$ rpki-client -vvf rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft File: 9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft (raw, json) Hash identifier: q+yDaD1kmoRBZoqXuDR/5mugyY5fY1ZOwMCDNd+cF8k= Subject key identifier: 7F:32:CA:CE:FD:BA:AD:89:51:CF:93:21:73:8A:E9:F8:25:6E:37:0A Authority key identifier: F6:8D:CE:D2:E6:02:F4:46:56:74:10:99:4A:8E:8C:02:10:09:ED:89 Certificate issuer: /CN=A91487A2/serialNumber=F68DCED2E602F446567410994A8E8C021009ED89 Certificate serial: 0193 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft Manifest number: 018D Signing time: Sat 23 Aug 2025 04:09:02 +0000 Manifest this update: Sat 23 Aug 2025 04:09:01 +0000 Manifest next update: Sat 30 Aug 2025 04:09:01 +0000 Files and hashes: 1: 9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl (hash: YAcpaQBWoTJ92OhM+AE4sIFpYeqRqv0xq4B5Rh9i1As=) 2: E6F6831A26AF11EEA8E86146C4F9AE02.roa (hash: SraOPRWyc/dP6CmZHQSFQKbaOH7T0tjQk0r0ukGNNTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:09:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 403 (0x193) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91487A2, serialNumber=F68DCED2E602F446567410994A8E8C021009ED89 Validity Not Before: Aug 23 04:09:01 2025 GMT Not After : Aug 30 04:09:01 2025 GMT Subject: CN=68a93edd-3261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8d:e8:2d:6c:6a:5b:77:8c:aa:ea:99:1a:3e: b0:87:e1:6e:54:61:cd:54:da:dc:48:18:dc:7f:51: cd:43:9a:35:75:c8:27:5a:8f:7e:a0:3a:30:74:16: aa:ee:4c:b6:cc:27:d6:00:95:1a:98:bc:d0:51:6f: 99:15:95:48:38:60:0e:97:6d:6b:ac:61:61:38:a8: 6b:05:7d:c6:1d:e0:1b:c5:ee:ab:4d:78:d5:f4:e5: 72:d1:49:56:3a:23:fc:67:61:b4:03:30:21:d1:40: 52:e0:80:54:8b:da:b9:54:99:24:0e:94:7b:f3:5d: ef:59:03:1f:b6:eb:ee:2b:7b:d9:41:d4:a5:f6:fa: 82:2c:43:19:f9:3f:45:42:4d:35:b0:28:49:58:3c: 41:58:47:3d:5c:6e:d7:44:e0:22:69:68:5e:ea:da: 49:ae:e1:e3:0b:dd:4b:79:86:03:1d:37:7f:b5:58: 2c:ed:91:8f:24:19:cb:ab:9a:21:cf:4d:d7:a0:cb: c4:23:7d:86:5b:e2:2e:33:ae:d4:fe:a9:ae:26:2f: fa:f9:a0:97:f5:cd:3f:ec:33:86:87:7a:57:e9:93: d7:e9:6e:16:58:f1:89:6a:4d:86:ec:0d:6c:4f:12: 5f:21:d8:a0:49:77:89:26:6e:e9:0e:e5:49:ca:f3: c7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:32:CA:CE:FD:BA:AD:89:51:CF:93:21:73:8A:E9:F8:25:6E:37:0A X509v3 Authority Key Identifier: keyid:F6:8D:CE:D2:E6:02:F4:46:56:74:10:99:4A:8E:8C:02:10:09:ED:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:64:91:f2:03:70:71:8c:15:40:d8:5f:de:29:b7:77:46:99: 