$ rpki-client -vvf rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft File: cB88FPCtfu9l000APNwZJGSM3jc.mft (raw, json) Hash identifier: 6mOoddMXQiXGSI0B6QGCZCcbFyQcVak61vqIz7Kkysk= Subject key identifier: AF:A9:5A:06:69:8B:2E:DE:8C:73:C0:74:8B:74:6D:FD:19:4A:17:A7 Authority key identifier: 70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37 Certificate issuer: /CN=A91C63A6/serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37 Certificate serial: 03F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft Manifest number: 03DA Signing time: Fri 05 Sep 2025 00:55:24 +0000 Manifest this update: Fri 05 Sep 2025 00:55:23 +0000 Manifest next update: Fri 12 Sep 2025 00:55:23 +0000 Files and hashes: 1: cB88FPCtfu9l000APNwZJGSM3jc.crl (hash: 3MwcTeb+H/LI5fQME0cLBXzNvzREw91CiOA+u6dd84E=) 2: 7E16D3240B5011EE9A518C7BC4F9AE02.roa (hash: U0JaFB8CVVgKbLBmTTRMW+oeZZCXLA9kdsldXtwigwA=) 3: CDDEC562011711EEB15FDD2AC4F9AE02.roa (hash: PgsogDDZQkDovTqfqAZnCJjtewKfx64pNU23F3h3LOI=) 4: 2BF1D5F07E3511EE8CB63458C4F9AE02.roa (hash: xABbFnxjesSqqxHb5Z3LU/MaNyiAYDrCsWPlJjK46gQ=) 5: DF49B4400B4B11EEBAD3047AC4F9AE02.roa (hash: 5EplJ/qwJeqGMd35PNuR9x2zdZw/zJYIhHM0ma+2rK4=) 6: 513415BC400011EE88B66B4FC4F9AE02.roa (hash: La9bIBXUn7Pcc0HHfxEl2RzNwtBMPkoEmLR0KZnlaWs=) 7: 86550F680B4311EE8ABEE820C4F9AE02.roa (hash: yWfAEaYcbh5fjpOL87NsV9hi8Cg9epFjV+c+Su0AUew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 00:55:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1013 (0x3f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C63A6, serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37 Validity Not Before: Sep 5 00:55:23 2025 GMT Not After : Sep 12 00:55:23 2025 GMT Subject: CN=68ba34fc-4f54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:36:70:d3:b9:fe:db:17:12:1c:02:23:1f:5e: 38:10:24:86:61:59:b6:9a:a5:b3:e5:38:fb:ab:03: 33:39:ea:c4:1d:c7:1c:0d:29:6b:4f:5e:e2:b8:e2: 85:e3:72:54:8f:95:79:26:47:86:d2:08:7f:29:d8: 9c:4b:1d:0a:57:f9:42:98:42:6e:28:7d:98:f3:6d: 40:6a:97:56:54:a3:89:3d:c1:b8:8c:5e:af:32:c9: 07:dc:12:15:78:f6:93:aa:ea:3c:90:53:25:c2:3a: 8b:a3:f2:dc:c2:9c:ee:cd:93:2e:50:83:86:be:2a: 11:7b:6e:3b:0f:24:7f:e2:2f:9f:85:66:88:dd:a9: 44:94:2c:77:c9:81:9e:09:02:2f:21:25:58:9f:0b: 33:59:fd:43:09:0f:03:d5:66:b9:fc:9b:65:68:97: c3:d4:92:62:9d:e7:5d:b1:19:81:67:d9:99:99:9a: e5:6d:c0:d3:5f:76:ca:df:e1:93:a9:d7:a4:b4:b0: 59:f2:2a:6c:d4:73:21:74:1b:43:c8:b4:00:0e:5f: bf:39:c0:7c:2d:10:4d:94:94:0b:14:33:34:f4:e7: 06:5b:60:eb:7a:f9:5b:63:65:25:94:a2:55:1c:f0: 5d:74:84:c7:49:8c:8e:98:02:ac:db:4e:87:3c:aa: 03:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A9:5A:06:69:8B:2E:DE:8C:73:C0:74:8B:74:6D:FD:19:4A:17:A7 X509v3 Authority Key Identifier: keyid:70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:06:db:f0:a8:c0:90:cc:87:5b:d3:62:2f:d1:00:f7:6e:3a: 87:69:1c:df:30:a3:ef:5e:b4:af:a7:8c:40:12:e4:21:16:f3: d6:37:c3:b8:9a:4b:a6:0e:95:8c:f8:fc:a0:0e:23:11:57:e4: 7e:87:68:9e:a9:a8:af:81:58:15:80:f9:bc:b3:43:64:de:8e: 52:af:0c:e6:4d:ec:c8:2e:70:1c:46:96:be:0f:4a:99:88:9a: f4:94:3b:85:06:86:33:54:43:d9:3b:0e:06:3a:48:e9:d1:0b: 2e:80:46:34:4f:74:29:34:b5:1f:4c:ab:6d:76:4c:aa:14:0b: 6e:ed:0e:9b:f3:4d:fd:a2:4f:ff:7b:d7:1e:3d:6b:22:6e:1d: a4:03:21:78:b1:46:34:9a:f5:4d:37:35:94:47:35:c9:90:38: 97:6c:94:ba:26:7b:64:19:6b:82:e2:46:69:a5:1f:a6:0f:4e: e2:39:e6:2c:31:45:c5:61:e8:ad:76:4f:35:77:7f:ca:7d:c7: b8:f5:a6:d1:b1:ca:49:1b:f1:c0:be:28:14:a0:2b:70:e3:a8: d7:84:09:45:35:46:5d:5d:26:6d:27:b9:c7:f6:20:cd:27:57: 93:10:2e:7b:26:ce:f7:ed:70:32:9a:bd:f0:39:9a:ff:bc:11: 01:a7:6f:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYzQTYxMTAvBgNVBAUTKDcwMUYzQzE0RjBBRDdFRUY2NUQzNEQwMDNDREMxOTI0 NjQ4Q0RFMzcwHhcNMjUwOTA1MDA1NTIzWhcNMjUwOTEyMDA1NTIzWjAYMRYwFAYD VQQDEw02OGJhMzRmYy00ZjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuTZw07n+2xcSHAIjH144ECSGYVm2mqWz5Tj7qwMzOerEHcccDSlrT17iuOKF 43JUj5V5JkeG0gh/KdicSx0KV/lCmEJuKH2Y821AapdWVKOJPcG4jF6vMskH3BIV ePaTquo8kFMlwjqLo/LcwpzuzZMuUIOGvioRe247DyR/4i+fhWaI3alElCx3yYGe CQIvISVYnwszWf1DCQ8D1Wa5/JtlaJfD1JJineddsRmBZ9mZmZrlbcDTX3bK3+GT qdektLBZ8ips1HMhdBtDyLQADl+/OcB8LRBNlJQLFDM09OcGW2DrevlbY2UllKJV HPBddITHSYyOmAKs206HPKoDqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK+pWgZp iy7ejHPAdIt0bf0ZShenMB8GA1UdIwQYMBaAFHAfPBTwrX7vZdNNADzcGSRkjN43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjNBNi8wRDM5QzRFNDlB OUIxMUVDODJDNzBCMjBDNEY5QUUwMi9jQjg4RlBDdGZ1OWwwMDBBUE53WkpHU00z amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NCODhGUEN0ZnU5bDAwMEFQTndaSkdTTTNqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjNBNi8wRDM5QzRFNDlBOUIxMUVDODJDNzBCMjBDNEY5QUUwMi9jQjg4RlBDdGZ1 OWwwMDBBUE53WkpHU00zamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYBtvwqMCQzIdb02Iv0QD3bjqHaRzfMKPvXrSvp4xAEuQhFvPWN8O4 mkumDpWM+PygDiMRV+R+h2ieqaivgVgVgPm8s0Nk3o5SrwzmTezILnAcRpa+D0qZ iJr0lDuFBoYzVEPZOw4GOkjp0QsugEY0T3QpNLUfTKttdkyqFAtu7Q6b8039ok// e9cePWsibh2kAyF4sUY0mvVNNzWURzXJkDiXbJS6JntkGWuC4kZppR+mD07iOeYs MUXFYeitdk81d3/Kfce49abRscpJG/HAvigUoCtw46jXhAlFNUZdXSZtJ7nH9iDN J1eTEC57Js737XAymr3wOZr/vBEBp2+B -----END CERTIFICATE-----Generated at Fri Sep 5 11:33:09 2025 by rpki-client