$ rpki-client -vvf rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft File: D1kUy7lqcNoGsR7z3StjyeQHsxw.mft (raw, json) Hash identifier: 6KKWkicOTEUaJfd0JkcKGyRSM6wC3ltmyLoriT8h3uI= Subject key identifier: B2:96:58:5B:A2:7D:3C:8C:46:4F:2F:BD:28:03:55:5F:37:1C:96:0F Authority key identifier: 0F:59:14:CB:B9:6A:70:DA:06:B1:1E:F3:DD:2B:63:C9:E4:07:B3:1C Certificate issuer: /CN=A91D03FC/serialNumber=0F5914CBB96A70DA06B11EF3DD2B63C9E407B31C Certificate serial: F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft Manifest number: ED Signing time: Sat 23 Aug 2025 05:30:38 +0000 Manifest this update: Sat 23 Aug 2025 05:30:37 +0000 Manifest next update: Sat 30 Aug 2025 05:30:37 +0000 Files and hashes: 1: D1kUy7lqcNoGsR7z3StjyeQHsxw.crl (hash: w+LnLzVJ1uVcC1Ain0x1Hqofb1S5W8UbMv2ykl4zF0U=) 2: 4FFFD8D41D7211EFA095B25AC4F9AE02.roa (hash: 7t/pdYKTKmwUGR/lE+qnEM4TrcYeXROZCsv49aYTSqk=) 3: 507C31C21D7211EFA095B25AC4F9AE02.roa (hash: c1LdcyfxBkh65MfHEWuLe4Y+neliIailfDFE8qX4bKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.crl rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:30:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 244 (0xf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D03FC, serialNumber=0F5914CBB96A70DA06B11EF3DD2B63C9E407B31C Validity Not Before: Aug 23 05:30:37 2025 GMT Not After : Aug 30 05:30:37 2025 GMT Subject: CN=68a951fe-e5af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:68:d6:58:e6:85:dc:d2:b3:4b:d6:22:47:49: 0e:8c:14:0e:de:90:15:f8:48:f5:23:6d:9a:87:a5: 21:86:39:20:dc:34:d5:e4:ca:be:b3:78:15:70:fe: 03:94:63:e4:f5:e0:3c:e5:f0:50:75:af:21:30:0d: 12:1d:f4:71:74:6d:8d:41:25:c4:5f:ef:41:26:05: bd:9e:5a:56:61:69:f8:f1:47:65:93:aa:8e:b2:21: 79:4e:26:8a:99:e8:19:c9:65:6a:98:17:ad:8a:63: 6e:05:77:00:68:68:70:96:cc:4e:73:28:78:a5:d4: ac:b4:0f:33:a2:2d:9a:18:ca:93:7f:ce:3d:f4:8b: e7:75:cb:eb:62:7a:08:e7:e5:92:ad:0d:72:8c:43: 3f:2c:bd:ff:cc:60:2d:a6:ab:cf:f3:b5:69:74:1a: fa:f4:1c:a4:4b:6b:43:49:9a:7a:f0:44:cd:54:6c: d5:6e:ed:93:d3:96:9a:86:55:50:64:00:37:d0:a8: 72:9c:36:e5:db:76:f6:cb:7d:6e:43:c6:2b:13:01: 2c:c7:a5:fb:ed:d4:16:04:8d:71:69:a8:53:00:43: 55:68:29:e0:61:7b:eb:2c:fc:11:61:c4:19:94:e4: db:42:5e:97:d5:1e:29:e3:3b:4f:7a:83:b1:93:5f: 27:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:96:58:5B:A2:7D:3C:8C:46:4F:2F:BD:28:03:55:5F:37:1C:96:0F X509v3 Authority Key Identifier: