$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft File: rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft (raw, json) Hash identifier: sptvohil4/sT8QC/vwM78zvHirELJMJrdqGVd/cO8B4= Subject key identifier: 71:5F:9F:25:3B:48:9E:43:31:6C:DE:AC:CF:69:0B:80:59:98:85:58 Authority key identifier: AD:F3:12:EA:68:B7:F0:5D:A6:10:10:80:F9:83:22:FB:D6:59:18:B2 Certificate issuer: /CN=A91CB765/serialNumber=ADF312EA68B7F05DA6101080F98322FBD65918B2 Certificate serial: 0517 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft Manifest number: 0508 Signing time: Wed 20 Aug 2025 23:45:13 +0000 Manifest this update: Wed 20 Aug 2025 23:45:13 +0000 Manifest next update: Wed 27 Aug 2025 23:45:13 +0000 Files and hashes: 1: rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl (hash: wKxtLHD2iDH9VJ9CDFoH9BkFXZ6MQ8Af4j5s6D1m8WQ=) 2: F9A8F3561F3D11ECB2E88C32C4F9AE02.roa (hash: VeKl0MHR8TI54m6waTajw/toZ1ifpbQZ1lUNcn/xegU=) 3: E66070EE36F911F0B0111510C4F9AE02.roa (hash: s0fTkj19sRTx/+BDg72CnNonlKPiE7C9YigY/ZfS3pw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 23:45:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1303 (0x517) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB765, serialNumber=ADF312EA68B7F05DA6101080F98322FBD65918B2 Validity Not Before: Aug 20 23:45:13 2025 GMT Not After : Aug 27 23:45:13 2025 GMT Subject: CN=68a65e09-2d83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:57:65:ab:50:17:60:45:26:75:68:45:e7:df: 36:b1:af:37:10:b0:41:5f:89:5b:58:51:49:47:62: 26:37:43:ec:08:04:10:be:76:a5:c1:fa:2a:b4:89: 2a:12:83:83:b2:ec:5d:0f:a7:3b:3b:ff:56:9d:86: 15:76:1d:43:27:a9:4f:4e:f4:dd:e2:70:0b:a8:a2: b6:e9:4a:f7:2c:4d:ac:5f:11:14:7f:cd:bd:5c:a5: f2:cc:ea:33:aa:c8:07:15:c2:5e:95:c4:c2:dd:7f: bd:9e:91:e2:bc:bb:ab:51:f3:8d:d2:05:f8:3b:48: b5:68:d6:72:8c:65:ee:88:f9:53:22:da:65:a6:c8: 66:21:14:f2:58:ff:d9:e0:13:b5:dc:f4:20:36:cf: a5:a3:6c:c9:f8:a3:f5:c7:09:31:03:77:e4:33:1a: b4:fa:95:9f:c0:4f:22:d2:ce:2b:2f:6a:79:54:ba: bb:b4:18:0d:24:63:88:50:6e:c0:07:74:c9:1b:bb: a5:18:ed:ec:67:b3:e2:94:2e:5d:54:bd:89:a2:37: 14:e3:5f:c6:dc:97:1a:09:87:3f:cb:fe:f4:62:74: ec:0c:0c:b5:16:9e:84:cb:21:6e:e0:25:1a:2b:e2: 34:b2:ba:f9:c8:4d:fd:0d:89:e6:16:76:9e:3c:c1: 42:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:5F:9F:25:3B:48:9E:43:31:6C:DE:AC:CF:69:0B:80:59:98:85:58 X509v3 Authority Key Identifier: keyid:AD:F3:12:EA:68:B7:F0:5D:A6:10:10:80:F9:83:22:FB:D6:59:18:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:50:a4:ca:70:d6:c9:df:1d:2c:ec:e8:3e:02:dc:5f:a7:34: 77:2b:cd:81:8f:ef:e5:b4:df:e0:2a:b6:fa:52:19:1b:6d:16: 18:35:ec:b6:62:b8:40:77:1c:d8:63:28:3e:ac:1b:30:ef:5f: 0b:0f:df:ba:9a:c5:ee:6c:b5:31:c1:91:ff:6f:0b:56:b6:08: e4:5d:9f:69:89:10:d6:98:7a:3c:26:1e:8b:9c:59:c7:95:ee: 54:4c:55:00:00:df:83:cb:5d:cc:61:b0:ad:0a:84:02:3c:e2: 52:bb:5e:23:8b:4e:bf:cc:51:cf:0e:2b:9d:6f:e9:30:1d:21: f2:2d:35:43:c8:6d:49:0e:48:61:59:00:b5:74:3f:5a:d3:89: 63:12:14:52:81:b0:49:f1:a9:88:39:2f:c2:62:3c:e4:bd:de: 7f:4b:b1:fb:0f:9d:0b:1b:be:22:3c:ae:db:09:56:bb:a0:81: fb:d3:00:db:a8:45:b9:08:aa:6f:aa:55:28:bb:2b:92:63:cd: 6f:01:f0:17:8e:0b:43:eb:51:62:35:61:2b:e4:be:9e:50:99: a5:85:25:49:eb:e1:fb:91:2d:25:41:36:ba:99:33:e2:e4:bf: 33:b6:3d:8e:98:81:11:93:53:6a:9d:21:20:8c:42:18:1b:f3: 27:19:6b:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I3NjUxMTAvBgNVBAUTKEFERjMxMkVBNjhCN0YwNURBNjEwMTA4MEY5ODMyMkZC RDY1OTE4QjIwHhcNMjUwODIwMjM0NTEzWhcNMjUwODI3MjM0NTEzWjAYMRYwFAYD VQQDEw02OGE2NWUwOS0yZDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqFdlq1AXYEUmdWhF5982sa83ELBBX4lbWFFJR2ImN0PsCAQQvnalwfoqtIkq EoODsuxdD6c7O/9WnYYVdh1DJ6lPTvTd4nALqKK26Ur3LE2sXxEUf829XKXyzOoz qsgHFcJelcTC3X+9npHivLurUfON0gX4O0i1aNZyjGXuiPlTItplpshmIRTyWP/Z 4BO13PQgNs+lo2zJ+KP1xwkxA3fkMxq0+pWfwE8i0s4rL2p5VLq7tBgNJGOIUG7A B3TJG7ulGO3sZ7PilC5dVL2JojcU41/G3JcaCYc/y/70YnTsDAy1Fp6EyyFu4CUa K+I0srr5yE39DYnmFnaePMFCJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHFfnyU7 SJ5DMWzerM9pC4BZmIVYMB8GA1UdIwQYMBaAFK3zEupot/BdphAQgPmDIvvWWRiy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjc2NS9BNERERkE5NDFG M0IxMUVDQjdEQzQ1MkZDNEY5QUUwMi9yZk1TNm1pMzhGMm1FQkNBLVlNaS05WlpH TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JmTVM2bWkzOEYybUVCQ0EtWU1pLTlaWkdMSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Qjc2NS9BNERERkE5NDFGM0IxMUVDQjdEQzQ1MkZDNEY5QUUwMi9yZk1TNm1pMzhG Mm1FQkNBLVlNaS05WlpHTEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBUKTKcNbJ3x0s7Og+AtxfpzR3K82Bj+/ltN/gKrb6UhkbbRYYNey2 YrhAdxzYYyg+rBsw718LD9+6msXubLUxwZH/bwtWtgjkXZ9piRDWmHo8Jh6LnFnH le5UTFUAAN+Dy13MYbCtCoQCPOJSu14ji06/zFHPDiudb+kwHSHyLTVDyG1JDkhh WQC1dD9a04ljEhRSgbBJ8amIOS/CYjzkvd5/S7H7D50LG74iPK7bCVa7oIH70wDb qEW5CKpvqlUouyuSY81vAfAXjgtD61FiNWEr5L6eUJmlhSVJ6+H7kS0lQTa6mTPi 5L8ztj2OmIERk1NqnSEgjEIYG/MnGWvN -----END CERTIFICATE-----Generated at Fri Aug 22 16:18:19 2025 by rpki-client