$ rpki-client -vvf rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft File: k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft (raw, json) Hash identifier: QDr9lhO7L4NOEl7tNlhUvqzqPHE9a9Gu8nEB5+hED+0= Subject key identifier: 8C:70:85:EE:D9:10:F0:93:01:28:8D:2E:96:A6:2E:E1:89:46:55:8B Authority key identifier: 93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92 Certificate issuer: /CN=A91C56FB/serialNumber=93C058A0DF1773012459164B5A80D85372C7E292 Certificate serial: 1496 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft Manifest number: 1475 Signing time: Wed 10 Sep 2025 17:01:03 +0000 Manifest this update: Wed 10 Sep 2025 17:01:03 +0000 Manifest next update: Wed 17 Sep 2025 17:01:03 +0000 Files and hashes: 1: k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl (hash: GzCJ9vYhUG9DwY0FWJ0cmEZQooWnL/O1FFjjAXW8haE=) 2: 6BB6EF78EB5F11ECB4060F86C4F9AE02.roa (hash: bw2KVyHN6CitUBxUyBMWnfwdT8P8OVOkY8BYkur67D8=) 3: B6DA2BD8E33F11EB9832A354C4F9AE02.roa (hash: u7oqRMExCmv2yUvpdQUhy93ikSgUZkKJq35cWOYkBRM=) 4: B7F93F86E33F11EB9832A354C4F9AE02.roa (hash: F7sXs8wz7vi0K+MviVDC99PWP7OiPZ+mlBu4ZQRrCgU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Sep 2025 17:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5270 (0x1496) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C56FB, serialNumber=93C058A0DF1773012459164B5A80D85372C7E292 Validity Not Before: Sep 10 17:01:03 2025 GMT Not After : Sep 17 17:01:03 2025 GMT Subject: CN=68c1aecf-0864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:29:cd:1a:c6:c6:a9:4c:9d:b4:7f:a0:90:08: d7:88:ea:67:40:40:97:87:f9:18:bc:79:68:e7:bb: 49:ea:4d:db:5d:98:a3:67:33:37:21:70:06:f6:a0: 56:f3:57:69:9b:f6:55:5d:43:4b:fe:3a:e6:7b:7d: 8f:b3:2d:da:d1:bc:a8:97:50:c2:11:15:e8:11:0d: b8:ca:c8:35:01:75:1c:bc:43:a8:a7:81:44:7e:0f: 91:68:d2:bb:b6:fb:ed:2f:0d:ce:dd:49:b8:c9:1a: a6:9b:d5:5d:7a:c1:63:3a:ff:a3:9d:c5:30:1a:40: e5:b0:62:19:67:33:82:e7:8f:c8:aa:b3:7a:1b:48: 22:ea:6b:c9:37:0b:81:43:ad:5e:f4:d1:fc:a8:21: 22:05:c7:62:77:89:a6:95:75:3c:55:bc:e2:b1:a0: 1c:b3:f7:1c:33:12:71:8a:6d:8f:21:3b:11:65:6d: eb:fa:72:b6:6c:64:ca:1a:75:9f:d1:62:98:43:86: 58:b6:4e:6a:f9:d2:4e:3c:94:66:da:ac:a0:8c:e4: dd:44:9f:3f:29:72:c4:32:2c:ff:28:8f:09:22:87: 08:70:bd:c3:6b:05:c5:04:63:23:58:92:12:31:08: 98:46:fb:08:60:88:22:68:a7:1b:00:bc:da:09:e5: 27:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:70:85:EE:D9:10:F0:93:01:28:8D:2E:96:A6:2E:E1:89:46:55:8B X509v3 