$ rpki-client -vvf rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft File: m8FpAIAncr5ikmDEqu1fP-9-s-c.mft (raw, json) Hash identifier: Ab5C2UnAA3JIyorWLVFucUqIE//z1SCf6JO7gZorVwk= Subject key identifier: C5:B6:7B:0C:F3:5E:27:71:F0:B3:CE:D0:F6:EF:83:FD:CE:23:12:1A Authority key identifier: 9B:C1:69:00:80:27:72:BE:62:92:60:C4:AA:ED:5F:3F:EF:7E:B3:E7 Certificate issuer: /CN=A91F91EB/serialNumber=9BC16900802772BE629260C4AAED5F3FEF7EB3E7 Certificate serial: 0CDD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8FpAIAncr5ikmDEqu1fP-9-s-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft Manifest number: 0CBA Signing time: Sun 20 Jul 2025 18:14:42 +0000 Manifest this update: Sun 20 Jul 2025 18:14:42 +0000 Manifest next update: Sun 27 Jul 2025 18:14:42 +0000 Files and hashes: 1: m8FpAIAncr5ikmDEqu1fP-9-s-c.crl (hash: fTTD1ceY+orjpP5xQQTZ8wr8knfW9ktZsYuXEMyHGio=) 2: 827D7766AACC11EA8113F532C4F9AE02.roa (hash: oguEqhYGf6Whv8PqzIUzLfsgAvX4wE5CZ9/lAxwLLvs=) 3: 81CA43EEAD7811EB905E2C41C4F9AE02.roa (hash: twcj5cD600ozwl+LH65FC7h60q+thDGwgx4YQo1a3TQ=) 4: 7F4CB00EAAE811EA8412810FC4F9AE02.roa (hash: C+pA9vRBNRgX2w4BOkt7QtiabsJexJBu+hnduYyIgLA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.crl rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8FpAIAncr5ikmDEqu1fP-9-s-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 18:14:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3293 (0xcdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F91EB, serialNumber=9BC16900802772BE629260C4AAED5F3FEF7EB3E7 Validity Not Before: Jul 20 18:14:42 2025 GMT Not After : Jul 27 18:14:42 2025 GMT Subject: CN=687d3212-4d3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:3b:21:d5:ec:fd:4e:be:dc:6d:1d:1d:86:fb: 17:b5:02:a3:ca:20:c8:bc:bd:93:d6:50:22:30:f1: 18:f7:59:41:0c:39:c0:42:1e:59:ce:64:30:5b:92: 1d:cd:15:76:7b:8a:da:20:25:58:ea:35:49:98:bb: 4b:4f:2c:8c:75:ac:8d:58:ed:ce:5a:42:c2:8f:af: 69:df:21:d1:2e:5c:1f:45:2d:65:2b:17:75:63:62: 49:68:ca:de:a4:8f:59:0c:4f:b7:1d:de:a4:1d:b5: e6:65:06:5e:4e:85:0b:54:6e:7a:03:92:10:67:a8: 4a:44:95:78:ea:5e:4c:7c:64:8d:cb:20:88:50:82: 8a:ae:f8:f1:ff:e4:dd:85:d4:81:c9:87:89:3b:fb: 83:db:e8:74:bc:4e:89:c9:ef:52:1a:d8:64:cd:53: cd:4f:84:8f:ee:38:7b:e3:9f:14:01:84:c2:85:cb: da:45:e8:60:2a:9a:00:40:0c:43:85:c4:c6:f3:da: de:25:d6:50:6b:c0:7f:6b:ef:48:9e:0d:52:a0:10: 0d:a3:73:32:6d:65:17:37:67:d8:cc:ff:4f:34:3d: a5:a1:99:f6:6e:be:11:b6:a3:3b:de:1d:02:75:2d: 53:e3:93:be:f3:99:1c:73:04:eb:a8:74:31:d4:db: f4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:B6:7B:0C:F3:5E:27:71:F0:B3:CE:D0:F6:EF:83:FD:CE:23:12:1A