$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft File: f_x8VcpIXDdqYe_sDlN3ZToEw70.mft (raw, json) Hash identifier: 15VcqVglIVCrAVXH06ySVeDCV+XMe7RR45ZVqDhYUs8= Subject key identifier: 96:32:2B:03:55:C4:8E:84:94:3E:89:96:62:A0:42:94:12:6A:B4:24 Authority key identifier: 7F:FC:7C:55:CA:48:5C:37:6A:61:EF:EC:0E:53:77:65:3A:04:C3:BD Certificate issuer: /CN=A91ABD25/serialNumber=7FFC7C55CA485C376A61EFEC0E5377653A04C3BD Certificate serial: 022A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft Manifest number: 021F Signing time: Thu 21 Aug 2025 02:13:28 +0000 Manifest this update: Thu 21 Aug 2025 02:13:27 +0000 Manifest next update: Thu 28 Aug 2025 02:13:27 +0000 Files and hashes: 1: f_x8VcpIXDdqYe_sDlN3ZToEw70.crl (hash: pXvopZPlPz+RgVkt2MLYR7XhJtiWsIuU1C9qTvfxbdg=) 2: 9535628E5C0D11EDA7191A0AC4F9AE02.roa (hash: /cbaTktdW8E1yuwyyLv6euCmC3kworQWAZraDFOpKP8=) 3: E7FC6A1A4EAE11EDBF0D8256C4F9AE02.roa (hash: 2mKwnMpgR04h28Vp1kCMChznHcUKBjq3JV55A80+RxM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.crl rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 02:13:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 554 (0x22a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABD25, serialNumber=7FFC7C55CA485C376A61EFEC0E5377653A04C3BD Validity Not Before: Aug 21 02:13:27 2025 GMT Not After : Aug 28 02:13:27 2025 GMT Subject: CN=68a680c7-4024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d8:55:e0:11:7f:f6:62:03:89:7d:e0:d7:b1: 69:3c:ef:b5:36:ec:81:76:34:20:1c:6c:68:44:20: d0:10:43:72:e4:a9:35:da:5e:06:94:a3:32:ec:9c: c6:07:35:88:58:aa:a1:cc:89:6a:5e:f6:8c:a9:80: 2a:03:b9:35:1a:5c:90:ff:35:76:bf:5d:1a:a1:65: 75:f6:b1:39:98:40:b2:b2:da:eb:07:2b:fd:1b:8a: fd:43:62:ef:61:1c:1d:06:57:1b:eb:93:07:d2:3f: 9e:56:55:d8:2c:3c:31:86:03:fa:ae:0f:14:4a:c1: cb:65:84:8c:10:09:02:9c:99:0a:89:49:4e:f0:83: 0c:c5:8f:bd:ab:90:30:c0:4d:9d:be:7f:3c:e9:ba: 0c:a5:18:3e:d2:49:ea:35:15:09:18:d1:55:cb:19: 97:0b:b6:fe:82:90:7e:31:67:85:5c:f8:eb:d2:bd: 03:2e:f5:aa:4c:85:d2:37:15:c0:de:ef:ac:18:0a: c7:94:2d:bb:b7:c2:1e:78:5e:9f:ce:a9:37:e2:da: 17:41:eb:61:dc:f8:c3:c2:93:64:d7:45:96:6b:05: 5d:14:52:bc:a3:e9:40:db:ba:1c:32:6e:5e:f8:4e: 4f:90:d5:5e:95:08:8d:46:70:5d:b1:f9:ae:cd:5d: 2b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:32:2B:03:55:C4:8E:84:94:3E:89:96:62:A0:42:94:12:6A:B4:24 X509v3 Authority Key Identifier: