$ rpki-client -vvf rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft File: FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft (raw, json) Hash identifier: QWnehg+Cne2beY3ny+d02mhcwLsN1+e/cLewvCE0noU= Subject key identifier: FB:46:EF:59:F8:75:D5:AC:35:4B:C4:B3:37:C3:C9:BB:23:D1:10:33 Authority key identifier: 16:84:15:C0:C1:34:01:C0:D7:71:57:1D:F8:6F:8C:D5:F8:50:3B:14 Certificate issuer: /CN=A91314BC/serialNumber=168415C0C13401C0D771571DF86F8CD5F8503B14 Certificate serial: 0228 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft Manifest number: 021B Signing time: Sun 07 Sep 2025 02:28:15 +0000 Manifest this update: Sun 07 Sep 2025 02:28:15 +0000 Manifest next update: Sun 14 Sep 2025 02:28:15 +0000 Files and hashes: 1: FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl (hash: nxkhItj39d5WMZYU0cedy3edZQyF4i1g+077kMpmUm8=) 2: 1083BE64499711EE86AE452DC4F9AE02.roa (hash: slu67F8KWLFn/RxCNvxBYhj1V1Mx5+noN3O9kww2W8Y=) 3: 7DD0E8845A3211EDB637E665C4F9AE02.roa (hash: wtWT4PZFgcn64rOhtqw01Kyp1pjejdqieeode8aJT6o=) 4: 7D0DFE0A5A3211EDB637E665C4F9AE02.roa (hash: K4zq7amWLtDyT+UqSOR4oOsSasN49MRy2b9Pfvweln4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 02:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 552 (0x228) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91314BC, serialNumber=168415C0C13401C0D771571DF86F8CD5F8503B14 Validity Not Before: Sep 7 02:28:15 2025 GMT Not After : Sep 14 02:28:15 2025 GMT Subject: CN=68bcedbf-b308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c7:26:cd:d9:8b:ac:52:c7:fe:69:f7:d8:7d: a2:e3:eb:17:bf:ef:75:c4:8c:e6:26:e1:9a:fe:ba: 13:b1:86:19:86:80:da:bd:63:1a:6a:1c:27:e8:65: 1f:26:15:0e:a2:5c:f6:76:f4:36:34:5a:20:c9:b4: 4a:fb:d7:da:fb:3c:7e:51:25:97:c8:5c:7b:bb:7a: 1f:21:41:8f:de:0b:20:be:56:a3:ab:06:3f:e0:af: c0:fd:b5:03:fb:0e:6f:54:b3:73:bf:2d:1d:7c:9f: e0:6b:33:c0:7d:72:c7:e8:fb:83:f0:75:92:83:61: be:5d:96:43:1f:85:d3:94:de:0b:25:c4:90:2b:e7: dc:36:1a:06:1a:ce:11:0d:18:f9:56:af:85:e4:ec: 1e:23:81:4e:83:66:63:2f:45:5c:e6:69:73:52:51: e3:9c:c1:96:68:eb:63:0c:f8:a1:f3:88:17:34:62: 3b:0b:7d:62:aa:b7:96:da:2a:cd:d7:80:d8:31:e2: 09:34:1e:a0:72:56:7c:1d:ed:9a:4f:7d:cc:66:8c: 24:69:16:3d:04:45:07:21:22:b2:10:86:4b:b8:e2: eb:5a:d0:57:df:7f:a7:54:59:8a:21:ac:61:83:63: 7d:9f:bc:60:61:af:52:85:98:d7:fd:5d:7c:99:1c: 51:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:46:EF:59:F8:75:D5:AC:35:4B:C4:B3:37:C3:C9:BB:23:D1:10:33 X509v3 Authority Key Identifier: