$ rpki-client -vvf rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft File: C_K1lEw6LMq2wdErw2pa88Lc938.mft (raw, json) Hash identifier: avo3jADLfZ3KbQxLA36T54VIzDH4Pl7ZikBepxUlBTg= Subject key identifier: D3:5B:27:58:D4:77:A6:93:92:8A:72:C1:D1:0E:3B:63:6F:C8:47:65 Authority key identifier: 0B:F2:B5:94:4C:3A:2C:CA:B6:C1:D1:2B:C3:6A:5A:F3:C2:DC:F7:7F Certificate issuer: /CN=A91473F8/serialNumber=0BF2B5944C3A2CCAB6C1D12BC36A5AF3C2DCF77F Certificate serial: 0CE4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft Manifest number: 0CCF Signing time: Fri 22 Aug 2025 18:14:11 +0000 Manifest this update: Fri 22 Aug 2025 18:14:11 +0000 Manifest next update: Fri 29 Aug 2025 18:14:11 +0000 Files and hashes: 1: C_K1lEw6LMq2wdErw2pa88Lc938.crl (hash: wWEjH71PvqP5HPR2LKqXtYFCGptheKCO72JaG307dP0=) 2: F5660FBC160611ECB3912A7EC4F9AE02.roa (hash: vuIx5uN5ZZTHGHOWV+i45uzSngomzzsL58ntfcnGCEs=) 3: C981BB3CF36A11E983B1D764C4F9AE02.roa (hash: eD8TajPOjrIE4f1nFZu3J+ZWCoHsnqirX9VK+G/Tflw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.crl rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:14:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3300 (0xce4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91473F8, serialNumber=0BF2B5944C3A2CCAB6C1D12BC36A5AF3C2DCF77F Validity Not Before: Aug 22 18:14:11 2025 GMT Not After : Aug 29 18:14:11 2025 GMT Subject: CN=68a8b373-263b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e1:08:7b:79:6d:78:7d:d7:4b:d6:13:bf:67: 5e:f1:f3:47:fb:a4:53:1b:ab:5f:f3:e9:ce:7b:18: 08:fb:39:71:aa:e6:3e:0f:b1:f1:1d:da:68:2a:38: 11:d6:0d:fc:53:92:40:f5:d0:0f:ae:69:68:fa:bf: c8:af:ba:51:1e:cd:00:49:79:52:67:53:6c:56:ac: 4b:87:52:2f:96:47:f7:4a:60:84:de:a1:0d:72:0d: 79:df:65:08:7a:71:c2:47:78:f0:68:d7:d7:b5:51: ea:54:2a:b1:cb:6f:2c:7c:62:0d:f7:8c:58:0d:68: f3:2f:0e:b8:24:6d:a8:87:5e:e9:1a:69:ad:61:4e: fb:b1:35:73:40:ec:70:86:e8:a9:7e:e2:aa:0b:6b: ac:a3:a2:8d:73:8e:b0:93:ae:3d:a3:52:d1:9c:9d: 1b:cf:8d:9e:a3:f7:5d:84:72:97:e0:be:95:94:e6: 4b:e0:2b:0d:aa:0f:0b:19:5d:68:b7:60:8d:df:70: 20:dc:be:56:34:19:6b:84:cb:26:5f:0a:ed:7b:48: 3e:6a:9f:a6:78:21:36:3f:06:dc:c3:51:82:26:c2: 48:d0:a7:74:44:aa:c1:fd:25:be:d0:89:8a:e6:7a: a4:e0:7a:d5:c3:19:d3:54:8b:6b:09:53:17:db:80: ef:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:5B:27:58:D4:77:A6:93:92:8A:72:C1:D1:0E:3B:63:6F:C8:47:65 X509v3 Authority Key Identifier: