$ rpki-client -vvf rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft File: u8EDVhr9epMDbRxy3UwKfCpOKc4.mft (raw, json) Hash identifier: gxsyA5Uh8Gy5r/riz9Qx9oYdconmS79YpJJLdq+1Z+M= Subject key identifier: 3D:E0:04:66:43:61:4C:71:9A:91:CB:5B:5B:FF:F0:B6:D2:72:6D:9A Authority key identifier: BB:C1:03:56:1A:FD:7A:93:03:6D:1C:72:DD:4C:0A:7C:2A:4E:29:CE Certificate issuer: /CN=A91F277D/serialNumber=BBC103561AFD7A93036D1C72DD4C0A7C2A4E29CE Certificate serial: 068B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft Manifest number: 0673 Signing time: Fri 08 Aug 2025 22:33:37 +0000 Manifest this update: Fri 08 Aug 2025 22:33:37 +0000 Manifest next update: Fri 15 Aug 2025 22:33:37 +0000 Files and hashes: 1: u8EDVhr9epMDbRxy3UwKfCpOKc4.crl (hash: /2zQu0GR62fKuT9jNcWP+eZJDbEzQTgoZaC0f3SYcqE=) 2: CEF8E22E711711EDB49CE11AC4F9AE02.roa (hash: MXG2UaX3e+u+Jgkl2hW9VaZ5bWI3Hg2FUtWl1xPKFxI=) 3: 70A77C348D6C11EBAFD23A2EC4F9AE02.roa (hash: A5KK9SQwb+EDWJ4jMnTUQq3SJ0SvbTU26Y/s1pM+n+I=) 4: 0BABC0DCB15D11EB8937582CC4F9AE02.roa (hash: myGu3py2MJoX+9pcsdAEfeXFlVuZbTSedA0MlFyQwmI=) 5: 715924988D6C11EBAFD23A2EC4F9AE02.roa (hash: IRx8YlQZD3iZNO8ZkV5fm0YkjEB3fazq27IMfHjcxDQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.crl rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1675 (0x68b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F277D, serialNumber=BBC103561AFD7A93036D1C72DD4C0A7C2A4E29CE Validity Not Before: Aug 8 22:33:37 2025 GMT Not After : Aug 15 22:33:37 2025 GMT Subject: CN=68967b41-0981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ef:71:71:2e:a7:65:30:63:d9:82:bd:9f:d5: 36:64:77:e9:61:6d:ad:27:39:54:51:16:23:a9:2b: 73:26:30:f4:ba:d9:49:8a:e3:b3:02:8c:d9:d1:c8: 0b:f0:d0:e0:7e:dd:ae:3a:df:b3:0d:ab:f8:c4:fa: 46:bf:b4:c9:b0:96:18:ba:1d:c2:33:82:38:4f:54: 88:d3:97:5b:76:e8:e1:ae:79:ec:a0:b9:ba:e0:02: 81:ca:c0:47:a6:c6:1f:27:9f:53:64:c2:36:50:b4: 75:93:63:e1:36:d0:a6:d8:34:4d:6c:09:01:c7:6a: ed:27:f3:3f:6f:e7:b7:04:40:38:11:bf:50:c7:bf: 7f:e2:47:27:cd:40:b1:44:7b:f2:13:16:9f:0b:dd: 58:a6:ef:ba:9d:b2:f0:d8:65:68:fa:a8:81:de:aa: b0:90:18:95:0c:48:95:c7:91:84:3b:44:56:9f:66: a7:74:11:0f:1f:53:9a:6c:46:c5:c4:a5:a9:f7:b3: c9:4b:aa:31:b0:cd:79:ea:9f:8f:b3:ce:8a:05:22: d2:4c:75:a6:85:1f:c9:97:10:90:6b:56:c4:83:d0: b2:55:ff:ae:c3:51:0c:67:0c:b8:5c:e3:ad:77:c5: 4a:35:8e:76:56:ce:24:f3:5e:2b:a8:81:6c:97:3c: e6:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:E0:04:66:43:61:4C:71:9A:91:CB:5B:5B:FF:F0:B6:D2:72:6D:9A X509v3 Authority Key