$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft File: xE8qyrKneZlDFaqTsyPam0dce5o.mft (raw, json) Hash identifier: V1W+ZzxnhqzccWBTXiYmEzc+GA6W/4rU2ZTDycwLgFQ= Subject key identifier: 07:4A:D6:72:C6:CA:04:BE:8A:02:0F:D7:72:91:04:E5:D9:AB:25:65 Authority key identifier: C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A Certificate issuer: /CN=A91BDCF1/serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A Certificate serial: 03FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft Manifest number: 03D8 Signing time: Sun 07 Sep 2025 01:08:23 +0000 Manifest this update: Sun 07 Sep 2025 01:08:23 +0000 Manifest next update: Sun 14 Sep 2025 01:08:23 +0000 Files and hashes: 1: xE8qyrKneZlDFaqTsyPam0dce5o.crl (hash: Ok1vmgzFCo8IdaYq9aPGcfVS0jbpuW6pCndeyMoY0ec=) 2: 9ED423000B1211F08F4E1E7EC4F9AE02.roa (hash: +fAen0eLm96Uw52DW70NMmBaXk/iGot7yVNxCoQPaiI=) 3: 25985D28EE1411EFB4908431C4F9AE02.roa (hash: GsEWcWV51pwlPsxUODRoLwLibcUDu1FJ1giEHi8eZSw=) 4: DEB112EC6BC211F09D0F2629C4F9AE02.roa (hash: yn6h5w5tWqc/+G/2zrDsQx2qIuIxGIy+QXkxWWkUIxY=) 5: 977BACDA818811F0AE59F81AC4F9AE02.roa (hash: 2KodBvrJvVzLG2LbWPZiEGrY7NIy7vzTjdiUIRnC0oY=) 6: 97F41C10818811F0AE59F81AC4F9AE02.roa (hash: u/4sPCCdiVaqNorzA1R6dcHNMvrwG/4bezXKIHvH0Qw=) 7: 4643A5E4703011EFA1A7CB20C4F9AE02.roa (hash: yVBPXlVIAQw/ZmFOINJVHLvyhTZymOOpSW7Tn3kbZWk=) 8: 8EFCF04C41B811F090AB3A2EC4F9AE02.roa (hash: NJb7fbLMu5qVuetYwV/WSEDtWyBY5QSeAuqQ8b9b+dY=) 9: 566BECC8EE1711EFB60E2F5CC4F9AE02.roa (hash: rQrRKRNqLrNVEr8ai1wfn1FM9+uxSqSSHb0bzKO5WNg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 01:08:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1021 (0x3fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDCF1, serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A Validity Not Before: Sep 7 01:08:23 2025 GMT Not After : Sep 14 01:08:23 2025 GMT Subject: CN=68bcdb07-a922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:7f:e3:42:2a:de:79:c5:70:19:3b:0c:6e:1d: 7b:44:59:d1:d4:45:05:89:02:c7:32:50:7c:0c:e7: 9c:be:0e:51:1e:37:d3:cc:23:91:55:da:e0:81:2b: 0d:b1:98:4f:cb:6c:42:8c:bd:99:e9:27:a9:09:8f: 62:4f:39:5f:7f:b4:e2:71:ff:b2:63:ea:bc:57:50: 2c:7c:c5:03:90:d5:56:55:c9:d8:d8:3b:cb:d9:01: b6:b1:4e:cd:2d:c4:04:20:f3:27:e5:f4:a3:19:1e: aa:de:1b:9a:c2:2a:d6:e5:2c:32:15:0b:26:84:3f: ef:4c:89:a1:61:44:29:02:e7:91:2a:90:1d:70:71: eb:13:2a:c7:78:45:53:33:52:86:d4:cd:5f:e4:00: 52:99:54:39:73:c5:5f:6e:07:fb:b3:f3:8b:03:05: 33:41:3c:82:e5:7b:cb:ed:51:b9:b4:9f:4b:14:3f: 95:b5:3e:c9:63:4e:83:7d:d2:86:b5:d7:07:43:ff: ed:8c:a5:2c:c9:10:31:18:19:b7:bf:3b:93:4f:dd: 34:97:c2:b0:0a:b1:99:b5:66:e7:a0:1a:fa:16:e9: 