$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft File: f2vh1aJzD8In-vyJbRNDMkF4MXk.mft (raw, json) Hash identifier: 1qlQb2oHvHpv8ykrRapec/QDFuF5BIsp8ENAxDyAY2Q= Subject key identifier: 70:17:D5:A7:EF:58:B8:C6:62:02:DF:AF:AF:20:ED:FC:7C:B0:F7:06 Authority key identifier: 7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79 Certificate issuer: /CN=A91DB4FE/serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179 Certificate serial: 08B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft Manifest number: 07C1 Signing time: Sat 06 Sep 2025 22:38:08 +0000 Manifest this update: Sat 06 Sep 2025 22:38:08 +0000 Manifest next update: Sat 13 Sep 2025 22:38:08 +0000 Files and hashes: 1: f2vh1aJzD8In-vyJbRNDMkF4MXk.crl (hash: J2y03u7VRIdrGEtZO+eFszxSJqgZPVSmDbYKfhoANxM=) 2: 5A034FE6BD9011EF8EBE9D64C4F9AE02.roa (hash: M0Fcljsjjstipss7xqc7MHaM40CrhRfp+Ko6GKTS2eY=) 3: 71921B808DBD11EBB4566432C4F9AE02.roa (hash: /G2Mgl5uzW1IjI6PHih/zk+tlWLrMlnnVYCS55/UFdM=) 4: 95EC5BBE0DC811F0A0561D5AC4F9AE02.roa (hash: E4qGKWG7PfGIitr8iGGPNSOx9z6hB7rmiJDWW78bXko=) 5: DB120D6EC34A11EB9559E184C4F9AE02.roa (hash: 5xpmMyySrXgvXThxY4s4oxrkg/HJvlh/5VD0HqrC+TE=) 6: 284AFDA0F86011EE8DCC542DC4F9AE02.roa (hash: ibBpC0J7xssLmpNwn4rG5DteNDNkqNer4WUY/po6k0Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 22:38:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2229 (0x8b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB4FE, serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179 Validity Not Before: Sep 6 22:38:08 2025 GMT Not After : Sep 13 22:38:08 2025 GMT Subject: CN=68bcb7d0-69f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ca:fe:28:5b:63:16:23:39:d2:8f:45:ba:62: 4e:79:14:d6:08:45:ce:f7:e9:57:e6:85:43:67:75: 0e:24:c2:e1:2a:be:35:ef:50:6c:e0:fc:0c:19:97: fd:3d:39:1f:2c:ba:be:8a:45:53:db:41:d9:fd:a6: 31:9f:18:26:e5:e7:cd:8f:9d:d5:4e:ad:fa:c0:94: 85:40:99:65:ac:08:de:7f:fa:b0:ee:ef:50:db:f9: 87:18:ad:20:32:93:2d:0f:1c:2f:85:eb:4b:c9:49: 90:75:82:e4:b6:d4:89:dc:14:62:e0:67:dc:f6:a5: 13:83:9a:75:46:b4:86:da:14:11:97:83:08:c1:8a: ae:4f:41:70:b4:60:26:55:9b:f2:fd:a6:17:54:f5: 92:b3:33:51:15:4b:82:a6:35:48:0e:9a:99:a1:7a: 45:9b:50:1e:00:91:01:05:e7:c4:03:a8:88:5a:92: ed:c7:b4:03:52:81:01:e7:b0:b2:ff:c5:50:23:aa: 37:8a:d1:53:71:c4:57:43:66:90:d2:ed:91:62:c2: ca:f6:f2:5f:34:8b:3e:17:fb:9e:27:6f:e8:d5:04: b0:28:35:55:11:13:9c:5c:1f:16:ca:f2:71:71:9a: c4:17:b5:96:3a:9d:27:7c:a0:a7:f2:fe:af:8b:22: 32:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:17:D5:A7:EF:58:B8:C6:62:02:DF:AF:AF:20:ED:FC:7C:B0:F7:06 