keyid:7F:FC:7C:55:CA:48:5C:37:6A:61:EF:EC:0E:53:77:65:3A:04:C3:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:e1:2f:ea:a6:00:a0:41:96:96:ee:38:77:b1:ce:79:ef:a3: 07:e5:4d:47:a1:e2:7c:6e:9e:8f:cd:ea:59:de:ab:e2:64:f3: cf:c0:7c:1c:58:fd:57:53:fa:5e:8b:11:be:9b:f3:c3:d9:77: e4:e1:7a:57:13:d7:8e:c6:37:83:7d:7d:31:9a:59:a1:00:7e: 5b:5d:fe:55:a6:37:7d:91:b5:81:6c:71:f1:6a:e3:77:34:8d: e3:8d:23:08:8d:11:87:0a:43:64:87:2e:58:15:61:5e:0b:6f: fc:19:6e:97:cc:cf:9d:fe:e2:e2:8a:52:40:57:8d:cd:29:f6: 51:75:b2:d3:1d:23:ae:3d:67:55:20:35:75:d1:1d:d8:55:e5: cd:33:7f:e3:c7:b2:e7:7d:1d:fd:c3:a6:1d:c7:4c:eb:67:95: 93:b7:0d:2c:bd:6c:25:3e:04:c9:00:88:bd:f5:5a:06:3c:9c: 79:23:5f:ad:ca:db:62:6f:ec:95:ca:9b:8f:80:6d:03:97:9b: f0:10:45:fd:cb:bf:9d:1a:ae:28:8d:0a:c3:f2:18:2e:75:20: 60:cc:b7:04:6f:3f:42:39:45:de:57:1a:40:c0:0a:7c:85:e7: ca:4d:70:77:34:ec:a4:cf:00:39:0d:4c:2c:1a:47:4a:bb:2a: ba:2a:3d:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJEMjUxMTAvBgNVBAUTKDdGRkM3QzU1Q0E0ODVDMzc2QTYxRUZFQzBFNTM3NzY1 M0EwNEMzQkQwHhcNMjUwODIxMDIxMzI3WhcNMjUwODI4MDIxMzI3WjAYMRYwFAYD VQQDEw02OGE2ODBjNy00MDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAudhV4BF/9mIDiX3g17FpPO+1NuyBdjQgHGxoRCDQEENy5Kk12l4GlKMy7JzG BzWIWKqhzIlqXvaMqYAqA7k1GlyQ/zV2v10aoWV19rE5mECystrrByv9G4r9Q2Lv YRwdBlcb65MH0j+eVlXYLDwxhgP6rg8USsHLZYSMEAkCnJkKiUlO8IMMxY+9q5Aw wE2dvn886boMpRg+0knqNRUJGNFVyxmXC7b+gpB+MWeFXPjr0r0DLvWqTIXSNxXA 3u+sGArHlC27t8IeeF6fzqk34toXQeth3PjDwpNk10WWawVdFFK8o+lA27ocMm5e +E5PkNVelQiNRnBdsfmuzV0rXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJYyKwNV xI6ElD6JlmKgQpQSarQkMB8GA1UdIwQYMBaAFH/8fFXKSFw3amHv7A5Td2U6BMO9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkQyNS81MjdERDI1QTRF QUMxMUVEQjRGNzFFMzhDNEY5QUUwMi9mX3g4VmNwSVhEZHFZZV9zRGxOM1pUb0V3 NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZfeDhWY3BJWERkcVllX3NEbE4zWlRvRXc3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkQyNS81MjdERDI1QTRFQUMxMUVEQjRGNzFFMzhDNEY5QUUwMi9mX3g4VmNwSVhE ZHFZZV9zRGxOM1pUb0V3NzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAo4S/qpgCgQZaW7jh3sc5576MH5U1HoeJ8bp6PzepZ3qviZPPPwHwc WP1XU/peixG+m/PD2Xfk4XpXE9eOxjeDfX0xmlmhAH5bXf5Vpjd9kbWBbHHxauN3 NI3jjSMIjRGHCkNkhy5YFWFeC2/8GW6XzM+d/uLiilJAV43NKfZRdbLTHSOuPWdV IDV10R3YVeXNM3/jx7LnfR39w6Ydx0zrZ5WTtw0svWwlPgTJAIi99VoGPJx5I1+t yttib+yVypuPgG0Dl5vwEEX9y7+dGq4ojQrD8hgudSBgzLcEbz9COUXeVxpAwAp8 hefKTXB3NOykzwA5DUwsGkdKuyq6Kj04 -----END CERTIFICATE-----Generated at Fri Aug 22 16:19:03 2025 by rpki-client