$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft File: 1fbdY8A4EGCv-8nSDtMPB_veiOo.mft (raw, json) Hash identifier: vUIPPGfCalFX1MTuqSXcYw5D0O264HFUiVQmR9vP2xM= Subject key identifier: 8B:EB:4D:3A:B7:A7:C9:3E:B6:3E:38:C3:BC:24:DC:8A:95:BD:87:6E Authority key identifier: D5:F6:DD:63:C0:38:10:60:AF:FB:C9:D2:0E:D3:0F:07:FB:DE:88:EA Certificate issuer: /CN=A91BBF7F/serialNumber=D5F6DD63C0381060AFFBC9D20ED30F07FBDE88EA Certificate serial: 0F20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft Manifest number: 0F08 Signing time: Thu 18 Sep 2025 17:47:45 +0000 Manifest this update: Thu 18 Sep 2025 17:47:44 +0000 Manifest next update: Thu 25 Sep 2025 17:47:44 +0000 Files and hashes: 1: 1fbdY8A4EGCv-8nSDtMPB_veiOo.crl (hash: EnOPI2h+ibi5IactNlT9kjMC43Kq6a/viTBT6hm9Mbc=) 2: 656CB24EC9F611ED9853C583C4F9AE02.roa (hash: w9f85Y+KRBnRa0YJSmsDyyhylh1UfaYw453pU7HjF1A=) 3: 64554290C9F611ED9853C583C4F9AE02.roa (hash: OKUbU8IYBtUlB8hYEhyLNWGvkxYq3YMYoLZU29fzMeU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.crl rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 17:47:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3872 (0xf20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBF7F, serialNumber=D5F6DD63C0381060AFFBC9D20ED30F07FBDE88EA Validity Not Before: Sep 18 17:47:44 2025 GMT Not After : Sep 25 17:47:44 2025 GMT Subject: CN=68cc45c1-a38a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9a:c7:27:36:6e:e7:b5:0d:78:c2:37:c4:92: 07:62:f3:5e:07:a1:5e:c2:26:d3:b1:a1:cd:2f:01: e2:be:54:b0:b8:6a:c4:46:41:3b:71:dd:d7:ff:59: 60:db:05:7d:e2:2a:2e:73:1e:30:62:55:6f:0b:f5: fd:2d:e5:81:4a:1b:d7:67:73:9b:fe:4a:f2:c2:65: ed:1f:d1:60:c5:01:11:b0:39:46:1f:0d:2a:3d:c6: dd:f1:da:3a:fb:10:b3:fe:f6:81:5b:ed:fb:ce:1c: 28:6e:36:36:15:c4:3f:8d:7b:ab:c2:4a:57:fb:7a: 2e:fd:ec:2f:12:fa:da:ea:d2:71:e9:53:e0:d2:a1: 7d:c4:62:cb:ee:40:24:32:2a:1d:5b:a6:4c:49:87: 4e:6a:48:43:38:b7:6c:a1:9f:1a:04:a7:d8:ae:8c: 2c:8e:f5:25:d0:18:dc:34:41:22:ab:3e:3b:7b:cc: 93:59:ab:35:eb:95:e6:af:a4:b3:ef:c5:36:84:9e: f4:21:c2:38:f6:46:2c:94:56:ab:04:2d:cf:19:6d: 52:e7:bf:83:26:7d:05:67:b0:57:10:78:87:71:57: ed:7d:05:cc:29:38:14:c6:7d:7b:b7:60:0e:76:2b: 57:1a:4a:ac:54:20:75:1d:12:1a:ad:62:46:c1:bc: 83:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:EB:4D:3A:B7:A7:C9:3E:B6:3E:38:C3:BC:24:DC:8A:95:BD:87:6E X509v3 Authority Key Identifier: keyid:D5:F6:DD:63:C0:38:10:60:AF:FB:C9:D2:0E:D3:0F:07:FB:DE:88:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:c2:f8:2f:0d:1c:e6:77:4a:25:76:0e:65:5b:57:d1:e1:5c: a8:fd:eb:5f:e9:df:88:e7:4e:d8:52:f1:10:74:8a:26:6d:d0: 93:62:4f:6e:3d:5a:82:50:90:70:4f:13:a4:68:25:67:06:2d: 96:c9:e8:94:32:41:7c:18:c6:1b:cd:e6:24:7e:dd:e6:f0:f3: 29:26:06:6c:36:71:96:57:18:f8:c8:23:a5:e9:49:7b:55:55: ad:5c:c3:69:93:e4:3e:48:e2:69:bc:3e:47:ae:0d:ee:5f:88: c9:3f:f4:a6:8c:86:f8:66:f3:e2:c9:8c:fc:0d:39:46:4e:9f: 5b:6a:4d:0f:b0:7b:df:83:13:64:74:60:f5:33:6d:ee:6c:0a: 98:bc:d2:da:52:e2:6b:3b:30:06:b0:2e:2d:a3:23:56:6e:bd: 72:ae:ff:d6:54:64:66:39:a2:93:28:f1:42:1d:e6:d3:17:30: 04:ed:f3:67:13:67:75:94:00:f6:2d:98:37:38:e0:ad:82:e3: 8a:88:26:e2:69:40:f2:55:e2:7d:a8:00:96:f3:77:27:7a:ef: 8c:6c:60:a7:90:fd:2f:7d:99:af:67:0d:fb:c3:61:53:bf:57: 7b:b7:ff:ad:2e:ed:86:22:5a:c1:0e:62:73:df:99:ae:8d:8f: b4:5b:bd:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDyAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJGN0YxMTAvBgNVBAUTKEQ1RjZERDYzQzAzODEwNjBBRkZCQzlEMjBFRDMwRjA3 RkJERTg4RUEwHhcNMjUwOTE4MTc0NzQ0WhcNMjUwOTI1MTc0NzQ0WjAYMRYwFAYD VQQDEw02OGNjNDVjMS1hMzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyJrHJzZu57UNeMI3xJIHYvNeB6FewibTsaHNLwHivlSwuGrERkE7cd3X/1lg 2wV94ioucx4wYlVvC/X9LeWBShvXZ3Ob/krywmXtH9FgxQERsDlGHw0qPcbd8do6 +xCz/vaBW+37zhwobjY2FcQ/jXurwkpX+3ou/ewvEvra6tJx6VPg0qF9xGLL7kAk MiodW6ZMSYdOakhDOLdsoZ8aBKfYrowsjvUl0BjcNEEiqz47e8yTWas165Xmr6Sz 78U2hJ70IcI49kYslFarBC3PGW1S57+DJn0FZ7BXEHiHcVftfQXMKTgUxn17t2AO ditXGkqsVCB1HRIarWJGwbyDkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIvrTTq3 p8k+tj44w7wk3IqVvYduMB8GA1UdIwQYMBaAFNX23WPAOBBgr/vJ0g7TDwf73ojq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkY3Ri80NTNFQjZGNDg3 NDUxMUU5QkY4NjQ0NUNDNEY5QUUwMi8xZmJkWThBNEVHQ3YtOG5TRHRNUEJfdmVp T28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFmYmRZOEE0RUdDdi04blNEdE1QQl92ZWlPby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkY3Ri80NTNFQjZGNDg3NDUxMUU5QkY4NjQ0NUNDNEY5QUUwMi8xZmJkWThBNEVH Q3YtOG5TRHRNUEJfdmVpT28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuwvgvDRzmd0oldg5lW1fR4Vyo/etf6d+I507YUvEQdIombdCTYk9u PVqCUJBwTxOkaCVnBi2WyeiUMkF8GMYbzeYkft3m8PMpJgZsNnGWVxj4yCOl6Ul7 VVWtXMNpk+Q+SOJpvD5Hrg3uX4jJP/SmjIb4ZvPiyYz8DTlGTp9bak0PsHvfgxNk dGD1M23ubAqYvNLaUuJrOzAGsC4toyNWbr1yrv/WVGRmOaKTKPFCHebTFzAE7fNn E2d1lAD2LZg3OOCtguOKiCbiaUDyVeJ9qACW83cneu+MbGCnkP0vfZmvZw37w2FT v1d7t/+tLu2GIlrBDmJz35mujY+0W70f -----END CERTIFICATE-----Generated at Thu Sep 18 21:51:11 2025 by rpki-client