$ rpki-client -vvf rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.mft File: 83GJVwUMS84UpOw46qzunHQkTE8.mft (raw, json) Hash identifier: WNrQntwd9jmZyopRnH472/L3DVbRZ3PkvBCRmbSOSFc= Subject key identifier: 9D:38:07:F5:9C:92:41:40:77:47:50:DE:A9:54:0C:FB:83:E8:26:2F Authority key identifier: F3:71:89:57:05:0C:4B:CE:14:A4:EC:38:EA:AC:EE:9C:74:24:4C:4F Certificate issuer: /CN=A91426E8/serialNumber=F3718957050C4BCE14A4EC38EAACEE9C74244C4F Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83GJVwUMS84UpOw46qzunHQkTE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.mft Manifest number: 20 Signing time: Tue 29 Jul 2025 08:28:19 +0000 Manifest this update: Tue 29 Jul 2025 08:28:18 +0000 Manifest next update: Tue 05 Aug 2025 08:28:18 +0000 Files and hashes: 1: 83GJVwUMS84UpOw46qzunHQkTE8.crl (hash: i/aOKkmNdlB7IvCsUx9EvhHkT4Yk+KhyIhgKhHgmCZs=) 2: F34C44FC3F7511F0A963EE11C4F9AE02.roa (hash: 0lT1AyOiOXe+BKO1a/7QwW0Ghznoxt7Inz7Ksh5dWQc=) 3: B240CFC23F8A11F0B3F03A67C4F9AE02.roa (hash: sM8LsbsoEf9GFMasQUHdxFdj0W4Z3+oN5Sb3It4tBgc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.crl rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83GJVwUMS84UpOw46qzunHQkTE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 05 Aug 2025 08:28:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91426E8, serialNumber=F3718957050C4BCE14A4EC38EAACEE9C74244C4F Validity Not Before: Jul 29 08:28:18 2025 GMT Not After : Aug 5 08:28:18 2025 GMT Subject: CN=68888623-9f46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a1:e7:78:24:7a:b0:f0:7a:6b:9a:96:c8:25: c8:a2:2b:89:28:22:7f:2e:fa:ac:54:38:46:36:bd: 88:3b:8f:08:e5:ff:bb:5a:25:16:c9:ea:84:b0:9e: 49:79:80:63:5f:78:bf:45:2a:a5:00:b9:36:35:ad: 46:9e:92:b5:4b:ac:8a:a2:8a:83:05:e3:a0:35:a6: 84:e6:c8:3c:bc:f7:95:c5:05:97:55:d5:8e:46:39: 59:b7:72:d3:12:4e:83:db:c9:cd:5d:b7:3f:fd:cc: 79:a8:05:20:c5:f0:d4:38:b3:3c:fc:94:0f:32:e0: f1:6e:db:c4:c9:5d:a9:a4:3d:37:21:d4:5b:2d:ee: ca:76:93:9f:87:24:e9:9d:4e:94:36:7f:c5:04:33: 23:ee:74:69:41:e0:07:92:fc:a0:40:64:0b:1a:6f: 9a:71:ff:16:d7:6d:c4:37:bc:cf:fa:1b:47:bf:87: 83:f6:2c:6d:e5:34:17:07:29:8f:5b:2f:37:b3:95: fa:d0:b8:78:c9:d4:7a:a4:39:43:50:87:e4:2c:73: 51:f2:59:ca:74:8a:b1:73:07:f8:81:7d:74:c3:60: 3d:b8:a2:c3:5f:2c:c3:d8:44:17:5d:a6:79:6e:18: fd:80:be:c8:84:44:a9:d6:1c:ec:39:b8:8e:f6:51: 99:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:38:07:F5:9C:92:41:40:77:47:50:DE:A9:54:0C:FB:83:E8:26:2F X509v3 Authority Key Identifier: