$ rpki-client -vvf rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft File: b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft (raw, json) Hash identifier: gN1J9NKq+9yQnuVitkFd4FhRHBNF4/cAvVYjsBPV0Ko= Subject key identifier: 62:8A:BD:B1:E5:0E:E8:84:4D:01:74:6D:46:1B:5C:BE:B4:75:2C:6C Authority key identifier: 6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8 Certificate issuer: /CN=A91A54FE/serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8 Certificate serial: 011C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft Manifest number: 0114 Signing time: Sun 07 Sep 2025 05:26:53 +0000 Manifest this update: Sun 07 Sep 2025 05:26:53 +0000 Manifest next update: Sun 14 Sep 2025 05:26:53 +0000 Files and hashes: 1: b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl (hash: gmyp5YtVrL91hkj5NYPjfQ9okjL1xv5hzvKBAdA7xzs=) 2: 4034878C531411F0B5969F4DC4F9AE02.roa (hash: MTnkpsJbkcK1viFplq5fY1GvpgMvuAacCfa5pSMUU+M=) 3: 3F5C47A0531411F0B5969F4DC4F9AE02.roa (hash: pI4dJTsbs9JXYEo3FapSXoRmDXBH5lTYniw+sL2h9gQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 05:26:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 284 (0x11c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A54FE, serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8 Validity Not Before: Sep 7 05:26:53 2025 GMT Not After : Sep 14 05:26:53 2025 GMT Subject: CN=68bd179d-9da0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0a:3b:03:54:52:0d:f3:cc:c6:52:5a:34:dc: d2:5f:e6:e9:b0:e9:b8:82:6a:38:ca:d0:98:7b:81: df:8a:fc:68:50:7e:db:41:6a:d9:ab:8b:56:06:76: d7:f3:ef:be:aa:65:7a:e7:03:62:77:f3:20:94:d2: 08:83:94:09:f4:52:4f:f0:86:d1:25:9e:82:af:7f: 0a:ca:83:45:9f:29:5e:ae:b5:59:40:65:34:1f:44: 8d:3b:5e:1a:e0:65:8e:35:e6:cf:ad:0c:27:28:ba: 94:7f:07:d0:ca:b0:12:ec:76:74:55:38:a3:40:d9: 5c:d5:5c:5f:05:24:4a:14:4b:92:32:ce:49:a4:3d: a9:32:1a:02:69:8e:59:e3:81:0d:ae:3a:22:11:86: cf:54:b9:4a:3d:04:ff:81:ca:9f:86:48:a0:64:9f: fd:4b:7a:da:19:f4:11:c6:b0:a2:71:ce:e8:c7:4f: d9:bc:1e:9f:5e:4d:7e:51:25:19:56:9a:ad:53:06: a5:75:4a:ae:b3:10:39:50:c4:79:a7:b4:e7:09:9f: 54:9d:f4:a7:8c:4a:01:6b:a8:f3:f0:eb:6f:f0:1c: 82:54:b7:c6:f6:14:3b:8f:76:5e:79:21:42:d9:0c: 22:44:fc:cc:b8:19:85:d2:b6:02:ed:98:0e:42:35: 88:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:8A:BD:B1:E5:0E:E8:84:4D:01:74:6D:46:1B:5C:BE:B4:75:2C:6C X509v3 Authority Key Identifier: keyid:6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:c2:70:0a:8c:74:c6:fc:00:c8:dd:ad:c7:66:18:dc:43:7a: 5b:98:10:37:21:f4:21:2a:c3:81:f9:70:7e:38:5c:1a:6a:53: b8:af:1b:cd:e2:03:66:e3:a5:c8:9b:79:83:cf:79:55:97:38: 30:f6:9d:64:91:20:14:b2:18:0f:41:1f:5b:b8:58:f6:4d:e5: 6f:ee:a9:0f:29:ac:d8:3c:5e:c9:25:98:51:b5:cd:bd:83:b0: 80:58:cb:5a:fa:bf:7a:15:6a:9c:38:87:20:f1:b4:ce:54:46: 2b:7b:a0:89:6b:cd:9b:2a:8f:ce:a9:40:58:92:74:ec:a6:ac: 6d:01:1c:15:f3:83:9f:df:02:ca:90:56:07:e2:d0:f9:22:07: b5:18:c9:08:57:ad:e8:8b:8e:5f:05:78:5a:2c:9a:53:60:0e: d6:a4:ae:3f:5d:b0:c9:3c:4a:00:02:40:b7:f6:72:9c:f6:c6: cc:ac:dd:55:e7:07:7a:55:48:38:39:a4:d4:df:35:e1:ae:00: fa:1f:55:f5:b0:f0:43:d4:84:c7:04:b7:e9:e6:09:1c:bb:c7: 43:73:c6:0b:20:d9:54:7d:70:02:e1:6b:65:c5:78:f6:e8:f3: c4:b4:cd:1d:02:8b:e2:4a:bd:62:cb:8b:d6:55:2e:40:a0:51: c8:21:0a:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU0RkUxMTAvBgNVBAUTKDZGQzcwOTA2RkJBNkY0NTM5NDUyMDkxOTMyQzQ1RkZB NEQ4NTcyQjgwHhcNMjUwOTA3MDUyNjUzWhcNMjUwOTE0MDUyNjUzWjAYMRYwFAYD VQQDEw02OGJkMTc5ZC05ZGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxgo7A1RSDfPMxlJaNNzSX+bpsOm4gmo4ytCYe4HfivxoUH7bQWrZq4tWBnbX 8+++qmV65wNid/MglNIIg5QJ9FJP8IbRJZ6Cr38KyoNFnylerrVZQGU0H0SNO14a 4GWONebPrQwnKLqUfwfQyrAS7HZ0VTijQNlc1VxfBSRKFEuSMs5JpD2pMhoCaY5Z 44ENrjoiEYbPVLlKPQT/gcqfhkigZJ/9S3raGfQRxrCicc7ox0/ZvB6fXk1+USUZ VpqtUwaldUqusxA5UMR5p7TnCZ9UnfSnjEoBa6jz8Otv8ByCVLfG9hQ7j3ZeeSFC 2QwiRPzMuBmF0rYC7ZgOQjWIAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGKKvbHl DuiETQF0bUYbXL60dSxsMB8GA1UdIwQYMBaAFG/HCQb7pvRTlFIJGTLEX/pNhXK4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTRGRS9ENjExN0RGNkY2 RTkxMUVFQURCRkZCNTJDNEY5QUUwMi9iOGNKQnZ1bTlGT1VVZ2taTXNSZi1rMkZj cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I4Y0pCdnVtOUZPVVVna1pNc1JmLWsyRmNyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTRGRS9ENjExN0RGNkY2RTkxMUVFQURCRkZCNTJDNEY5QUUwMi9iOGNKQnZ1bTlG T1VVZ2taTXNSZi1rMkZjcmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzwnAKjHTG/ADI3a3HZhjcQ3pbmBA3IfQhKsOB+XB+OFwaalO4rxvN 4gNm46XIm3mDz3lVlzgw9p1kkSAUshgPQR9buFj2TeVv7qkPKazYPF7JJZhRtc29 g7CAWMta+r96FWqcOIcg8bTOVEYre6CJa82bKo/OqUBYknTspqxtARwV84Of3wLK kFYH4tD5Ige1GMkIV63oi45fBXhaLJpTYA7WpK4/XbDJPEoAAkC39nKc9sbMrN1V 5wd6VUg4OaTU3zXhrgD6H1X1sPBD1ITHBLfp5gkcu8dDc8YLINlUfXAC4WtlxXj2 6PPEtM0dAoviSr1iy4vWVS5AoFHIIQoH -----END CERTIFICATE-----Generated at Sun Sep 7 23:57:41 2025 by rpki-client