X509v3 Authority Key Identifier: keyid:7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:8e:63:9f:e1:35:1f:60:b7:bb:a6:8b:4a:b4:0b:20:fe:c5: 34:5a:c0:a5:d8:a1:58:bb:a2:65:d4:28:f9:d5:04:26:14:1d: f6:9f:91:10:17:72:42:f9:6d:7a:39:f3:51:39:ba:82:4c:73: 7f:47:fb:98:3b:7a:a7:bf:41:dd:93:91:a6:cb:8a:c1:ba:e5: 72:e0:6b:91:3d:44:b3:13:02:3d:ac:75:0d:51:c1:5b:81:5b: 2a:39:f3:81:24:d6:49:17:d2:8b:93:fd:16:6b:de:3a:ba:de: 5b:02:dc:0f:ec:96:73:27:7a:e1:fb:cb:06:ac:eb:bd:1c:48: f6:74:6f:68:33:49:e4:f0:b2:3d:31:de:96:08:a1:92:f7:4f: 2d:99:e2:69:ff:ae:10:24:b7:15:5a:b0:45:6c:94:ef:4e:f6: 2a:86:01:7e:04:17:5f:74:7e:1b:18:4f:bb:47:5e:9a:d2:22: 5b:14:56:4a:e5:cc:f1:86:f1:00:0e:9a:9d:40:97:54:85:9d: 8a:85:a9:3c:b6:d1:49:63:9a:d4:9e:d8:4e:15:dd:2e:e4:41: 98:b1:c8:73:2f:cc:70:8e:78:c9:4b:c9:7d:92:53:e1:ce:04: 14:64:e2:df:2a:ce:0f:3c:ca:c7:0d:aa:6e:3a:7b:97:52:6c: 1a:cf:f9:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI0RkUxMTAvBgNVBAUTKDdGNkJFMUQ1QTI3MzBGQzIyN0ZBRkM4OTZEMTM0MzMy NDE3ODMxNzkwHhcNMjUwOTA2MjIzODA4WhcNMjUwOTEzMjIzODA4WjAYMRYwFAYD VQQDEw02OGJjYjdkMC02OWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApcr+KFtjFiM50o9FumJOeRTWCEXO9+lX5oVDZ3UOJMLhKr4171Bs4PwMGZf9 PTkfLLq+ikVT20HZ/aYxnxgm5efNj53VTq36wJSFQJllrAjef/qw7u9Q2/mHGK0g MpMtDxwvhetLyUmQdYLkttSJ3BRi4Gfc9qUTg5p1RrSG2hQRl4MIwYquT0FwtGAm VZvy/aYXVPWSszNRFUuCpjVIDpqZoXpFm1AeAJEBBefEA6iIWpLtx7QDUoEB57Cy /8VQI6o3itFTccRXQ2aQ0u2RYsLK9vJfNIs+F/ueJ2/o1QSwKDVVEROcXB8WyvJx cZrEF7WWOp0nfKCn8v6viyIygwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHAX1afv WLjGYgLfr68g7fx8sPcGMB8GA1UdIwQYMBaAFH9r4dWicw/CJ/r8iW0TQzJBeDF5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjRGRS9DRjRBMTBFQTg1 RTExMUVCQUZCNTFFODRDNEY5QUUwMi9mMnZoMWFKekQ4SW4tdnlKYlJORE1rRjRN WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YydmgxYUp6RDhJbi12eUpiUk5ETWtGNE1Yay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjRGRS9DRjRBMTBFQTg1RTExMUVCQUZCNTFFODRDNEY5QUUwMi9mMnZoMWFKekQ4 SW4tdnlKYlJORE1rRjRNWGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqjmOf4TUfYLe7potKtAsg/sU0WsCl2KFYu6Jl1Cj51QQmFB32n5EQ F3JC+W16OfNRObqCTHN/R/uYO3qnv0Hdk5Gmy4rBuuVy4GuRPUSzEwI9rHUNUcFb gVsqOfOBJNZJF9KLk/0Wa946ut5bAtwP7JZzJ3rh+8sGrOu9HEj2dG9oM0nk8LI9 Md6WCKGS908tmeJp/64QJLcVWrBFbJTvTvYqhgF+BBdfdH4bGE+7R16a0iJbFFZK 5czxhvEADpqdQJdUhZ2Khak8ttFJY5rUnthOFd0u5EGYschzL8xwjnjJS8l9klPh zgQUZOLfKs4PPMrHDapuOnuXUmwaz/mL -----END CERTIFICATE-----Generated at Mon Sep 8 04:19:53 2025 by rpki-client