$ rpki-client -vvf rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.mft File: H8Tf0A2sNKjrhGPTlRwio0WDesk.mft (raw, json) Hash identifier: vRH24Iz3MZJfRmOrhEGI+G2MRio/V66dOzSpudoJEsc= Subject key identifier: 6D:59:A0:2C:12:B0:10:BD:1E:6D:06:3B:4A:1E:7D:BD:3A:93:C3:A1 Authority key identifier: 1F:C4:DF:D0:0D:AC:34:A8:EB:84:63:D3:95:1C:22:A3:45:83:7A:C9 Certificate issuer: /CN=A91B477B/serialNumber=1FC4DFD00DAC34A8EB8463D3951C22A345837AC9 Certificate serial: 06D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8Tf0A2sNKjrhGPTlRwio0WDesk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.mft Manifest number: 06CA Signing time: Mon 08 Sep 2025 22:08:42 +0000 Manifest this update: Mon 08 Sep 2025 22:08:42 +0000 Manifest next update: Mon 15 Sep 2025 22:08:42 +0000 Files and hashes: 1: H8Tf0A2sNKjrhGPTlRwio0WDesk.crl (hash: AHfvbIYPu2181u1mRi7YrrzsSUdTGSp6gDfHY3/YYH0=) 2: 22F72E28725311EBA9C51756C4F9AE02.roa (hash: Td9ZRXmDLCaOWu5C2VPY0G2nu6GZr9orup/Cn82OpN4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.crl rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8Tf0A2sNKjrhGPTlRwio0WDesk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 22:08:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1752 (0x6d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B477B, serialNumber=1FC4DFD00DAC34A8EB8463D3951C22A345837AC9 Validity Not Before: Sep 8 22:08:42 2025 GMT Not After : Sep 15 22:08:42 2025 GMT Subject: CN=68bf53ea-0d99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:97:c5:6f:c6:d4:99:7d:9a:78:95:2d:be:6c: 67:70:20:65:a9:d1:ff:90:01:7b:ab:94:58:44:7d: 34:00:91:41:41:87:ec:c6:d1:58:73:22:e7:10:f7: 54:a1:fd:66:e1:46:b4:29:60:49:08:ba:51:cd:b2: a6:42:83:19:d5:4e:9a:b2:b6:94:c2:20:82:77:6f: fc:b2:60:44:ec:87:d5:d9:7f:3d:0f:8a:f1:4d:77: 8e:5f:bb:15:b7:3b:e9:f4:8b:10:7c:43:02:e9:1f: 87:9a:4e:81:04:1c:26:ac:ea:c7:31:37:f1:69:15: eb:aa:5f:2e:25:b7:3f:b6:d7:e0:28:23:58:1d:8e: 46:42:9b:ef:48:86:be:0e:2e:7c:2c:c8:5f:0e:2f: bf:f1:37:66:61:43:cc:f0:c2:4c:c9:67:e1:d7:85: cc:b1:0d:7b:6f:36:f6:d4:5c:da:6a:c2:2c:f5:a3: 29:ad:e7:04:03:d1:3d:09:3e:c2:cd:f9:5c:4a:c4: d7:b6:0c:b5:59:dd:fb:6d:db:12:ea:d5:e6:a1:1a: f3:53:42:c9:7d:c1:b9:c9:7f:54:01:47:b8:74:d6: 1b:62:2c:0a:12:db:29:1f:2a:dc:97:0e:c7:0a:3c: 7f:76:b7:85:5e:88:e1:56:2b:66:45:d9:2d:de:d0: 42:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:59:A0:2C:12:B0:10:BD:1E:6D:06:3B:4A:1E:7D:BD:3A:93:C3:A1 X509v3 Authority Key Identifier: keyid:1F:C4:DF:D0:0D:AC:34:A8:EB:84:63:D3:95:1C:22:A3:45:83:7A:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8Tf0A2sNKjrhGPTlRwio0WDesk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:49:db:57:0a:a9:10:86:ce:3a:59:48:f9:bd:5e:90:26:a3: 5f:36:08:dc:58:81:f3:9d:3a:82:c3:e4:c2:1d:44:ea:f7:8e: df:29:3e:07:fa:b9:8b:2f:f8:30:d6:50:6a:00:f5:0c:38:73: e0:41:59:f8:54:04:c0:71:e7:3e:c7:49:d6:89:b3:58:7e:74: 32:8d:b7:83:9d:10:be:34:55:93:7f:b9:e8:2b:3a:f0:eb:a3: 57:7c:03:77:4f:0d:da:8f:ba:89:bc:ab:58:9e:c9:0a:c4:0d: e1:5e:b8:62:ab:55:54:31:85:d2:f0:f3:5e:99:a4:0b:9d:fc: 56:ac:f0:c1:d4:60:05:3b:fa:16:fe:f0:b5:13:aa:97:5b:28: 1a:7e:b9:00:b1:70:34:95:c9:f6:ca:b7:2c:2a:60:69:be:f7: 39:70:55:73:07:7a:cf:71:88:50:29:77:6f:04:35:48:da:7b: c7:7c:7a:81:38:34:11:89:21:dd:91:ae:c0:27:e6:9a:e0:7e: 52:56:49:e7:ec:f4:08:6f:86:85:57:ec:59:0c:f8:b2:35:7b: e8:83:3f:2c:15:80:a7:5c:0c:64:8e:b4:48:bb:8f:92:70:29: 31:7b:22:0f:57:79:90:5a:11:52:62:98:ac:db:33:17:71:e3: cf:7f:24:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ3N0IxMTAvBgNVBAUTKDFGQzRERkQwMERBQzM0QThFQjg0NjNEMzk1MUMyMkEz NDU4MzdBQzkwHhcNMjUwOTA4MjIwODQyWhcNMjUwOTE1MjIwODQyWjAYMRYwFAYD VQQDEw02OGJmNTNlYS0wZDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZfFb8bUmX2aeJUtvmxncCBlqdH/kAF7q5RYRH00AJFBQYfsxtFYcyLnEPdU of1m4Ua0KWBJCLpRzbKmQoMZ1U6asraUwiCCd2/8smBE7IfV2X89D4rxTXeOX7sV tzvp9IsQfEMC6R+Hmk6BBBwmrOrHMTfxaRXrql8uJbc/ttfgKCNYHY5GQpvvSIa+ Di58LMhfDi+/8TdmYUPM8MJMyWfh14XMsQ17bzb21FzaasIs9aMprecEA9E9CT7C zflcSsTXtgy1Wd37bdsS6tXmoRrzU0LJfcG5yX9UAUe4dNYbYiwKEtspHyrclw7H Cjx/dreFXojhVitmRdkt3tBCrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG1ZoCwS sBC9Hm0GO0oefb06k8OhMB8GA1UdIwQYMBaAFB/E39ANrDSo64Rj05UcIqNFg3rJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDc3Qi8xQzI1NjI3MDcy NTAxMUVCQjY0OEY4NEVDNEY5QUUwMi9IOFRmMEEyc05LanJoR1BUbFJ3aW8wV0Rl c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g4VGYwQTJzTktqcmhHUFRsUndpbzBXRGVzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDc3Qi8xQzI1NjI3MDcyNTAxMUVCQjY0OEY4NEVDNEY5QUUwMi9IOFRmMEEyc05L anJoR1BUbFJ3aW8wV0Rlc2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaSdtXCqkQhs46WUj5vV6QJqNfNgjcWIHznTqCw+TCHUTq947fKT4H +rmLL/gw1lBqAPUMOHPgQVn4VATAcec+x0nWibNYfnQyjbeDnRC+NFWTf7noKzrw 66NXfAN3Tw3aj7qJvKtYnskKxA3hXrhiq1VUMYXS8PNemaQLnfxWrPDB1GAFO/oW /vC1E6qXWygafrkAsXA0lcn2yrcsKmBpvvc5cFVzB3rPcYhQKXdvBDVI2nvHfHqB ODQRiSHdka7AJ+aa4H5SVknn7PQIb4aFV+xZDPiyNXvogz8sFYCnXAxkjrRIu4+S cCkxeyIPV3mQWhFSYpis2zMXcePPfyRR -----END CERTIFICATE-----Generated at Tue Sep 9 19:59:18 2025 by rpki-client