$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft File: 9FMh2HhbiJfVqDS5DquRDFWQnYU.mft (raw, json) Hash identifier: Bozt5eEXdnq5R3rcEHrUAzmRez2Q/4Q3q7yJYgkHvV0= Subject key identifier: 95:34:85:14:30:C2:3B:01:FD:54:AC:4D:09:9A:CF:B0:4C:0B:FA:2E Authority key identifier: F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85 Certificate issuer: /CN=A91DEDFD/serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85 Certificate serial: 08F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft Manifest number: 08CB Signing time: Fri 08 Aug 2025 20:50:30 +0000 Manifest this update: Fri 08 Aug 2025 20:50:30 +0000 Manifest next update: Fri 15 Aug 2025 20:50:30 +0000 Files and hashes: 1: 9FMh2HhbiJfVqDS5DquRDFWQnYU.crl (hash: huB9RIhZ0J18m7EV2gYc7+f9U1KgzIn420Gim4/N4j4=) 2: 7E4270063AF011EC9E421056C4F9AE02.roa (hash: FNdfZCcbxe3V2OAQFLZGqdKXBJ6o0UkfGqCv1XFBIe4=) 3: F547BE4253EA11F08B05D02EC4F9AE02.roa (hash: 3PD/x5elGPt/NTqjyFL6QFT8slsuLxNOAQu2SL4y1Fo=) 4: 8F6A0892437611EC9E067020C4F9AE02.roa (hash: xykraSV8kLGomChcl9m8aUsM7WTxk2kDX+8/BfVDf4g=) 5: 1A7632424DA111ECA1180F87C4F9AE02.roa (hash: emHp7Xzsh3MvD05QY3vvsc/JIauIxxqNW7MxPaZ5E+I=) 6: 7AE3D13C62A111ED80F96E47C4F9AE02.roa (hash: Dx71OVIwLra0qJzFPwaosr95WYYv+7Bg/7InXVNYyaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2297 (0x8f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEDFD, serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85 Validity Not Before: Aug 8 20:50:30 2025 GMT Not After : Aug 15 20:50:30 2025 GMT Subject: CN=68966316-328f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:12:ee:f7:1c:33:a4:86:c9:28:b4:4a:7d:a7: e5:ba:1c:3b:53:d1:a8:b8:bf:bd:37:e0:f7:fc:06: 96:ef:6e:56:1f:fa:d0:af:60:6e:aa:5c:f7:62:96: 4d:f9:a0:af:dc:77:a0:fc:eb:b7:57:a7:8c:a2:67: 93:98:9b:95:25:08:ee:ac:07:91:d3:3f:69:28:f9: a7:cf:4c:2c:d8:d7:ef:fa:7d:7c:cb:df:96:e5:8a: 6d:e4:5d:0f:d9:52:d4:3d:1a:a5:90:d6:05:17:1a: 47:39:e6:21:e9:0c:24:e7:79:78:92:0d:6d:f6:e4: 5e:80:93:da:24:0d:02:d9:02:6a:ef:ab:24:c6:f4: d6:56:86:66:e8:34:f8:d7:1d:e3:f6:7e:e6:9f:1f: 33:87:76:5c:14:23:fa:40:b0:e7:ea:82:85:bb:21: 8e:93:7f:99:9c:02:68:d0:65:c9:a0:98:3f:a5:37: fb:bb:db:97:c4:1a:83:e3:3f:52:25:b5:72:3a:53: df:94:d2:36:71:f6:8f:a5:89:a3:68:36:73:54:93: f0:86:b3:6e:63:41:be:95:a5:15:9c:73:c3:28:48: aa:e6:c1:ae:cb:97:84:83:58:f8:9e:37:97:92:ec: 46:dd:51:9e:60:d2:6b:15:e9:54:de:2c:e8:95:1f: dd:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:34:85:14:30:C2:3B:01:FD:54:AC:4D:09:9A:CF:B0:4C:0B:FA:2E