$ rpki-client -vvf rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft File: -8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft (raw, json) Hash identifier: Yjm/x+OfqNXbWKetvyr0ZYYSjJf4NlQo3g6Lst+wJDc= Subject key identifier: EE:B4:4B:B9:DE:51:C3:A0:68:F9:7B:E5:CA:E2:97:BA:C1:84:39:5E Authority key identifier: FB:C5:5B:2C:0B:E0:AB:23:47:48:FB:C3:61:54:7F:64:BF:A7:51:97 Certificate issuer: /CN=A91984AC/serialNumber=FBC55B2C0BE0AB234748FBC361547F64BFA75197 Certificate serial: FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft Manifest number: F5 Signing time: Sat 19 Jul 2025 05:30:52 +0000 Manifest this update: Sat 19 Jul 2025 05:30:52 +0000 Manifest next update: Sat 26 Jul 2025 05:30:52 +0000 Files and hashes: 1: -8VbLAvgqyNHSPvDYVR_ZL-nUZc.crl (hash: D00rhTtaREp/JcTt9cAAa17GAUynnZu+RENqYNvCWzY=) 2: 47610B18F5A811EEA84E8049C4F9AE02.roa (hash: oDkekcVc24g24l9w3pqtjUZRiCpSkPIIazs9r2Z2ZIs=) 3: 628C9174B6E011EF87D3F60CC4F9AE02.roa (hash: 66xBTvofN0kw93P5VictZxaCnVByR33mxLgf2xLdWgQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.crl rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:30:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 253 (0xfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91984AC, serialNumber=FBC55B2C0BE0AB234748FBC361547F64BFA75197 Validity Not Before: Jul 19 05:30:52 2025 GMT Not After : Jul 26 05:30:52 2025 GMT Subject: CN=687b2d8c-d930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:96:2a:1e:b2:28:c6:36:f0:1c:e7:45:96:ab: a4:67:bc:17:db:b9:40:91:33:ff:33:54:ff:9b:2e: 34:7d:ca:c1:f4:c6:68:9d:15:20:f4:b7:33:85:f1: 75:c4:51:3c:b4:73:26:8d:f5:30:d9:5d:40:1c:09: 9b:84:40:62:bc:58:f8:b8:bc:d5:d0:00:15:f1:f5: 6c:3c:27:a4:cf:28:5b:9d:87:58:73:6e:72:83:15: 71:7e:a0:eb:6b:bb:23:88:05:75:28:2c:0c:5e:03: 85:51:73:e7:68:c0:ad:0e:40:30:af:0f:6e:45:56: 23:0a:47:6a:64:ca:1a:93:76:8b:23:3d:c4:2a:f3: 62:9f:d1:9d:43:18:b4:c7:f5:5a:83:04:96:7d:12: 17:55:53:8b:8e:27:ed:9b:0c:85:e4:19:02:02:72: 8c:56:32:87:b9:ce:d8:e3:8c:7c:54:f2:54:0a:bf: 56:86:ce:a2:9d:be:16:a7:9d:e2:fe:28:5a:5b:5e: a4:82:64:05:75:e7:3c:16:4a:0f:e0:2f:7e:2c:61: ae:5b:6c:cf:b6:d6:4b:d5:e9:e4:50:31:96:46:ac: 61:ea:d9:33:f8:fb:db:52:e1:13:08:40:c4:da:12: 43:24:5c:aa:00:97:a3:4d:55:9b:da:6f:17:41:39: 7e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:B4:4B:B9:DE:51:C3:A0:68:F9:7B:E5:CA:E2:97:BA:C1:84:39:5E X509v3 Authority Key Identifier: keyid:FB:C5:5B:2C:0B:E0:AB:23:47:48:FB:C3:61:54:7F:64:BF:A7:51:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:95:0d:1a:ba:9a:94:c3:8a:8f:d9:83:d1:eb:23:ad:8a:80: 38:5f:9d:9c:6b:5a:8d:64:6c:4b:a8:02:64:c9:54:99:c8:3e: ba:12:73:01:39:a0:b1:8b:5e:5a:4c:de:57:89:fe:6c:06:bc: a4:58:bf:27:46:08:0d:2b:fc:c2:6d:73:27:ac:00:3a:fa:e8: d7:3a:0f:11:b7:a8:6d:fc:0c:13:b5:b0:b9:1b:bd:f1:c5:51: a6:ab:92:4b:c4:ff:c2:54:bc:d9:9d:b9:db:10:19:c5:ac:31: 04:65:9a:ae:ec:8e:c6:35:2d:4f:00:3f:6e:72:55:0d:98:12: aa:09:91:96:9a:74:d7:6c:c8:45:4d:47:39:70:61:4d:d0:f6: 15:91:35:67:d9:27:bd:86:cb:b6:1a:92:64:63:2f:3a:6f:a1: 1d:da:04:ad:1f:67:15:23:67:bd:4c:0c:f9:05:f0:63:5e:14: 7b:58:72:b1:3b:07:92:25:83:28:15:e0:eb:75:9c:c8:78:ec: 10:45:28:5d:d6:58:03:95:9d:64:78:ac:5c:34:e5:b9:c1:69: f3:05:8b:7a:e9:2a:4a:2e:4f:09:47:7b:d9:ac:39:a7:a7:15: bb:9a:c4:13:7c:c3:d4:38:b8:83:43:9a:2a:a7:84:58:ec:85: 3e:a2:5b:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg0QUMxMTAvBgNVBAUTKEZCQzU1QjJDMEJFMEFCMjM0NzQ4RkJDMzYxNTQ3RjY0 QkZBNzUxOTcwHhcNMjUwNzE5MDUzMDUyWhcNMjUwNzI2MDUzMDUyWjAYMRYwFAYD VQQDEw02ODdiMmQ4Yy1kOTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6pYqHrIoxjbwHOdFlqukZ7wX27lAkTP/M1T/my40fcrB9MZonRUg9LczhfF1 xFE8tHMmjfUw2V1AHAmbhEBivFj4uLzV0AAV8fVsPCekzyhbnYdYc25ygxVxfqDr a7sjiAV1KCwMXgOFUXPnaMCtDkAwrw9uRVYjCkdqZMoak3aLIz3EKvNin9GdQxi0 x/VagwSWfRIXVVOLjiftmwyF5BkCAnKMVjKHuc7Y44x8VPJUCr9Whs6inb4Wp53i /ihaW16kgmQFdec8FkoP4C9+LGGuW2zPttZL1enkUDGWRqxh6tkz+PvbUuETCEDE 2hJDJFyqAJejTVWb2m8XQTl+2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO60S7ne UcOgaPl75cril7rBhDleMB8GA1UdIwQYMBaAFPvFWywL4KsjR0j7w2FUf2S/p1GX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODRBQy82RDAyNkNFQ0Y1 QTExMUVFOThEQkNEMTFDNEY5QUUwMi8tOFZiTEF2Z3F5TkhTUHZEWVZSX1pMLW5V WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy04VmJMQXZncXlOSFNQdkRZVlJfWkwtblVaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODRBQy82RDAyNkNFQ0Y1QTExMUVFOThEQkNEMTFDNEY5QUUwMi8tOFZiTEF2Z3F5 TkhTUHZEWVZSX1pMLW5VWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKlQ0aupqUw4qP2YPR6yOtioA4X52ca1qNZGxLqAJkyVSZyD66EnMB OaCxi15aTN5Xif5sBrykWL8nRggNK/zCbXMnrAA6+ujXOg8Rt6ht/AwTtbC5G73x xVGmq5JLxP/CVLzZnbnbEBnFrDEEZZqu7I7GNS1PAD9uclUNmBKqCZGWmnTXbMhF TUc5cGFN0PYVkTVn2Se9hsu2GpJkYy86b6Ed2gStH2cVI2e9TAz5BfBjXhR7WHKx OweSJYMoFeDrdZzIeOwQRShd1lgDlZ1keKxcNOW5wWnzBYt66SpKLk8JR3vZrDmn pxW7msQTfMPUOLiDQ5oqp4RY7IU+olvD -----END CERTIFICATE-----Generated at Sun Jul 20 07:35:20 2025 by rpki-client