$ rpki-client -vvf rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft File: hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft (raw, json) Hash identifier: 6z3Dh+ZBrjpHtKx8Aub00i0T3FHyXYMQGhhQKHJmzu4= Subject key identifier: 93:BE:8F:99:71:4C:15:95:7A:8C:C7:C1:72:BA:BA:55:2D:FB:82:33 Authority key identifier: 85:B1:4A:89:0B:9B:D4:98:0D:97:E4:1B:B3:91:FC:C9:85:0F:CB:78 Certificate issuer: /CN=A91D894F/serialNumber=85B14A890B9BD4980D97E41BB391FCC9850FCB78 Certificate serial: 0103 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbFKiQub1JgNl-Qbs5H8yYUPy3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft Manifest number: FB Signing time: Tue 19 Aug 2025 05:33:41 +0000 Manifest this update: Tue 19 Aug 2025 05:33:40 +0000 Manifest next update: Tue 26 Aug 2025 05:33:40 +0000 Files and hashes: 1: hbFKiQub1JgNl-Qbs5H8yYUPy3g.crl (hash: NEcbenAS6oKLHcx55sWfOgX0ll/emPzbGpyQzJ5PuQ4=) 2: 61A59876012A11EFB75C350FC4F9AE02.roa (hash: eAATcw+wwIntluEWHwykA3g4lnWZ04SXuQGRkoYM9h4=) 3: 612992C6012A11EFB75C350FC4F9AE02.roa (hash: kIIwTAeW+pDEZ3yhH1JwOUrEmJAAi9ldowt4J7C/CXc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.crl rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbFKiQub1JgNl-Qbs5H8yYUPy3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 05:33:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 259 (0x103) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D894F, serialNumber=85B14A890B9BD4980D97E41BB391FCC9850FCB78 Validity Not Before: Aug 19 05:33:40 2025 GMT Not After : Aug 26 05:33:40 2025 GMT Subject: CN=68a40cb4-c1e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:96:f4:17:99:fb:dd:c1:e0:51:1e:e4:5d:e5: 24:84:a3:72:39:da:28:c7:55:50:d7:cf:67:f3:0c: fc:8a:ab:db:80:6a:1e:8f:28:e4:13:e6:31:99:ab: 38:e4:c9:1b:8a:cb:d2:08:c9:25:8a:67:ae:0a:69: 85:e1:e1:07:75:e2:4f:87:66:7d:9b:45:f3:2e:e3: 20:3c:73:8a:2d:b5:82:35:36:1b:12:72:cc:55:b0: d9:9b:96:94:2a:da:1e:80:2a:f3:27:1c:05:3f:33: bb:dc:54:bb:2e:fd:5b:5e:8d:5d:29:0f:ed:d3:fc: 8d:07:03:19:17:f8:44:b0:cb:a4:b0:d1:08:8d:0a: e3:73:27:b5:3f:95:e0:0a:3f:07:f9:14:79:f9:c3: 3c:9d:33:34:5b:3d:78:b2:49:49:1e:53:74:a8:1b: d1:04:fc:41:5c:a6:0f:72:48:f4:79:ab:57:4c:9b: 8e:60:4c:90:0d:26:02:eb:a7:ae:31:ae:a9:dd:53: 90:0c:eb:55:de:2b:ed:44:5b:0e:5b:90:02:c7:98: 77:34:05:0a:bb:2f:89:df:c7:07:b0:d0:e7:0d:b9: c6:49:b5:58:5b:f0:bb:17:75:45:bc:bb:21:4c:e8: bd:ea:b7:e1:2e:c6:ad:aa:0d:47:f0:24:e3:d4:2a: e2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:BE:8F:99:71:4C:15:95:7A:8C:C7:C1:72:BA:BA:55:2D:FB:82:33 X509v3 Authority Key Identifier: keyid:85:B1:4A:89:0B:9B:D4:98:0D:97:E4:1B:B3:91:FC:C9:85:0F:CB:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbFKiQub1JgNl-Qbs5H8yYUPy3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:a9:9a:4c:fa:32:cc:4c:0e:5a:3a:d4:b6:0b:5a:75:d1:7e: 8f:6a:2c:d9:b4:57:2a:f2:44:14:82:3c:5a:17:94:53:6c:7d: 37:5a:b7:eb:0a:dd:40:8c:56:5c:35:ca:b2:e0:6a:63:f1:a5: 7e:63:6e:79:da:f5:77:bd:01:da:fa:c3:f6:5f:bb:17:91:64: 34:17:f3:f9:5d:bc:00:fc:d6:2b:5a:9b:67:ca:e5:5d:d9:75: 4b:0f:23:75:97:bb:eb:c9:f5:70:47:2e:aa:a9:32:1b:b9:09: ea:95:9b:bd:b3:2b:3d:23:96:40:1c:a5:c9:25:16:5d:a2:6b: b6:81:bc:45:bd:be:9a:e9:e5:f0:96:6d:19:0b:86:dc:14:ea: d1:c3:b8:b4:fc:44:76:a4:4a:b8:1e:3a:b6:55:fe:27:e8:ea: 81:95:2e:04:76:00:a4:e7:7e:51:75:f1:2e:f2:87:29:b1:9f: be:30:5e:67:9e:d0:86:7d:1e:cf:de:7b:3c:65:21:76:cb:a5: 5e:41:56:bf:a4:66:49:89:47:fd:a1:1c:7c:c9:75:40:f2:db: f4:42:d1:b2:da:73:70:72:36:ed:3d:ff:23:51:fc:9f:ab:a5: 29:16:fa:3b:f1:90:9a:85:30:0b:fd:b1:3f:9b:40:6e:16:87: dd:d2:cf:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg5NEYxMTAvBgNVBAUTKDg1QjE0QTg5MEI5QkQ0OTgwRDk3RTQxQkIzOTFGQ0M5 ODUwRkNCNzgwHhcNMjUwODE5MDUzMzQwWhcNMjUwODI2MDUzMzQwWjAYMRYwFAYD VQQDEw02OGE0MGNiNC1jMWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqJb0F5n73cHgUR7kXeUkhKNyOdoox1VQ189n8wz8iqvbgGoejyjkE+Yxmas4 5MkbisvSCMklimeuCmmF4eEHdeJPh2Z9m0XzLuMgPHOKLbWCNTYbEnLMVbDZm5aU KtoegCrzJxwFPzO73FS7Lv1bXo1dKQ/t0/yNBwMZF/hEsMuksNEIjQrjcye1P5Xg Cj8H+RR5+cM8nTM0Wz14sklJHlN0qBvRBPxBXKYPckj0eatXTJuOYEyQDSYC66eu Ma6p3VOQDOtV3ivtRFsOW5ACx5h3NAUKuy+J38cHsNDnDbnGSbVYW/C7F3VFvLsh TOi96rfhLsatqg1H8CTj1CriVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJO+j5lx TBWVeozHwXK6ulUt+4IzMB8GA1UdIwQYMBaAFIWxSokLm9SYDZfkG7OR/MmFD8t4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODk0Ri8wQUY0NUUzNjAx MkExMUVGQTVGRDkxNkZDNEY5QUUwMi9oYkZLaVF1YjFKZ05sLVFiczVIOHlZVVB5 M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hiRktpUXViMUpnTmwtUWJzNUg4eVlVUHkzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODk0Ri8wQUY0NUUzNjAxMkExMUVGQTVGRDkxNkZDNEY5QUUwMi9oYkZLaVF1YjFK Z05sLVFiczVIOHlZVVB5M2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIqZpM+jLMTA5aOtS2C1p10X6PaizZtFcq8kQUgjxaF5RTbH03Wrfr Ct1AjFZcNcqy4Gpj8aV+Y2552vV3vQHa+sP2X7sXkWQ0F/P5XbwA/NYrWptnyuVd 2XVLDyN1l7vryfVwRy6qqTIbuQnqlZu9sys9I5ZAHKXJJRZdomu2gbxFvb6a6eXw lm0ZC4bcFOrRw7i0/ER2pEq4Hjq2Vf4n6OqBlS4EdgCk535RdfEu8ocpsZ++MF5n ntCGfR7P3ns8ZSF2y6VeQVa/pGZJiUf9oRx8yXVA8tv0QtGy2nNwcjbtPf8jUfyf q6UpFvo78ZCahTAL/bE/m0BuFofd0s/+ -----END CERTIFICATE-----Generated at Wed Aug 20 15:37:20 2025 by rpki-client