Identifier: keyid:BB:C1:03:56:1A:FD:7A:93:03:6D:1C:72:DD:4C:0A:7C:2A:4E:29:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:7d:70:20:be:eb:93:9c:21:b3:20:1c:55:3c:4a:3b:55:fb: ab:1b:fc:e4:11:88:2c:eb:08:3d:87:15:c2:c8:9e:5d:e7:eb: 6e:66:1b:40:61:9e:91:5e:cb:40:3a:c0:ed:4b:4c:20:c0:63: fc:0a:ae:94:20:9b:49:6e:26:92:83:c1:16:25:7f:10:75:94: 59:d4:ae:95:68:61:4f:f8:cc:c6:ce:49:8a:aa:3c:86:0d:02: f4:fa:30:1a:d3:e2:a3:e8:f0:55:6e:3b:a7:f0:9b:96:fd:ad: f0:97:03:00:ff:ee:e1:0f:ba:92:f1:65:58:09:a9:d8:10:4e: 67:55:0f:e6:84:00:de:b9:d1:c6:2b:2b:22:6b:6d:57:ad:4e: 57:99:00:d6:1d:40:2b:42:05:fe:44:48:6d:14:c7:72:62:14: 91:24:4a:5d:01:b3:4c:a6:36:a0:f1:08:5f:0f:1b:ad:3f:ef: 04:3e:49:d8:07:9f:45:69:db:da:0b:2e:0a:bf:32:56:b3:24: a5:0c:54:6a:aa:ed:8c:61:05:24:f3:73:a5:a8:5a:9d:d9:54: 97:12:43:cf:6c:cf:c2:75:eb:c8:cb:88:1c:f1:4a:cf:9f:43: e9:ff:a5:dc:58:c4:55:a3:b5:30:3f:c0:12:dd:28:6c:6a:d7: ce:46:14:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjI3N0QxMTAvBgNVBAUTKEJCQzEwMzU2MUFGRDdBOTMwMzZEMUM3MkRENEMwQTdD MkE0RTI5Q0UwHhcNMjUwODA4MjIzMzM3WhcNMjUwODE1MjIzMzM3WjAYMRYwFAYD VQQDEw02ODk2N2I0MS0wOTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAue9xcS6nZTBj2YK9n9U2ZHfpYW2tJzlUURYjqStzJjD0utlJiuOzAozZ0cgL 8NDgft2uOt+zDav4xPpGv7TJsJYYuh3CM4I4T1SI05dbdujhrnnsoLm64AKBysBH psYfJ59TZMI2ULR1k2PhNtCm2DRNbAkBx2rtJ/M/b+e3BEA4Eb9Qx79/4kcnzUCx RHvyExafC91Ypu+6nbLw2GVo+qiB3qqwkBiVDEiVx5GEO0RWn2andBEPH1OabEbF xKWp97PJS6oxsM156p+Ps86KBSLSTHWmhR/JlxCQa1bEg9CyVf+uw1EMZwy4XOOt d8VKNY52Vs4k814rqIFslzzmqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD3gBGZD YUxxmpHLW1v/8LbScm2aMB8GA1UdIwQYMBaAFLvBA1Ya/XqTA20cct1MCnwqTinO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjc3RC83OEExRDA4RThE NkIxMUVCOTg0MEUwNUZDNEY5QUUwMi91OEVEVmhyOWVwTURiUnh5M1V3S2ZDcE9L YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3U4RURWaHI5ZXBNRGJSeHkzVXdLZkNwT0tjNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Mjc3RC83OEExRDA4RThENkIxMUVCOTg0MEUwNUZDNEY5QUUwMi91OEVEVmhyOWVw TURiUnh5M1V3S2ZDcE9LYzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+fXAgvuuTnCGzIBxVPEo7VfurG/zkEYgs6wg9hxXCyJ5d5+tuZhtA YZ6RXstAOsDtS0wgwGP8Cq6UIJtJbiaSg8EWJX8QdZRZ1K6VaGFP+MzGzkmKqjyG DQL0+jAa0+Kj6PBVbjun8JuW/a3wlwMA/+7hD7qS8WVYCanYEE5nVQ/mhADeudHG Kysia21XrU5XmQDWHUArQgX+REhtFMdyYhSRJEpdAbNMpjag8QhfDxutP+8EPknY B59FadvaCy4KvzJWsySlDFRqqu2MYQUk83OlqFqd2VSXEkPPbM/CdevIy4gc8UrP n0Pp/6XcWMRVo7UwP8AS3ShsatfORhQJ -----END CERTIFICATE-----Generated at Sun Aug 10 16:09:05 2025 by rpki-client