$ rpki-client -vvf rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft File: 8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft (raw, json) Hash identifier: PUOmcixOfv+5oOhsVt0h0kkjmjTMAQFZ1s6dgTKw11Q= Subject key identifier: D5:FE:59:73:29:56:2A:66:C2:75:D6:03:00:4D:6F:D8:D8:67:25:42 Authority key identifier: F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED Certificate issuer: /CN=A91E094D/serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED Certificate serial: 05BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft Manifest number: 05A7 Signing time: Sat 02 Aug 2025 23:38:21 +0000 Manifest this update: Sat 02 Aug 2025 23:38:21 +0000 Manifest next update: Sat 09 Aug 2025 23:38:21 +0000 Files and hashes: 1: 8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl (hash: bfAhIXO+XqvEW5pcOtnnzSW3u+KrcgSrj0MunE9i2es=) 2: 22A3D2E4E5D311EFB5545A4EC4F9AE02.roa (hash: KgAjUYIuzjhpkZFNtYWs181NTAA2NQcYLWH/gU6nAAg=) 3: ED49BD3C649A11ECBDAC9565C4F9AE02.roa (hash: lBw/oXqYii+CxdFQl9gOeByngEJHo8e2NzPJY0PJwPA=) 4: 660A349884C511EFB2831C16C4F9AE02.roa (hash: q2RN3xLXUOsYwfNjHGYHuCEJyjXQ1ifjwY5JK1sjpVs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 23:38:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1467 (0x5bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E094D, serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED Validity Not Before: Aug 2 23:38:21 2025 GMT Not After : Aug 9 23:38:21 2025 GMT Subject: CN=688ea16d-dd54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:bf:a8:6e:7c:7d:7c:39:26:93:d4:24:4f:fb: 1f:47:38:e0:d9:f4:fe:7e:78:1d:61:60:e3:7a:87: 0a:78:9c:23:49:58:b3:7d:78:62:5e:1a:fd:6b:b1: 20:c8:00:74:7a:26:3f:85:ff:15:1e:77:e7:f3:81: 6b:4d:26:63:f6:26:36:83:35:a3:e9:95:87:9a:29: ff:67:a6:24:7a:0a:0c:ac:03:1b:62:16:d3:9b:1f: cb:fc:04:b5:4e:dd:4a:c9:dc:8b:fb:a2:d7:14:97: ce:0c:22:a4:95:2e:73:39:61:16:a7:a5:4b:a7:b9: d0:19:a0:aa:84:27:c3:1b:3f:38:f2:af:c1:ad:1e: 3e:7d:b1:28:76:47:a8:30:c1:d3:78:52:e6:f4:b1: cc:91:df:5e:46:55:55:c4:19:ca:27:c7:d6:35:e9: 21:5c:8e:39:7d:5a:71:12:33:42:73:bb:be:88:a7: a2:e9:1b:01:76:0d:ff:40:34:f5:66:50:48:b7:c6: 0a:ab:40:6e:47:93:0a:68:b3:8c:79:6f:9c:03:48: 17:eb:88:06:51:fa:c1:7f:f3:60:ad:4b:06:8d:a5: f9:e4:ab:61:6b:56:ec:ee:6d:53:40:6d:25:7a:98: 5e:b0:3d:f7:e7:86:cc:38:e9:81:3d:62:0c:0d:cd: 4d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:FE:59:73:29:56:2A:66:C2:75:D6:03:00:4D:6F:D8:D8:67:25:42 X509v3 