keyid:F3:71:89:57:05:0C:4B:CE:14:A4:EC:38:EA:AC:EE:9C:74:24:4C:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83GJVwUMS84UpOw46qzunHQkTE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:78:e1:45:82:4e:e5:31:71:6e:69:60:b2:b3:bf:5a:52:70: df:4d:17:9a:d4:d0:58:21:0d:5b:1e:25:c1:b1:be:ee:db:7d: a6:5a:b8:92:12:a4:32:65:31:67:0c:67:49:96:62:9c:28:24: ce:ab:11:b7:2b:79:e9:fb:19:af:bd:1e:72:74:99:9f:09:a5: 45:87:f3:47:47:49:9b:8f:7f:9e:80:ae:eb:dd:0e:8a:bd:aa: 4e:ff:d4:02:c1:49:40:35:a4:cb:ab:78:14:63:62:19:b8:ea: c0:88:70:37:f4:84:f7:6b:02:50:65:06:75:79:e0:6e:5a:0c: 73:08:7b:4d:b7:94:6d:5b:94:b5:bf:65:b1:ca:8d:f7:d7:db: 10:2f:ca:1d:ce:04:d3:b9:84:91:2e:35:ca:5c:97:37:d3:e6: 1a:59:88:11:bb:c7:f5:d1:29:9f:31:56:30:6c:79:99:ba:a7: f3:1f:0b:e4:2b:36:7c:0b:84:5e:b2:18:72:cd:d8:9c:8d:9b: b5:36:62:42:5f:58:19:28:b0:7c:45:b3:8f:65:30:10:49:42: bc:f2:0f:eb:28:af:32:5d:2f:1a:b5:6f:54:f7:dc:5d:da:e0: f8:63:30:52:ac:78:36:1e:b3:c4:9a:e1:2c:0c:ec:f7:77:a1: 9f:4e:0c:93 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MjZFODExMC8GA1UEBRMoRjM3MTg5NTcwNTBDNEJDRTE0QTRFQzM4RUFBQ0VFOUM3 NDI0NEM0RjAeFw0yNTA3MjkwODI4MThaFw0yNTA4MDUwODI4MThaMBgxFjAUBgNV BAMTDTY4ODg4NjIzLTlmNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1oed4JHqw8HprmpbIJciiK4koIn8u+qxUOEY2vYg7jwjl/7taJRbJ6oSwnkl5 gGNfeL9FKqUAuTY1rUaekrVLrIqiioMF46A1poTmyDy895XFBZdV1Y5GOVm3ctMS ToPbyc1dtz/9zHmoBSDF8NQ4szz8lA8y4PFu28TJXamkPTch1Fst7sp2k5+HJOmd TpQ2f8UEMyPudGlB4AeS/KBAZAsab5px/xbXbcQ3vM/6G0e/h4P2LG3lNBcHKY9b LzezlfrQuHjJ1HqkOUNQh+Qsc1HyWcp0irFzB/iBfXTDYD24osNfLMPYRBddpnlu GP2AvsiERKnWHOw5uI72UZnhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnTgH9ZyS QUB3R1DeqVQM+4PoJi8wHwYDVR0jBBgwFoAU83GJVwUMS84UpOw46qzunHQkTE8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyNkU4LzhENUFBMTdBM0Y3 NTExRjA5NjIzMkExMUM0RjlBRTAyLzgzR0pWd1VNUzg0VXBPdzQ2cXp1bkhRa1RF OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvODNHSlZ3VU1TODRVcE93NDZxenVuSFFrVEU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy NkU4LzhENUFBMTdBM0Y3NTExRjA5NjIzMkExMUM0RjlBRTAyLzgzR0pWd1VNUzg0 VXBPdzQ2cXp1bkhRa1RFOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACh44UWCTuUxcW5pYLKzv1pScN9NF5rU0FghDVseJcGxvu7bfaZauJIS pDJlMWcMZ0mWYpwoJM6rEbcreen7Ga+9HnJ0mZ8JpUWH80dHSZuPf56AruvdDoq9 qk7/1ALBSUA1pMureBRjYhm46sCIcDf0hPdrAlBlBnV54G5aDHMIe023lG1blLW/ ZbHKjffX2xAvyh3OBNO5hJEuNcpclzfT5hpZiBG7x/XRKZ8xVjBseZm6p/MfC+Qr NnwLhF6yGHLN2JyNm7U2YkJfWBkosHxFs49lMBBJQrzyD+sorzJdLxq1b1T33F3a 4PhjMFKseDYes8Sa4SwM7Pd3oZ9ODJM= -----END CERTIFICATE-----Generated at Wed Jul 30 21:10:25 2025 by rpki-client