X509v3 Authority Key Identifier: keyid:9B:C1:69:00:80:27:72:BE:62:92:60:C4:AA:ED:5F:3F:EF:7E:B3:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8FpAIAncr5ikmDEqu1fP-9-s-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:71:ec:2b:2d:a8:0c:50:55:39:6b:e5:a2:eb:f4:af:1b:a3: 5a:55:d5:e1:d8:d3:25:7b:e2:ac:37:e4:21:8a:10:ab:44:6b: 8b:4a:99:1b:55:a9:bd:fa:b5:9d:48:5b:c9:ef:94:92:3c:dc: 5c:9a:6a:5c:88:93:2c:0a:43:ef:c7:33:67:af:87:bd:92:06: f9:3e:03:10:a3:e7:b5:e4:93:b9:e6:5c:1a:1d:2f:34:a9:8d: 59:bc:02:4d:a3:eb:31:d0:26:83:03:4d:c6:d8:27:54:99:f4: 5d:52:92:1b:d4:76:a0:c8:2d:bc:74:9c:f1:bd:9e:9d:86:43: e2:7e:fb:55:d0:b9:46:18:c5:4f:e0:c7:26:00:8c:01:99:47: 48:6e:2a:2c:21:19:7f:2f:b7:b2:0d:82:c3:b6:45:55:38:8a: 9d:5e:2a:54:57:21:d6:3c:c9:5d:64:63:40:df:86:1f:b5:f1: ff:31:7d:32:f2:3a:cf:33:d2:49:f4:fb:f0:1b:bc:dc:5a:56: e3:df:19:47:88:91:56:c3:13:be:f6:ad:99:f6:fe:aa:73:e7: 5e:73:20:ef:7d:d1:98:46:15:92:3d:d5:47:a8:e5:23:92:56: 6a:37:dc:11:6e:36:15:12:c6:9d:a5:a7:0d:b7:e3:b7:41:44: ae:d2:e5:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjkxRUIxMTAvBgNVBAUTKDlCQzE2OTAwODAyNzcyQkU2MjkyNjBDNEFBRUQ1RjNG RUY3RUIzRTcwHhcNMjUwNzIwMTgxNDQyWhcNMjUwNzI3MTgxNDQyWjAYMRYwFAYD VQQDEw02ODdkMzIxMi00ZDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4jsh1ez9Tr7cbR0dhvsXtQKjyiDIvL2T1lAiMPEY91lBDDnAQh5ZzmQwW5Id zRV2e4raICVY6jVJmLtLTyyMdayNWO3OWkLCj69p3yHRLlwfRS1lKxd1Y2JJaMre pI9ZDE+3Hd6kHbXmZQZeToULVG56A5IQZ6hKRJV46l5MfGSNyyCIUIKKrvjx/+Td hdSByYeJO/uD2+h0vE6Jye9SGthkzVPNT4SP7jh7458UAYTChcvaRehgKpoAQAxD hcTG89reJdZQa8B/a+9Ing1SoBANo3MybWUXN2fYzP9PND2loZn2br4RtqM73h0C dS1T45O+85kccwTrqHQx1Nv0WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMW2ewzz Xidx8LPO0Pbvg/3OIxIaMB8GA1UdIwQYMBaAFJvBaQCAJ3K+YpJgxKrtXz/vfrPn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTFFQi81MEVGRTA3NEY3 MDUxMUU5QURCQTQ1MUZDNEY5QUUwMi9tOEZwQUlBbmNyNWlrbURFcXUxZlAtOS1z LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL204RnBBSUFuY3I1aWttREVxdTFmUC05LXMtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTFFQi81MEVGRTA3NEY3MDUxMUU5QURCQTQ1MUZDNEY5QUUwMi9tOEZwQUlBbmNy NWlrbURFcXUxZlAtOS1zLWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIcewrLagMUFU5a+Wi6/SvG6NaVdXh2NMle+KsN+QhihCrRGuLSpkb Vam9+rWdSFvJ75SSPNxcmmpciJMsCkPvxzNnr4e9kgb5PgMQo+e15JO55lwaHS80 qY1ZvAJNo+sx0CaDA03G2CdUmfRdUpIb1HagyC28dJzxvZ6dhkPifvtV0LlGGMVP 4McmAIwBmUdIbiosIRl/L7eyDYLDtkVVOIqdXipUVyHWPMldZGNA34YftfH/MX0y 8jrPM9JJ9PvwG7zcWlbj3xlHiJFWwxO+9q2Z9v6qc+decyDvfdGYRhWSPdVHqOUj klZqN9wRbjYVEsadpacNt+O3QUSu0uVu -----END CERTIFICATE-----Generated at Sun Jul 20 21:56:16 2025 by rpki-client