$ rpki-client -vvf rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft File: CF4MUA89R900skS9OSnO_a3ZbD0.mft (raw, json) Hash identifier: iJONwt7bRyXcstkBe6CO789pP+CTd1VUg8EWmLwIQes= Subject key identifier: CE:FC:83:30:CF:E5:06:6E:85:08:8A:55:FD:EE:02:43:14:89:1D:57 Authority key identifier: 08:5E:0C:50:0F:3D:47:DD:34:B2:44:BD:39:29:CE:FD:AD:D9:6C:3D Certificate issuer: /CN=A919D118/serialNumber=085E0C500F3D47DD34B244BD3929CEFDADD96C3D Certificate serial: 0AB1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft Manifest number: 0A9D Signing time: Sun 24 Aug 2025 19:33:33 +0000 Manifest this update: Sun 24 Aug 2025 19:33:33 +0000 Manifest next update: Sun 31 Aug 2025 19:33:33 +0000 Files and hashes: 1: CF4MUA89R900skS9OSnO_a3ZbD0.crl (hash: UsIQU1Jcv+6bhhYsvBsL7tIQGQ382UEkmXYkHwYOsLY=) 2: 676A2DE2564911F08353B443C4F9AE02.roa (hash: YM/jqlM3yjwQowPEPNTW8kWHF+17BJwpa8g+tmnEC0w=) 3: 5FFA4BEC3C0B11ED89AD755FC4F9AE02.roa (hash: +qdSnSMI4Cq6GPacx1y6troGvfBHeu8mDwsrgTG91us=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.crl rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 19:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2737 (0xab1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D118, serialNumber=085E0C500F3D47DD34B244BD3929CEFDADD96C3D Validity Not Before: Aug 24 19:33:33 2025 GMT Not After : Aug 31 19:33:33 2025 GMT Subject: CN=68ab690d-4aeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ca:bf:7c:bf:28:3b:01:55:be:aa:5f:0e:da: d5:cd:1e:bc:d4:55:46:ef:a5:31:c9:4f:43:1f:ce: cd:72:bb:46:61:9e:72:af:7f:81:38:f5:03:78:6c: fe:67:98:0c:c5:0d:6f:9f:b4:b6:08:fd:7e:6a:f6: 41:cb:a7:b0:98:2e:35:1b:6a:6e:5b:05:6f:91:72: 35:d6:cd:03:e6:79:fe:2f:75:c1:56:73:83:ce:82: bd:90:f4:f2:24:0a:b8:23:1d:92:0b:cd:3d:16:17: 3d:a4:cc:a6:bd:b6:f0:c8:1b:07:c5:55:4e:0b:f4: 90:e0:43:89:6a:3c:09:ee:17:07:bb:00:10:a9:58: 9c:1b:31:b9:38:16:2c:57:70:93:a1:8b:a6:2d:b9: 6d:a7:de:85:c3:84:cd:04:24:bf:d4:67:13:8e:b8: 24:77:6e:1d:8c:d6:7c:32:6f:95:31:71:e1:7c:a9: 9d:23:96:10:21:7e:d4:d2:37:0c:91:5f:04:f5:19: 1d:33:98:ca:65:25:38:dc:7a:9d:86:14:1d:73:c6: bd:4c:9a:2e:aa:a2:2b:53:81:26:b5:c7:37:c2:b4: c0:f2:4f:fa:18:8f:1c:4e:cd:10:d8:7a:29:b4:13: bf:f2:e2:d8:35:b4:35:40:b3:c6:36:d5:2e:32:81: f4:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:FC:83:30:CF:E5:06:6E:85:08:8A:55:FD:EE:02:43:14:89:1D:57 X509v3 Authority Key Identifier: