$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft File: u-Sfy0H1Amo1v2yTuR_f88iMc24.mft (raw, json) Hash identifier: sRwCxBiZYuDum66VW++3lqbbP4i7dRG+WrbUcm7b1V0= Subject key identifier: B2:BC:A0:3E:F4:23:D2:CA:C4:9F:31:DB:D9:E9:00:9F:21:84:AF:25 Authority key identifier: BB:E4:9F:CB:41:F5:02:6A:35:BF:6C:93:B9:1F:DF:F3:C8:8C:73:6E Certificate issuer: /CN=A91DEA56/serialNumber=BBE49FCB41F5026A35BF6C93B91FDFF3C88C736E Certificate serial: 08CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft Manifest number: 08B9 Signing time: Thu 04 Sep 2025 20:43:14 +0000 Manifest this update: Thu 04 Sep 2025 20:43:14 +0000 Manifest next update: Thu 11 Sep 2025 20:43:14 +0000 Files and hashes: 1: u-Sfy0H1Amo1v2yTuR_f88iMc24.crl (hash: 2EJc1hoMgVh6nkn8mV0ud5lA8phZJA0cYry3buhenh8=) 2: 660823EABF3C11EAAF328582C4F9AE02.roa (hash: McY2AJFANrzWmI75qEuoRVmbI5bYcHMLwYH623aHbh0=) 3: 65051AB6BF3C11EAAF328582C4F9AE02.roa (hash: 4sHi+d6qz1n7lwCxnRDnO0jNP13ZRhYE6FAGlfuub+c=) 4: 65877060BF3C11EAAF328582C4F9AE02.roa (hash: 8Ve/Cl0hRolwdHsLuG0VDkNM1FdRmkmQ9YowmP0sm+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.crl rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 20:43:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2253 (0x8cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEA56, serialNumber=BBE49FCB41F5026A35BF6C93B91FDFF3C88C736E Validity Not Before: Sep 4 20:43:14 2025 GMT Not After : Sep 11 20:43:14 2025 GMT Subject: CN=68b9f9e2-0ca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:77:f7:c7:f9:5f:f8:b8:68:da:38:0c:a0:a2: 68:e6:b6:ae:ee:49:45:1e:8e:50:de:41:14:ba:3c: bd:1c:00:05:bc:8a:1d:1a:72:64:54:ef:0d:bd:e7: 41:f0:da:db:0a:ae:9e:7e:71:16:0b:e3:fe:59:95: 28:bd:ea:14:6b:74:bf:c3:7f:0f:67:0c:96:f1:2f: 6f:1f:63:87:bb:1d:be:0a:01:b3:55:43:66:65:55: 0f:58:61:5a:59:4d:5b:3a:23:9b:cc:02:09:d9:07: 6d:d7:cc:25:90:48:b5:a0:15:45:81:6c:df:05:85: b7:6a:1d:ff:12:c6:b6:45:b4:68:7e:f4:92:e6:ac: a2:dc:6f:5f:40:cd:9a:69:d1:e5:19:38:f3:e5:9d: 9a:25:29:30:06:6b:dc:47:2d:aa:a7:2f:fa:ed:c5: 9b:c2:d2:49:4d:b7:a2:6e:c6:21:f5:76:dc:46:9f: bb:8a:e4:af:5e:3d:a6:64:cf:af:31:5e:38:5f:2f: de:ea:67:cf:8a:98:53:0c:35:ea:bc:22:22:b7:a7: e4:fb:d2:53:3c:29:f6:76:f5:a4:e8:cc:ff:fc:b1: f9:f6:94:0f:a8:54:ac:30:54:54:c4:1d:3d:6c:72: ab:9f:82:6e:b7:f3:37:7d:e6:e6:60:94:0a:b2:10: c2:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:BC:A0:3E:F4:23:D2:CA:C4:9F:31:DB:D9:E9:00:9F:21:84:AF:25 X509v3 Authority Key Identifier: keyid:BB:E4:9F:CB:41:F5:02:6A:35:BF:6C:93:B9:1F:DF:F3:C8:8C:73:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:f3:72:cb:d0:ca:c9:24:e5:f4:44:7a:c0:c8:de:74:25:7c: 2b:0b:38:8e:c3:a0:37:33:1e:47:82:f9:d4:cc:b5:d4:f4:af: 89:67:4a:31:bd:b6:de:23:b0:cd:6d:6a:5e:86:e8:f1:fc:86: ca:41:41:b7:b3:f8:60:b0:cf:ab:5d:57:3d:f9:f6:96:5d:c7: 56:19:4e:b7:01:98:8f:49:e7:af:b8:31:1a:c7:b7:ea:57:a9: ff:41:7d:f3:0b:15:a6:58:98:e7:54:2c:ec:0d:59:00:aa:e5: 57:18:42:b1:c1:7d:21:7b:c5:eb:e5:09:00:7d:f9:19:91:54: fa:02:b3:a7:63:8f:d3:e9:2c:b6:40:fb:1f:67:4a:41:1a:db: 97:b5:6d:95:3f:ca:6e:48:04:56:75:9c:26:16:3e:87:b4:0e: 82:dc:29:ec:98:24:4c:29:8b:ba:89:d0:92:90:ac:1e:85:84: 5f:f5:b8:83:2a:c8:39:1b:36:5b:9f:15:12:23:a5:0c:c4:8f: 63:66:d4:9a:4e:d5:9d:81:4c:f4:11:f8:93:0f:27:d3:3e:2d: 66:7f:8c:9f:a2:cc:4d:f0:c9:96:99:2f:92:38:47:13:32:f6: 37:35:fa:45:9b:52:7b:f1:92:5e:9c:84:bc:84:26:23:2c:b3: 58:43:c1:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVBNTYxMTAvBgNVBAUTKEJCRTQ5RkNCNDFGNTAyNkEzNUJGNkM5M0I5MUZERkYz Qzg4QzczNkUwHhcNMjUwOTA0MjA0MzE0WhcNMjUwOTExMjA0MzE0WjAYMRYwFAYD VQQDEw02OGI5ZjllMi0wY2ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsHf3x/lf+Lho2jgMoKJo5rau7klFHo5Q3kEUujy9HAAFvIodGnJkVO8NvedB 8NrbCq6efnEWC+P+WZUoveoUa3S/w38PZwyW8S9vH2OHux2+CgGzVUNmZVUPWGFa WU1bOiObzAIJ2Qdt18wlkEi1oBVFgWzfBYW3ah3/Esa2RbRofvSS5qyi3G9fQM2a adHlGTjz5Z2aJSkwBmvcRy2qpy/67cWbwtJJTbeibsYh9XbcRp+7iuSvXj2mZM+v MV44Xy/e6mfPiphTDDXqvCIit6fk+9JTPCn2dvWk6Mz//LH59pQPqFSsMFRUxB09 bHKrn4Jut/M3febmYJQKshDCVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLK8oD70 I9LKxJ8x29npAJ8hhK8lMB8GA1UdIwQYMBaAFLvkn8tB9QJqNb9sk7kf3/PIjHNu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUE1Ni82ODQ2NjdGNEJG M0ExMUVBOTRBRTRFN0NDNEY5QUUwMi91LVNmeTBIMUFtbzF2MnlUdVJfZjg4aU1j MjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UtU2Z5MEgxQW1vMXYyeVR1Ul9mODhpTWMyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUE1Ni82ODQ2NjdGNEJGM0ExMUVBOTRBRTRFN0NDNEY5QUUwMi91LVNmeTBIMUFt bzF2MnlUdVJfZjg4aU1jMjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCe83LL0MrJJOX0RHrAyN50JXwrCziOw6A3Mx5HgvnUzLXU9K+JZ0ox vbbeI7DNbWpehujx/IbKQUG3s/hgsM+rXVc9+faWXcdWGU63AZiPSeevuDEax7fq V6n/QX3zCxWmWJjnVCzsDVkAquVXGEKxwX0he8Xr5QkAffkZkVT6ArOnY4/T6Sy2 QPsfZ0pBGtuXtW2VP8puSARWdZwmFj6HtA6C3CnsmCRMKYu6idCSkKwehYRf9biD Ksg5GzZbnxUSI6UMxI9jZtSaTtWdgUz0EfiTDyfTPi1mf4yfosxN8MmWmS+SOEcT MvY3NfpFm1J78ZJenIS8hCYjLLNYQ8EP -----END CERTIFICATE-----Generated at Sat Sep 6 15:15:10 2025 by rpki-client