$ rpki-client -vvf rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.mft File: _f0WbMUdnjq3SWQHS25klGdOL24.mft (raw, json) Hash identifier: YcKUjxaXDZZQZuIirr+c9izjYlITre8/sNwGWkdm8s8= Subject key identifier: CC:D8:28:71:6C:D9:85:2F:AF:F6:2C:FE:5C:4F:78:1C:1E:02:81:F8 Authority key identifier: FD:FD:16:6C:C5:1D:9E:3A:B7:49:64:07:4B:6E:64:94:67:4E:2F:6E Certificate issuer: /CN=A91884F8/serialNumber=FDFD166CC51D9E3AB74964074B6E6494674E2F6E Certificate serial: 1ED3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_f0WbMUdnjq3SWQHS25klGdOL24.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.mft Manifest number: 1EC9 Signing time: Wed 20 Aug 2025 16:05:51 +0000 Manifest this update: Wed 20 Aug 2025 16:05:51 +0000 Manifest next update: Wed 27 Aug 2025 16:05:51 +0000 Files and hashes: 1: _f0WbMUdnjq3SWQHS25klGdOL24.crl (hash: QF7+kJGQOv9x+dlpa1s7u2wKEGsNwwlCLdDchVPL+74=) 2: 888B4AC26B3611E6A149F871C4F9AE02.roa (hash: JNpFgM+KWXtVAKMLIECfprcazoPzZ95joJw//lWOa/c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.crl rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_f0WbMUdnjq3SWQHS25klGdOL24.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 16:05:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7891 (0x1ed3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91884F8, serialNumber=FDFD166CC51D9E3AB74964074B6E6494674E2F6E Validity Not Before: Aug 20 16:05:51 2025 GMT Not After : Aug 27 16:05:51 2025 GMT Subject: CN=68a5f25f-75ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:08:1f:00:93:d8:e9:27:29:f3:9f:86:ed:1e: 22:9a:ab:a8:f6:bf:2b:fe:23:db:ec:bf:64:c1:39: cd:ce:22:bd:8d:1e:85:a3:56:7d:39:ec:bf:f3:b5: 01:4a:d6:bc:86:60:c5:78:28:da:4f:78:e7:88:ff: b5:4a:a0:4e:bd:a1:b1:8c:13:22:bf:9d:15:74:a5: 3c:38:50:a6:25:e1:03:94:03:6c:32:65:11:7e:37: e8:ac:de:6a:ef:bd:28:02:f2:84:ec:e1:49:7f:f7: d1:84:90:d3:3e:a9:95:5c:3b:28:34:cc:3a:15:af: 57:b6:07:c1:e6:be:1e:56:76:25:cc:24:cd:c8:10: 10:80:e3:c4:5f:89:70:c7:3d:a3:15:f5:4e:ee:0c: 40:1b:00:6e:d6:1c:14:cf:be:c5:09:0d:6b:37:d7: 43:28:e8:d6:f1:af:b2:b0:37:72:75:29:d1:ea:9d: 0b:05:9a:3f:eb:30:d2:75:74:b1:17:29:f5:b1:dd: bf:6b:0e:45:29:02:e1:d7:87:7d:41:c9:88:07:3f: 62:03:86:10:2d:e9:8e:b1:09:46:b2:77:c0:55:fb: 73:0c:39:c4:f8:dc:65:7f:a7:6d:54:bd:6c:59:a5: dc:b5:f9:03:b6:b8:8e:b3:a9:59:a7:a4:f9:02:a5: bb:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:D8:28:71:6C:D9:85:2F:AF:F6:2C:FE:5C:4F:78:1C:1E:02:81:F8 X509v3 Authority Key Identifier: keyid:FD:FD:16:6C:C5:1D:9E:3A:B7:49:64:07:4B:6E:64:94:67:4E:2F:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_f0WbMUdnjq3SWQHS25klGdOL24.