$ rpki-client -vvf rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft File: m8FpAIAncr5ikmDEqu1fP-9-s-c.mft (raw, json) Hash identifier: uUEtcDvFHqeupdybuja/bjr0mhv9NCg2TfKBQB40F2k= Subject key identifier: 56:E4:9F:09:F0:7A:A3:B4:80:02:66:DE:D0:5D:9F:24:B3:36:1A:B0 Authority key identifier: 9B:C1:69:00:80:27:72:BE:62:92:60:C4:AA:ED:5F:3F:EF:7E:B3:E7 Certificate issuer: /CN=A91F91EB/serialNumber=9BC16900802772BE629260C4AAED5F3FEF7EB3E7 Certificate serial: 0CF7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8FpAIAncr5ikmDEqu1fP-9-s-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft Manifest number: 0CD4 Signing time: Mon 08 Sep 2025 18:12:40 +0000 Manifest this update: Mon 08 Sep 2025 18:12:40 +0000 Manifest next update: Mon 15 Sep 2025 18:12:40 +0000 Files and hashes: 1: m8FpAIAncr5ikmDEqu1fP-9-s-c.crl (hash: Z8B14Tt3e9OQ1WgJWtk8mSI6c0+H6qsl/WWphf/FqyM=) 2: 827D7766AACC11EA8113F532C4F9AE02.roa (hash: oguEqhYGf6Whv8PqzIUzLfsgAvX4wE5CZ9/lAxwLLvs=) 3: 81CA43EEAD7811EB905E2C41C4F9AE02.roa (hash: twcj5cD600ozwl+LH65FC7h60q+thDGwgx4YQo1a3TQ=) 4: 7F4CB00EAAE811EA8412810FC4F9AE02.roa (hash: C+pA9vRBNRgX2w4BOkt7QtiabsJexJBu+hnduYyIgLA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.crl rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8FpAIAncr5ikmDEqu1fP-9-s-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 18:12:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3319 (0xcf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F91EB, serialNumber=9BC16900802772BE629260C4AAED5F3FEF7EB3E7 Validity Not Before: Sep 8 18:12:40 2025 GMT Not After : Sep 15 18:12:40 2025 GMT Subject: CN=68bf1c98-e339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f7:24:95:e6:10:60:5d:7f:22:ce:43:97:1e: 45:09:4d:a1:88:d6:2b:0f:ef:d9:76:fd:d7:e5:67: dd:66:3b:7a:c3:b6:db:19:18:8c:3c:27:7f:f1:c2: b7:46:33:97:e8:08:7c:b6:5a:73:a4:15:18:fc:aa: db:77:8d:35:da:04:7b:c7:2c:c4:3a:55:f4:50:8f: 2f:89:de:95:99:c9:9c:96:b0:b2:d0:99:65:38:d8: 9c:28:47:0e:9a:ab:b3:3b:b2:ad:ad:40:e2:16:5c: 9e:a7:c3:d5:18:8f:26:dc:e2:ea:2c:a0:ec:ee:2a: 9b:cf:b4:77:56:a6:e7:a3:3c:e4:3a:59:85:9c:c1: f7:6c:9b:0f:bf:ee:2c:11:76:0b:97:02:34:b2:ad: fe:da:60:57:2e:4f:90:af:6d:9c:c9:4c:5f:36:9f: e3:ac:04:5c:c4:2d:f4:ce:f0:32:ba:bb:d0:fe:83: 87:e9:1c:98:06:40:97:ab:ef:8c:03:e8:f1:eb:97: a1:5a:98:78:70:78:7f:ba:af:26:ef:7e:b9:ec:fb: 78:ca:d1:fb:db:0b:cb:d7:78:40:60:42:ab:49:ca: 18:2b:2e:81:3f:46:62:32:f5:5e:68:4f:24:87:76: 18:e0:d8:23:dd:8d:ba:7c:61:55:8b:d1:a4:36:19: c6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:E4:9F:09:F0:7A:A3:B4:80:02:66:DE:D0:5D:9F:24:B3:36:1A:B0 