keyid:08:5E:0C:50:0F:3D:47:DD:34:B2:44:BD:39:29:CE:FD:AD:D9:6C:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:4d:98:5f:12:1a:8e:ea:07:43:ab:65:92:34:4a:48:f6:43: 41:10:52:1f:c4:f4:31:1f:87:13:69:76:74:4b:38:3c:8d:80: 8d:3d:9d:f8:fc:aa:48:03:e4:3e:ce:a1:62:3f:0e:ee:13:22: 0c:af:20:23:85:07:1a:17:ae:a9:3f:19:7a:86:68:ae:cd:14: 4d:d9:b8:a1:15:4e:9d:2e:b3:7d:29:58:ff:cb:cc:b5:ea:5a: 15:a1:b1:ac:f8:3e:55:84:04:ae:de:80:93:6e:c7:62:5a:e5: 11:71:9f:09:57:c2:c4:e7:13:11:7a:cc:97:05:30:de:1f:11: bd:fe:9d:b3:e6:0f:58:af:c7:86:46:bf:9c:ec:ba:97:77:29: 50:7d:13:db:fe:3c:c5:83:ac:fa:25:fd:08:97:8c:27:a3:7a: 16:50:95:00:03:d0:07:7a:38:25:3b:89:f7:b4:93:a7:85:ce: fe:d0:90:95:6e:bf:3d:a5:ee:7a:e0:14:20:0f:d3:32:e1:00: 16:b4:4a:f5:de:f1:1d:a4:f1:82:46:55:a1:fe:23:cd:9a:e3: 87:8b:13:46:94:8f:19:e4:7f:5d:ba:ed:f5:a1:70:42:88:bf: 05:66:1e:ec:0f:fc:bc:4d:14:e8:51:21:76:38:b7:4a:46:57: b8:fb:37:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQxMTgxMTAvBgNVBAUTKDA4NUUwQzUwMEYzRDQ3REQzNEIyNDRCRDM5MjlDRUZE QUREOTZDM0QwHhcNMjUwODI0MTkzMzMzWhcNMjUwODMxMTkzMzMzWjAYMRYwFAYD VQQDEw02OGFiNjkwZC00YWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAncq/fL8oOwFVvqpfDtrVzR681FVG76UxyU9DH87NcrtGYZ5yr3+BOPUDeGz+ Z5gMxQ1vn7S2CP1+avZBy6ewmC41G2puWwVvkXI11s0D5nn+L3XBVnODzoK9kPTy JAq4Ix2SC809Fhc9pMymvbbwyBsHxVVOC/SQ4EOJajwJ7hcHuwAQqVicGzG5OBYs V3CToYumLbltp96Fw4TNBCS/1GcTjrgkd24djNZ8Mm+VMXHhfKmdI5YQIX7U0jcM kV8E9RkdM5jKZSU43HqdhhQdc8a9TJouqqIrU4Emtcc3wrTA8k/6GI8cTs0Q2Hop tBO/8uLYNbQ1QLPGNtUuMoH0yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM78gzDP 5QZuhQiKVf3uAkMUiR1XMB8GA1UdIwQYMBaAFAheDFAPPUfdNLJEvTkpzv2t2Ww9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDExOC9CQjgxQTUxNDYy QkYxMUVBQUEzQTg5NDVDNEY5QUUwMi9DRjRNVUE4OVI5MDBza1M5T1NuT19hM1pi RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NGNE1VQTg5UjkwMHNrUzlPU25PX2EzWmJEMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDExOC9CQjgxQTUxNDYyQkYxMUVBQUEzQTg5NDVDNEY5QUUwMi9DRjRNVUE4OVI5 MDBza1M5T1NuT19hM1piRDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5TZhfEhqO6gdDq2WSNEpI9kNBEFIfxPQxH4cTaXZ0Szg8jYCNPZ34 /KpIA+Q+zqFiPw7uEyIMryAjhQcaF66pPxl6hmiuzRRN2bihFU6dLrN9KVj/y8y1 6loVobGs+D5VhASu3oCTbsdiWuURcZ8JV8LE5xMResyXBTDeHxG9/p2z5g9Yr8eG Rr+c7LqXdylQfRPb/jzFg6z6Jf0Il4wno3oWUJUAA9AHejglO4n3tJOnhc7+0JCV br89pe564BQgD9My4QAWtEr13vEdpPGCRlWh/iPNmuOHixNGlI8Z5H9duu31oXBC iL8FZh7sD/y8TRToUSF2OLdKRle4+zcw -----END CERTIFICATE-----Generated at Sun Aug 24 21:52:17 2025 by rpki-client