6:ab:39: 13:49:cf:e2:02:33:4c:d4:48:92:f0:a4:e9:cd:a3: 9b:b8:c3:0f:a0:f5:35:06:67:e1:42:29:6f:77:63: 98:1f:41:bc:e4:2d:10:89:28:4b:1a:16:79:63:ee: ab:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:0D:95:4E:8B:48:F5:3A:AE:EA:49:E4:FD:9C:F8:04:AF:F2:74:DC X509v3 Authority Key Identifier: keyid:7F:FC:80:56:50:74:2C:EA:50:98:6D:11:AB:CB:73:E0:F5:50:58:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:5b:04:04:d5:2d:c7:d4:f8:00:df:d1:a9:25:be:3b:71:61: 52:ef:30:27:c1:82:73:15:60:65:c8:9e:5d:ff:b5:a4:57:34: aa:59:ed:fb:1b:78:5d:d0:29:ed:6c:9d:1d:c0:86:37:72:9a: cb:2d:55:e8:7e:ce:a4:8b:d8:1f:08:95:e7:81:9d:55:8b:3c: d2:2b:11:54:74:7c:cc:a9:84:5d:07:dc:fb:c2:d3:e9:f5:51: 31:5d:17:6b:96:e2:4d:20:11:c2:cd:fa:be:7c:8d:9c:ea:fa: 3c:a7:19:de:85:ed:22:c5:86:96:9a:dd:1f:60:bf:ae:45:70: bc:eb:09:fd:5f:7a:2b:26:51:ff:fc:08:a5:57:68:56:a5:2e: c8:88:07:b4:0a:30:54:a3:66:1f:66:4f:b1:1f:8b:67:07:a2: dd:9f:b3:bc:70:aa:3a:65:48:a5:96:11:08:d9:f4:64:ee:80: 33:c0:ba:45:c6:fe:6e:f1:cc:1b:86:a3:8e:3b:ab:3c:00:cb: bf:63:a3:27:82:91:bb:df:a3:08:6e:81:65:a8:bb:d4:06:01: 53:16:83:14:f4:c2:66:4a:91:bd:39:f9:82:7a:62:fb:85:8f: 56:a2:70:21:dd:9f:d4:e0:ad:9e:26:fd:99:6b:5e:a9:4a:12: ab:4b:94:79 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OEREOTExMC8GA1UEBRMoN0ZGQzgwNTY1MDc0MkNFQTUwOTg2RDExQUJDQjczRTBG NTUwNThGOTAeFw0yNTA4MDcwODIwMTdaFw0yNTA4MTQwODIwMTdaMBgxFjAUBgNV BAMTDTY4OTQ2MWMyLTg3YjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtPsy7GG6zcEmdr0MUNPC2orOm8Fx8023y6j9l9Y2Qa/t7JtOonDVdKA8LHXDt dQwGyaVhab2nhUT4jRWLbirzoQFUWnxcyQR1snJjd7F7IZQGQa/fTY4E6g5Yjhlm bClwrQuJR/f35/12kUC/y1glx88vxSj38WC0/6DtWCkIZm/1bZX5G1IzgHOoXmla bqyu4zRtb27TVkOekg2yYPUAvO2nqQjVLW+QePf75lvAUb19xZeV9Vxo36Kcy/W2 U5LRx+iErmZvGFbuw4kbs/arORNJz+ICM0zUSJLwpOnNo5u4ww+g9TUGZ+FCKW93 Y5gfQbzkLRCJKEsaFnlj7qt7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaA2VTotI 9Tqu6knk/Zz4BK/ydNwwHwYDVR0jBBgwFoAUf/yAVlB0LOpQmG0Rq8tz4PVQWPkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4REQ5L0EzODdDRjhFMkZE MjExRjBBOUFDNUUyRkM0RjlBRTAyL2ZfeUFWbEIwTE9wUW1HMFJxOHR6NFBWUVdQ ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZl95QVZsQjBMT3BRbUcwUnE4dHo0UFZRV1BrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 REQ5L0EzODdDRjhFMkZEMjExRjBBOUFDNUUyRkM0RjlBRTAyL2ZfeUFWbEIwTE9w UW1HMFJxOHR6NFBWUVdQay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE5bBATVLcfU+ADf0aklvjtxYVLvMCfBgnMVYGXInl3/taRXNKpZ7fsb eF3QKe1snR3AhjdymsstVeh+zqSL2B8IleeBnVWLPNIrEVR0fMyphF0H3PvC0+n1 UTFdF2uW4k0gEcLN+r58jZzq+jynGd6F7SLFhpaa3R9gv65FcLzrCf1feismUf/8 CKVXaFalLsiIB7QKMFSjZh9mT7Efi2cHot2fs7xwqjplSKWWEQjZ9GTugDPAukXG /m7xzBuGo447qzwAy79joyeCkbvfowhugWWou9QGAVMWgxT0wmZKkb05+YJ6YvuF j1aicCHdn9TgrZ4m/ZlrXqlKEqtLlHk= -----END CERTIFICATE-----Generated at Thu Aug 7 14:37:10 2025 by rpki-client