$ rpki-client -vvf rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft File: v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft (raw, json) Hash identifier: BEZCAHkvJCUL2XT9t/SDYEjcbR2kQiKMvmZLHD1qYeU= Subject key identifier: D7:B1:04:8D:93:94:9B:CD:E2:78:06:A9:E1:8D:B7:0A:F2:F0:1A:CA Authority key identifier: BF:74:E7:E6:14:D4:B2:2E:4B:7F:E4:0B:6B:EC:EF:D1:70:5A:CF:C1 Certificate issuer: /CN=A91324D4/serialNumber=BF74E7E614D4B22E4B7FE40B6BECEFD1705ACFC1 Certificate serial: 0661 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft Manifest number: 0645 Signing time: Fri 22 Aug 2025 22:54:55 +0000 Manifest this update: Fri 22 Aug 2025 22:54:55 +0000 Manifest next update: Fri 29 Aug 2025 22:54:55 +0000 Files and hashes: 1: v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl (hash: jjhyl9Hm3+aW3xm5v86VJaPVji6hcAWpUSPNsbWIP9M=) 2: DD643EBCE00C11ED8C71C709C4F9AE02.roa (hash: tNDEmIxy5H25Y3zlO9rXFUC8hfA45BbpRsPK4rM8u7s=) 3: 8A88CCDC667911EE9D7DA167C4F9AE02.roa (hash: 9S57tdyd45wHLsInsTnI/GZly1K4hEDfcQJTNYuSOFQ=) 4: 236C6906A73F11EBA1751E33C4F9AE02.roa (hash: JyPetDHabfuANEcar/HU38MZvBtPYhC6A1gULHuakq8=) 5: 78345D00E01211ED8766DC5CC4F9AE02.roa (hash: CGANdjpj39CJWyCZVGb4EKEpCCBaXu9btf2XqDDOLY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:54:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1633 (0x661) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91324D4, serialNumber=BF74E7E614D4B22E4B7FE40B6BECEFD1705ACFC1 Validity Not Before: Aug 22 22:54:55 2025 GMT Not After : Aug 29 22:54:55 2025 GMT Subject: CN=68a8f53f-ff9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ea:5f:ad:eb:da:38:ae:99:c9:62:10:59:5c: 8f:9a:33:35:01:05:9f:f5:1c:59:a9:40:23:dd:fd: 1f:98:0f:6c:89:4a:ee:3d:d0:93:33:5f:41:b3:42: 55:f3:73:c5:ab:00:ac:40:21:a7:09:9b:27:4b:63: 60:bd:01:f5:4a:ac:31:fa:73:71:7c:52:a4:c9:e7: 1b:8b:be:f0:e9:b2:91:ab:71:6f:0b:b6:e9:02:bb: c6:ce:7d:41:96:63:21:b7:8e:7d:49:d4:3e:55:07: 57:60:61:63:55:ed:b7:cb:20:dd:61:ec:8e:fc:bb: 64:24:73:fd:30:c3:d9:64:e8:fb:bb:22:20:98:5e: ec:ec:98:fa:c0:6f:58:49:a9:28:6f:14:f8:5a:74: 8b:4b:54:9c:98:d8:bf:ef:04:b9:7f:96:aa:0e:d4: 39:57:0b:0e:bf:7e:49:f9:5f:f5:18:39:c0:c7:cd: 76:53:99:6a:a5:b7:4b:9c:fb:32:e1:00:99:93:a9: 89:df:a2:87:1c:eb:ea:2a:3a:41:88:46:63:41:05: 3c:e4:76:55:f0:c5:d9:fe:48:35:dd:c5:52:3b:1a: aa:b7:74:ad:34:cb:48:fd:6b:29:17:12:c4:f2:df: 3b:d6:a3:40:9b:a4:1a:89:02:f2:1d:d2:0f:ce:d2: 0a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:B1:04:8D:93:94:9B:CD:E2:78:06:A9:E1:8D:B7:0A:F2:F0:1A:CA