$ rpki-client -vvf rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft File: b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft (raw, json) Hash identifier: Hif/GcGcIEOzx0/LXiYhP59BBBcaBsurdPZAqxjUbrQ= Subject key identifier: 82:90:75:42:37:21:DE:E3:84:8B:AB:B7:B5:BF:8E:E2:1F:91:A4:B7 Authority key identifier: 6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8 Certificate issuer: /CN=A91A54FE/serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8 Certificate serial: 0100 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft Manifest number: FA Signing time: Wed 23 Jul 2025 05:35:23 +0000 Manifest this update: Wed 23 Jul 2025 05:35:22 +0000 Manifest next update: Wed 30 Jul 2025 05:35:22 +0000 Files and hashes: 1: b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl (hash: 6rX9NyjIj0P5iBrqJr5RTgYQlfD6S6ZbsROC5BUaIHc=) 2: 4034878C531411F0B5969F4DC4F9AE02.roa (hash: AU3yamyux9/p0ToAAMhAyNL8bseyjrWTlbYkE9w/k9M=) 3: 3F5C47A0531411F0B5969F4DC4F9AE02.roa (hash: mPhmdB3u77MjPIXuTMC6SqVuUpltsogHZVo7FcoDq+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 05:35:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 256 (0x100) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A54FE, serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8 Validity Not Before: Jul 23 05:35:22 2025 GMT Not After : Jul 30 05:35:22 2025 GMT Subject: CN=6880749b-b46e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:9a:85:70:54:4a:83:bf:4f:31:54:e2:49:13: 40:8d:fd:16:0d:2e:00:09:e3:16:c5:ec:b5:cd:6e: 14:ce:27:bf:1b:c7:b7:34:16:12:7f:f4:94:a8:36: 9f:49:9d:d1:c9:82:79:01:f0:9e:2e:fd:9c:6d:31: c9:80:91:cc:95:1d:a9:c9:d3:4e:0a:89:78:c5:0a: 6e:2f:b6:b3:c0:ca:e3:85:74:8b:19:44:d7:06:a7: 19:02:53:15:46:03:7d:7e:5d:de:6d:6a:b0:97:3d: 15:fb:41:70:0f:90:07:3f:5d:1b:9f:c9:5b:0f:87: f6:ff:1a:1b:c3:98:cf:09:bd:f7:e7:6c:41:ef:8f: 21:8c:9c:9a:c4:2d:34:cb:7a:05:0e:93:38:7f:c8: e5:80:b6:d0:ad:b3:44:33:a7:96:f6:35:12:18:66: 40:37:ae:78:56:6d:7c:15:59:be:4b:be:0f:5a:cb: be:ec:db:09:7a:5a:ea:05:0a:a4:28:56:a5:47:a0: 71:4a:c0:92:e0:bc:3a:db:1f:ca:c2:3d:0c:2b:7b: c4:51:1b:47:82:60:66:90:6d:18:b1:31:d9:3e:72: a9:5d:c5:98:68:12:5a:a5:63:1b:55:b3:3c:65:43: bd:0e:1f:88:e1:a0:44:07:e1:97:a4:a4:fa:e7:19: a1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:90:75:42:37:21:DE:E3:84:8B:AB:B7:B5:BF:8E:E2:1F:91:A4:B7 X509v3 Authority Key Identifier: