$ rpki-client -vvf rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.mft File: 82dKiQfpsa6O4m-c88mcR_dUk0w.mft (raw, json) Hash identifier: /UveMsyZVNEbZl3V3J/fNSRWG93drLNE4VjbPglQQDM= Subject key identifier: D8:91:E5:84:09:BF:0E:7F:3B:14:A9:9C:94:BB:0C:D1:9A:66:6F:B8 Authority key identifier: F3:67:4A:89:07:E9:B1:AE:8E:E2:6F:9C:F3:C9:9C:47:F7:54:93:4C Certificate issuer: /CN=A91910A8/serialNumber=F3674A8907E9B1AE8EE26F9CF3C99C47F754934C Certificate serial: 03EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/82dKiQfpsa6O4m-c88mcR_dUk0w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.mft Manifest number: 03DB Signing time: Fri 19 Sep 2025 00:59:45 +0000 Manifest this update: Fri 19 Sep 2025 00:59:44 +0000 Manifest next update: Fri 26 Sep 2025 00:59:44 +0000 Files and hashes: 1: 82dKiQfpsa6O4m-c88mcR_dUk0w.crl (hash: 8WH57TBL+PEPEsN1et8aRvSW5rtW8z/pbLHn1EGlc9g=) 2: F47320C4E04111EE8F798E3DC4F9AE02.roa (hash: +qgf84XC7fwqmND33skSgzHGmdhqJ+EK/64iZ97m69g=) 3: 5C27D4DCB0DB11EC87206C69C4F9AE02.roa (hash: M3aykX0j4vteJ7Aeu69jjSSSHCYOZs36DtkdcU8NJ0w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.crl rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/82dKiQfpsa6O4m-c88mcR_dUk0w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 00:59:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1002 (0x3ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91910A8, serialNumber=F3674A8907E9B1AE8EE26F9CF3C99C47F754934C Validity Not Before: Sep 19 00:59:44 2025 GMT Not After : Sep 26 00:59:44 2025 GMT Subject: CN=68ccab01-8db2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:56:e5:18:d0:2f:06:83:af:e9:c7:a9:c8:65: e5:7e:cf:9c:dd:88:dd:c0:0a:b0:94:87:3f:8c:74: 59:bb:79:13:c1:87:1c:63:0b:6d:cc:3a:56:3d:7e: a5:8a:32:91:b0:b3:f5:82:8a:de:4e:96:4b:fb:fd: 1e:a4:50:10:d4:ad:97:ad:80:69:ce:ea:36:fe:44: 79:5d:30:e6:92:a0:c5:c5:87:12:b1:1f:91:e0:15: 3b:17:7b:4e:b1:8b:9d:ac:f3:9b:f8:18:6e:30:85: c1:f0:cb:04:d0:ce:d4:e7:b4:31:49:eb:d0:79:81: 65:b5:16:21:b8:d7:cd:0a:f2:98:45:b5:27:9a:10: 35:58:12:3e:a1:58:d7:c8:b8:00:ae:31:54:2d:03: fd:72:86:4f:f2:a1:25:25:fc:88:40:c1:1c:28:f4: b6:05:d5:11:30:33:0a:d9:35:c1:2b:45:a7:bc:e3: b8:cc:5a:b5:84:7c:fb:e1:f8:3a:10:ef:d2:85:45: fa:65:a8:89:2c:3e:49:03:2e:5b:a1:21:f5:6c:5b: 17:a7:b0:d4:b2:fe:cc:3c:43:50:d3:27:ab:8b:c6: f2:05:ec:07:00:0c:3f:1e:d2:1f:8d:d1:d1:d6:51: c7:47:a7:a5:8e:4d:9d:96:97:d5:b2:f1:eb:0c:cc: 13:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:91:E5:84:09:BF:0E:7F:3B:14:A9:9C:94:BB:0C:D1:9A:66:6F:B8 X509v3 Authority Key Identifier: