$ rpki-client -vvf rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft File: m8FpAIAncr5ikmDEqu1fP-9-s-c.mft (raw, json) Hash identifier: viApUXo+KaLbwKis20lpgQ7IG/t9NJ1ENVXHlIoceU8= Subject key identifier: C4:1F:97:E3:91:03:E8:7E:0A:DC:A8:3E:33:B3:9B:4B:C3:0E:79:B5 Authority key identifier: 9B:C1:69:00:80:27:72:BE:62:92:60:C4:AA:ED:5F:3F:EF:7E:B3:E7 Certificate issuer: /CN=A91F91EB/serialNumber=9BC16900802772BE629260C4AAED5F3FEF7EB3E7 Certificate serial: 0CE4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8FpAIAncr5ikmDEqu1fP-9-s-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft Manifest number: 0CC1 Signing time: Sat 02 Aug 2025 18:23:09 +0000 Manifest this update: Sat 02 Aug 2025 18:23:08 +0000 Manifest next update: Sat 09 Aug 2025 18:23:08 +0000 Files and hashes: 1: m8FpAIAncr5ikmDEqu1fP-9-s-c.crl (hash: DSl7a3B/XT14jlUjK3UWwrvcN6CLZxXOyl9Rh4lNB4A=) 2: 827D7766AACC11EA8113F532C4F9AE02.roa (hash: oguEqhYGf6Whv8PqzIUzLfsgAvX4wE5CZ9/lAxwLLvs=) 3: 81CA43EEAD7811EB905E2C41C4F9AE02.roa (hash: twcj5cD600ozwl+LH65FC7h60q+thDGwgx4YQo1a3TQ=) 4: 7F4CB00EAAE811EA8412810FC4F9AE02.roa (hash: C+pA9vRBNRgX2w4BOkt7QtiabsJexJBu+hnduYyIgLA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.crl rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8FpAIAncr5ikmDEqu1fP-9-s-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 18:23:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3300 (0xce4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F91EB, serialNumber=9BC16900802772BE629260C4AAED5F3FEF7EB3E7 Validity Not Before: Aug 2 18:23:08 2025 GMT Not After : Aug 9 18:23:08 2025 GMT Subject: CN=688e578d-49e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:bc:27:a0:de:38:b3:4b:45:f2:db:33:c4:c6: 06:b5:44:9e:d9:6b:a5:a2:06:ad:07:71:c5:97:b3: 90:93:e9:38:d3:3c:7e:fa:5f:91:10:e3:28:c6:35: 27:73:77:5d:38:2a:4c:27:3f:2c:6d:07:8d:d8:5b: 8f:a7:d2:96:4d:a0:1a:82:e1:b9:4c:7a:22:37:90: 79:ea:23:f5:8d:24:fe:fd:77:5b:8c:c8:63:c5:ce: 29:fb:37:42:99:ae:b1:09:35:ce:13:c1:7a:43:f2: 86:bd:16:53:f0:90:f4:62:50:e4:dc:36:38:dd:13: 72:b6:fd:43:61:e5:9b:0f:5e:b2:4f:ed:f2:89:76: d7:29:11:51:6d:69:16:84:3e:65:8d:62:3e:f5:77: d0:f7:1a:ae:db:dc:70:8c:98:df:e4:4b:87:75:ee: b9:0e:c2:d6:ef:7b:f6:11:74:1b:e3:01:96:5e:06: 85:d1:02:2b:a1:b1:4c:81:82:bc:47:ca:66:ea:6f: 17:69:37:39:36:52:57:7f:5d:4f:14:9f:82:78:ab: e0:d8:67:4e:1b:9a:b4:ed:4c:62:d9:f2:6e:99:11: eb:a8:54:f9:0a:13:e9:0e:96:fb:c4:d5:c3:af:72: a7:01:8f:0f:b0:cd:02:69:95:c1:c5:a0:b3:97:fd: 47:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:1F:97:E3:91:03:E8:7E:0A:DC:A8:3E:33:B3:9B:4B:C3:0E:79:B5 