$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft File: K1F8a3njzrA4nUGrxeziEH_sU_s.mft (raw, json) Hash identifier: BCnMVB1wcuADyxUq5trvkMrlNZO7hDThrrKaP4k0yCQ= Subject key identifier: D9:8B:84:41:9F:5B:74:A7:00:38:E8:05:4E:BC:E3:D1:A8:B8:AB:66 Authority key identifier: 2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB Certificate issuer: /CN=A91E2A61/serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB Certificate serial: 03DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft Manifest number: 03CE Signing time: Sat 09 Aug 2025 01:08:06 +0000 Manifest this update: Sat 09 Aug 2025 01:08:06 +0000 Manifest next update: Sat 16 Aug 2025 01:08:06 +0000 Files and hashes: 1: K1F8a3njzrA4nUGrxeziEH_sU_s.crl (hash: Nk5FEwjbBwehIvP8gV7m71MMcoICyUFVYy4bzA/Nl8E=) 2: B0F9178297B811ECA8AA4230C4F9AE02.roa (hash: 7UvGO2r60JLS/okHiWx8rHAHMyUcsuX/jNwXXCmMBho=) 3: 0E1EAB66961011ECA540626AC4F9AE02.roa (hash: TzVnkqN0tq39UUa2lfdZqlKLVdLg+S4NlfoqQ2G24uU=) 4: 457D2B5A28DC11ED839D6243C4F9AE02.roa (hash: 4G2u0IIjNz0CyenUMTN7OBV5SwfSrRJSXkJu6HMP/+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 987 (0x3db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2A61, serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB Validity Not Before: Aug 9 01:08:06 2025 GMT Not After : Aug 16 01:08:06 2025 GMT Subject: CN=68969f76-b68f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:10:18:e1:a2:14:2e:2d:64:b4:29:db:08:5c: 6b:e6:16:ec:a0:a5:c2:5a:09:c7:65:8a:38:be:2d: 1e:c9:81:e3:84:70:cb:0f:24:7e:cc:49:e8:75:29: 6a:e3:0d:58:81:e7:6a:93:08:43:06:d8:da:fb:dc: 2f:da:8b:19:9c:0f:3f:cc:b1:03:af:9a:e4:47:d7: da:1f:d9:8b:33:9b:36:bc:76:4f:df:44:ab:d2:76: 48:7c:8c:1b:09:49:09:8d:8b:9c:e2:2e:16:b9:2b: 35:43:0f:80:b8:ce:66:54:1a:77:17:02:13:04:19: c4:ea:e5:92:c3:93:1b:64:37:9e:e6:7c:b6:36:85: b1:5b:f9:68:b6:65:09:1d:08:4f:6b:13:25:17:bb: 8f:87:e1:66:eb:42:be:3d:5f:cb:f1:32:0f:63:30: b6:e7:e8:87:5d:f5:88:58:d5:4f:7d:08:81:10:ca: 17:6e:57:6b:8a:98:0d:02:1b:49:bf:c1:1a:56:8c: b3:e6:99:c2:09:3f:00:8f:87:3f:ae:e8:bd:4f:ba: 11:a0:20:94:8d:86:8f:e5:45:85:6f:96:b7:b4:31: 37:89:c0:bc:f7:5d:9b:69:5b:bd:7f:98:06:b8:80: c3:df:e3:8b:13:ba:01:1d:23:bc:45:d0:41:4e:82: d8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:8B:84:41:9F:5B:74:A7:00:38:E8:05:4E:BC:E3:D1:A8:B8:AB:66 X509v3 Authority Key Identifier: keyid:2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:ab:57:e4:7e:0e:9b:49:04:87:bc:2b:0d:56:af:dc:20:36: c8:5c:ef:2e:b6:26:42:a8:c2:d3:57:63:df:36:c3:e7:c2:68: 5b:2d:ad:e4:bd:9a:37:bd:d9:8a:1c:f6:db:e9:8a:4f:c6:4a: 42:cd:89:17:6f:05:1d:33:ea:8c:32:30:5e:a9:f5:e2:31:11: 35:ce:83:71:dc:72:4b:f3:f9:3f:c1:3c:f2:2b:36:75:67:5d: c7:be:ea:0e:36:cf:28:d6:7a:6a:71:be:89:71:65:f3:d8:77: ca:ec:6d:42:0d:cc:13:72:19:ce:ba:0d:20:67:11:cd:e9:54: a3:76:4d:79:18:50:3e:2a:17:03:c2:15:99:82:8c:fe:9c:61: 52:f8:c5:bf:8c:c8:d9:2f:38:9d:5f:4c:cd:cf:d9:b3:bd:df: 9c:7b:4a:5c:e0:7f:df:b6:28:b7:8c:69:da:6f:35:ce:8f:98: dc:41:95:6c:4d:cd:26:e9:02:34:a2:4f:d9:fe:86:94:a4:03: 8c:f2:49:1e:8d:79:68:bc:21:06:f5:24:cc:58:4b:55:1a:0e: a7:fd:e3:87:bb:93:e0:8b:ac:1f:49:c9:02:ae:41:1b:ee:48: cc:6f:a9:ec:9c:b6:65:e5:26:9f:56:82:67:03:7c:70:a0:a2: f2:b2:51:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJBNjExMTAvBgNVBAUTKDJCNTE3QzZCNzlFM0NFQjAzODlENDFBQkM1RUNFMjEw N0ZFQzUzRkIwHhcNMjUwODA5MDEwODA2WhcNMjUwODE2MDEwODA2WjAYMRYwFAYD VQQDEw02ODk2OWY3Ni1iNjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwRAY4aIULi1ktCnbCFxr5hbsoKXCWgnHZYo4vi0eyYHjhHDLDyR+zEnodSlq 4w1YgedqkwhDBtja+9wv2osZnA8/zLEDr5rkR9faH9mLM5s2vHZP30Sr0nZIfIwb CUkJjYuc4i4WuSs1Qw+AuM5mVBp3FwITBBnE6uWSw5MbZDee5ny2NoWxW/lotmUJ HQhPaxMlF7uPh+Fm60K+PV/L8TIPYzC25+iHXfWIWNVPfQiBEMoXbldripgNAhtJ v8EaVoyz5pnCCT8Aj4c/rui9T7oRoCCUjYaP5UWFb5a3tDE3icC8912baVu9f5gG uIDD3+OLE7oBHSO8RdBBToLY6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNmLhEGf W3SnADjoBU6849GouKtmMB8GA1UdIwQYMBaAFCtRfGt5486wOJ1Bq8Xs4hB/7FP7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkE2MS9FREMwOEZFNjk2 MEIxMUVDQkJFNEJFNjRDNEY5QUUwMi9LMUY4YTNuanpyQTRuVUdyeGV6aUVIX3NV X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0sxRjhhM25qenJBNG5VR3J4ZXppRUhfc1Vfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkE2MS9FREMwOEZFNjk2MEIxMUVDQkJFNEJFNjRDNEY5QUUwMi9LMUY4YTNuanpy QTRuVUdyeGV6aUVIX3NVX3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgq1fkfg6bSQSHvCsNVq/cIDbIXO8utiZCqMLTV2PfNsPnwmhbLa3k vZo3vdmKHPbb6YpPxkpCzYkXbwUdM+qMMjBeqfXiMRE1zoNx3HJL8/k/wTzyKzZ1 Z13HvuoONs8o1npqcb6JcWXz2HfK7G1CDcwTchnOug0gZxHN6VSjdk15GFA+KhcD whWZgoz+nGFS+MW/jMjZLzidX0zNz9mzvd+ce0pc4H/ftii3jGnabzXOj5jcQZVs Tc0m6QI0ok/Z/oaUpAOM8kkejXlovCEG9STMWEtVGg6n/eOHu5Pgi6wfSckCrkEb 7kjMb6nsnLZl5SafVoJnA3xwoKLyslFQ -----END CERTIFICATE-----Generated at Sun Aug 10 10:38:30 2025 by rpki-client