57:a4:0f:c1:16:81:e6:e1:df:a8:b6:04:a4:54:39:d7:81:c9: d8:80:cb:8f:d5:c8:0d:8d:d1:8a:a3:03:80:3a:68:f2:71:ca: 3d:1a:a6:05:02:fe:cb:69:3a:1b:a1:10:e8:0f:f4:c0:a2:ff: b0:d8:bc:16:f5:de:5e:76:03:36:71:1d:3c:d1:f6:e9:96:75: dc:83:96:e7:b8:1d:4c:26:f0:77:9b:3a:3a:3a:d8:cd:96:5c: 1f:0b:cf:92:88:ae:23:2e:cb:57:52:79:a0:fe:56:b1:94:76: a2:2c:a9:73:c2:c4:28:24:46:33:c9:3d:07:8f:c2:f2:c9:51: b6:e8:f7:e5:95:c7:1c:87:94:0e:e7:6f:8b:eb:84:84:97:6f: 10:67:01:de:f1:ea:1e:75:16:17:e9:72:a6:4e:49:a1:20:25: 78:2a:08:42:3d:7a:89:88:08:3d:b7:d5:e1:95:ea:36:0a:63: 23:44:6d:cb:c3:b3:24:27:09:6b:dc:74:a1:8d:82:6f:f5:76: a6:dc:4c:26:97:9b:93:ed:e8:97:ac:b8:96:f7:21:47:9c:f5: 81:49:f8:1b:15:9d:86:4c:d9:32:64:41:21:96:81:97:95:61: dc:c5:3d:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg3QTIxMTAvBgNVBAUTKEY2OERDRUQyRTYwMkY0NDY1Njc0MTA5OTRBOEU4QzAy MTAwOUVEODkwHhcNMjUwODIzMDQwOTAxWhcNMjUwODMwMDQwOTAxWjAYMRYwFAYD VQQDEw02OGE5M2VkZC0zMjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvY3oLWxqW3eMquqZGj6wh+FuVGHNVNrcSBjcf1HNQ5o1dcgnWo9+oDowdBaq 7ky2zCfWAJUamLzQUW+ZFZVIOGAOl21rrGFhOKhrBX3GHeAbxe6rTXjV9OVy0UlW OiP8Z2G0AzAh0UBS4IBUi9q5VJkkDpR7813vWQMftuvuK3vZQdSl9vqCLEMZ+T9F Qk01sChJWDxBWEc9XG7XROAiaWhe6tpJruHjC91LeYYDHTd/tVgs7ZGPJBnLq5oh z03XoMvEI32GW+IuM67U/qmuJi/6+aCX9c0/7DOGh3pX6ZPX6W4WWPGJak2G7A1s TxJfIdigSXeJJm7pDuVJyvPHEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH8yys79 uq2JUc+TIXOK6fglbjcKMB8GA1UdIwQYMBaAFPaNztLmAvRGVnQQmUqOjAIQCe2J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODdBMi80MDZCNjEwMDI2 QUYxMUVFOEFFRDRGNDVDNEY5QUUwMi85bzNPMHVZQzlFWldkQkNaU282TUFoQUo3 WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlvM08wdVlDOUVaV2RCQ1pTbzZNQWhBSjdZay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODdBMi80MDZCNjEwMDI2QUYxMUVFOEFFRDRGNDVDNEY5QUUwMi85bzNPMHVZQzlF WldkQkNaU282TUFoQUo3WWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZZJHyA3BxjBVA2F/eKbd3RplXpA/BFoHm4d+otgSkVDnXgcnYgMuP 1cgNjdGKowOAOmjycco9GqYFAv7LaToboRDoD/TAov+w2LwW9d5edgM2cR080fbp lnXcg5bnuB1MJvB3mzo6OtjNllwfC8+SiK4jLstXUnmg/laxlHaiLKlzwsQoJEYz yT0Hj8LyyVG26Pfllccch5QO52+L64SEl28QZwHe8eoedRYX6XKmTkmhICV4KghC PXqJiAg9t9Xhleo2CmMjRG3Lw7MkJwlr3HShjYJv9Xam3Ewml5uT7eiXrLiW9yFH nPWBSfgbFZ2GTNkyZEEhloGXlWHcxT1t -----END CERTIFICATE-----Generated at Sat Aug 23 19:31:56 2025 by rpki-client