Authority Key Identifier: keyid:93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:40:1e:0a:03:4d:df:98:63:56:d9:33:f7:2f:79:20:70:0c: 21:0f:f9:8c:11:cc:b4:d8:25:cf:84:9a:0b:96:d4:a2:da:84: c8:b7:dc:a7:42:22:c6:c4:0b:66:1e:b4:24:43:02:c6:55:0d: 6f:88:ca:46:b2:97:94:b1:f4:5a:c4:01:5f:24:0d:1f:35:37: 35:5f:42:25:11:31:51:41:b5:dd:00:60:18:6d:f3:0b:f3:7f: 65:be:f6:b8:ce:fa:b4:1c:df:a1:cc:07:ac:bf:a6:4a:e8:0e: d7:47:db:d7:81:08:bb:57:b7:7d:ad:ac:47:ba:1c:0b:f2:cd: a3:c7:91:1d:4c:0e:fe:ca:3e:56:37:82:f6:10:aa:12:91:7b: e3:23:98:8b:d6:71:d3:8f:d6:a4:c0:e3:ce:0b:ad:da:03:3a: 76:89:90:a9:1b:33:c4:01:6e:9c:8a:b4:19:bc:b5:cc:97:d7: ae:d2:f0:9d:83:e3:95:09:3e:ce:ad:50:fc:ea:ec:3b:70:6c: 86:ff:ce:7e:17:a4:aa:61:2c:9d:54:07:92:f2:63:c5:79:e1: 97:d3:6b:f5:60:ee:81:4e:34:bb:52:02:64:bb:74:0f:3e:11: 11:ce:38:41:3e:bc:42:50:f5:f8:46:b9:73:e1:ab:28:e6:ab: e1:91:9f:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU2RkIxMTAvBgNVBAUTKDkzQzA1OEEwREYxNzczMDEyNDU5MTY0QjVBODBEODUz NzJDN0UyOTIwHhcNMjUwOTEwMTcwMTAzWhcNMjUwOTE3MTcwMTAzWjAYMRYwFAYD VQQDEw02OGMxYWVjZi0wODY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnynNGsbGqUydtH+gkAjXiOpnQECXh/kYvHlo57tJ6k3bXZijZzM3IXAG9qBW 81dpm/ZVXUNL/jrme32Psy3a0byol1DCERXoEQ24ysg1AXUcvEOop4FEfg+RaNK7 tvvtLw3O3Um4yRqmm9VdesFjOv+jncUwGkDlsGIZZzOC54/IqrN6G0gi6mvJNwuB Q61e9NH8qCEiBcdid4mmlXU8VbzisaAcs/ccMxJxim2PITsRZW3r+nK2bGTKGnWf 0WKYQ4ZYtk5q+dJOPJRm2qygjOTdRJ8/KXLEMiz/KI8JIocIcL3DawXFBGMjWJIS MQiYRvsIYIgiaKcbALzaCeUnnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIxwhe7Z EPCTASiNLpamLuGJRlWLMB8GA1UdIwQYMBaAFJPAWKDfF3MBJFkWS1qA2FNyx+KS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTZGQi9FOUY1MTA0Njc4 M0ExMUU4OTA3RDUyMUFDNEY5QUUwMi9rOEJZb044WGN3RWtXUlpMV29EWVUzTEg0 cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s4QllvTjhYY3dFa1dSWkxXb0RZVTNMSDRwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTZGQi9FOUY1MTA0Njc4M0ExMUU4OTA3RDUyMUFDNEY5QUUwMi9rOEJZb044WGN3 RWtXUlpMV29EWVUzTEg0cEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5QB4KA03fmGNW2TP3L3kgcAwhD/mMEcy02CXPhJoLltSi2oTIt9yn QiLGxAtmHrQkQwLGVQ1viMpGspeUsfRaxAFfJA0fNTc1X0IlETFRQbXdAGAYbfML 839lvva4zvq0HN+hzAesv6ZK6A7XR9vXgQi7V7d9raxHuhwL8s2jx5EdTA7+yj5W N4L2EKoSkXvjI5iL1nHTj9akwOPOC63aAzp2iZCpGzPEAW6cirQZvLXMl9eu0vCd g+OVCT7OrVD86uw7cGyG/85+F6SqYSydVAeS8mPFeeGX02v1YO6BTjS7UgJku3QP PhERzjhBPrxCUPX4Rrlz4aso5qvhkZ+4 -----END CERTIFICATE-----Generated at Wed Sep 10 21:26:09 2025 by rpki-client