$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft File: d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft (raw, json) Hash identifier: zdlbQHUDGoM1Vyjj1gS4k8XF+eOuhp8M/140ltICLCQ= Subject key identifier: 5B:7B:FE:51:7F:FE:C6:80:50:D7:23:18:B8:54:83:01:A3:76:E3:6E Authority key identifier: 77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49 Certificate issuer: /CN=A91C2CC7/serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49 Certificate serial: 1012 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft Manifest number: 0F91 Signing time: Wed 10 Sep 2025 17:45:01 +0000 Manifest this update: Wed 10 Sep 2025 17:45:00 +0000 Manifest next update: Wed 17 Sep 2025 17:45:00 +0000 Files and hashes: 1: d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl (hash: ubFHWolF1gNzIi9Sw+RiXSexyMpn44W4OC2vWv55V3o=) 2: B35E5B46334111EF9770A542C4F9AE02.roa (hash: peBWFc4X0iFG+O27BNeyO583I2fDfVq9k0IwtcGVyuo=) 3: B2AB6010721811F09FD98A22C4F9AE02.roa (hash: wIEPKrCJxeZRSiZdLH1odZTLGWweMxawrTUKzvXI4fM=) 4: B1F39E9C334111EF9770A542C4F9AE02.roa (hash: iEmTyBeOju9PtJnx00CmNtgmOZLVlNs//ZqqWislRCI=) 5: 2F787ACA71DC11F0B648E61EC4F9AE02.roa (hash: wE9Ja7ZzAfw7/oCX8jXb3Mmdvu+AmH7Xr6q2xftQxQg=) 6: 6AB0F2A2892611EEB5E27D69C4F9AE02.roa (hash: nicSmvXStk5YSg3xIJcJaFbSV0F719Jx8dhmknr9Hs0=) 7: B2A71CE2334111EF9770A542C4F9AE02.roa (hash: 2Ywvb7sewrJUK65Z9m1HnVKU4OlGnMWcWy/A4SYw1WY=) 8: 2EFFC95471DC11F0B648E61EC4F9AE02.roa (hash: IrKqf3WwcP3c1t/kdOeFbTBkd7MIU0BN08Rqrji/qUU=) 9: 931E0F7681C911EFA5B1D80BC4F9AE02.roa (hash: HvCeCNMd3cDYBcsUNmnAZgRE0yTF+p8FgFeiy4l06fs=) 10: 7BD12E3A480811EE8C512B0DC4F9AE02.roa (hash: PTHJR1ja6PHKnchzMzvjSZlwBo+yBYxt/AqG4ozJw5A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Sep 2025 17:45:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4114 (0x1012) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2CC7, serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49 Validity Not Before: Sep 10 17:45:00 2025 GMT Not After : Sep 17 17:45:00 2025 GMT Subject: CN=68c1b91d-9ad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5e:78:63:e1:9e:e6:6f:b5:46:44:4b:a7:3d: 14:f2:a1:4f:29:89:d9:d8:8a:f9:be:3b:d0:e7:6d: d3:21:23:89:ec:cf:8a:4e:0d:2d:ec:e8:1a:82:12: 60:05:c9:16:e7:64:d6:18:98:8d:58:09:36:de:9f: 08:39:95:0b:73:4b:7b:41:88:58:c9:77:9b:87:55: a7:3e:d7:c7:80:81:04:48:46:a6:6d:3f:58:27:7e: 81:40:f5:76:30:c9:c2:e6:96:03:66:b5:0d:88:2e: d4:87:6b:c2:b2:17:db:34:2e:f9:4b:51:12:4a:85: 15:3b:be:ff:33:14:27:8c:7f:69:e0:db:fe:d9:1c: eb:66:32:34:8d:55:7a:07:9a:ca:3a:84:0f:07:06: bb:55:54:80:e7:f0:37:f5:21:f9:76:c7:82:48:7f: ff:24:a1:7c:75:f7:70:f1:42:b2:a3:54:b6:13:bb: 63:2a:cd:b0:20:88:f5:5d:d3:34:3f:cc:dc:66:81: c6:e0:f2:dc:7e:d0:0b:ae:56:33:c2:25:c6:a9:18: fd:72:72:3b:fe:5f:b7:19:c6:91:c1:a6:09:7a:e2: 2c:90:d3:e2:de:98:2d:ec:aa:c9:07:85:e7:ea:1e: bd:32:45:6a:ba:be:28:7a:11:17:d3:d5:42:35:f7: 8a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:7B:FE:51:7F:FE:C6:80:50:D7:23:18:B8:54:83:01:A3:76:E3:6E X509v3 Authority Key Identifier: keyid:77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:f4:e3:2f:05:df:7a:d6:1e:98:0b:db:0c:d8:d9:d7:3a:ed: 8f:91:9e:f7:e2:76:1d:e1:bd:5d:e6:cf:7c:64:ad:db:13:20: 32:48:37:20:91:e5:3e:f5:b5:88:49:5c:59:5e:3f:f9:b3:c4: cb:27:96:7c:4d:b7:a6:cd:8d:50:f2:39:64:06:72:d2:d5:0b: cd:c1:cc:1a:ba:e4:1c:8a:14:f2:10:5d:36:fd:37:e0:13:3d: 38:c4:62:da:85:03:03:8a:87:46:6a:92:c7:14:f1:1d:9f:f5: 34:0a:e7:f9:27:90:63:72:aa:4c:ad:c9:da:ae:93:e0:3f:06: f6:ef:77:cd:4e:4c:17:d1:91:ec:43:ec:66:59:f6:62:a2:6a: e2:dc:8e:d8:6b:b7:10:21:c5:72:8d:8f:64:40:b3:78:e1:8b: 69:27:66:59:4b:b1:53:18:23:df:d6:7e:35:1f:28:3a:6c:47: f0:1a:9d:45:a0:6a:f9:b4:d8:3f:f3:b6:fe:dd:b4:8b:e3:b1: ec:87:4c:b7:b8:24:51:d4:82:6b:94:05:2c:74:09:d3:12:cb: c9:90:20:7e:90:09:92:d4:68:77:68:bc:74:9a:61:09:bd:7d: c8:c7:11:74:e6:45:8b:7b:8a:90:28:4b:85:89:03:ce:96:3a: 7f:ed:10:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEBIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJDQzcxMTAvBgNVBAUTKDc3NDg2QjYxMEQzMzNBRUJEQThGMjU1QzUwMTQxMUIw MUYxOEZGNDkwHhcNMjUwOTEwMTc0NTAwWhcNMjUwOTE3MTc0NTAwWjAYMRYwFAYD VQQDEw02OGMxYjkxZC05YWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2l54Y+Ge5m+1RkRLpz0U8qFPKYnZ2Ir5vjvQ523TISOJ7M+KTg0t7OgaghJg BckW52TWGJiNWAk23p8IOZULc0t7QYhYyXebh1WnPtfHgIEESEambT9YJ36BQPV2 MMnC5pYDZrUNiC7Uh2vCshfbNC75S1ESSoUVO77/MxQnjH9p4Nv+2RzrZjI0jVV6 B5rKOoQPBwa7VVSA5/A39SH5dseCSH//JKF8dfdw8UKyo1S2E7tjKs2wIIj1XdM0 P8zcZoHG4PLcftALrlYzwiXGqRj9cnI7/l+3GcaRwaYJeuIskNPi3pgt7KrJB4Xn 6h69MkVqur4oehEX09VCNfeK1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFt7/lF/ /saAUNcjGLhUgwGjduNuMB8GA1UdIwQYMBaAFHdIa2ENMzrr2o8lXFAUEbAfGP9J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkNDNy83OTFDNkEzNDdC MzgxMUU5QkMwRDNCMzJDNEY5QUUwMi9kMGhyWVEwek91dmFqeVZjVUJRUnNCOFlf MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QwaHJZUTB6T3V2YWp5VmNVQlFSc0I4WV8way5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkNDNy83OTFDNkEzNDdCMzgxMUU5QkMwRDNCMzJDNEY5QUUwMi9kMGhyWVEwek91 dmFqeVZjVUJRUnNCOFlfMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCr9OMvBd961h6YC9sM2NnXOu2PkZ734nYd4b1d5s98ZK3bEyAySDcg keU+9bWISVxZXj/5s8TLJ5Z8TbemzY1Q8jlkBnLS1QvNwcwauuQcihTyEF02/Tfg Ez04xGLahQMDiodGapLHFPEdn/U0Cuf5J5BjcqpMrcnarpPgPwb273fNTkwX0ZHs Q+xmWfZiomri3I7Ya7cQIcVyjY9kQLN44YtpJ2ZZS7FTGCPf1n41Hyg6bEfwGp1F oGr5tNg/87b+3bSL47Hsh0y3uCRR1IJrlAUsdAnTEsvJkCB+kAmS1Gh3aLx0mmEJ vX3IxxF05kWLe4qQKEuFiQPOljp/7RCr -----END CERTIFICATE-----Generated at Fri Sep 12 08:31:30 2025 by rpki-client