$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft File: fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft (raw, json) Hash identifier: qs8w+d9t4yJrL0HzVT/OVDUJuRUdNl80gqOB8lDAHdY= Subject key identifier: 0A:BF:CB:2C:10:4E:D2:46:B0:B6:31:12:4B:98:F7:D5:7F:AC:70:D3 Authority key identifier: 7C:5E:0D:DC:4F:58:69:74:7B:2A:35:8C:9B:7C:0F:31:E8:D8:DD:8B Certificate issuer: /CN=A91CFCF8/serialNumber=7C5E0DDC4F5869747B2A358C9B7C0F31E8D8DD8B Certificate serial: 0422 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF4N3E9YaXR7KjWMm3wPMejY3Ys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft Manifest number: 040A Signing time: Fri 05 Sep 2025 00:48:20 +0000 Manifest this update: Fri 05 Sep 2025 00:48:19 +0000 Manifest next update: Fri 12 Sep 2025 00:48:19 +0000 Files and hashes: 1: fF4N3E9YaXR7KjWMm3wPMejY3Ys.crl (hash: AHB4IpEmWDyChSqNAS6dzv27cVnkjfpiyezL5RufUpE=) 2: 13A285FAB19A11EF8A0E4356C4F9AE02.roa (hash: 0AdbgXl2PM0dKWxojYYhrZuTuIt1BCoahGNDArgAJi4=) 3: C76E25524B1711EE8CE6C778C4F9AE02.roa (hash: HsErDDItwf5JjFC0N3vp/RvWt4W7KbQd/xCB8B2lvo4=) 4: 844FB44036A211EEAE901A49C4F9AE02.roa (hash: GNVfwfyUifybt9+TxmCqpnk4LFqX/6GaqA3Bsi9KVRs=) 5: DC32812203E911F099ED6083C4F9AE02.roa (hash: J4XsQqIXXNrH3AjPKCK2loEl+rnRQyBlEzKkOSyTXKc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.crl rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF4N3E9YaXR7KjWMm3wPMejY3Ys.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 00:48:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1058 (0x422) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFCF8, serialNumber=7C5E0DDC4F5869747B2A358C9B7C0F31E8D8DD8B Validity Not Before: Sep 5 00:48:19 2025 GMT Not After : Sep 12 00:48:19 2025 GMT Subject: CN=68ba3353-9835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:87:9d:b3:81:42:3b:64:58:2b:47:e9:c1:1e: d5:e6:f7:f8:17:5e:f3:23:5e:f5:77:cc:d4:24:7b: 7b:38:24:f7:26:bc:ef:08:19:2d:a6:17:8b:e6:98: 8c:0e:19:ad:83:a4:2d:64:c7:3e:15:9a:82:85:d9: 7f:64:cb:ab:cd:15:09:71:99:02:85:60:80:bf:d8: 0b:35:56:67:99:ee:6f:fe:fb:bd:34:e6:73:5d:97: a6:6c:27:8c:a3:22:2b:da:be:18:f7:cf:74:36:d2: 98:9c:9c:c5:52:bb:fe:fa:be:0a:6f:de:df:75:b7: 3c:9e:0a:03:46:bb:41:45:a8:1d:09:3c:9b:5d:28: 49:5e:47:a6:0b:c7:54:35:d1:d8:c1:5d:54:d0:e8: b0:2c:79:c7:b4:46:4c:f3:ca:6a:2f:00:7d:58:6a: 2c:14:34:1f:90:7d:06:67:16:93:49:41:8b:37:d5: f4:e4:c8:15:e1:57:9d:dc:1a:f8:b7:77:a7:26:c0: 39:c6:5c:61:e4:d8:70:80:c4:79:f7:3a:af:61:f9: a4:2f:c9:95:76:c5:36:ea:3b:92:2d:85:69:b3:34: fe:28:7e:f3:73:4e:8e:d4:b0:4e:ab:fd:75:6f:8d: d9:71:fb:b4:41:e0:d4:d7:ca:69:70:b7:ea:a2:0b: c4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:BF:CB:2C:10:4E:D2:46:B0:B6:31:12:4B:98:F7:D5:7F:AC:70:D3 