X509v3 Authority Key Identifier: keyid:9B:C1:69:00:80:27:72:BE:62:92:60:C4:AA:ED:5F:3F:EF:7E:B3:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8FpAIAncr5ikmDEqu1fP-9-s-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:0f:e5:df:62:13:bc:60:ab:e1:d9:1d:21:9d:10:5f:e4:47: 00:e4:ca:ec:38:a2:24:55:4a:4b:de:05:e7:e5:a0:dc:b6:2d: ed:e8:94:be:73:25:89:c1:83:5e:f2:db:c3:4a:60:70:5d:97: 8d:bf:44:e1:0a:59:8d:d6:6a:ee:4c:63:6b:b4:ac:22:b2:c0: 11:ee:7d:dd:78:ad:4e:fe:c2:49:4d:b9:13:c7:0b:b1:95:cd: fb:2c:08:61:17:97:c7:41:3d:45:28:cb:14:62:a0:4f:23:75: 88:96:fb:f7:c9:1f:1b:ef:e1:5c:67:51:be:0d:8a:3c:3d:62: 4e:ce:1b:f7:c7:ba:37:dc:bf:5f:13:4c:f8:cb:a0:0b:8f:68: ad:b4:01:37:e8:dd:c3:04:72:3b:80:95:18:39:4c:7c:70:39: 07:1b:74:91:a1:d5:8e:5e:76:6a:28:13:fb:28:53:56:0b:d3: f4:04:46:c3:b5:b1:76:4a:ec:6e:df:73:e3:71:81:1f:ac:f1: ce:72:14:b9:8f:df:1c:53:44:c3:cb:6b:c4:12:5b:e3:c1:98: f8:75:f4:15:19:b8:72:2b:0f:59:7a:92:d3:5a:cb:74:e2:e8: b1:09:f1:2b:98:0e:7c:8d:4b:d0:ab:41:ab:e2:87:90:f3:00: 7d:fc:6f:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjkxRUIxMTAvBgNVBAUTKDlCQzE2OTAwODAyNzcyQkU2MjkyNjBDNEFBRUQ1RjNG RUY3RUIzRTcwHhcNMjUwODAyMTgyMzA4WhcNMjUwODA5MTgyMzA4WjAYMRYwFAYD VQQDEw02ODhlNTc4ZC00OWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA17wnoN44s0tF8tszxMYGtUSe2WulogatB3HFl7OQk+k40zx++l+REOMoxjUn c3ddOCpMJz8sbQeN2FuPp9KWTaAaguG5THoiN5B56iP1jST+/XdbjMhjxc4p+zdC ma6xCTXOE8F6Q/KGvRZT8JD0YlDk3DY43RNytv1DYeWbD16yT+3yiXbXKRFRbWkW hD5ljWI+9XfQ9xqu29xwjJjf5EuHde65DsLW73v2EXQb4wGWXgaF0QIrobFMgYK8 R8pm6m8XaTc5NlJXf11PFJ+CeKvg2GdOG5q07Uxi2fJumRHrqFT5ChPpDpb7xNXD r3KnAY8PsM0CaZXBxaCzl/1HcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMQfl+OR A+h+CtyoPjOzm0vDDnm1MB8GA1UdIwQYMBaAFJvBaQCAJ3K+YpJgxKrtXz/vfrPn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTFFQi81MEVGRTA3NEY3 MDUxMUU5QURCQTQ1MUZDNEY5QUUwMi9tOEZwQUlBbmNyNWlrbURFcXUxZlAtOS1z LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL204RnBBSUFuY3I1aWttREVxdTFmUC05LXMtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTFFQi81MEVGRTA3NEY3MDUxMUU5QURCQTQ1MUZDNEY5QUUwMi9tOEZwQUlBbmNy NWlrbURFcXUxZlAtOS1zLWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmD+XfYhO8YKvh2R0hnRBf5EcA5MrsOKIkVUpL3gXn5aDcti3t6JS+ cyWJwYNe8tvDSmBwXZeNv0ThClmN1mruTGNrtKwissAR7n3deK1O/sJJTbkTxwux lc37LAhhF5fHQT1FKMsUYqBPI3WIlvv3yR8b7+FcZ1G+DYo8PWJOzhv3x7o33L9f E0z4y6ALj2ittAE36N3DBHI7gJUYOUx8cDkHG3SRodWOXnZqKBP7KFNWC9P0BEbD tbF2Suxu33PjcYEfrPHOchS5j98cU0TDy2vEElvjwZj4dfQVGbhyKw9ZepLTWst0 4uixCfErmA58jUvQq0Gr4oeQ8wB9/G+u -----END CERTIFICATE-----Generated at Mon Aug 4 11:15:44 2025 by rpki-client