$ rpki-client -vvf rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft File: S0fJxk08IyF6Fd2rh0fDncMBhPI.mft (raw, json) Hash identifier: qzkFQDQmJS8RsWsyvXy76qMF90Ia9hY0a/D8LPCkcrw= Subject key identifier: FC:1A:C3:9F:AF:8E:33:D8:3E:CD:B0:B7:86:A1:ED:92:7C:62:E0:E6 Authority key identifier: 4B:47:C9:C6:4D:3C:23:21:7A:15:DD:AB:87:47:C3:9D:C3:01:84:F2 Certificate issuer: /CN=A91B31CE/serialNumber=4B47C9C64D3C23217A15DDAB8747C39DC30184F2 Certificate serial: 06B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0fJxk08IyF6Fd2rh0fDncMBhPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft Manifest number: 06AB Signing time: Wed 20 Aug 2025 22:18:23 +0000 Manifest this update: Wed 20 Aug 2025 22:18:22 +0000 Manifest next update: Wed 27 Aug 2025 22:18:22 +0000 Files and hashes: 1: S0fJxk08IyF6Fd2rh0fDncMBhPI.crl (hash: 8Y/1inDlvv/YIscTbYXK6GmRQyNx0hd54uhXoSwZMf0=) 2: AA51390A822B11EE8B95E475C4F9AE02.roa (hash: iVoQ4DzarwOJUrSELiNWak+s+ohZp/LfOai+uGXnZZw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.crl rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0fJxk08IyF6Fd2rh0fDncMBhPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 22:18:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1716 (0x6b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B31CE, serialNumber=4B47C9C64D3C23217A15DDAB8747C39DC30184F2 Validity Not Before: Aug 20 22:18:22 2025 GMT Not After : Aug 27 22:18:22 2025 GMT Subject: CN=68a649af-3a3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e5:b4:c4:9f:32:1f:5b:12:c9:a4:db:11:0f: d3:2f:48:a3:aa:3e:a0:f8:d7:01:b9:60:5e:68:e8: 81:85:f3:19:b1:22:02:67:50:e5:8c:18:85:0c:5e: bd:cb:45:70:25:5b:f8:56:b5:92:35:b0:aa:d0:92: ae:b9:5e:09:85:63:4e:e5:b7:10:a7:47:81:25:fa: a5:0e:b5:0f:7f:1c:7e:7b:56:b9:f7:cc:7b:95:7c: 67:22:65:09:d8:d6:bd:d6:03:8c:73:7a:8f:ed:f2: 63:46:2f:8f:5d:68:55:ff:17:0b:c3:60:f8:a1:ff: 8c:f1:68:08:5a:95:25:c5:19:4c:a0:75:4e:6a:30: fc:e7:18:a9:f1:ad:6c:b3:7b:5a:45:f5:56:62:47: 4d:a2:8b:e5:b3:b1:b5:d4:33:76:31:78:90:33:7f: bf:96:ac:b0:44:fe:1c:19:41:fa:02:ca:00:17:58: 2c:88:aa:c3:fc:3d:25:d3:2e:ff:ac:89:7f:2b:71: 5e:e9:ec:57:b0:1e:3c:b5:ca:c8:ef:77:0f:ee:4f: af:96:98:a5:5f:2c:bf:a4:29:c7:e0:46:2d:73:09: f1:80:07:da:4a:83:6d:aa:11:72:b9:34:cc:38:c1: c4:42:2f:75:e6:cd:f2:2c:61:3a:e5:79:c2:9f:a4: 2c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:1A:C3:9F:AF:8E:33:D8:3E:CD:B0:B7:86:A1:ED:92:7C:62:E0:E6 X509v3 Authority Key Identifier: