$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft File: F_M9uCahQtM3xeuZhL4txPm8ZCk.mft (raw, json) Hash identifier: o0En9KA8OtWA7mvnHfTtxYIXPTyQ578g3kFzNb7PUJE= Subject key identifier: FD:36:34:70:15:93:A8:F5:F1:8A:E5:4F:ED:2D:73:C6:EB:D8:83:0F Authority key identifier: 17:F3:3D:B8:26:A1:42:D3:37:C5:EB:99:84:BE:2D:C4:F9:BC:64:29 Certificate issuer: /CN=A91BFA29/serialNumber=17F33DB826A142D337C5EB9984BE2DC4F9BC6429 Certificate serial: 34D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft Manifest number: 34BE Signing time: Wed 20 Aug 2025 15:17:45 +0000 Manifest this update: Wed 20 Aug 2025 15:17:45 +0000 Manifest next update: Wed 27 Aug 2025 15:17:45 +0000 Files and hashes: 1: F_M9uCahQtM3xeuZhL4txPm8ZCk.crl (hash: Z2zPYtej0sjHOy6PbLBEGaJ5KtVRMrB2fYiS4LbHiog=) 2: 3A42DAB8DE6311E8BFB1BF16C4F9AE02.roa (hash: diz+Mu2U4uCFECF4R8aohazh+vKfN3ig2+OPcHe2dC8=) 3: 91268A4A06F311F09EDDC851C4F9AE02.roa (hash: 7uOB6N38ardleWnTuq1RJZwPlZnlnhINCIW0PLcMR9s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.crl rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 15:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13523 (0x34d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFA29, serialNumber=17F33DB826A142D337C5EB9984BE2DC4F9BC6429 Validity Not Before: Aug 20 15:17:45 2025 GMT Not After : Aug 27 15:17:45 2025 GMT Subject: CN=68a5e719-f9fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e1:49:db:ee:7a:1a:ba:e6:a4:82:ab:3f:25: 48:29:06:46:08:b0:bf:ea:6f:46:35:1c:3c:b0:9f: c7:c9:e7:07:22:b2:72:11:6a:fd:2c:c4:54:2b:bc: 58:db:b9:b4:80:b8:e9:c2:52:a1:1f:de:e6:55:f0: 60:45:a2:b7:6c:7b:87:dc:e0:44:2a:79:67:b4:84: d6:bf:19:85:b0:1d:7d:dc:88:6c:23:5a:68:9d:17: 17:6e:2c:3f:99:a8:4c:20:4f:cd:93:a5:17:f1:b1: 64:97:a7:65:73:dd:0d:aa:c3:22:54:e0:c3:c0:2e: ff:e3:a5:37:41:47:e8:c2:ea:13:77:d5:1f:c5:78: 26:7f:ab:55:a1:8f:69:e7:92:18:2d:31:3a:8b:85: 65:c5:51:6a:ca:cb:f5:37:b0:29:7d:bd:13:28:23: 81:bf:ec:d8:7a:c4:6d:4f:52:45:ba:53:6d:ea:ed: 17:2e:6d:59:3f:a1:c0:cd:57:11:92:8d:e9:7d:99: ce:1a:0b:61:cb:6f:c0:58:b5:fc:1e:7c:4e:5a:cb: b1:20:39:e4:36:b2:89:96:e9:e2:f1:43:96:e3:9e: 20:0c:d2:e6:38:05:87:1c:fe:44:59:9d:1b:6e:f8: 31:f0:85:19:f1:ca:b7:81:2a:66:3f:11:d4:76:c2: c0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:36:34:70:15:93:A8:F5:F1:8A:E5:4F:ED:2D:73:C6:EB:D8:83:0F X509v3 Authority Key Identifier: keyid:17:F3:3D:B8:26:A1:42:D3:37:C5:EB:99:84:BE:2D:C4:F9:BC:64:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:11:33:25:cf:19:33:51:e4:cb:6b:06:48:83:af:f4:94:9d: be:a1:27:e6:ad:a8:0b:d7:9d:c2:01:c4:e9:1d:9e:45:b2:64: 50:0c:4a:91:4b:90:3c:61:d8:71:6f:e0:d5:8c:2a:c7:3f:27: d7:33:eb:0a:49:1f:ae:45:d0:26:3e:ab:01:55:fb:2a:33:b2: 1f:8c:ab:a1:37:0a:a5:96:de:3c:18:7d:e3:bd:ed:b0:e5:01: 78:4a:13:13:4d:20:29:6b:e4:cf:7a:a3:68:ca:7d:c9:80:e2: 3a:c3:e1:4e:06:9f:93:b2:1b:9b:1b:df:55:ed:7f:47:2c:4a: 9f:79:58:64:a1:37:cd:3f:6c:39:23:2a:35:d4:9a:8e:dc:bc: 74:c1:07:ab:24:26:74:2f:7f:52:d4:c6:d5:65:35:4a:11:f4: a9:b7:30:49:35:c2:5b:25:a4:7a:86:4a:b0:b1:b6:56:6f:f4: b4:ac:75:5c:68:8f:b1:2d:ca:99:11:34:05:7c:c0:89:07:2a: 92:f8:a0:19:d7:32:a4:58:f0:94:23:09:69:a2:ed:6b:2d:b7: 74:ce:b2:b5:a4:50:7d:9d:fe:d5:55:be:c4:20:bf:c2:44:8b: 45:e2:ca:b3:31:09:39:9a:77:72:22:dc:b7:a2:3c:09:47:34: 46:28:ed:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZBMjkxMTAvBgNVBAUTKDE3RjMzREI4MjZBMTQyRDMzN0M1RUI5OTg0QkUyREM0 RjlCQzY0MjkwHhcNMjUwODIwMTUxNzQ1WhcNMjUwODI3MTUxNzQ1WjAYMRYwFAYD VQQDEw02OGE1ZTcxOS1mOWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAneFJ2+56GrrmpIKrPyVIKQZGCLC/6m9GNRw8sJ/HyecHIrJyEWr9LMRUK7xY 27m0gLjpwlKhH97mVfBgRaK3bHuH3OBEKnlntITWvxmFsB193IhsI1ponRcXbiw/ mahMIE/Nk6UX8bFkl6dlc90NqsMiVODDwC7/46U3QUfowuoTd9UfxXgmf6tVoY9p 55IYLTE6i4VlxVFqysv1N7Apfb0TKCOBv+zYesRtT1JFulNt6u0XLm1ZP6HAzVcR ko3pfZnOGgthy2/AWLX8HnxOWsuxIDnkNrKJluni8UOW454gDNLmOAWHHP5EWZ0b bvgx8IUZ8cq3gSpmPxHUdsLAiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP02NHAV k6j18YrlT+0tc8br2IMPMB8GA1UdIwQYMBaAFBfzPbgmoULTN8XrmYS+LcT5vGQp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkEyOS8wRjFBNEU2NDFE QUExMUUyOEU3MjdEQTUwOEIwMkNEMi9GX005dUNhaFF0TTN4ZXVaaEw0dHhQbTha Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZfTTl1Q2FoUXRNM3hldVpoTDR0eFBtOFpDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkEyOS8wRjFBNEU2NDFEQUExMUUyOEU3MjdEQTUwOEIwMkNEMi9GX005dUNhaFF0 TTN4ZXVaaEw0dHhQbThaQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEETMlzxkzUeTLawZIg6/0lJ2+oSfmragL153CAcTpHZ5FsmRQDEqR S5A8Ydhxb+DVjCrHPyfXM+sKSR+uRdAmPqsBVfsqM7IfjKuhNwqllt48GH3jve2w 5QF4ShMTTSApa+TPeqNoyn3JgOI6w+FOBp+TshubG99V7X9HLEqfeVhkoTfNP2w5 Iyo11JqO3Lx0wQerJCZ0L39S1MbVZTVKEfSptzBJNcJbJaR6hkqwsbZWb/S0rHVc aI+xLcqZETQFfMCJByqS+KAZ1zKkWPCUIwlpou1rLbd0zrK1pFB9nf7VVb7EIL/C RItF4sqzMQk5mndyIty3ojwJRzRGKO3e -----END CERTIFICATE-----Generated at Thu Aug 21 13:57:42 2025 by rpki-client