Authority Key Identifier: keyid:F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:35:5c:09:2b:77:a8:80:41:1a:52:54:1a:54:c8:f6:a5:e9: a3:da:4f:37:36:35:d7:3c:e9:41:f5:31:d1:99:5d:e5:a7:1f: 3e:41:e1:c2:c5:13:16:96:ec:8b:d7:8f:9f:bf:e2:e8:3c:26: 03:56:3a:5e:34:11:d5:cc:c3:25:5c:1b:ef:36:ae:f4:66:52: d4:58:bd:dc:56:9b:7f:b0:40:a4:f6:30:9f:cc:fd:b2:c2:f7: 9b:96:9f:59:65:fc:ab:a4:49:61:a3:38:02:35:4b:cd:39:0e: db:23:b7:0f:f6:b9:19:a9:fc:17:89:da:a8:1d:47:c6:6f:b3: 90:03:ac:94:63:b4:8f:66:3f:50:a0:9e:7d:9e:ec:ba:d8:40: 80:99:8e:64:45:17:ec:ee:ff:b1:b2:aa:aa:a9:24:01:1f:fc: a6:e1:52:6d:44:21:f9:c1:06:56:01:93:59:6b:ef:41:3c:f4: 99:da:68:f0:ca:aa:03:17:81:eb:44:5f:26:4d:56:d8:01:8d: 74:de:3c:b9:cb:59:9f:ef:a4:ab:bf:ff:78:d6:87:46:63:6b: 94:cd:cc:18:87:0a:f2:85:cf:ab:a7:c9:c8:97:33:37:85:93: 29:c4:5b:6a:06:58:02:1d:f2:15:2a:0b:81:d7:0f:bd:ec:42: 2a:b5:91:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA5NEQxMTAvBgNVBAUTKEYzMTcwNUU4MThFQTQ4MDNCMDkzNDE5M0Y2MUZDNkUz MzcxNzcyRUQwHhcNMjUwODAyMjMzODIxWhcNMjUwODA5MjMzODIxWjAYMRYwFAYD VQQDEw02ODhlYTE2ZC1kZDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA37+obnx9fDkmk9QkT/sfRzjg2fT+fngdYWDjeocKeJwjSVizfXhiXhr9a7Eg yAB0eiY/hf8VHnfn84FrTSZj9iY2gzWj6ZWHmin/Z6YkegoMrAMbYhbTmx/L/AS1 Tt1KydyL+6LXFJfODCKklS5zOWEWp6VLp7nQGaCqhCfDGz848q/BrR4+fbEodkeo MMHTeFLm9LHMkd9eRlVVxBnKJ8fWNekhXI45fVpxEjNCc7u+iKei6RsBdg3/QDT1 ZlBIt8YKq0BuR5MKaLOMeW+cA0gX64gGUfrBf/NgrUsGjaX55Ktha1bs7m1TQG0l ephesD3354bMOOmBPWIMDc1N4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNX+WXMp VipmwnXWAwBNb9jYZyVCMB8GA1UdIwQYMBaAFPMXBegY6kgDsJNBk/YfxuM3F3Lt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDk0RC80MEI3Mzg2RURF ODExMUVCQTlGQzdENzJDNEY5QUUwMi84eGNGNkJqcVNBT3drMEdUOWhfRzR6Y1hj dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh4Y0Y2QmpxU0FPd2swR1Q5aF9HNHpjWGN1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDk0RC80MEI3Mzg2RURFODExMUVCQTlGQzdENzJDNEY5QUUwMi84eGNGNkJqcVNB T3drMEdUOWhfRzR6Y1hjdTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAENVwJK3eogEEaUlQaVMj2pemj2k83NjXXPOlB9THRmV3lpx8+QeHC xRMWluyL14+fv+LoPCYDVjpeNBHVzMMlXBvvNq70ZlLUWL3cVpt/sECk9jCfzP2y wveblp9ZZfyrpElhozgCNUvNOQ7bI7cP9rkZqfwXidqoHUfGb7OQA6yUY7SPZj9Q oJ59nuy62ECAmY5kRRfs7v+xsqqqqSQBH/ym4VJtRCH5wQZWAZNZa+9BPPSZ2mjw yqoDF4HrRF8mTVbYAY103jy5y1mf76Srv/941odGY2uUzcwYhwryhc+rp8nIlzM3 hZMpxFtqBlgCHfIVKguB1w+97EIqtZFf -----END CERTIFICATE-----Generated at Mon Aug 4 15:41:58 2025 by rpki-client