$ rpki-client -vvf rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft File: L996avkE3yzUfmXMwMnFzL8jmOU.mft (raw, json) Hash identifier: GMGR1W0m3u91zwPAwB96eBs4o7HULEt7AW/+ctAeRNk= Subject key identifier: 7D:B6:C3:01:46:EC:F0:F9:A9:FB:48:EF:54:2B:64:EA:0F:2F:1C:E9 Authority key identifier: 2F:DF:7A:6A:F9:04:DF:2C:D4:7E:65:CC:C0:C9:C5:CC:BF:23:98:E5 Certificate issuer: /CN=A91273D6/serialNumber=2FDF7A6AF904DF2CD47E65CCC0C9C5CCBF2398E5 Certificate serial: 07D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L996avkE3yzUfmXMwMnFzL8jmOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft Manifest number: 07CE Signing time: Fri 22 Aug 2025 21:17:26 +0000 Manifest this update: Fri 22 Aug 2025 21:17:25 +0000 Manifest next update: Fri 29 Aug 2025 21:17:25 +0000 Files and hashes: 1: L996avkE3yzUfmXMwMnFzL8jmOU.crl (hash: /91a2IQMf4AaXegiFpaa+9kOkJjK982m2p1gIoIftqk=) 2: C1B1AEC6051111EBBA2CAF5CC4F9AE02.roa (hash: nrFCEo7GcK2eALmFz5c2iHIjlVAiVLpJmfCmZn/cv3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.crl rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L996avkE3yzUfmXMwMnFzL8jmOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:17:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2004 (0x7d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91273D6, serialNumber=2FDF7A6AF904DF2CD47E65CCC0C9C5CCBF2398E5 Validity Not Before: Aug 22 21:17:25 2025 GMT Not After : Aug 29 21:17:25 2025 GMT Subject: CN=68a8de65-e027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:70:d2:46:95:0a:ce:be:85:a3:1b:a6:24:06: ca:9a:5d:5b:03:ac:df:e8:b0:20:b8:b5:10:09:30: fe:ee:eb:1e:cc:b9:97:fc:12:c5:37:b6:14:7c:e3: 5f:b6:08:4a:93:87:e8:f8:bb:b8:f2:02:75:cb:dd: 8f:de:7e:47:8d:be:cd:ab:df:ea:e2:91:67:fa:c0: a9:64:ec:d6:5e:da:58:29:92:3d:b5:95:4c:9d:e3: 82:b7:e6:fc:c0:11:96:c8:16:d0:15:e0:06:7e:f9: 6e:09:ed:fe:59:99:af:c1:f0:4c:7a:45:9f:0d:e3: bd:1e:87:ba:e3:29:20:8b:56:c6:c8:2c:42:33:a2: 94:69:44:d0:62:c2:ff:65:07:30:c3:7c:90:47:c2: cf:56:f7:b7:0d:da:63:8f:05:f2:d0:e5:a0:a5:3c: ef:65:70:07:63:33:0f:39:af:6f:57:9f:e7:f0:c1: 1f:21:b4:54:40:41:ba:5c:4b:54:2a:86:c1:1f:a7: 39:7f:e5:29:22:08:da:e2:fa:35:b3:7a:24:b8:d9: bc:2c:4d:27:b2:b5:8e:5e:f0:db:ff:00:13:da:e0: 8f:23:9d:ce:d8:2a:56:62:c4:26:02:04:e1:e2:28: 53:40:3d:a8:32:9d:71:fb:d4:e3:c2:89:b1:c0:1d: 38:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:B6:C3:01:46:EC:F0:F9:A9:FB:48:EF:54:2B:64:EA:0F:2F:1C:E9 X509v3 Authority Key Identifier: keyid:2F:DF:7A:6A:F9:04:DF:2C:D4:7E:65:CC:C0:C9:C5:CC:BF:23:98:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L996avkE3yzUfmXMwMnFzL8jmOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:b9:51:c4:c9:30:ba:44:b3:40:74:1e:55:3e:88:3b:87:1f: 06:b5:c4:34:c7:9e:f9:48:84:18:16:31:46:69:58:2c:b3:13: 7f:65:16:57:ec:f7:28:11:d2:89:d3:fe:cc:4a:9f:95:85:26: 4f:11:69:24:bf:3a:e9:d4:1f:8c:7b:62:39:87:ac:12:2d:1d: 2f:4c:47:a5:a7:b1:3d:1b:69:30:d8:b4:da:96:85:6c:67:4f: 6f:93:d9:c3:c0:8d:c3:bf:48:ad:96:9e:72:b7:8a:a0:00:d4: 37:27:92:58:82:44:01:7f:50:18:c3:d0:64:f0:1d:de:4a:35: 36:27:bd:25:c4:03:49:c9:a8:dc:21:8c:47:a5:e6:eb:32:19: 70:c5:56:3a:c9:17:1b:1b:39:93:45:62:4e:f6:9b:f3:61:9c: 04:44:f5:6e:d5:43:97:01:21:3e:6a:ae:42:b2:30:c0:29:45: 3d:3d:53:d4:79:56:59:47:6c:e9:1b:cf:3d:eb:2b:3f:78:4a: 54:d0:f7:73:9e:c9:d5:06:0b:eb:d9:94:6c:f9:00:66:a5:07: 26:7a:96:ee:dc:44:3b:59:40:54:63:ad:26:6b:c7:69:23:2c: eb:e2:d8:6c:c0:ae:06:6c:14:89:35:f5:fa:0d:2a:5e:a9:32: 04:7f:4c:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjczRDYxMTAvBgNVBAUTKDJGREY3QTZBRjkwNERGMkNENDdFNjVDQ0MwQzlDNUND QkYyMzk4RTUwHhcNMjUwODIyMjExNzI1WhcNMjUwODI5MjExNzI1WjAYMRYwFAYD VQQDEw02OGE4ZGU2NS1lMDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoXDSRpUKzr6FoxumJAbKml1bA6zf6LAguLUQCTD+7usezLmX/BLFN7YUfONf tghKk4fo+Lu48gJ1y92P3n5Hjb7Nq9/q4pFn+sCpZOzWXtpYKZI9tZVMneOCt+b8 wBGWyBbQFeAGfvluCe3+WZmvwfBMekWfDeO9Hoe64ykgi1bGyCxCM6KUaUTQYsL/ ZQcww3yQR8LPVve3DdpjjwXy0OWgpTzvZXAHYzMPOa9vV5/n8MEfIbRUQEG6XEtU KobBH6c5f+UpIgja4vo1s3okuNm8LE0nsrWOXvDb/wAT2uCPI53O2CpWYsQmAgTh 4ihTQD2oMp1x+9TjwomxwB04rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH22wwFG 7PD5qftI71QrZOoPLxzpMB8GA1UdIwQYMBaAFC/femr5BN8s1H5lzMDJxcy/I5jl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzNENi8xMzlFMTI0NDA1 MTAxMUVCODBFMzE3NUJDNEY5QUUwMi9MOTk2YXZrRTN5elVmbVhNd01uRnpMOGpt T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w5OTZhdmtFM3l6VWZtWE13TW5Gekw4am1PVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzNENi8xMzlFMTI0NDA1MTAxMUVCODBFMzE3NUJDNEY5QUUwMi9MOTk2YXZrRTN5 elVmbVhNd01uRnpMOGptT1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbuVHEyTC6RLNAdB5VPog7hx8GtcQ0x575SIQYFjFGaVgssxN/ZRZX 7PcoEdKJ0/7MSp+VhSZPEWkkvzrp1B+Me2I5h6wSLR0vTEelp7E9G2kw2LTaloVs Z09vk9nDwI3Dv0itlp5yt4qgANQ3J5JYgkQBf1AYw9Bk8B3eSjU2J70lxANJyajc IYxHpebrMhlwxVY6yRcbGzmTRWJO9pvzYZwERPVu1UOXASE+aq5CsjDAKUU9PVPU eVZZR2zpG8896ys/eEpU0PdznsnVBgvr2ZRs+QBmpQcmepbu3EQ7WUBUY60ma8dp Iyzr4thswK4GbBSJNfX6DSpeqTIEf0wu -----END CERTIFICATE-----Generated at Sat Aug 23 20:43:15 2025 by rpki-client