X509v3 Authority Key Identifier: keyid:9B:C1:69:00:80:27:72:BE:62:92:60:C4:AA:ED:5F:3F:EF:7E:B3:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8FpAIAncr5ikmDEqu1fP-9-s-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:34:81:54:9b:fa:c4:55:b9:2d:46:b2:a3:b4:2d:66:10:4c: f4:e7:6d:07:c1:6b:c6:65:b5:2c:bb:0a:aa:24:6c:0c:5f:2b: 2b:76:80:b3:63:ed:09:f7:ac:80:c5:42:d3:17:8b:40:98:f4: 90:47:08:e4:46:47:be:0d:89:a9:ae:ac:64:ba:11:94:dd:8a: 47:1b:4f:f7:9a:8c:d0:8e:63:63:b4:aa:4d:9c:53:d8:80:47: 3d:53:69:b5:4f:25:cc:86:4c:eb:cf:e8:84:b7:f5:e0:7b:9a: 87:5a:cc:f2:3c:89:8a:24:4e:9e:41:d9:f7:82:57:0d:13:b7: ac:9f:c7:fd:d3:92:03:05:8c:21:7e:99:f3:ed:80:ee:00:9d: 42:f5:f3:6e:28:8b:17:18:25:21:72:c2:60:ca:fc:ce:ae:2b: 12:18:99:30:01:fb:90:58:f3:c3:b2:c2:e2:78:14:9f:13:02: 13:bd:12:08:bb:b0:b3:b9:cc:f6:02:96:1a:82:23:26:e8:b0: 20:a4:ff:84:8f:cf:ac:7f:92:9a:b0:dc:f4:ab:1d:ae:7f:6c: 97:70:42:bb:9b:6b:43:f1:5f:7d:bb:1d:59:67:e3:8e:54:7b: 06:7f:7d:bb:0c:cf:c5:e9:a9:07:c6:54:ed:73:4a:44:ad:17: 91:47:2a:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjkxRUIxMTAvBgNVBAUTKDlCQzE2OTAwODAyNzcyQkU2MjkyNjBDNEFBRUQ1RjNG RUY3RUIzRTcwHhcNMjUwOTA4MTgxMjQwWhcNMjUwOTE1MTgxMjQwWjAYMRYwFAYD VQQDEw02OGJmMWM5OC1lMzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzfckleYQYF1/Is5Dlx5FCU2hiNYrD+/Zdv3X5WfdZjt6w7bbGRiMPCd/8cK3 RjOX6Ah8tlpzpBUY/Krbd4012gR7xyzEOlX0UI8vid6VmcmclrCy0JllONicKEcO mquzO7KtrUDiFlyep8PVGI8m3OLqLKDs7iqbz7R3VqbnozzkOlmFnMH3bJsPv+4s EXYLlwI0sq3+2mBXLk+Qr22cyUxfNp/jrARcxC30zvAyurvQ/oOH6RyYBkCXq++M A+jx65ehWph4cHh/uq8m73657Pt4ytH72wvL13hAYEKrScoYKy6BP0ZiMvVeaE8k h3YY4Ngj3Y26fGFVi9GkNhnGAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFbknwnw eqO0gAJm3tBdnySzNhqwMB8GA1UdIwQYMBaAFJvBaQCAJ3K+YpJgxKrtXz/vfrPn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTFFQi81MEVGRTA3NEY3 MDUxMUU5QURCQTQ1MUZDNEY5QUUwMi9tOEZwQUlBbmNyNWlrbURFcXUxZlAtOS1z LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL204RnBBSUFuY3I1aWttREVxdTFmUC05LXMtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTFFQi81MEVGRTA3NEY3MDUxMUU5QURCQTQ1MUZDNEY5QUUwMi9tOEZwQUlBbmNy NWlrbURFcXUxZlAtOS1zLWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkNIFUm/rEVbktRrKjtC1mEEz0520HwWvGZbUsuwqqJGwMXysrdoCz Y+0J96yAxULTF4tAmPSQRwjkRke+DYmprqxkuhGU3YpHG0/3mozQjmNjtKpNnFPY gEc9U2m1TyXMhkzrz+iEt/Xge5qHWszyPImKJE6eQdn3glcNE7esn8f905IDBYwh fpnz7YDuAJ1C9fNuKIsXGCUhcsJgyvzOrisSGJkwAfuQWPPDssLieBSfEwITvRII u7Czucz2ApYagiMm6LAgpP+Ej8+sf5KasNz0qx2uf2yXcEK7m2tD8V99ux1ZZ+OO VHsGf327DM/F6akHxlTtc0pErReRRyoK -----END CERTIFICATE-----Generated at Tue Sep 9 09:12:51 2025 by rpki-client