keyid:6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:3a:bd:b9:64:fc:3c:8f:3b:a9:38:52:5c:3c:8f:ee:c7:9c: 33:c8:f3:be:ac:05:fe:20:51:ed:88:cc:60:71:24:b2:e7:6b: f1:48:e3:85:13:6e:b6:27:24:66:81:15:8c:8b:66:49:84:16: 1b:7e:e0:4e:c6:28:d5:7c:c4:94:04:0b:0a:c8:b9:de:3a:5d: 8f:cd:01:0c:02:8e:3c:e5:33:06:99:7a:bf:09:7e:42:d4:e2: 2b:61:26:6d:30:5f:40:17:4d:d4:7e:82:d2:2a:e7:a0:9b:e4: 55:73:c7:44:61:92:b0:dd:2a:db:e3:d5:97:40:10:95:19:6c: c1:e3:ea:ec:1e:ea:e5:3c:4e:2f:49:d4:4b:65:bc:37:d9:3d: 29:f7:80:35:6a:da:16:cf:50:74:f3:64:04:7b:ba:01:56:72: ab:ea:56:7f:3d:55:4a:6f:0e:30:68:e5:5e:64:b1:e1:6d:f0: 6b:1b:84:e2:ea:44:c5:de:11:a0:38:3a:7c:52:5e:5b:74:bf: 7c:1d:9a:bf:07:43:04:69:0b:20:b4:6d:14:6d:a4:f1:07:40: e7:6e:2e:30:f5:c0:02:26:27:5c:3f:8c:9f:34:b3:11:27:7c: 39:cc:d4:29:95:fe:d4:09:4f:36:9c:f9:eb:a9:0f:a2:d8:59: 83:db:43:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU0RkUxMTAvBgNVBAUTKDZGQzcwOTA2RkJBNkY0NTM5NDUyMDkxOTMyQzQ1RkZB NEQ4NTcyQjgwHhcNMjUwNzIzMDUzNTIyWhcNMjUwNzMwMDUzNTIyWjAYMRYwFAYD VQQDEw02ODgwNzQ5Yi1iNDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2pqFcFRKg79PMVTiSRNAjf0WDS4ACeMWxey1zW4Uzie/G8e3NBYSf/SUqDaf SZ3RyYJ5AfCeLv2cbTHJgJHMlR2pydNOCol4xQpuL7azwMrjhXSLGUTXBqcZAlMV RgN9fl3ebWqwlz0V+0FwD5AHP10bn8lbD4f2/xobw5jPCb3352xB748hjJyaxC00 y3oFDpM4f8jlgLbQrbNEM6eW9jUSGGZAN654Vm18FVm+S74PWsu+7NsJelrqBQqk KFalR6BxSsCS4Lw62x/Kwj0MK3vEURtHgmBmkG0YsTHZPnKpXcWYaBJapWMbVbM8 ZUO9Dh+I4aBEB+GXpKT65xmhSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIKQdUI3 Id7jhIurt7W/juIfkaS3MB8GA1UdIwQYMBaAFG/HCQb7pvRTlFIJGTLEX/pNhXK4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTRGRS9ENjExN0RGNkY2 RTkxMUVFQURCRkZCNTJDNEY5QUUwMi9iOGNKQnZ1bTlGT1VVZ2taTXNSZi1rMkZj cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I4Y0pCdnVtOUZPVVVna1pNc1JmLWsyRmNyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTRGRS9ENjExN0RGNkY2RTkxMUVFQURCRkZCNTJDNEY5QUUwMi9iOGNKQnZ1bTlG T1VVZ2taTXNSZi1rMkZjcmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXOr25ZPw8jzupOFJcPI/ux5wzyPO+rAX+IFHtiMxgcSSy52vxSOOF E262JyRmgRWMi2ZJhBYbfuBOxijVfMSUBAsKyLneOl2PzQEMAo485TMGmXq/CX5C 1OIrYSZtMF9AF03UfoLSKuegm+RVc8dEYZKw3Srb49WXQBCVGWzB4+rsHurlPE4v SdRLZbw32T0p94A1atoWz1B082QEe7oBVnKr6lZ/PVVKbw4waOVeZLHhbfBrG4Ti 6kTF3hGgODp8Ul5bdL98HZq/B0MEaQsgtG0UbaTxB0Dnbi4w9cACJidcP4yfNLMR J3w5zNQplf7UCU82nPnrqQ+i2FmD20MJ -----END CERTIFICATE-----Generated at Wed Jul 23 12:47:11 2025 by rpki-client