$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft File: dFPYgTvI73KQsRAjI1iJTHfE2zc.mft (raw, json) Hash identifier: YjLa380o3vv86DJuT/WuU5IKiW4NShMFJmYbX8G1CUE= Subject key identifier: 3B:77:B5:37:DC:4B:A2:29:EF:0D:92:56:BC:D1:F3:0B:1B:3C:F6:4A Authority key identifier: 74:53:D8:81:3B:C8:EF:72:90:B1:10:23:23:58:89:4C:77:C4:DB:37 Certificate issuer: /CN=A91BC64F/serialNumber=7453D8813BC8EF7290B110232358894C77C4DB37 Certificate serial: 06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft Manifest number: 04 Signing time: Tue 19 Aug 2025 08:41:15 +0000 Manifest this update: Tue 19 Aug 2025 08:41:15 +0000 Manifest next update: Tue 26 Aug 2025 08:41:15 +0000 Files and hashes: 1: dFPYgTvI73KQsRAjI1iJTHfE2zc.crl (hash: fqXMqfxcY1ssu+rXZBsRFOui2bUAVLUPXZIIJm0jlM0=) 2: BAC878D0799511F098E98265C4F9AE02.roa (hash: DOKXlcoim3mGT1/5T41gtrSkQeSIUWzOdLmQqGxlYWw=) 3: BB3F5AAE799511F098E98265C4F9AE02.roa (hash: ENyfebcRoladpIqoDMvyVSOny2O0G7/P5ahmxQmU81s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.crl rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 08:41:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC64F, serialNumber=7453D8813BC8EF7290B110232358894C77C4DB37 Validity Not Before: Aug 19 08:41:15 2025 GMT Not After : Aug 26 08:41:15 2025 GMT Subject: CN=68a438ab-132f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a3:bd:a0:e8:db:0b:90:77:70:e7:19:50:16: 2c:74:65:fa:5e:eb:04:47:fe:f8:a9:b3:84:c0:16: cf:36:82:a4:f2:63:66:5a:4b:6e:02:3e:82:87:4d: 49:6b:72:2e:dc:d7:a5:38:52:c3:7f:a0:ae:7f:16: c3:86:06:94:ed:30:41:1c:af:34:04:43:81:d8:05: cb:37:9b:65:28:3b:47:5c:7a:36:fc:54:5c:a5:75: ca:51:58:ab:c8:4f:06:b4:76:b8:cf:3e:15:16:9d: 4e:4e:2d:a7:76:70:25:5c:a5:d0:70:a7:ee:1a:fd: 3f:b7:12:a0:db:06:8e:4b:a4:3e:89:7f:a8:5f:d2: 56:83:48:2f:87:20:7b:ce:72:e9:61:8d:22:e7:86: 7b:a7:84:bd:a7:49:55:51:15:d7:9c:5e:68:2d:a9: 81:bf:a3:f9:6a:dc:1a:70:e0:ad:36:8f:96:71:bd: d4:5c:56:30:9b:8e:1c:2b:11:ee:4d:19:60:9f:cb: 25:39:f7:91:a1:ec:52:cb:79:61:43:bf:19:62:26: 77:9f:e2:a0:2e:4e:de:21:4f:e6:92:17:4f:63:7b: bf:4a:7e:59:65:e5:4e:c3:3a:5b:e6:4b:49:8e:6d: e0:81:ad:c5:0f:21:0e:41:de:92:eb:74:5e:21:0b: d2:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:77:B5:37:DC:4B:A2:29:EF:0D:92:56:BC:D1:F3:0B:1B:3C:F6:4A X509v3 Authority Key Identifier: keyid:74:53:D8:81:3B:C8:EF:72:90:B1:10:23:23:58:89:4C:77:C4:DB:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:d3:88:e0:27:5b:67:ed:17:52:b9:d4:69:a0:22:77:bf:68: 