$ rpki-client -vvf rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.mft File: 82dKiQfpsa6O4m-c88mcR_dUk0w.mft (raw, json) Hash identifier: coERcJuNNoGnF2zM8DQ5o+fhKxFIHEY2Fl2Hqf0kvk0= Subject key identifier: 43:8B:6A:18:F7:FF:0B:57:F5:01:9C:97:59:A5:50:BB:3C:A5:DB:DB Authority key identifier: F3:67:4A:89:07:E9:B1:AE:8E:E2:6F:9C:F3:C9:9C:47:F7:54:93:4C Certificate issuer: /CN=A91910A8/serialNumber=F3674A8907E9B1AE8EE26F9CF3C99C47F754934C Certificate serial: 03CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/82dKiQfpsa6O4m-c88mcR_dUk0w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.mft Manifest number: 03BD Signing time: Wed 23 Jul 2025 01:08:24 +0000 Manifest this update: Wed 23 Jul 2025 01:08:24 +0000 Manifest next update: Wed 30 Jul 2025 01:08:24 +0000 Files and hashes: 1: 82dKiQfpsa6O4m-c88mcR_dUk0w.crl (hash: yc49hdtUtc2ZqMB1NymCkL/pZY/dAw4XXnF/dpZSZRI=) 2: F47320C4E04111EE8F798E3DC4F9AE02.roa (hash: +qgf84XC7fwqmND33skSgzHGmdhqJ+EK/64iZ97m69g=) 3: 5C27D4DCB0DB11EC87206C69C4F9AE02.roa (hash: M3aykX0j4vteJ7Aeu69jjSSSHCYOZs36DtkdcU8NJ0w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.crl rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/82dKiQfpsa6O4m-c88mcR_dUk0w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 972 (0x3cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91910A8, serialNumber=F3674A8907E9B1AE8EE26F9CF3C99C47F754934C Validity Not Before: Jul 23 01:08:24 2025 GMT Not After : Jul 30 01:08:24 2025 GMT Subject: CN=68803608-78ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bb:91:9f:fd:be:9a:67:64:8a:a3:ed:a1:c7: 70:8b:82:f3:c9:6b:8b:be:8d:fe:1c:45:a4:4a:ac: d8:e4:f3:8e:79:89:b2:18:33:8b:4e:4d:e9:c9:1c: 61:4e:ad:b3:64:d7:77:5e:c5:bf:d2:d5:87:f2:fb: c1:a6:14:eb:9d:5c:4d:e1:d4:7f:34:57:ae:5f:8b: 06:0d:ff:e6:63:1d:e1:48:29:5c:06:f6:91:bb:e7: e5:e5:df:99:6f:65:66:43:d7:9c:a0:0f:84:48:b8: 6f:c1:6e:de:5b:66:40:5c:00:27:19:24:92:74:be: 0c:5e:39:c5:d5:f4:75:c6:6d:cf:78:14:5b:68:71: bd:ae:44:02:0b:e1:b8:a9:f7:95:35:60:48:f9:7d: a8:8d:2e:0f:af:73:7d:52:94:2a:68:9e:f4:31:b8: 0b:67:7f:68:5a:11:39:7c:84:2b:a2:b4:09:d0:d6: f6:6c:6e:67:c2:87:54:b8:94:94:70:a9:ac:c7:89: ed:00:e4:10:19:6d:9d:31:5d:77:1d:cf:66:12:58: a3:9d:56:84:b6:82:25:6b:27:b8:96:af:f9:1e:4e: 43:f6:b6:96:42:d8:58:13:6e:80:f6:28:a8:11:69: 6f:43:cb:31:79:6e:5b:e5:10:ab:c6:c9:a6:19:6c: b7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:8B:6A:18:F7:FF:0B:57:F5:01:9C:97:59:A5:50:BB:3C:A5:DB:DB X509v3 Authority Key Identifier: keyid:F3:67:4A:89:07:E9:B1:AE:8E:E2:6F:9C:F3:C9:9C:47:F7:54:93:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/82dKiQfpsa6O4m-c88mcR_dUk0w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:f3:cd:f9:5f:7d:a6:27:4a:f0:12:46:df:0b:d1:e4:8d:64: a5:f7:e2:81:10:a3:b9:bd:ae:2c:57:8d:b2:b7:e4:2a:a6:9b: 60:ed:68:da:61:7e:6b:a6:f3:f6:73:69:23:05:ed:93:f7:1a: c5:e6:24:c9:2d:8c:96:2d:ff:64:72:0f:c1:e9:d4:a9:33:2d: a5:c8:3b:02:fc:56:b9:7a:0c:ea:73:69:df:a1:43:eb:ef:72: a9:55:c7:ee:f7:5f:19:cc:a4:75:50:10:35:a1:61:e1:cf:9a: ed:ac:e1:b4:cd:4e:fb:de:41:d0:c8:7b:10:3b:78:72:35:69: b2:ef:cc:b5:14:f4:88:ac:12:de:74:e5:4f:bd:7c:cc:0d:45: cf:c4:53:33:5c:c3:1c:86:62:0b:cf:2b:49:ae:4d:89:b8:ad: 4b:f4:56:bf:08:d5:b1:85:dd:75:8b:4b:c3:49:c8:59:82:df: 3e:7d:9c:1a:b4:ac:b4:d9:c6:28:c0:46:65:d0:f1:08:7d:71: 75:14:82:6f:9f:0a:f3:b3:21:a4:2f:12:6e:db:f2:cc:cd:66: 3b:09:fb:19:14:ce:7c:a5:2e:f0:94:6b:b1:51:0f:fa:34:c1: 02:08:26:22:69:51:7a:ce:2b:8c:aa:ed:90:b9:7c:0a:64:42: 83:03:c1:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEwQTgxMTAvBgNVBAUTKEYzNjc0QTg5MDdFOUIxQUU4RUUyNkY5Q0YzQzk5QzQ3 Rjc1NDkzNEMwHhcNMjUwNzIzMDEwODI0WhcNMjUwNzMwMDEwODI0WjAYMRYwFAYD VQQDEw02ODgwMzYwOC03OGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArLuRn/2+mmdkiqPtocdwi4LzyWuLvo3+HEWkSqzY5POOeYmyGDOLTk3pyRxh Tq2zZNd3XsW/0tWH8vvBphTrnVxN4dR/NFeuX4sGDf/mYx3hSClcBvaRu+fl5d+Z b2VmQ9ecoA+ESLhvwW7eW2ZAXAAnGSSSdL4MXjnF1fR1xm3PeBRbaHG9rkQCC+G4 qfeVNWBI+X2ojS4Pr3N9UpQqaJ70MbgLZ39oWhE5fIQrorQJ0Nb2bG5nwodUuJSU cKmsx4ntAOQQGW2dMV13Hc9mElijnVaEtoIlaye4lq/5Hk5D9raWQthYE26A9iio EWlvQ8sxeW5b5RCrxsmmGWy3NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEOLahj3 /wtX9QGcl1mlULs8pdvbMB8GA1UdIwQYMBaAFPNnSokH6bGujuJvnPPJnEf3VJNM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTBBOC83QjIwMDczRTlD NEUxMUVDQjE3NDhCNjhDNEY5QUUwMi84MmRLaVFmcHNhNk80bS1jODhtY1JfZFVr MHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgyZEtpUWZwc2E2TzRtLWM4OG1jUl9kVWswdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTBBOC83QjIwMDczRTlDNEUxMUVDQjE3NDhCNjhDNEY5QUUwMi84MmRLaVFmcHNh Nk80bS1jODhtY1JfZFVrMHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA68835X32mJ0rwEkbfC9HkjWSl9+KBEKO5va4sV42yt+Qqpptg7Wja YX5rpvP2c2kjBe2T9xrF5iTJLYyWLf9kcg/B6dSpMy2lyDsC/Fa5egzqc2nfoUPr 73KpVcfu918ZzKR1UBA1oWHhz5rtrOG0zU773kHQyHsQO3hyNWmy78y1FPSIrBLe dOVPvXzMDUXPxFMzXMMchmILzytJrk2JuK1L9Fa/CNWxhd11i0vDSchZgt8+fZwa tKy02cYowEZl0PEIfXF1FIJvnwrzsyGkLxJu2/LMzWY7CfsZFM58pS7wlGuxUQ/6 NMECCCYiaVF6ziuMqu2QuXwKZEKDA8HK -----END CERTIFICATE-----Generated at Wed Jul 23 12:49:15 2025 by rpki-client