$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft File: FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft (raw, json) Hash identifier: no1mVd+ac7Z49pTuC1gCAGdNteDcH5+8IV6hy1GIWsU= Subject key identifier: 83:64:0F:5F:BE:FF:D2:5E:41:03:CC:A6:8C:DF:08:22:B9:B2:DD:92 Authority key identifier: 16:C6:62:72:6F:4A:00:91:33:D6:59:16:64:23:9E:00:C6:81:A0:04 Certificate issuer: /CN=A91CB14D/serialNumber=16C662726F4A009133D6591664239E00C681A004 Certificate serial: 0125 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft Manifest number: 09B8 Signing time: Wed 20 Aug 2025 20:37:25 +0000 Manifest this update: Wed 20 Aug 2025 20:37:24 +0000 Manifest next update: Wed 27 Aug 2025 20:37:24 +0000 Files and hashes: 1: FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl (hash: E+UZEPqtSsD/+n/o0GYzr/rl40bbZGADJOInL3BSjQE=) 2: C483C80CDE4011EFB4A11D5CC4F9AE02.roa (hash: AnxZMWG1/qyOSRCk3a+YCfaArWrcp/mUCUyzTLKhm8g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 20:37:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 293 (0x125) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB14D, serialNumber=16C662726F4A009133D6591664239E00C681A004 Validity Not Before: Aug 20 20:37:24 2025 GMT Not After : Aug 27 20:37:24 2025 GMT Subject: CN=68a63204-f1cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8b:de:1d:90:8d:08:ab:51:9e:6f:24:c2:7b: 1f:5b:d7:55:c8:50:f6:6d:fa:4c:fb:e6:bc:59:38: b2:83:5f:76:01:7d:90:50:2e:c4:5b:0e:a9:59:04: a5:65:b9:f7:6f:cc:a7:6d:f3:67:67:b0:ba:ee:29: 68:4c:d9:3c:f6:df:d8:97:f5:f4:8f:1a:d0:72:70: 73:e2:08:1e:4e:ad:9d:9c:87:02:67:d2:c4:8a:08: 06:70:93:cf:8f:27:06:f6:f5:89:76:31:2b:d6:5d: 75:6a:33:1e:f3:3c:06:df:5b:22:f6:3b:2f:27:2a: be:8b:14:9d:bf:e3:7f:3a:a3:84:c3:b6:13:4a:d8: f0:10:18:89:b5:6e:57:6a:76:8a:2d:a9:9c:50:08: 98:a5:b6:ec:2a:ba:7e:e3:d2:91:e3:18:ea:5b:56: 9f:65:66:ec:ce:07:68:ef:f6:98:ba:13:e7:79:09: 6f:d6:86:bb:e6:d5:44:b1:75:d0:23:57:64:78:8a: cf:71:72:7b:c9:5b:e2:03:d7:f0:80:40:d3:2f:13: 21:aa:2d:88:6d:b1:c2:a7:a0:07:99:e3:ed:84:e1: ab:67:76:7b:0a:8c:ae:54:75:57:a9:b7:64:3d:62: 0e:d9:c9:ae:6f:37:5f:86:13:a7:a8:7d:15:ff:3a: 95:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:64:0F:5F:BE:FF:D2:5E:41:03:CC:A6:8C:DF:08:22:B9:B2:DD:92 X509v3 Authority Key Identifier: keyid:16:C6:62:72:6F:4A:00:91:33:D6:59:16:64:23:9E:00:C6:81:A0:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:5f:77:e7:99:84:27:7c:d6:5a:f2:d7:cc:5e:da:8b:eb:33: 