keyid:F3:67:4A:89:07:E9:B1:AE:8E:E2:6F:9C:F3:C9:9C:47:F7:54:93:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/82dKiQfpsa6O4m-c88mcR_dUk0w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:6a:07:84:01:dc:a6:1c:d8:94:fb:3c:25:f7:22:96:b4:ce: 38:5c:82:11:48:06:b7:9f:87:35:29:25:64:79:cf:2f:3f:b3: f2:cd:6b:11:da:ba:db:ae:df:ad:0d:9b:ae:ea:d4:13:f3:07: 83:d5:39:0e:5e:b0:f4:1d:be:dd:92:da:99:56:a7:c7:d5:e0: 51:4d:ba:ee:a7:7a:d6:e3:62:30:9b:d4:69:e9:50:91:64:d0: c5:64:4d:8f:67:e5:66:e7:2e:65:7d:5a:6f:21:4e:f0:e3:70: 97:d2:47:c9:b0:77:7b:33:ad:b3:57:7d:5c:c6:7d:b0:b0:90: f3:86:e5:a0:bc:27:42:bd:90:39:14:9a:9e:01:d9:db:7c:bc: 9f:9e:27:8c:82:79:8f:6b:2d:25:f9:fa:1d:b2:58:e4:e1:f0: cc:b8:08:83:bf:0b:20:b0:dd:af:68:b9:df:cc:ab:f9:d1:11: 37:f8:9b:95:83:a5:c7:64:9e:68:82:5b:40:95:14:85:dc:19: 72:b0:6a:93:fc:68:24:96:a5:75:1d:ed:7c:2c:2d:e2:7c:81: 0f:d5:f1:39:4f:f9:2f:97:1c:89:2a:d2:1f:a3:96:fd:0d:f2: b2:e3:41:08:35:0f:32:87:45:47:da:6c:40:f4:c7:6e:aa:b5: c5:f1:db:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEwQTgxMTAvBgNVBAUTKEYzNjc0QTg5MDdFOUIxQUU4RUUyNkY5Q0YzQzk5QzQ3 Rjc1NDkzNEMwHhcNMjUwOTE5MDA1OTQ0WhcNMjUwOTI2MDA1OTQ0WjAYMRYwFAYD VQQDEw02OGNjYWIwMS04ZGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApFblGNAvBoOv6cepyGXlfs+c3YjdwAqwlIc/jHRZu3kTwYccYwttzDpWPX6l ijKRsLP1goreTpZL+/0epFAQ1K2XrYBpzuo2/kR5XTDmkqDFxYcSsR+R4BU7F3tO sYudrPOb+BhuMIXB8MsE0M7U57QxSevQeYFltRYhuNfNCvKYRbUnmhA1WBI+oVjX yLgArjFULQP9coZP8qElJfyIQMEcKPS2BdURMDMK2TXBK0WnvOO4zFq1hHz74fg6 EO/ShUX6ZaiJLD5JAy5boSH1bFsXp7DUsv7MPENQ0yeri8byBewHAAw/HtIfjdHR 1lHHR6eljk2dlpfVsvHrDMwTkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNiR5YQJ vw5/OxSpnJS7DNGaZm+4MB8GA1UdIwQYMBaAFPNnSokH6bGujuJvnPPJnEf3VJNM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTBBOC83QjIwMDczRTlD NEUxMUVDQjE3NDhCNjhDNEY5QUUwMi84MmRLaVFmcHNhNk80bS1jODhtY1JfZFVr MHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgyZEtpUWZwc2E2TzRtLWM4OG1jUl9kVWswdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTBBOC83QjIwMDczRTlDNEUxMUVDQjE3NDhCNjhDNEY5QUUwMi84MmRLaVFmcHNh Nk80bS1jODhtY1JfZFVrMHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZageEAdymHNiU+zwl9yKWtM44XIIRSAa3n4c1KSVkec8vP7PyzWsR 2rrbrt+tDZuu6tQT8weD1TkOXrD0Hb7dktqZVqfH1eBRTbrup3rW42Iwm9Rp6VCR ZNDFZE2PZ+Vm5y5lfVpvIU7w43CX0kfJsHd7M62zV31cxn2wsJDzhuWgvCdCvZA5 FJqeAdnbfLyfnieMgnmPay0l+fodsljk4fDMuAiDvwsgsN2vaLnfzKv50RE3+JuV g6XHZJ5ogltAlRSF3BlysGqT/GgklqV1He18LC3ifIEP1fE5T/kvlxyJKtIfo5b9 DfKy40EINQ8yh0VH2mxA9MduqrXF8dtC -----END CERTIFICATE-----Generated at Fri Sep 19 08:33:17 2025 by rpki-client