23:c7:a2:40:b9:8f:86:bd:77:fe:a7:22:d0:93:87: 88:69:7b:e8:1c:cd:df:22:61:42:eb:c7:02:84:20: 6d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:4A:D6:72:C6:CA:04:BE:8A:02:0F:D7:72:91:04:E5:D9:AB:25:65 X509v3 Authority Key Identifier: keyid:C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:3b:66:5e:6a:be:ec:a3:ab:fd:6b:53:19:7d:6a:47:49:8b: 4f:85:36:e2:ee:d0:5f:51:64:c0:bc:af:d2:13:c9:8e:e1:2d: 3e:0e:bf:ea:db:1c:2e:18:c9:44:6f:04:9e:25:8b:ec:4e:13: f5:6a:53:33:28:a4:ce:c7:3e:62:aa:ec:92:27:77:e3:af:db: 7c:b9:fe:51:02:0a:a0:8b:d1:20:fc:69:d4:49:31:db:d3:d7: e0:7f:47:81:fc:0d:bf:e3:88:27:42:2e:5c:3b:e3:24:fa:1c: 07:e4:16:dd:7e:83:15:91:21:f2:e1:12:74:8d:a7:fa:4d:de: 79:36:c2:62:28:56:67:23:7f:ce:10:ae:9a:87:bc:29:43:8f: eb:dd:ba:76:88:5c:1e:a0:11:c0:8d:4d:83:80:c7:56:8d:7f: 99:cf:7f:7b:94:4a:be:49:5b:df:1c:07:37:15:9d:23:1a:ec: 96:5d:92:9c:ce:36:ac:1e:ea:01:c1:a1:57:5d:bf:f7:d6:70: 14:28:78:89:f1:82:ea:98:07:e0:8a:57:ed:0f:93:38:f8:c8: 7f:34:6e:19:17:d5:ae:44:a4:fc:ff:28:58:07:88:8c:cd:f3: dd:34:a3:b7:8e:20:e9:96:2f:fa:90:7b:dc:ea:ad:de:9a:35: e8:b7:f0:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRDRjExMTAvBgNVBAUTKEM0NEYyQUNBQjJBNzc5OTk0MzE1QUE5M0IzMjNEQTlC NDc1QzdCOUEwHhcNMjUwOTA3MDEwODIzWhcNMjUwOTE0MDEwODIzWjAYMRYwFAYD VQQDEw02OGJjZGIwNy1hOTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3H/jQireecVwGTsMbh17RFnR1EUFiQLHMlB8DOecvg5RHjfTzCORVdrggSsN sZhPy2xCjL2Z6SepCY9iTzlff7Ticf+yY+q8V1AsfMUDkNVWVcnY2DvL2QG2sU7N LcQEIPMn5fSjGR6q3huawirW5SwyFQsmhD/vTImhYUQpAueRKpAdcHHrEyrHeEVT M1KG1M1f5ABSmVQ5c8Vfbgf7s/OLAwUzQTyC5XvL7VG5tJ9LFD+VtT7JY06DfdKG tdcHQ//tjKUsyRAxGBm3vzuTT900l8KwCrGZtWbnoBr6Fukjx6JAuY+GvXf+pyLQ k4eIaXvoHM3fImFC68cChCBtQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAdK1nLG ygS+igIP13KRBOXZqyVlMB8GA1UdIwQYMBaAFMRPKsqyp3mZQxWqk7Mj2ptHXHua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRENGMS9FQjU5MTEyMkE4 M0MxMUVDQTNBNEYzMjVDNEY5QUUwMi94RThxeXJLbmVabERGYXFUc3lQYW0wZGNl NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hFOHF5cktuZVpsREZhcVRzeVBhbTBkY2U1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RENGMS9FQjU5MTEyMkE4M0MxMUVDQTNBNEYzMjVDNEY5QUUwMi94RThxeXJLbmVa bERGYXFUc3lQYW0wZGNlNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgO2Zear7so6v9a1MZfWpHSYtPhTbi7tBfUWTAvK/SE8mO4S0+Dr/q 2xwuGMlEbwSeJYvsThP1alMzKKTOxz5iquySJ3fjr9t8uf5RAgqgi9Eg/GnUSTHb 09fgf0eB/A2/44gnQi5cO+Mk+hwH5BbdfoMVkSHy4RJ0jaf6Td55NsJiKFZnI3/O EK6ah7wpQ4/r3bp2iFweoBHAjU2DgMdWjX+Zz397lEq+SVvfHAc3FZ0jGuyWXZKc zjasHuoBwaFXXb/31nAUKHiJ8YLqmAfgilftD5M4+Mh/NG4ZF9WuRKT8/yhYB4iM zfPdNKO3jiDpli/6kHvc6q3emjXot/Dv -----END CERTIFICATE-----Generated at Sun Sep 7 14:46:14 2025 by rpki-client