X509v3 Authority Key Identifier: keyid:BF:74:E7:E6:14:D4:B2:2E:4B:7F:E4:0B:6B:EC:EF:D1:70:5A:CF:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:d4:aa:d5:62:9e:f5:f5:73:90:ef:f9:b3:45:54:46:6d:e4: ae:d9:d4:0d:13:0c:f5:90:e4:30:ca:b6:8f:92:19:4e:94:e0: cd:b6:70:53:ba:f4:31:89:14:33:fc:54:5c:e0:2a:5f:5f:70: fa:d0:d5:c5:cf:57:c4:c8:69:a4:69:f3:ac:ed:4c:ba:d2:58: 27:2c:f6:44:b8:17:01:66:88:4d:6b:12:b1:a3:96:d5:5a:e0: 44:25:04:d4:3c:f8:96:39:9c:f3:4a:20:88:d0:a3:ae:94:07: ae:3b:4c:c0:bf:b0:15:ca:ee:d4:40:ab:66:ca:cc:a4:b7:86: 78:9b:35:df:27:82:54:88:5e:49:59:7d:26:a3:7f:ab:4d:cf: 76:00:e2:22:50:8d:59:ee:1c:48:f9:72:2e:71:ee:60:47:7b: ef:01:69:d7:48:75:72:89:10:71:0a:b2:23:eb:4f:49:e8:bd: c0:8e:15:a3:1a:27:6f:38:8f:b4:6d:69:9c:b7:08:5d:5c:f8: 5b:66:37:18:be:3e:50:9b:6b:4c:e5:2c:94:4f:24:71:96:6a: 24:99:d9:1c:14:f7:51:51:60:0e:50:21:9f:0c:6a:ca:58:93: 42:35:bd:4b:1e:dd:66:bc:1c:22:3c:91:f9:98:3f:69:a9:85: 8d:d9:bd:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI0RDQxMTAvBgNVBAUTKEJGNzRFN0U2MTRENEIyMkU0QjdGRTQwQjZCRUNFRkQx NzA1QUNGQzEwHhcNMjUwODIyMjI1NDU1WhcNMjUwODI5MjI1NDU1WjAYMRYwFAYD VQQDEw02OGE4ZjUzZi1mZjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqOpfrevaOK6ZyWIQWVyPmjM1AQWf9RxZqUAj3f0fmA9siUruPdCTM19Bs0JV 83PFqwCsQCGnCZsnS2NgvQH1Sqwx+nNxfFKkyecbi77w6bKRq3FvC7bpArvGzn1B lmMht459SdQ+VQdXYGFjVe23yyDdYeyO/LtkJHP9MMPZZOj7uyIgmF7s7Jj6wG9Y SakobxT4WnSLS1ScmNi/7wS5f5aqDtQ5VwsOv35J+V/1GDnAx812U5lqpbdLnPsy 4QCZk6mJ36KHHOvqKjpBiEZjQQU85HZV8MXZ/kg13cVSOxqqt3StNMtI/WspFxLE 8t871qNAm6QaiQLyHdIPztIKkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNexBI2T lJvN4ngGqeGNtwry8BrKMB8GA1UdIwQYMBaAFL905+YU1LIuS3/kC2vs79FwWs/B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjRENC8xQTZFNzUxQ0E3 MUYxMUVCODQ4QUYwMzBDNEY5QUUwMi92M1RuNWhUVXNpNUxmLVFMYS16djBYQmF6 OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YzVG41aFRVc2k1TGYtUUxhLXp2MFhCYXo4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjRENC8xQTZFNzUxQ0E3MUYxMUVCODQ4QUYwMzBDNEY5QUUwMi92M1RuNWhUVXNp NUxmLVFMYS16djBYQmF6OEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBi1KrVYp719XOQ7/mzRVRGbeSu2dQNEwz1kOQwyraPkhlOlODNtnBT uvQxiRQz/FRc4CpfX3D60NXFz1fEyGmkafOs7Uy60lgnLPZEuBcBZohNaxKxo5bV WuBEJQTUPPiWOZzzSiCI0KOulAeuO0zAv7AVyu7UQKtmysykt4Z4mzXfJ4JUiF5J WX0mo3+rTc92AOIiUI1Z7hxI+XIuce5gR3vvAWnXSHVyiRBxCrIj609J6L3AjhWj GidvOI+0bWmctwhdXPhbZjcYvj5Qm2tM5SyUTyRxlmokmdkcFPdRUWAOUCGfDGrK WJNCNb1LHt1mvBwiPJH5mD9pqYWN2b27 -----END CERTIFICATE-----Generated at Sun Aug 24 00:03:49 2025 by rpki-client