$ rpki-client -vvf rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft File: RMCz5V6PTVgxhgXnITScArKJwv0.mft (raw, json) Hash identifier: UuzsSQphBDI1bJDbdr/evHUoOKj/SskZ6BDxUH/rBHI= Subject key identifier: 1B:7A:DB:FF:34:DE:56:0B:57:92:F8:3D:AA:5A:09:3F:1B:60:1D:98 Authority key identifier: 44:C0:B3:E5:5E:8F:4D:58:31:86:05:E7:21:34:9C:02:B2:89:C2:FD Certificate issuer: /CN=A91167F7/serialNumber=44C0B3E55E8F4D58318605E721349C02B289C2FD Certificate serial: 0705 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMCz5V6PTVgxhgXnITScArKJwv0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft Manifest number: 0700 Signing time: Fri 22 Aug 2025 22:02:15 +0000 Manifest this update: Fri 22 Aug 2025 22:02:14 +0000 Manifest next update: Fri 29 Aug 2025 22:02:14 +0000 Files and hashes: 1: RMCz5V6PTVgxhgXnITScArKJwv0.crl (hash: Txr+fgabtEFT+pUFLodbnReW0ytNqFZTIxBzI8kd/kI=) 2: 980A0D7254B511EBAC30E864C4F9AE02.roa (hash: PrgqmGPVCZutr73KuPF9z7k4L5rKkcCQ9HWUA608bqU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.crl rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMCz5V6PTVgxhgXnITScArKJwv0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1797 (0x705) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91167F7, serialNumber=44C0B3E55E8F4D58318605E721349C02B289C2FD Validity Not Before: Aug 22 22:02:14 2025 GMT Not After : Aug 29 22:02:14 2025 GMT Subject: CN=68a8e8e7-79a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a8:2e:cd:9e:11:e8:87:15:ae:70:18:d5:39: 8d:c4:ae:e9:df:bb:33:4c:90:6b:86:97:4c:10:73: 5d:a9:ad:cc:7f:01:ab:34:69:b0:90:c9:22:d1:4d: 26:48:9f:36:6b:13:02:7e:98:4f:22:12:41:83:6a: 2b:1b:88:5c:28:14:74:73:a4:b9:a5:c4:68:9c:9b: 61:72:b8:70:41:bf:94:e6:76:84:56:ea:04:ca:72: da:24:7d:5e:16:16:f1:d6:46:4c:15:23:e1:af:dd: 4b:b7:e5:11:12:2a:a8:8c:a5:08:83:9f:77:96:b3: 0d:c7:1a:81:8e:72:c1:82:b7:9f:f0:bf:a1:30:c8: b4:5a:11:b0:f0:9f:1a:e0:a2:54:98:1c:b7:fb:fb: a7:b9:64:8b:b5:a8:c8:b5:62:ca:ee:a0:d8:b0:0f: c6:a6:59:db:a0:45:65:16:69:0d:c9:05:85:dc:4a: c5:d5:30:6a:15:6e:81:71:f2:27:da:7c:ce:36:d7: 54:78:bf:b2:fd:a2:f0:9a:d7:17:5d:65:e3:00:b2: 78:e0:72:58:7d:ba:25:61:aa:73:d4:65:9f:c6:ca: 10:87:f3:9d:83:75:6f:bd:3f:32:01:45:14:41:c3: 22:2c:73:7d:7f:fe:af:cd:0b:0e:4e:61:5b:3f:4c: 36:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:7A:DB:FF:34:DE:56:0B:57:92:F8:3D:AA:5A:09:3F:1B:60:1D:98 X509v3 Authority Key Identifier: keyid:44:C0:B3:E5:5E:8F:4D:58:31:86:05:E7:21:34:9C:02:B2:89:C2:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMCz5V6PTVgxhgXnITScArKJwv0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:a8:62:88:c5:42:d4:a8:70:42:fb:44:3d:11:32:16:34:19: 6a:87:07:37:3f:d2:cb:8c:74:37:68:b3:c0:06:c9:13:5c:34: b1:ba:87:a0:54:02:7e:93:52:b3:12:71:68:3b:f2:6f:9e:6f: ca:04:27:9b:8a:1b:c2:77:2a:5c:75:15:f6:06:10:40:66:b3: f0:99:0c:2a:3a:41:7b:08:15:fc:96:ba:37:8c:23:91:7f:9e: ed:53:fd:64:10:b5:26:b1:c0:4c:aa:b4:69:10:10:23:99:e1: da:c6:59:95:72:d8:50:3d:fb:7f:40:b9:08:a9:51:14:a7:a1: 9f:0c:f1:50:10:66:46:14:df:cc:ee:2c:e6:5a:69:ca:df:40: dc:c6:6c:17:0a:63:05:8c:61:18:98:ab:cf:82:4b:1f:9d:f4: 0e:5b:11:1f:0c:3b:8b:b9:d6:9a:9d:36:cd:09:12:45:e3:ab: c4:c3:9d:73:e6:aa:a2:55:51:45:07:6f:55:58:a2:d2:8d:88: 28:49:1b:0a:7c:0a:35:c8:8d:70:a5:bc:f5:ff:db:75:01:68: 8d:69:fb:8e:3a:35:ee:dc:1b:db:fd:f6:78:36:a6:d6:b8:ce: 48:97:c0:6e:1a:c4:77:42:5d:80:1e:85:31:c1:4d:67:fd:5f: b2:72:b7:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY3RjcxMTAvBgNVBAUTKDQ0QzBCM0U1NUU4RjRENTgzMTg2MDVFNzIxMzQ5QzAy QjI4OUMyRkQwHhcNMjUwODIyMjIwMjE0WhcNMjUwODI5MjIwMjE0WjAYMRYwFAYD VQQDEw02OGE4ZThlNy03OWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApaguzZ4R6IcVrnAY1TmNxK7p37szTJBrhpdMEHNdqa3MfwGrNGmwkMki0U0m SJ82axMCfphPIhJBg2orG4hcKBR0c6S5pcRonJthcrhwQb+U5naEVuoEynLaJH1e Fhbx1kZMFSPhr91Lt+UREiqojKUIg593lrMNxxqBjnLBgref8L+hMMi0WhGw8J8a 4KJUmBy3+/unuWSLtajItWLK7qDYsA/GplnboEVlFmkNyQWF3ErF1TBqFW6BcfIn 2nzONtdUeL+y/aLwmtcXXWXjALJ44HJYfbolYapz1GWfxsoQh/Odg3VvvT8yAUUU QcMiLHN9f/6vzQsOTmFbP0w2IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBt62/80 3lYLV5L4PapaCT8bYB2YMB8GA1UdIwQYMBaAFETAs+Vej01YMYYF5yE0nAKyicL9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjdGNy9CRkQzRUIxQTU0 MTYxMUVCQTRENTY4NjNDNEY5QUUwMi9STUN6NVY2UFRWZ3hoZ1huSVRTY0FyS0p3 djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JNQ3o1VjZQVFZneGhnWG5JVFNjQXJLSnd2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjdGNy9CRkQzRUIxQTU0MTYxMUVCQTRENTY4NjNDNEY5QUUwMi9STUN6NVY2UFRW Z3hoZ1huSVRTY0FyS0p3djAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGqGKIxULUqHBC+0Q9ETIWNBlqhwc3P9LLjHQ3aLPABskTXDSxuoeg VAJ+k1KzEnFoO/Jvnm/KBCebihvCdypcdRX2BhBAZrPwmQwqOkF7CBX8lro3jCOR f57tU/1kELUmscBMqrRpEBAjmeHaxlmVcthQPft/QLkIqVEUp6GfDPFQEGZGFN/M 7izmWmnK30DcxmwXCmMFjGEYmKvPgksfnfQOWxEfDDuLudaanTbNCRJF46vEw51z 5qqiVVFFB29VWKLSjYgoSRsKfAo1yI1wpbz1/9t1AWiNafuOOjXu3Bvb/fZ4NqbW uM5Il8BuGsR3Ql2AHoUxwU1n/V+ycreN -----END CERTIFICATE-----Generated at Sat Aug 23 18:38:49 2025 by rpki-client