X509v3 Authority Key Identifier: keyid:F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:97:ab:08:49:0f:2a:8d:82:9e:3e:c0:e6:d2:85:71:a8:31: 16:be:c6:2d:ed:91:aa:a1:b2:b7:44:0f:3f:d9:df:4f:6e:5d: 94:32:0e:1c:24:c5:82:c8:9d:bb:1e:d3:a0:76:d6:0a:7b:46: 39:9f:87:cd:ae:32:89:81:0c:51:2b:e3:18:5f:42:61:fa:1f: 45:fb:d7:22:a9:38:f4:f6:2d:ae:42:29:ea:dd:eb:7b:a9:a3: 45:47:c4:63:73:f3:8b:c3:45:5c:0a:1c:20:9b:ab:7f:ed:a1: b2:48:35:bb:b4:2a:b0:a1:9a:b2:33:e2:35:61:41:66:fa:92: 7c:d0:d7:4e:04:8b:28:3f:ce:dc:d8:43:48:b2:e7:90:57:6f: e2:dc:66:42:84:32:3e:42:4b:64:75:d2:93:7b:93:c0:18:d4: e3:5b:e8:a3:21:e7:39:08:1f:78:63:26:74:d6:bf:e3:42:bc: 21:3b:d4:45:59:03:98:5e:b8:94:0f:6f:da:d0:cd:26:e3:65: 6f:ec:9c:68:f7:52:87:c5:ab:a3:22:d6:18:3f:b5:35:41:2c: 4b:1f:38:a7:e8:a8:33:5a:1c:b1:e7:c7:2e:73:9e:b6:71:5c: 9d:09:0a:9c:18:18:3d:b0:ab:a1:b6:4b:c2:5c:9d:7e:86:ee: 96:fd:d8:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVERkQxMTAvBgNVBAUTKEY0NTMyMUQ4Nzg1Qjg4OTdENUE4MzRCOTBFQUI5MTBD NTU5MDlEODUwHhcNMjUwODA4MjA1MDMwWhcNMjUwODE1MjA1MDMwWjAYMRYwFAYD VQQDEw02ODk2NjMxNi0zMjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsRLu9xwzpIbJKLRKfafluhw7U9GouL+9N+D3/AaW725WH/rQr2Buqlz3YpZN +aCv3Heg/Ou3V6eMomeTmJuVJQjurAeR0z9pKPmnz0ws2Nfv+n18y9+W5Ypt5F0P 2VLUPRqlkNYFFxpHOeYh6Qwk53l4kg1t9uRegJPaJA0C2QJq76skxvTWVoZm6DT4 1x3j9n7mnx8zh3ZcFCP6QLDn6oKFuyGOk3+ZnAJo0GXJoJg/pTf7u9uXxBqD4z9S JbVyOlPflNI2cfaPpYmjaDZzVJPwhrNuY0G+laUVnHPDKEiq5sGuy5eEg1j4njeX kuxG3VGeYNJrFelU3izolR/dlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJU0hRQw wjsB/VSsTQmaz7BMC/ouMB8GA1UdIwQYMBaAFPRTIdh4W4iX1ag0uQ6rkQxVkJ2F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERURGRC81NDUzNkIzRUJD ODgxMUVBODhFRjNENDlDNEY5QUUwMi85Rk1oMkhoYmlKZlZxRFM1RHF1UkRGV1Fu WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGTWgySGhiaUpmVnFEUzVEcXVSREZXUW5ZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RURGRC81NDUzNkIzRUJDODgxMUVBODhFRjNENDlDNEY5QUUwMi85Rk1oMkhoYmlK ZlZxRFM1RHF1UkRGV1FuWVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8l6sISQ8qjYKePsDm0oVxqDEWvsYt7ZGqobK3RA8/2d9Pbl2UMg4c JMWCyJ27HtOgdtYKe0Y5n4fNrjKJgQxRK+MYX0Jh+h9F+9ciqTj09i2uQinq3et7 qaNFR8Rjc/OLw0VcChwgm6t/7aGySDW7tCqwoZqyM+I1YUFm+pJ80NdOBIsoP87c 2ENIsueQV2/i3GZChDI+QktkddKTe5PAGNTjW+ijIec5CB94YyZ01r/jQrwhO9RF WQOYXriUD2/a0M0m42Vv7Jxo91KHxaujItYYP7U1QSxLHzin6KgzWhyx58cuc562 cVydCQqcGBg9sKuhtkvCXJ1+hu6W/djv -----END CERTIFICATE-----Generated at Sat Aug 9 23:27:56 2025 by rpki-client