$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft File: 81QJOUhm-0CKDRiOC30AzFpzlI4.mft (raw, json) Hash identifier: j1XLHS3+usn6hvani0oMV0ssLO1vEf2eP/N7yiR7nMM= Subject key identifier: D0:E2:3A:2E:3C:AA:1D:3C:64:B7:2B:CF:B1:03:09:67:B0:14:3E:C8 Authority key identifier: F3:54:09:39:48:66:FB:40:8A:0D:18:8E:0B:7D:00:CC:5A:73:94:8E Certificate issuer: /CN=A91FDBE8/serialNumber=F35409394866FB408A0D188E0B7D00CC5A73948E Certificate serial: 07C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft Manifest number: 07AF Signing time: Fri 08 Aug 2025 21:46:15 +0000 Manifest this update: Fri 08 Aug 2025 21:46:15 +0000 Manifest next update: Fri 15 Aug 2025 21:46:15 +0000 Files and hashes: 1: 81QJOUhm-0CKDRiOC30AzFpzlI4.crl (hash: BGnotahnPUDdaYCODYMnJCqde1dozborUla2iUNTRIk=) 2: 06F011A2134B11F0AA41F90AC4F9AE02.roa (hash: kI+JZUIi+oZUN6mABAAqK5EpoqRmpcP+XjoaGqbVys8=) 3: 407DD9CED09211EE843A0F22C4F9AE02.roa (hash: DYjETZSzXLPZu6k/scGKmt/lU3UqCl+3wtEbXL9L8Pg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.crl rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1984 (0x7c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDBE8, serialNumber=F35409394866FB408A0D188E0B7D00CC5A73948E Validity Not Before: Aug 8 21:46:15 2025 GMT Not After : Aug 15 21:46:15 2025 GMT Subject: CN=68967027-cbd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:44:5f:a2:df:41:84:26:c9:d6:0f:8f:3a:29: 65:67:ba:38:6d:24:d9:73:73:b8:e7:4e:f0:78:63: 94:cd:52:00:ab:50:2e:a5:5f:c0:85:83:dd:df:e2: ad:5d:af:d0:57:92:02:a6:04:51:c6:2a:6f:41:31: 2b:2a:14:8f:d6:06:98:7f:3a:3c:a6:b2:68:88:e7: ba:61:27:20:63:5b:1b:7e:d2:c0:39:69:f2:bc:50: 4f:53:fa:5c:44:85:03:a9:19:29:6a:d7:ca:0c:37: 99:34:d4:59:12:31:ff:1d:6f:c7:09:71:9b:86:34: 27:28:fe:8d:70:12:69:9a:39:9a:fb:24:80:1d:60: 18:5d:96:2d:54:25:ee:bf:16:37:92:b9:1f:f0:28: 04:87:ea:9c:19:8b:6c:27:9f:ef:f7:75:e6:ab:83: bd:f4:f3:93:c5:eb:e7:72:9c:db:f7:4c:e5:f7:8c: 42:a5:b8:da:da:f3:3e:67:d1:ac:00:62:d3:c4:71: 97:0e:64:04:52:8d:45:ac:6f:15:bf:ba:dc:e0:28: 8f:68:3a:a7:25:a6:17:29:2a:7b:13:6e:c4:ce:9b: da:b6:d6:31:4d:60:64:03:9a:3b:fe:3f:30:f8:c3: 42:f3:06:bf:06:e5:cb:ab:3b:0c:a9:60:44:db:30: 02:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:E2:3A:2E:3C:AA:1D:3C:64:B7:2B:CF:B1:03:09:67:B0:14:3E:C8 X509v3 Authority Key Identifier: keyid:F3:54:09:39:48:66:FB:40:8A:0D:18:8E:0B:7D:00:CC:5A:73:94:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:bf:9b:a6:fc:6e:71:a3:62:43:b1:a7:07:76:19:bb:56:1a: 