keyid:4B:47:C9:C6:4D:3C:23:21:7A:15:DD:AB:87:47:C3:9D:C3:01:84:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0fJxk08IyF6Fd2rh0fDncMBhPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:50:7e:6a:b8:51:65:02:52:d9:44:7f:ae:27:e1:e2:10:8f: 64:fb:bc:d7:8f:7d:81:c4:85:04:25:92:ae:8e:05:69:7f:98: db:f1:b5:15:8c:23:9b:2e:d1:32:c4:50:b0:bd:4b:31:9c:9a: 34:3f:9b:f8:68:51:b6:5b:54:07:ff:62:81:85:cb:32:71:51: 60:65:4e:77:82:af:5d:21:a7:e8:c1:36:72:c1:f5:4b:eb:66: 6d:a5:f9:8b:30:d1:fd:5f:e1:4b:64:ac:45:3e:83:71:a5:32: 0c:0b:b6:4d:62:0d:d8:30:14:d4:e6:dc:d4:4e:86:c5:a0:48: ce:c7:ec:a7:0a:8a:cd:d7:be:e3:7f:8c:24:6d:0d:80:ec:53: a9:f5:57:cc:6f:b5:d9:70:71:44:44:39:f7:7f:28:09:81:47: 4d:86:f2:91:b0:3a:2c:e0:5a:e9:cf:6a:75:fb:1f:84:61:56: 8b:81:39:b9:23:7b:cf:86:8d:3a:26:77:e7:db:87:2c:db:04: 00:e8:44:8a:a5:6a:3b:d0:b6:61:f8:27:8e:60:2f:66:6f:61: 94:3a:fb:4d:83:74:bd:f3:89:11:3b:be:85:fa:ae:f4:1f:0d: e7:c5:10:79:13:06:30:20:17:61:23:60:8f:e3:c8:b6:88:85: 0b:5f:70:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjMxQ0UxMTAvBgNVBAUTKDRCNDdDOUM2NEQzQzIzMjE3QTE1RERBQjg3NDdDMzlE QzMwMTg0RjIwHhcNMjUwODIwMjIxODIyWhcNMjUwODI3MjIxODIyWjAYMRYwFAYD VQQDEw02OGE2NDlhZi0zYTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0OW0xJ8yH1sSyaTbEQ/TL0ijqj6g+NcBuWBeaOiBhfMZsSICZ1DljBiFDF69 y0VwJVv4VrWSNbCq0JKuuV4JhWNO5bcQp0eBJfqlDrUPfxx+e1a598x7lXxnImUJ 2Na91gOMc3qP7fJjRi+PXWhV/xcLw2D4of+M8WgIWpUlxRlMoHVOajD85xip8a1s s3taRfVWYkdNoovls7G11DN2MXiQM3+/lqywRP4cGUH6AsoAF1gsiKrD/D0l0y7/ rIl/K3Fe6exXsB48tcrI73cP7k+vlpilXyy/pCnH4EYtcwnxgAfaSoNtqhFyuTTM OMHEQi915s3yLGE65XnCn6QsFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPwaw5+v jjPYPs2wt4ah7ZJ8YuDmMB8GA1UdIwQYMBaAFEtHycZNPCMhehXdq4dHw53DAYTy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzFDRS82QjA1NjA3QTdD Q0QxMUVCQUVDNkE5NzRDNEY5QUUwMi9TMGZKeGswOEl5RjZGZDJyaDBmRG5jTUJo UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MwZkp4azA4SXlGNkZkMnJoMGZEbmNNQmhQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzFDRS82QjA1NjA3QTdDQ0QxMUVCQUVDNkE5NzRDNEY5QUUwMi9TMGZKeGswOEl5 RjZGZDJyaDBmRG5jTUJoUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYUH5quFFlAlLZRH+uJ+HiEI9k+7zXj32BxIUEJZKujgVpf5jb8bUV jCObLtEyxFCwvUsxnJo0P5v4aFG2W1QH/2KBhcsycVFgZU53gq9dIafowTZywfVL 62ZtpfmLMNH9X+FLZKxFPoNxpTIMC7ZNYg3YMBTU5tzUTobFoEjOx+ynCorN177j f4wkbQ2A7FOp9VfMb7XZcHFERDn3fygJgUdNhvKRsDos4Frpz2p1+x+EYVaLgTm5 I3vPho06Jnfn24cs2wQA6ESKpWo70LZh+CeOYC9mb2GUOvtNg3S984kRO76F+q70 Hw3nxRB5EwYwIBdhI2CP48i2iIULX3DK -----END CERTIFICATE-----Generated at Fri Aug 22 16:25:09 2025 by rpki-client