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:30:96:53:01:af:89:62:62:e7:bc:39:ca:ca:84:db:18:6c: d5:ae:19:83:72:81:99:ba:6e:cd:4f:09:35:da:5d:ae:0d:da: b6:64:d1:4f:f8:18:48:80:69:9d:93:a8:bb:42:c8:4f:da:ac: f5:2f:e2:47:c3:9b:9f:3f:be:57:16:03:76:b4:cf:8c:64:fa: 4e:0e:d0:17:95:1b:bc:a7:7f:51:35:cb:df:43:0a:fe:d0:ab: 3d:28:18:59:7a:fb:41:7f:8d:63:b7:0a:fd:aa:fe:e4:c4:5c: ef:0a:88:21:c3:a0:95:96:c2:07:de:ff:61:b6:05:42:64:f6: 05:8e:5a:40:f0:49:c5:61:6b:12:f4:f3:66:2a:37:9e:15:e0: a5:e4:a7:f9:4e:9f:a5:bb:3c:73:48:c9:8f:3c:af:4d:f9:b5: b5:a9:37:b0:35:94:71:97:58:ab:2c:07:bf:57:d5:30:25:1a: 96:76:8b:31:4d:c9:7e:9b:88:b5:1b:dd:f5:66:15:c7:6a:0c: c7:21:5e:ff:36:72:66:e8:78:e4:cc:61:99:4b:f3:6e:3d:06: 37:17:12:f8:9b:f7:9f:0c:a6:96:1d:58:9e:1a:5d:d0:36:f7: e1:1d:de:43:c0:b1:e6:8e:b3:34:5f:b3:7d:7a:b8:88:c5:1e: 0a:3f:79:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHtMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg0RjgxMTAvBgNVBAUTKEZERkQxNjZDQzUxRDlFM0FCNzQ5NjQwNzRCNkU2NDk0 Njc0RTJGNkUwHhcNMjUwODIwMTYwNTUxWhcNMjUwODI3MTYwNTUxWjAYMRYwFAYD VQQDEw02OGE1ZjI1Zi03NWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4wgfAJPY6Scp85+G7R4imquo9r8r/iPb7L9kwTnNziK9jR6Fo1Z9Oey/87UB Sta8hmDFeCjaT3jniP+1SqBOvaGxjBMiv50VdKU8OFCmJeEDlANsMmURfjforN5q 770oAvKE7OFJf/fRhJDTPqmVXDsoNMw6Fa9XtgfB5r4eVnYlzCTNyBAQgOPEX4lw xz2jFfVO7gxAGwBu1hwUz77FCQ1rN9dDKOjW8a+ysDdydSnR6p0LBZo/6zDSdXSx Fyn1sd2/aw5FKQLh14d9QcmIBz9iA4YQLemOsQlGsnfAVftzDDnE+Nxlf6dtVL1s WaXctfkDtriOs6lZp6T5AqW78wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMzYKHFs 2YUvr/Ys/lxPeBweAoH4MB8GA1UdIwQYMBaAFP39FmzFHZ46t0lkB0tuZJRnTi9u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODRGOC8yMjhBRDNFQTZC MzIxMUU2OTQxNjYyNjVDNEY5QUUwMi9fZjBXYk1VZG5qcTNTV1FIUzI1a2xHZE9M MjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19mMFdiTVVkbmpxM1NXUUhTMjVrbEdkT0wyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODRGOC8yMjhBRDNFQTZCMzIxMUU2OTQxNjYyNjVDNEY5QUUwMi9fZjBXYk1VZG5q cTNTV1FIUzI1a2xHZE9MMjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEMJZTAa+JYmLnvDnKyoTbGGzVrhmDcoGZum7NTwk12l2uDdq2ZNFP +BhIgGmdk6i7QshP2qz1L+JHw5ufP75XFgN2tM+MZPpODtAXlRu8p39RNcvfQwr+ 0Ks9KBhZevtBf41jtwr9qv7kxFzvCoghw6CVlsIH3v9htgVCZPYFjlpA8EnFYWsS 9PNmKjeeFeCl5Kf5Tp+luzxzSMmPPK9N+bW1qTewNZRxl1irLAe/V9UwJRqWdosx Tcl+m4i1G931ZhXHagzHIV7/NnJm6HjkzGGZS/NuPQY3FxL4m/efDKaWHVieGl3Q NvfhHd5DwLHmjrM0X7N9eriIxR4KP3ns -----END CERTIFICATE-----Generated at Fri Aug 22 16:29:50 2025 by rpki-client