56:2a:c0:9f:4d:8d:c0:22:91:e3:53:52:79:a7:47:12:6d:5c: 7d:66:9d:3f:46:6d:73:85:59:8e:b2:39:df:1b:53:ee:75:68: a5:f6:aa:01:07:b4:63:53:5e:f1:14:47:f4:d1:9f:f5:fc:d2: 8c:8f:f0:5c:a8:ec:79:8c:c2:49:bb:a9:a0:0a:dd:96:fd:01: ff:c3:70:8f:6e:00:6d:35:c7:ca:2e:f6:70:f6:b0:f6:1f:cc: bd:ba:de:12:c6:ec:70:85:5e:fd:5d:5d:26:5d:1f:3c:f1:23: 26:9a:9c:f6:5c:87:a7:ce:9b:ff:49:b6:ec:ee:2f:bf:e8:99: 3f:3c:a4:9c:0d:cc:61:55:15:a1:60:2e:08:44:61:da:ed:c9: b2:b3:f0:82:52:01:1a:ef:74:0e:e4:50:ec:63:5a:a0:08:0d: ae:ad:38:90:3f:ce:88:88:ea:7a:68:db:d0:32:57:c4:f5:6d: b3:98:2a:c2:13:6b:9a:1d:09:b5:f9:16:1c:ca:c2:e4:c8:9b: 45:79:8d:93:61:37:aa:85:24:5f:d4:9f:44:50:b1:17:46:89: 50:a9:ce:6b:97:f1:d1:3c:ef:89:d4:36:cc:30:b6:4b:cd:8f: 91:55:bd:01 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QzY0RjExMC8GA1UEBRMoNzQ1M0Q4ODEzQkM4RUY3MjkwQjExMDIzMjM1ODg5NEM3 N0M0REIzNzAeFw0yNTA4MTkwODQxMTVaFw0yNTA4MjYwODQxMTVaMBgxFjAUBgNV BAMTDTY4YTQzOGFiLTEzMmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDco72g6NsLkHdw5xlQFix0Zfpe6wRH/vips4TAFs82gqTyY2ZaS24CPoKHTUlr ci7c16U4UsN/oK5/FsOGBpTtMEEcrzQEQ4HYBcs3m2UoO0dcejb8VFyldcpRWKvI Twa0drjPPhUWnU5OLad2cCVcpdBwp+4a/T+3EqDbBo5LpD6Jf6hf0laDSC+HIHvO culhjSLnhnunhL2nSVVRFdecXmgtqYG/o/lq3Bpw4K02j5ZxvdRcVjCbjhwrEe5N GWCfyyU595Gh7FLLeWFDvxliJnef4qAuTt4hT+aSF09je79Kflll5U7DOlvmS0mO beCBrcUPIQ5B3pLrdF4hC9KjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUO3e1N9xL oinvDZJWvNHzCxs89kowHwYDVR0jBBgwFoAUdFPYgTvI73KQsRAjI1iJTHfE2zcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJDNjRGLzM2MENBMTdBNzk5 NTExRjBCRUNGMkQ0MEM0RjlBRTAyL2RGUFlnVHZJNzNLUXNSQWpJMWlKVEhmRTJ6 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZEZQWWdUdkk3M0tRc1JBakkxaUpUSGZFMnpjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJD NjRGLzM2MENBMTdBNzk5NTExRjBCRUNGMkQ0MEM0RjlBRTAyL2RGUFlnVHZJNzNL UXNSQWpJMWlKVEhmRTJ6Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGrTiOAnW2ftF1K51GmgIne/aFYqwJ9NjcAikeNTUnmnRxJtXH1mnT9G bXOFWY6yOd8bU+51aKX2qgEHtGNTXvEUR/TRn/X80oyP8Fyo7HmMwkm7qaAK3Zb9 Af/DcI9uAG01x8ou9nD2sPYfzL263hLG7HCFXv1dXSZdHzzxIyaanPZch6fOm/9J tuzuL7/omT88pJwNzGFVFaFgLghEYdrtybKz8IJSARrvdA7kUOxjWqAIDa6tOJA/ zoiI6npo29AyV8T1bbOYKsITa5odCbX5FhzKwuTIm0V5jZNhN6qFJF/Un0RQsRdG iVCpzmuX8dE874nUNswwtkvNj5FVvQE= -----END CERTIFICATE-----Generated at Wed Aug 20 15:36:03 2025 by rpki-client