80:1a:85:dc:43:21:8a:5e:b7:eb:c9:62:bc:49:98:05:6a:1d: c8:62:26:e9:80:ee:c6:62:cd:29:8a:1b:88:e3:16:e3:df:df: 8b:49:ad:56:fa:a3:e3:e3:5a:78:fc:e1:2c:fc:ce:85:ba:a6: 84:d2:48:d5:af:c7:96:a6:49:7f:87:1c:b2:04:64:47:26:92: 06:5d:79:3f:62:61:33:50:81:42:04:a8:7a:f7:10:18:14:99: 0e:33:18:35:99:58:38:ca:f1:cf:97:70:98:43:ee:f9:c4:b0: e8:78:1d:fd:44:41:5c:b9:ff:93:88:f9:45:29:57:d3:ea:66: 21:e3:6d:26:b2:26:3d:d5:db:22:73:87:77:3d:38:83:d0:48: 18:24:03:8b:86:9a:b6:fc:c1:bd:75:48:f1:8d:eb:6b:3a:ac: 4e:04:ed:43:f8:59:83:2b:c7:74:74:9a:0c:b6:82:7f:59:20: 4c:dd:97:5c:c2:e7:49:c8:55:5e:fb:9a:01:2b:59:77:ce:a7: 93:40:76:ba:d5:e3:7e:17:92:78:fa:18:f9:ed:c2:0e:1b:32: 1b:44:6b:b2:91:12:67:68:b8:da:d9:02:d1:db:42:c6:66:d1: 90:3c:05:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IxNEQxMTAvBgNVBAUTKDE2QzY2MjcyNkY0QTAwOTEzM0Q2NTkxNjY0MjM5RTAw QzY4MUEwMDQwHhcNMjUwODIwMjAzNzI0WhcNMjUwODI3MjAzNzI0WjAYMRYwFAYD VQQDEw02OGE2MzIwNC1mMWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyoveHZCNCKtRnm8kwnsfW9dVyFD2bfpM++a8WTiyg192AX2QUC7EWw6pWQSl Zbn3b8ynbfNnZ7C67iloTNk89t/Yl/X0jxrQcnBz4ggeTq2dnIcCZ9LEiggGcJPP jycG9vWJdjEr1l11ajMe8zwG31si9jsvJyq+ixSdv+N/OqOEw7YTStjwEBiJtW5X anaKLamcUAiYpbbsKrp+49KR4xjqW1afZWbszgdo7/aYuhPneQlv1oa75tVEsXXQ I1dkeIrPcXJ7yVviA9fwgEDTLxMhqi2IbbHCp6AHmePthOGrZ3Z7CoyuVHVXqbdk PWIO2cmubzdfhhOnqH0V/zqVgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFINkD1++ /9JeQQPMpozfCCK5st2SMB8GA1UdIwQYMBaAFBbGYnJvSgCRM9ZZFmQjngDGgaAE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjE0RC8zMEZFMEFGRUM0 QzYxMUVBQThENUJFNjZDNEY5QUUwMi9Gc1ppY205S0FKRXoxbGtXWkNPZUFNYUJv QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZzWmljbTlLQUpFejFsa1daQ09lQU1hQm9BUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjE0RC8zMEZFMEFGRUM0QzYxMUVBQThENUJFNjZDNEY5QUUwMi9Gc1ppY205S0FK RXoxbGtXWkNPZUFNYUJvQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQX3fnmYQnfNZa8tfMXtqL6zOAGoXcQyGKXrfryWK8SZgFah3IYibp gO7GYs0pihuI4xbj39+LSa1W+qPj41p4/OEs/M6FuqaE0kjVr8eWpkl/hxyyBGRH JpIGXXk/YmEzUIFCBKh69xAYFJkOMxg1mVg4yvHPl3CYQ+75xLDoeB39REFcuf+T iPlFKVfT6mYh420msiY91dsic4d3PTiD0EgYJAOLhpq2/MG9dUjxjetrOqxOBO1D +FmDK8d0dJoMtoJ/WSBM3ZdcwudJyFVe+5oBK1l3zqeTQHa61eN+F5J4+hj57cIO GzIbRGuykRJnaLja2QLR20LGZtGQPAU3 -----END CERTIFICATE-----Generated at Fri Aug 22 16:31:39 2025 by rpki-client