keyid:0F:59:14:CB:B9:6A:70:DA:06:B1:1E:F3:DD:2B:63:C9:E4:07:B3:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:3e:c6:e9:41:39:3b:a5:91:91:7d:15:1d:c0:c6:f1:bb:b3: ab:7f:ee:ca:29:eb:c7:bc:06:9d:29:d1:18:98:6c:97:f5:80: 82:3e:c3:77:55:f0:8b:97:4e:04:ff:21:7b:12:64:1b:cb:72: df:86:74:5c:4c:83:3c:93:5a:a9:f8:cb:03:10:36:cd:7e:18: cf:d3:27:a5:29:55:8a:b8:01:64:a2:36:91:53:e6:73:53:47: b8:4a:a8:2b:48:55:c3:a7:80:ad:6e:62:17:1a:42:52:c6:26: d5:61:f1:94:30:c3:c6:76:31:8d:c0:73:23:65:fc:5e:66:bb: 95:10:37:e2:cd:6f:13:c8:51:95:46:b4:19:54:8e:13:d7:b8: c5:55:b0:a1:78:b6:79:a0:9a:02:01:a1:7d:fa:b4:da:3d:e3: 35:73:59:ad:a6:ba:65:38:da:ea:54:d0:f3:7b:e0:94:58:f6: cc:e3:a9:ed:93:b7:27:7f:d0:23:c5:4e:7c:eb:b3:78:c8:e4: 10:a0:aa:35:74:8a:18:18:7b:90:1a:66:12:fb:66:25:13:d7: ca:04:d0:0a:05:53:20:1f:e7:30:5f:4a:28:3e:d4:56:4d:de: 36:69:d1:f8:7a:aa:7e:e1:fd:9d:9a:cb:4b:bf:93:db:5c:b3: d1:23:10:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDAzRkMxMTAvBgNVBAUTKDBGNTkxNENCQjk2QTcwREEwNkIxMUVGM0REMkI2M0M5 RTQwN0IzMUMwHhcNMjUwODIzMDUzMDM3WhcNMjUwODMwMDUzMDM3WjAYMRYwFAYD VQQDEw02OGE5NTFmZS1lNWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA12jWWOaF3NKzS9YiR0kOjBQO3pAV+Ej1I22ah6Uhhjkg3DTV5Mq+s3gVcP4D lGPk9eA85fBQda8hMA0SHfRxdG2NQSXEX+9BJgW9nlpWYWn48Udlk6qOsiF5TiaK megZyWVqmBetimNuBXcAaGhwlsxOcyh4pdSstA8zoi2aGMqTf8499IvndcvrYnoI 5+WSrQ1yjEM/LL3/zGAtpqvP87VpdBr69BykS2tDSZp68ETNVGzVbu2T05aahlVQ ZAA30KhynDbl23b2y31uQ8YrEwEsx6X77dQWBI1xaahTAENVaCngYXvrLPwRYcQZ lOTbQl6X1R4p4ztPeoOxk18nYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLKWWFui fTyMRk8vvSgDVV83HJYPMB8GA1UdIwQYMBaAFA9ZFMu5anDaBrEe890rY8nkB7Mc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDNGQy9DN0IwOTM1NjFE NzExMUVGOTVFMjY4NDBDNEY5QUUwMi9EMWtVeTdscWNOb0dzUjd6M1N0anllUUhz eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Qxa1V5N2xxY05vR3NSN3ozU3RqeWVRSHN4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDNGQy9DN0IwOTM1NjFENzExMUVGOTVFMjY4NDBDNEY5QUUwMi9EMWtVeTdscWNO b0dzUjd6M1N0anllUUhzeHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDPsbpQTk7pZGRfRUdwMbxu7Orf+7KKevHvAadKdEYmGyX9YCCPsN3 VfCLl04E/yF7EmQby3LfhnRcTIM8k1qp+MsDEDbNfhjP0yelKVWKuAFkojaRU+Zz U0e4SqgrSFXDp4CtbmIXGkJSxibVYfGUMMPGdjGNwHMjZfxeZruVEDfizW8TyFGV RrQZVI4T17jFVbCheLZ5oJoCAaF9+rTaPeM1c1mtprplONrqVNDze+CUWPbM46nt k7cnf9AjxU5867N4yOQQoKo1dIoYGHuQGmYS+2YlE9fKBNAKBVMgH+cwX0ooPtRW Td42adH4eqp+4f2dmstLv5PbXLPRIxAh -----END CERTIFICATE-----Generated at Sun Aug 24 22:07:07 2025 by rpki-client