1b:4c:f5:1d:77:3c:cc:cb:e1:52:9b:76:c0:f3:f4:16:a3:c4: e3:62:ef:59:fb:f2:57:60:06:38:e5:36:93:07:4c:f7:69:1e: 2e:1d:4d:1b:a2:fa:77:fa:6c:6a:6b:2f:43:d8:af:cd:24:74: b2:25:88:1e:3f:86:e8:2f:04:b1:fc:ae:20:54:83:87:29:29: 61:0b:7b:e3:66:6c:05:f2:7f:6d:58:9d:d7:b4:8e:33:3d:88: d8:9d:fd:6c:5c:7f:e6:9a:ac:dd:e7:0b:11:6e:4d:05:c7:ed: c3:65:be:3e:fd:97:c1:db:30:4e:4d:42:87:88:cc:cc:91:41: b7:15:d1:32:ad:ad:80:10:f1:13:0a:5d:57:9b:03:cd:d8:c0: 9c:8b:eb:9e:28:64:12:3f:37:1e:3b:79:7e:f4:af:1a:d7:95: 3c:55:fc:f8:c3:0f:09:5a:28:a1:b9:eb:1c:0b:85:83:a5:4d: 2b:1a:51:03:f7:76:e1:17:19:73:95:8e:b2:bc:13:3a:b7:c0: cc:61:72:bd:97:e4:ca:e2:83:4c:b5:e0:09:4d:e8:f6:19:bd: 9e:8e:57:5f:77:b7:73:b5:f4:0b:ac:0a:7a:01:af:92:02:df: 26:a4:6d:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRCRTgxMTAvBgNVBAUTKEYzNTQwOTM5NDg2NkZCNDA4QTBEMTg4RTBCN0QwMEND NUE3Mzk0OEUwHhcNMjUwODA4MjE0NjE1WhcNMjUwODE1MjE0NjE1WjAYMRYwFAYD VQQDEw02ODk2NzAyNy1jYmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8ERfot9BhCbJ1g+POillZ7o4bSTZc3O4507weGOUzVIAq1AupV/AhYPd3+Kt Xa/QV5ICpgRRxipvQTErKhSP1gaYfzo8prJoiOe6YScgY1sbftLAOWnyvFBPU/pc RIUDqRkpatfKDDeZNNRZEjH/HW/HCXGbhjQnKP6NcBJpmjma+ySAHWAYXZYtVCXu vxY3krkf8CgEh+qcGYtsJ5/v93Xmq4O99POTxevncpzb90zl94xCpbja2vM+Z9Gs AGLTxHGXDmQEUo1FrG8Vv7rc4CiPaDqnJaYXKSp7E27EzpvattYxTWBkA5o7/j8w +MNC8wa/BuXLqzsMqWBE2zACvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNDiOi48 qh08ZLcrz7EDCWewFD7IMB8GA1UdIwQYMBaAFPNUCTlIZvtAig0Yjgt9AMxac5SO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREJFOC85RDM2MzE3ODE1 MkIxMUVCOUJENEVCNDZDNEY5QUUwMi84MVFKT1VobS0wQ0tEUmlPQzMwQXpGcHps STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgxUUpPVWhtLTBDS0RSaU9DMzBBekZwemxJNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REJFOC85RDM2MzE3ODE1MkIxMUVCOUJENEVCNDZDNEY5QUUwMi84MVFKT1VobS0w Q0tEUmlPQzMwQXpGcHpsSTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXv5um/G5xo2JDsacHdhm7VhobTPUddzzMy+FSm3bA8/QWo8TjYu9Z +/JXYAY45TaTB0z3aR4uHU0bovp3+mxqay9D2K/NJHSyJYgeP4boLwSx/K4gVIOH KSlhC3vjZmwF8n9tWJ3XtI4zPYjYnf1sXH/mmqzd5wsRbk0Fx+3DZb4+/ZfB2zBO TUKHiMzMkUG3FdEyra2AEPETCl1XmwPN2MCci+ueKGQSPzceO3l+9K8a15U8Vfz4 ww8JWiihuescC4WDpU0rGlED93bhFxlzlY6yvBM6t8DMYXK9l+TK4oNMteAJTej2 Gb2ejldfd7dztfQLrAp6Aa+SAt8mpG3W -----END CERTIFICATE-----Generated at Sat Aug 9 02:46:26 2025 by rpki-client