$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.mft File: cFWB1AyVgaJlHlMlI42zvcs6fQU.mft (raw, json) Hash identifier: ejARU/DL1do1Nuo2wynHk2oMIsLimSAHVoM3AlPKce0= Subject key identifier: 7D:5C:02:86:7F:6E:57:DA:D5:5A:4A:79:2E:99:7C:8E:1F:19:89:89 Authority key identifier: 70:55:81:D4:0C:95:81:A2:65:1E:53:25:23:8D:B3:BD:CB:3A:7D:05 Certificate issuer: /CN=A91E1D91/serialNumber=705581D40C9581A2651E5325238DB3BDCB3A7D05 Certificate serial: 03C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFWB1AyVgaJlHlMlI42zvcs6fQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.mft Manifest number: 03BD Signing time: Thu 21 Aug 2025 00:52:23 +0000 Manifest this update: Thu 21 Aug 2025 00:52:23 +0000 Manifest next update: Thu 28 Aug 2025 00:52:23 +0000 Files and hashes: 1: cFWB1AyVgaJlHlMlI42zvcs6fQU.crl (hash: q0TFf6NAhEOIurU3y7Hzp+g4DqQkUwXm66rd9OSB4cQ=) 2: 6CDC639EA04411EC8A7E5E2CC4F9AE02.roa (hash: WktAZLAHSw7QkU+hNH84sEG4OXo+/tq5XSlAqKGLv18=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.crl rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFWB1AyVgaJlHlMlI42zvcs6fQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 00:52:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 966 (0x3c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1D91, serialNumber=705581D40C9581A2651E5325238DB3BDCB3A7D05 Validity Not Before: Aug 21 00:52:23 2025 GMT Not After : Aug 28 00:52:23 2025 GMT Subject: CN=68a66dc7-e309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b5:39:6a:88:3c:9e:ed:e0:86:17:2e:d6:79: 68:54:c0:60:b8:12:b7:9c:89:6b:2d:bd:ee:34:41: bc:0e:34:c2:4a:b6:ae:24:df:65:ef:77:07:be:42: e7:56:69:b1:58:b7:71:0b:55:49:1f:0b:30:09:6f: 6f:10:b5:4f:28:e4:3f:88:19:36:29:fd:bb:61:c1: 01:79:93:44:a5:eb:35:fe:1f:a9:f9:48:2e:e4:bd: 48:11:d5:63:72:d2:2f:84:a2:e8:bf:66:2b:f0:f2: bc:e8:50:e4:d6:cc:01:25:d9:84:ff:8f:ca:70:45: de:92:24:6e:3b:87:5a:9c:4d:23:0e:ff:2a:e2:d0: d1:55:e7:eb:4c:98:4d:3d:85:a6:93:8b:61:6c:51: 93:d7:1f:a2:ea:6b:b5:28:fa:20:c0:81:f8:9f:a0: e6:1d:18:b7:c3:fc:08:54:00:c6:64:b6:d8:bf:08: e7:cc:45:60:22:77:33:8f:ad:83:1d:44:80:e2:81: e5:74:56:d6:98:a8:65:bc:ec:9c:d9:50:02:fa:b4: 24:25:f1:b1:7c:4c:5b:06:f7:57:84:8c:39:03:2d: e0:91:05:92:ac:4e:b8:80:a5:b1:fa:44:3f:4d:d3: 13:30:d2:3c:eb:2e:f3:d7:04:67:45:a9:99:9a:7d: 67:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:5C:02:86:7F:6E:57:DA:D5:5A:4A:79:2E:99:7C:8E:1F:19:89:89 X509v3 Authority Key Identifier: keyid:70:55:81:D4:0C:95:81:A2:65:1E:53:25:23:8D:B3:BD:CB:3A:7D:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFWB1AyVgaJlHlMlI42zvcs6fQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:97:85:e0:cf:69:bb:2d:9d:db:3f:e0:4c:73:92:8f:87:ac: a3:4e:21:13:f5:ca:c6:a6:9c:a8:ea:32:42:ba:5f:22:4e:c8: 47:2d:30:24:69:cf:3d:c4:d2:5c:79:56:32:e5:18:79:15:50: 8d:ab:02:1c:4b:6a:98:19:56:b5:7a:ed:95:81:94:1b:4c:38: 18:85:49:42:cd:55:7a:e3:9d:76:c2:8c:c6:b1:05:eb:bb:f5: 8b:ba:2b:b0:aa:89:8e:e6:71:fb:eb:31:2a:92:9d:73:50:1e: fc:c8:43:1a:a5:97:b8:f7:b4:1d:00:ef:0f:28:45:31:7b:f2: 53:ed:7e:a3:ce:b4:96:6d:b8:52:90:4c:3b:12:f2:63:d3:56: ad:74:1b:79:d3:48:78:7a:db:0a:70:ef:63:83:32:47:18:41: 8c:7f:b6:95:20:b3:91:95:12:95:5d:31:95:eb:14:35:7e:b6: 78:a4:41:62:ea:d1:e0:9d:1b:b4:58:30:40:0b:64:a4:bd:59: 59:89:09:ce:a1:26:12:08:7b:bc:cf:d8:0a:f7:24:e0:b3:fe: 82:e2:56:1b:18:2b:22:b1:91:b0:bd:a1:d4:5f:d7:cc:0e:20: e4:ea:a6:fa:75:6e:d4:a2:ae:a6:3b:d5:94:fb:b2:9b:eb:4b: 85:4b:c5:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFEOTExMTAvBgNVBAUTKDcwNTU4MUQ0MEM5NTgxQTI2NTFFNTMyNTIzOERCM0JE Q0IzQTdEMDUwHhcNMjUwODIxMDA1MjIzWhcNMjUwODI4MDA1MjIzWjAYMRYwFAYD VQQDEw02OGE2NmRjNy1lMzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsLU5aog8nu3ghhcu1nloVMBguBK3nIlrLb3uNEG8DjTCSrauJN9l73cHvkLn VmmxWLdxC1VJHwswCW9vELVPKOQ/iBk2Kf27YcEBeZNEpes1/h+p+Ugu5L1IEdVj ctIvhKLov2Yr8PK86FDk1swBJdmE/4/KcEXekiRuO4danE0jDv8q4tDRVefrTJhN PYWmk4thbFGT1x+i6mu1KPogwIH4n6DmHRi3w/wIVADGZLbYvwjnzEVgInczj62D HUSA4oHldFbWmKhlvOyc2VAC+rQkJfGxfExbBvdXhIw5Ay3gkQWSrE64gKWx+kQ/ TdMTMNI86y7z1wRnRamZmn1nawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH1cAoZ/ blfa1VpKeS6ZfI4fGYmJMB8GA1UdIwQYMBaAFHBVgdQMlYGiZR5TJSONs73LOn0F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUQ5MS81RDhDMTcxMkEw NDAxMUVDODQ1QUU5MjZDNEY5QUUwMi9jRldCMUF5VmdhSmxIbE1sSTQyenZjczZm UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NGV0IxQXlWZ2FKbEhsTWxJNDJ6dmNzNmZRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUQ5MS81RDhDMTcxMkEwNDAxMUVDODQ1QUU5MjZDNEY5QUUwMi9jRldCMUF5Vmdh SmxIbE1sSTQyenZjczZmUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzl4Xgz2m7LZ3bP+BMc5KPh6yjTiET9crGppyo6jJCul8iTshHLTAk ac89xNJceVYy5Rh5FVCNqwIcS2qYGVa1eu2VgZQbTDgYhUlCzVV64512wozGsQXr u/WLuiuwqomO5nH76zEqkp1zUB78yEMapZe497QdAO8PKEUxe/JT7X6jzrSWbbhS kEw7EvJj01atdBt500h4etsKcO9jgzJHGEGMf7aVILORlRKVXTGV6xQ1frZ4pEFi 6tHgnRu0WDBAC2SkvVlZiQnOoSYSCHu8z9gK9yTgs/6C4lYbGCsisZGwvaHUX9fM DiDk6qb6dW7Uoq6mO9WU+7Kb60uFS8WM -----END CERTIFICATE-----Generated at Fri Aug 22 16:33:07 2025 by rpki-client