$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.mft File: 9LfQRDuM_5tAmLuM7L7Yf86putI.mft (raw, json) Hash identifier: PQRzazKviogw6lzsLqpOCjWv/WzLcIhmLppnjf7V0Fk= Subject key identifier: AF:52:69:F8:10:08:28:68:8B:AB:94:A4:59:2B:3B:FF:44:D1:12:98 Authority key identifier: F4:B7:D0:44:3B:8C:FF:9B:40:98:BB:8C:EC:BE:D8:7F:CE:A9:BA:D2 Certificate issuer: /CN=A91E5481/serialNumber=F4B7D0443B8CFF9B4098BB8CECBED87FCEA9BAD2 Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LfQRDuM_5tAmLuM7L7Yf86putI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.mft Manifest number: 30 Signing time: Sat 09 Aug 2025 08:10:00 +0000 Manifest this update: Sat 09 Aug 2025 08:09:59 +0000 Manifest next update: Sat 16 Aug 2025 08:09:59 +0000 Files and hashes: 1: 9LfQRDuM_5tAmLuM7L7Yf86putI.crl (hash: TyxUgRidiSePUtRNJXW9xJ/kqY6YZHHIz48JEGXU3Og=) 2: 67F6AC6C2BD911F09AF6B821C4F9AE02.roa (hash: wYtQWk7ttHPhjt8DRgJvmS9ClmgD+cfxZKN75n4cmjU=) 3: 67818EF02BD911F09AF6B821C4F9AE02.roa (hash: GrE2T3QoH3KUCtrNxzC9H+t8cncgZrWD5zuytXWYaOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.crl rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LfQRDuM_5tAmLuM7L7Yf86putI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5481, serialNumber=F4B7D0443B8CFF9B4098BB8CECBED87FCEA9BAD2 Validity Not Before: Aug 9 08:09:59 2025 GMT Not After : Aug 16 08:09:59 2025 GMT Subject: CN=68970257-1380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3b:3b:84:0f:fa:f3:77:87:d1:cc:fe:00:93: d5:ee:97:b7:13:3e:71:76:1d:5c:28:d0:71:3d:53: 80:96:d5:04:00:a6:06:43:02:56:a5:0d:5c:33:7c: ec:ac:f6:71:00:da:94:4a:48:cf:d2:d7:84:8b:62: 78:f3:c8:11:7d:5f:84:67:7a:98:a0:c8:f1:c0:b6: 16:a9:9b:5d:b4:81:b2:49:a9:aa:68:71:e9:be:5b: ba:83:4e:78:fc:b4:e3:a2:00:4c:fa:43:1a:6d:b3: 3a:48:cb:52:e3:4f:02:2f:80:b9:68:44:ac:46:bb: 06:6d:06:e6:32:e3:37:7e:26:d2:f8:71:db:1f:d7: 37:f2:7c:c2:a1:fb:12:10:d9:97:33:c0:78:f3:8a: 08:de:b5:d1:66:3b:49:2c:47:36:a5:40:7e:27:a4: 99:70:ba:b5:95:37:d9:e9:e9:2e:99:eb:82:d6:0a: 27:f9:c2:df:04:2a:f5:96:c1:17:08:7e:5b:03:f6: 17:3c:68:f6:e2:34:b0:92:60:6e:c6:10:32:2a:8b: e8:32:2d:1d:06:e4:bb:95:a2:0d:36:b6:1e:f1:42: 8b:63:c4:90:11:5e:0a:8b:4e:99:ee:8e:36:10:f4: 80:50:7f:4d:d6:8a:fa:4f:be:77:e7:83:91:61:0e: 91:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:52:69:F8:10:08:28:68:8B:AB:94:A4:59:2B:3B:FF:44:D1:12:98 X509v3 Authority Key Identifier: keyid:F4:B7:D0:44:3B:8C:FF:9B:40:98:BB:8C:EC:BE:D8:7F:CE:A9:BA:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LfQRDuM_5tAmLuM7L7Yf86putI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:37:8a:14:d7:6c:7d:e2:94:b8:8d:40:ad:c0:48:b6:79:f7: d8:d0:65:db:9e:55:e1:18:fb:9b:54:3f:30:28:25:36:88:b5: 05:9d:b6:a8:c9:94:45:25:ab:ee:bc:47:56:c0:17:c2:b3:94: f9:19:32:b8:ad:a5:a6:61:71:57:13:f6:13:23:5b:18:e7:d5: ff:a2:be:30:a5:4d:e4:33:f0:87:84:1b:72:49:1d:1f:72:c6: 88:3c:a3:dc:d0:0b:1e:06:56:9f:1d:f3:7f:b1:9d:14:6d:39: 1b:d2:29:12:ca:7e:2c:b4:3f:28:88:27:7b:01:22:34:73:0a: 23:c9:73:de:0e:91:97:89:6e:c5:b5:be:d7:7f:4b:14:e0:ee: d2:e0:f5:73:ab:18:42:80:39:f6:a5:60:20:fd:81:67:a0:c8: 79:22:21:d2:54:b5:f7:c4:50:4e:88:e1:82:66:df:86:8e:b8: 34:fd:b3:2d:8a:78:f1:f3:01:1a:71:e0:cb:be:68:13:ba:2d: 5b:c2:db:f5:be:fc:4f:e0:b8:71:32:78:0b:26:8e:24:1c:22: 98:49:1b:e5:c6:cf:58:df:68:6b:9a:cd:bb:a8:43:d4:56:e6: c7:0b:7d:d2:b9:39:a8:81:39:fc:0e:47:79:58:72:a2:fe:76: 5a:e6:13:48 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NTQ4MTExMC8GA1UEBRMoRjRCN0QwNDQzQjhDRkY5QjQwOThCQjhDRUNCRUQ4N0ZD RUE5QkFEMjAeFw0yNTA4MDkwODA5NTlaFw0yNTA4MTYwODA5NTlaMBgxFjAUBgNV BAMTDTY4OTcwMjU3LTEzODAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0OzuED/rzd4fRzP4Ak9Xul7cTPnF2HVwo0HE9U4CW1QQApgZDAlalDVwzfOys 9nEA2pRKSM/S14SLYnjzyBF9X4RnepigyPHAthapm120gbJJqapocem+W7qDTnj8 tOOiAEz6QxptszpIy1LjTwIvgLloRKxGuwZtBuYy4zd+JtL4cdsf1zfyfMKh+xIQ 2ZczwHjzigjetdFmO0ksRzalQH4npJlwurWVN9np6S6Z64LWCif5wt8EKvWWwRcI flsD9hc8aPbiNLCSYG7GEDIqi+gyLR0G5LuVog02th7xQotjxJARXgqLTpnujjYQ 9IBQf03WivpPvnfng5FhDpGrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUr1Jp+BAI KGiLq5SkWSs7/0TREpgwHwYDVR0jBBgwFoAU9LfQRDuM/5tAmLuM7L7Yf86putIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1NDgxL0ExODU0REUwMkJE ODExRjBBQjYxNzMyMEM0RjlBRTAyLzlMZlFSRHVNXzV0QW1MdU03TDdZZjg2cHV0 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOUxmUVJEdU1fNXRBbUx1TTdMN1lmODZwdXRJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1 NDgxL0ExODU0REUwMkJEODExRjBBQjYxNzMyMEM0RjlBRTAyLzlMZlFSRHVNXzV0 QW1MdU03TDdZZjg2cHV0SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKE3ihTXbH3ilLiNQK3ASLZ599jQZdueVeEY+5tUPzAoJTaItQWdtqjJ lEUlq+68R1bAF8KzlPkZMritpaZhcVcT9hMjWxjn1f+ivjClTeQz8IeEG3JJHR9y xog8o9zQCx4GVp8d83+xnRRtORvSKRLKfiy0PyiIJ3sBIjRzCiPJc94OkZeJbsW1 vtd/SxTg7tLg9XOrGEKAOfalYCD9gWegyHkiIdJUtffEUE6I4YJm34aOuDT9sy2K ePHzARpx4Mu+aBO6LVvC2/W+/E/guHEyeAsmjiQcIphJG+XGz1jfaGuazbuoQ9RW 5scLfdK5OaiBOfwOR3lYcqL+dlrmE0g= -----END CERTIFICATE-----Generated at Sun Aug 10 10:39:26 2025 by rpki-client