keyid:16:84:15:C0:C1:34:01:C0:D7:71:57:1D:F8:6F:8C:D5:F8:50:3B:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:3e:4d:52:aa:78:0d:a4:76:b8:95:13:5c:b1:c5:c0:29:26: 96:82:f3:43:b2:55:82:61:6a:1f:de:d2:75:f0:68:37:de:43: 6f:8b:9e:1c:3b:f3:e8:0b:3f:eb:07:f2:c4:62:c0:c2:c1:ba: d6:b4:d2:85:b1:53:01:6c:2f:8f:34:29:8a:35:3d:11:9f:e9: 1c:f3:32:5c:85:f2:a9:49:88:03:e2:95:dd:ea:50:3f:83:e6: e5:31:97:33:79:db:bf:c0:c6:be:e6:09:30:74:77:26:ff:ff: 21:c2:a6:7a:57:a6:af:a2:17:44:46:ab:ce:27:9c:03:7d:75: 53:36:32:81:2a:d7:a0:eb:51:c5:04:4a:e4:ec:e4:cd:b5:0b: 4d:34:35:f6:13:88:09:1a:ab:4b:5c:f8:43:8c:a7:63:4c:0d: c8:95:9c:c0:49:23:84:4f:aa:ab:a8:90:2e:94:77:e8:9a:ba: 51:b9:b3:eb:e3:e8:f6:70:b0:09:cb:6b:0d:45:ae:60:43:aa: f5:81:f2:f4:55:bc:22:6c:97:82:ac:1c:f1:cf:64:ef:3e:51: be:e7:e9:e5:1e:83:c2:aa:5f:71:b6:19:d8:84:1e:86:1b:e2: 61:1b:17:ef:8f:af:e5:80:3f:ab:13:89:3d:d0:d5:3b:68:22: 8f:ba:af:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE0QkMxMTAvBgNVBAUTKDE2ODQxNUMwQzEzNDAxQzBENzcxNTcxREY4NkY4Q0Q1 Rjg1MDNCMTQwHhcNMjUwOTA3MDIyODE1WhcNMjUwOTE0MDIyODE1WjAYMRYwFAYD VQQDEw02OGJjZWRiZi1iMzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvscmzdmLrFLH/mn32H2i4+sXv+91xIzmJuGa/roTsYYZhoDavWMaahwn6GUf JhUOolz2dvQ2NFogybRK+9fa+zx+USWXyFx7u3ofIUGP3gsgvlajqwY/4K/A/bUD +w5vVLNzvy0dfJ/gazPAfXLH6PuD8HWSg2G+XZZDH4XTlN4LJcSQK+fcNhoGGs4R DRj5Vq+F5OweI4FOg2ZjL0Vc5mlzUlHjnMGWaOtjDPih84gXNGI7C31iqreW2irN 14DYMeIJNB6gclZ8He2aT33MZowkaRY9BEUHISKyEIZLuOLrWtBX33+nVFmKIaxh g2N9n7xgYa9ShZjX/V18mRxRvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPtG71n4 ddWsNUvEszfDybsj0RAzMB8GA1UdIwQYMBaAFBaEFcDBNAHA13FXHfhvjNX4UDsU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTRCQy83RkQwMTY2QzVB MkYxMUVEQTE5RTVFNjFDNEY5QUUwMi9Gb1FWd01FMEFjRFhjVmNkLUctTTFmaFFP eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZvUVZ3TUUwQWNEWGNWY2QtRy1NMWZoUU94US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTRCQy83RkQwMTY2QzVBMkYxMUVEQTE5RTVFNjFDNEY5QUUwMi9Gb1FWd01FMEFj RFhjVmNkLUctTTFmaFFPeFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaPk1SqngNpHa4lRNcscXAKSaWgvNDslWCYWof3tJ18Gg33kNvi54c O/PoCz/rB/LEYsDCwbrWtNKFsVMBbC+PNCmKNT0Rn+kc8zJchfKpSYgD4pXd6lA/ g+blMZczedu/wMa+5gkwdHcm//8hwqZ6V6avohdERqvOJ5wDfXVTNjKBKteg61HF BErk7OTNtQtNNDX2E4gJGqtLXPhDjKdjTA3IlZzASSOET6qrqJAulHfomrpRubPr 4+j2cLAJy2sNRa5gQ6r1gfL0VbwibJeCrBzxz2TvPlG+5+nlHoPCql9xthnYhB6G G+JhGxfvj6/lgD+rE4k90NU7aCKPuq/v -----END CERTIFICATE-----Generated at Mon Sep 8 08:54:46 2025 by rpki-client