X509v3 Authority Key Identifier: keyid:7C:5E:0D:DC:4F:58:69:74:7B:2A:35:8C:9B:7C:0F:31:E8:D8:DD:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF4N3E9YaXR7KjWMm3wPMejY3Ys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:e7:7a:b9:bc:dd:ed:b8:ae:33:79:f0:b4:f9:92:50:33:ac: b5:23:7b:3e:3a:de:71:2e:f5:93:9a:a6:a2:c9:c3:ed:c5:42: bc:27:09:99:49:f2:74:b8:da:88:51:6f:d9:e2:12:6a:b8:49: 71:f0:15:f0:88:30:92:dc:ea:c2:70:1a:00:ae:39:7c:58:f8: eb:c7:72:55:89:12:82:57:01:bf:fa:2f:ac:b9:20:db:3d:1a: 27:25:2f:a3:d0:c6:6b:e4:8c:e5:fd:1b:ea:47:40:26:64:70: 63:95:9c:68:34:03:10:b2:ed:69:98:a2:86:1f:e4:66:64:fe: 55:3b:1e:99:41:c4:ab:ed:81:e6:b4:a5:61:cf:e0:64:c7:30: 11:af:2f:6c:8b:12:02:f8:73:77:58:71:f1:14:b3:09:62:d1: a2:fc:bd:74:34:45:8c:22:84:50:d6:28:89:34:74:8f:8a:d7: da:31:8f:f2:48:ea:83:2f:40:5c:d9:32:10:a8:0d:06:e5:81: 4c:ad:c5:41:96:92:3d:4f:fe:b8:1b:9e:fb:e1:96:d0:36:6a: 68:c7:6c:68:04:81:58:ee:ed:93:7e:81:fc:87:72:44:ce:9f: 87:51:fd:11:20:f0:74:a2:b7:67:49:9a:ce:75:c9:98:67:b8: a6:3c:b8:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZDRjgxMTAvBgNVBAUTKDdDNUUwRERDNEY1ODY5NzQ3QjJBMzU4QzlCN0MwRjMx RThEOEREOEIwHhcNMjUwOTA1MDA0ODE5WhcNMjUwOTEyMDA0ODE5WjAYMRYwFAYD VQQDEw02OGJhMzM1My05ODM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx4eds4FCO2RYK0fpwR7V5vf4F17zI171d8zUJHt7OCT3JrzvCBktpheL5piM Dhmtg6QtZMc+FZqChdl/ZMurzRUJcZkChWCAv9gLNVZnme5v/vu9NOZzXZembCeM oyIr2r4Y9890NtKYnJzFUrv++r4Kb97fdbc8ngoDRrtBRagdCTybXShJXkemC8dU NdHYwV1U0OiwLHnHtEZM88pqLwB9WGosFDQfkH0GZxaTSUGLN9X05MgV4Ved3Br4 t3enJsA5xlxh5NhwgMR59zqvYfmkL8mVdsU26juSLYVpszT+KH7zc06O1LBOq/11 b43Zcfu0QeDU18ppcLfqogvEfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAq/yywQ TtJGsLYxEkuY99V/rHDTMB8GA1UdIwQYMBaAFHxeDdxPWGl0eyo1jJt8DzHo2N2L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkNGOC8wNUU0QzJEMjhC MDIxMUVDODVGMkQwNzRDNEY5QUUwMi9mRjROM0U5WWFYUjdLaldNbTN3UE1lalkz WXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZGNE4zRTlZYVhSN0tqV01tM3dQTWVqWTNZcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkNGOC8wNUU0QzJEMjhCMDIxMUVDODVGMkQwNzRDNEY5QUUwMi9mRjROM0U5WWFY UjdLaldNbTN3UE1lalkzWXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAq53q5vN3tuK4zefC0+ZJQM6y1I3s+Ot5xLvWTmqaiycPtxUK8JwmZ SfJ0uNqIUW/Z4hJquElx8BXwiDCS3OrCcBoArjl8WPjrx3JViRKCVwG/+i+suSDb PRonJS+j0MZr5Izl/RvqR0AmZHBjlZxoNAMQsu1pmKKGH+RmZP5VOx6ZQcSr7YHm tKVhz+BkxzARry9sixIC+HN3WHHxFLMJYtGi/L10NEWMIoRQ1iiJNHSPitfaMY/y SOqDL0Bc2TIQqA0G5YFMrcVBlpI9T/64G5774ZbQNmpox2xoBIFY7u2TfoH8h3JE zp+HUf0RIPB0ordnSZrOdcmYZ7imPLh/ -----END CERTIFICATE-----Generated at Sat Sep 6 17:15:52 2025 by rpki-client