keyid:0B:F2:B5:94:4C:3A:2C:CA:B6:C1:D1:2B:C3:6A:5A:F3:C2:DC:F7:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:3f:55:bb:1d:54:9a:f2:3a:41:af:57:a1:82:a8:d5:28:f8: 6c:4d:59:d2:85:85:99:ed:6f:3f:60:a8:71:21:dd:e2:cf:49: c1:a7:b4:2d:bf:cb:42:81:97:b6:21:be:b9:65:8b:99:0d:0e: 08:d2:31:31:97:99:97:2f:11:9c:6a:53:ce:93:69:f7:06:8f: d7:c9:59:39:c3:d8:19:6e:98:65:a8:cd:ae:47:c4:f8:ff:b9: 14:ee:7d:ea:24:41:cb:ed:57:ad:00:f5:9e:ce:69:12:81:c5: 5e:30:a2:05:74:3f:df:6d:05:4a:69:7f:bd:95:d0:cb:65:b7: 3e:19:09:0b:0f:b8:89:11:70:ab:f2:cd:be:61:17:8a:b8:2c: c0:a5:7f:3c:5f:63:bc:2d:fc:3e:7f:8b:46:bc:c8:f6:1b:12: 04:a6:af:06:75:9e:69:7d:08:fd:9b:a8:32:33:c5:0c:72:5e: 1a:2f:01:6d:e8:a1:f8:6b:3d:08:e1:8c:d9:63:4c:e1:44:35: 8a:ba:55:3b:3b:5c:2a:dc:95:f4:b5:9a:36:20:e8:e1:a3:75: 27:3f:b7:3f:52:31:13:83:12:2a:77:0e:24:4b:2e:f2:55:fe: b0:c7:b6:47:8a:b9:d5:ba:fb:87:36:42:11:0c:37:a1:66:13: 35:41:4a:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDczRjgxMTAvBgNVBAUTKDBCRjJCNTk0NEMzQTJDQ0FCNkMxRDEyQkMzNkE1QUYz QzJEQ0Y3N0YwHhcNMjUwODIyMTgxNDExWhcNMjUwODI5MTgxNDExWjAYMRYwFAYD VQQDEw02OGE4YjM3My0yNjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm+EIe3lteH3XS9YTv2de8fNH+6RTG6tf8+nOexgI+zlxquY+D7HxHdpoKjgR 1g38U5JA9dAPrmlo+r/Ir7pRHs0ASXlSZ1NsVqxLh1Ivlkf3SmCE3qENcg1532UI enHCR3jwaNfXtVHqVCqxy28sfGIN94xYDWjzLw64JG2oh17pGmmtYU77sTVzQOxw huipfuKqC2uso6KNc46wk649o1LRnJ0bz42eo/ddhHKX4L6VlOZL4CsNqg8LGV1o t2CN33Ag3L5WNBlrhMsmXwrte0g+ap+meCE2Pwbcw1GCJsJI0Kd0RKrB/SW+0ImK 5nqk4HrVwxnTVItrCVMX24DvGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNNbJ1jU d6aTkopywdEOO2NvyEdlMB8GA1UdIwQYMBaAFAvytZRMOizKtsHRK8NqWvPC3Pd/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzNGOC80QjQ1NkM4OEYz NjkxMUU5OUM2N0EwNjFDNEY5QUUwMi9DX0sxbEV3NkxNcTJ3ZEVydzJwYTg4TGM5 MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NfSzFsRXc2TE1xMndkRXJ3MnBhODhMYzkzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzNGOC80QjQ1NkM4OEYzNjkxMUU5OUM2N0EwNjFDNEY5QUUwMi9DX0sxbEV3NkxN cTJ3ZEVydzJwYTg4TGM5MzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAP1W7HVSa8jpBr1ehgqjVKPhsTVnShYWZ7W8/YKhxId3iz0nBp7Qt v8tCgZe2Ib65ZYuZDQ4I0jExl5mXLxGcalPOk2n3Bo/XyVk5w9gZbphlqM2uR8T4 /7kU7n3qJEHL7VetAPWezmkSgcVeMKIFdD/fbQVKaX+9ldDLZbc+GQkLD7iJEXCr 8s2+YReKuCzApX88X2O8Lfw+f4tGvMj2GxIEpq8GdZ5pfQj9m6gyM8UMcl4aLwFt 6KH4az0I4YzZY0zhRDWKulU7O1wq3JX0tZo2IOjho3UnP7c/UjETgxIqdw4kSy7y Vf6wx7ZHirnVuvuHNkIRDDehZhM1QUqg -----END CERTIFICATE-----Generated at Sat Aug 23 20:26:54 2025 by rpki-client