$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft File: b2WgySJgsa2iMYeym6w76trAVmE.mft (raw, json) Hash identifier: kosu+/DfQiScdu1Ea5/QDfvzKKKNTClMjdwSXxZi6VE= Subject key identifier: 85:A0:20:85:21:AF:87:91:EB:CB:89:29:E1:EE:5A:A8:7F:82:A0:E0 Authority key identifier: 6F:65:A0:C9:22:60:B1:AD:A2:31:87:B2:9B:AC:3B:EA:DA:C0:56:61 Certificate issuer: /CN=A91EA449/serialNumber=6F65A0C92260B1ADA23187B29BAC3BEADAC05661 Certificate serial: 0102 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2WgySJgsa2iMYeym6w76trAVmE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft Manifest number: FB Signing time: Mon 11 Aug 2025 05:28:31 +0000 Manifest this update: Mon 11 Aug 2025 05:28:30 +0000 Manifest next update: Mon 18 Aug 2025 05:28:30 +0000 Files and hashes: 1: b2WgySJgsa2iMYeym6w76trAVmE.crl (hash: wWcQyLBRQo9jRvyRpjiotJB5uj143GNZE3OuYBNzxU0=) 2: 9DE187FA2A8211F08575E277C4F9AE02.roa (hash: 4s3NtIvsEComlAClIWN0C/pBpA6ARQs8HzKhlcubCoM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.crl rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2WgySJgsa2iMYeym6w76trAVmE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 05:28:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 258 (0x102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA449, serialNumber=6F65A0C92260B1ADA23187B29BAC3BEADAC05661 Validity Not Before: Aug 11 05:28:30 2025 GMT Not After : Aug 18 05:28:30 2025 GMT Subject: CN=68997f7f-4c79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:80:2b:f4:9a:2e:d1:93:2d:d4:ad:f9:8e:06: a6:91:8a:1d:58:9b:d5:c1:15:d9:b0:b8:06:4b:e8: 6d:ee:74:0f:15:a9:76:96:84:40:52:4c:06:11:0e: 40:56:78:b9:e4:47:ac:a2:32:99:2b:54:4b:1b:72: f0:76:97:68:15:e0:e9:d4:86:df:97:22:85:ec:a4: 23:82:30:fb:50:f2:bb:04:47:fc:29:5e:ae:f7:16: c2:bd:d0:c7:03:7a:d0:2d:b3:f1:1e:a8:0f:a6:bb: 71:d3:21:6f:f4:92:cf:a4:3f:73:5e:21:79:e2:24: eb:ab:a0:c6:cc:2f:ea:7c:cc:f5:23:8a:cd:1c:46: c0:3e:30:32:ef:79:9f:86:a4:f7:c7:2d:3a:90:a8: 9b:ed:d2:fd:6e:b9:d5:e4:68:a2:84:47:3b:4d:7e: 59:26:43:0f:44:8b:f9:fa:28:1c:4c:b4:ff:92:c3: be:71:ac:23:82:98:e0:16:ae:2f:df:1a:6a:a3:6a: 1f:b9:46:b6:de:be:be:4d:7c:e9:28:5f:b4:69:e4: 49:8b:52:f6:15:f5:9d:57:86:cc:9e:97:8d:c0:df: 4d:4a:a9:6d:2e:74:81:c6:e2:03:a3:0f:ee:35:9c: a6:82:ed:e5:39:be:29:a5:18:10:68:b3:6f:ac:e4: ec:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:A0:20:85:21:AF:87:91:EB:CB:89:29:E1:EE:5A:A8:7F:82:A0:E0 X509v3 Authority Key Identifier: keyid:6F:65:A0:C9:22:60:B1:AD:A2:31:87:B2:9B:AC:3B:EA:DA:C0:56:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2WgySJgsa2iMYeym6w76trAVmE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:b0:e6:df:1b:a0:54:a4:e1:cb:0c:f6:9a:8c:6e:23:dc:fb: b9:3f:40:f6:46:4e:f2:b6:11:64:e7:02:ee:5a:60:c3:23:34: d7:8e:9f:11:cc:79:db:a5:3a:2f:7a:09:ca:e1:b0:ba:1c:54: 2b:ee:89:d7:9b:0b:03:9c:91:a0:05:2c:0c:00:ee:75:65:e4: 32:58:9b:8b:7b:9e:b4:c5:43:bc:20:a9:38:4b:3a:ca:51:fd: d3:a8:ec:4a:40:a3:54:0c:42:d2:8b:e4:9e:86:7a:11:e2:61: df:f1:4e:73:6c:39:a5:e4:eb:4b:51:dd:ff:75:e5:96:ce:d3: 4a:35:bf:cf:a4:74:22:70:d8:50:e6:21:de:3e:a2:db:61:3b: c5:ac:97:be:c2:b2:46:80:98:5a:f2:9a:0a:ed:7f:83:c5:14: 5a:bc:6c:5f:ea:b9:18:78:9c:5d:fb:a2:a3:4f:dd:f7:c7:84: 68:07:fd:bb:a3:55:93:3c:01:e1:75:2e:7a:ec:09:31:47:82: d3:89:a9:ce:9b:9a:17:12:b4:52:4f:7e:ae:9d:cc:dc:89:e0: a9:4c:71:b5:87:c6:b3:d6:71:e8:5e:59:33:58:0b:90:b0:09: b2:50:23:1d:fb:88:4d:d5:e4:96:4e:b4:7d:28:7d:77:17:8a: fe:7d:a0:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE0NDkxMTAvBgNVBAUTKDZGNjVBMEM5MjI2MEIxQURBMjMxODdCMjlCQUMzQkVB REFDMDU2NjEwHhcNMjUwODExMDUyODMwWhcNMjUwODE4MDUyODMwWjAYMRYwFAYD VQQDEw02ODk5N2Y3Zi00Yzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9IAr9Jou0ZMt1K35jgamkYodWJvVwRXZsLgGS+ht7nQPFal2loRAUkwGEQ5A Vni55EesojKZK1RLG3LwdpdoFeDp1IbflyKF7KQjgjD7UPK7BEf8KV6u9xbCvdDH A3rQLbPxHqgPprtx0yFv9JLPpD9zXiF54iTrq6DGzC/qfMz1I4rNHEbAPjAy73mf hqT3xy06kKib7dL9brnV5GiihEc7TX5ZJkMPRIv5+igcTLT/ksO+cawjgpjgFq4v 3xpqo2ofuUa23r6+TXzpKF+0aeRJi1L2FfWdV4bMnpeNwN9NSqltLnSBxuIDow/u NZymgu3lOb4ppRgQaLNvrOTsjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIWgIIUh r4eR68uJKeHuWqh/gqDgMB8GA1UdIwQYMBaAFG9loMkiYLGtojGHspusO+rawFZh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTQ0OS80MDE3OTBGQzA3 M0MxMUVGOEQxREIwNTZDNEY5QUUwMi9iMldneVNKZ3NhMmlNWWV5bTZ3NzZ0ckFW bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2IyV2d5U0pnc2EyaU1ZZXltNnc3NnRyQVZtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTQ0OS80MDE3OTBGQzA3M0MxMUVGOEQxREIwNTZDNEY5QUUwMi9iMldneVNKZ3Nh MmlNWWV5bTZ3NzZ0ckFWbUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABsObfG6BUpOHLDPaajG4j3Pu5P0D2Rk7ythFk5wLuWmDDIzTXjp8R zHnbpTovegnK4bC6HFQr7onXmwsDnJGgBSwMAO51ZeQyWJuLe560xUO8IKk4SzrK Uf3TqOxKQKNUDELSi+SehnoR4mHf8U5zbDml5OtLUd3/deWWztNKNb/PpHQicNhQ 5iHePqLbYTvFrJe+wrJGgJha8poK7X+DxRRavGxf6rkYeJxd+6KjT933x4RoB/27 o1WTPAHhdS567AkxR4LTianOm5oXErRST36unczcieCpTHG1h8az1nHoXlkzWAuQ sAmyUCMd+4hN1eSWTrR9KH13F4r+faCG -----END CERTIFICATE-----Generated at Wed Aug 13 02:45:20 2025 by rpki-client