$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft File: CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft (raw, json) Hash identifier: bJouMnPwFHWAey8lvaaH+gsYIpzagzsgn3HdWhbn6W0= Subject key identifier: 95:73:DA:BC:BB:B4:DB:A7:9A:AB:33:44:82:C5:F8:1F:36:9E:E6:D6 Authority key identifier: 09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E Certificate issuer: /CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E Certificate serial: 01EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft Manifest number: 01B1 Signing time: Tue 05 Aug 2025 04:24:09 +0000 Manifest this update: Tue 05 Aug 2025 04:24:08 +0000 Manifest next update: Tue 12 Aug 2025 04:24:08 +0000 Files and hashes: 1: CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl (hash: g/TPvkeaEpCF1ROanzIGIYxkE5mBzy3hbHK07lyDVus=) 2: F88F98EA55A211F0978C8774C4F9AE02.roa (hash: QNh4Gp3kB3GNMrEGFFxhGCwWm4t5z9f8382iFUZwPZ0=) 3: D0F8C1B2558E11F0AA71D85AC4F9AE02.roa (hash: oh7ui7LK3WMunAv1J2fHvn2kFRTi6Zr/uzSPr1lq2oo=) 4: FBB6EA4E558B11F082FD5637C4F9AE02.roa (hash: Kl6m9JQHHfBeMqk1Tlm1MbQi4JjMBE2qeSJnrNub/g4=) 5: E07CB68455A211F0B55F5674C4F9AE02.roa (hash: EN9le6O09Kb0iq4iN/kD7cySPcZbryI877AWUndMCII=) 6: DA6883FC0F8611F0955A002EC4F9AE02.roa (hash: o6iFpFIV0jtxY3uECfavGNZC5f2SO5jee3QS3JMuNlk=) 7: 935296A6558B11F0BB2DB436C4F9AE02.roa (hash: QdChkVX5/kDffpKHFjUpYMXDKAHSdfijGoyZP5SONNo=) 8: 063FA6B25B2811F09B9A3A54C4F9AE02.roa (hash: PdzatKQUNncHpwKWYwWLFeCXI+EXj5VrdThfE8iLC8o=) 9: BACC6D0A4F7411F0A8124536C4F9AE02.roa (hash: DXd58lVKAvc2UPgiS5Dl9wenDfuBudEt81twiJtKSDE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 04:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 492 (0x1ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F17AA, serialNumber=0947051EFA50429215750A48BC031ADA926EF66E Validity Not Before: Aug 5 04:24:08 2025 GMT Not After : Aug 12 04:24:08 2025 GMT Subject: CN=68918768-dfc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4e:cf:96:e9:f0:2a:16:49:b7:6f:ac:8d:40: 86:48:16:96:b7:d2:f5:bc:90:9c:c8:e4:19:45:85: 48:a2:2a:14:d5:8a:78:c7:48:c7:a3:9c:32:9b:a5: 6e:7c:c2:69:6e:d0:4e:b8:04:0f:44:b7:6a:9e:db: 47:5b:99:86:5e:4b:29:c1:69:22:80:55:34:d1:16: 95:9c:3f:6f:34:2f:51:da:9c:bb:22:f3:26:ae:05: 7b:a2:24:49:81:51:2c:eb:20:d1:59:d2:60:bd:2f: bf:cb:40:fd:10:13:ff:2a:4d:4c:25:b3:26:17:ad: fe:71:a4:38:72:75:55:fe:9c:8b:bf:18:1d:bb:06: fd:19:7d:67:c5:b7:b6:03:04:62:3d:e1:b2:79:d3: 73:45:cf:f7:d4:bc:7d:02:ba:bd:c6:7c:06:9b:f4: ec:68:48:6c:dc:46:d4:5c:e3:0e:43:41:d1:7e:4b: 34:92:ed:d8:07:32:57:ec:1b:eb:e0:39:52:ff:a8: 52:ae:0b:94:6d:8a:eb:a6:87:b0:55:11:18:e7:85: 9d:d0:71:8f:83:3b:06:36:e0:9a:65:1d:ce:f2:3a: ee:41:f7:fc:29:e1:57:9c:fa:87:99:ae:38:93:e3: 51:f7:10:8f:d0:b7:94:16:a8:c7:c8:ef:f0:7e:ad: 03:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:73:DA:BC:BB:B4:DB:A7:9A:AB:33:44:82:C5:F8:1F:36:9E:E6:D6 X509v3 Authority Key Identifier: keyid:09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:35:a2:3e:20:f9:24:a9:0b:84:7f:e6:a5:f8:50:50:5d:c8: f9:4f:40:a5:0e:fb:d9:07:f7:88:a9:dc:70:ef:b0:27:60:4a: 7b:34:35:0c:ad:10:01:a9:75:64:3e:ef:5d:d5:04:f7:df:44: 2b:b8:f2:18:1b:67:8c:67:7d:b0:c7:93:fe:20:a6:d1:de:6b: be:b7:53:9d:50:aa:fd:27:57:fa:60:5f:84:e1:10:80:d5:a0: 08:38:a3:de:04:40:fd:56:57:bc:6b:bf:3c:7d:39:76:f8:4f: 55:1d:92:7b:03:25:8c:74:de:55:0a:47:79:b5:e2:68:a7:cc: 23:17:56:f5:6d:9e:40:55:52:71:81:0b:2d:37:11:65:41:4b: ae:06:9d:6b:a0:0f:7c:20:02:b4:9b:d9:2b:2b:c7:48:bb:26: 8d:a4:56:04:d5:c3:86:9c:50:64:4c:13:f7:6e:1b:3c:f2:02: 98:c4:77:0f:21:63:5f:ef:ca:b9:b8:6b:73:2b:5f:18:f3:d8: ea:46:ea:2c:4c:c1:d9:3b:55:3b:fe:56:9c:89:e0:a0:49:e7: be:ab:d5:df:22:03:35:18:f8:e7:50:d6:85:d2:6e:6c:12:51: d5:82:16:52:d9:4a:e7:70:12:49:71:14:65:da:02:40:45:5c: ca:07:e5:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE3QUExMTAvBgNVBAUTKDA5NDcwNTFFRkE1MDQyOTIxNTc1MEE0OEJDMDMxQURB OTI2RUY2NkUwHhcNMjUwODA1MDQyNDA4WhcNMjUwODEyMDQyNDA4WjAYMRYwFAYD VQQDEw02ODkxODc2OC1kZmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsU7PlunwKhZJt2+sjUCGSBaWt9L1vJCcyOQZRYVIoioU1Yp4x0jHo5wym6Vu fMJpbtBOuAQPRLdqnttHW5mGXkspwWkigFU00RaVnD9vNC9R2py7IvMmrgV7oiRJ gVEs6yDRWdJgvS+/y0D9EBP/Kk1MJbMmF63+caQ4cnVV/pyLvxgduwb9GX1nxbe2 AwRiPeGyedNzRc/31Lx9Arq9xnwGm/TsaEhs3EbUXOMOQ0HRfks0ku3YBzJX7Bvr 4DlS/6hSrguUbYrrpoewVREY54Wd0HGPgzsGNuCaZR3O8jruQff8KeFXnPqHma44 k+NR9xCP0LeUFqjHyO/wfq0DbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJVz2ry7 tNunmqszRILF+B82nubWMB8GA1UdIwQYMBaAFAlHBR76UEKSFXUKSLwDGtqSbvZu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdBQS80MUYwRjk3RTUy QjgxMUVFOEU0MzAwMERDNEY5QUUwMi9DVWNGSHZwUVFwSVZkUXBJdkFNYTJwSnU5 bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NVY0ZIdnBRUXBJVmRRcEl2QU1hMnBKdTltNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTdBQS80MUYwRjk3RTUyQjgxMUVFOEU0MzAwMERDNEY5QUUwMi9DVWNGSHZwUVFw SVZkUXBJdkFNYTJwSnU5bTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpNaI+IPkkqQuEf+al+FBQXcj5T0ClDvvZB/eIqdxw77AnYEp7NDUM rRABqXVkPu9d1QT330QruPIYG2eMZ32wx5P+IKbR3mu+t1OdUKr9J1f6YF+E4RCA 1aAIOKPeBED9Vle8a788fTl2+E9VHZJ7AyWMdN5VCkd5teJop8wjF1b1bZ5AVVJx gQstNxFlQUuuBp1roA98IAK0m9krK8dIuyaNpFYE1cOGnFBkTBP3bhs88gKYxHcP IWNf78q5uGtzK18Y89jqRuosTMHZO1U7/lacieCgSee+q9XfIgM1GPjnUNaF0m5s ElHVghZS2UrncBJJcRRl2gJARVzKB+UT -----END CERTIFICATE-----Generated at Wed Aug 6 14:16:58 2025 by rpki-client