$ rpki-client -vvf rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.mft File: 0efCSnRBTL3c_NiORsXVzTs-rtc.mft (raw, json) Hash identifier: YzAcSYtpW+tQJ0x4NSvIAEdjEynSRvD/sDRUeT0gDOQ= Subject key identifier: 83:DE:B3:DE:D7:4A:59:B7:A8:3A:49:D8:8A:ED:24:62:50:52:75:4D Authority key identifier: D1:E7:C2:4A:74:41:4C:BD:DC:FC:D8:8E:46:C5:D5:CD:3B:3E:AE:D7 Certificate issuer: /CN=A91606AF/serialNumber=D1E7C24A74414CBDDCFCD88E46C5D5CD3B3EAED7 Certificate serial: 0720 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0efCSnRBTL3c_NiORsXVzTs-rtc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.mft Manifest number: 0707 Signing time: Fri 22 Aug 2025 22:08:37 +0000 Manifest this update: Fri 22 Aug 2025 22:08:37 +0000 Manifest next update: Fri 29 Aug 2025 22:08:37 +0000 Files and hashes: 1: 0efCSnRBTL3c_NiORsXVzTs-rtc.crl (hash: rYmYUu2Wr4q2KgqVc77f6d1tnWdWrlcGIr7mdDZJEjU=) 2: 8C2D64121CB011EDA4740D7EC4F9AE02.roa (hash: +fRxqOXyB3e8V6DJsPZloFZurNNVr8ZfU/q63aOPSF0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.crl rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0efCSnRBTL3c_NiORsXVzTs-rtc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:08:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1824 (0x720) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91606AF, serialNumber=D1E7C24A74414CBDDCFCD88E46C5D5CD3B3EAED7 Validity Not Before: Aug 22 22:08:37 2025 GMT Not After : Aug 29 22:08:37 2025 GMT Subject: CN=68a8ea65-87a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ee:3c:a1:b8:c8:1f:c7:41:8e:ef:ad:3a:63: 45:64:a7:7a:b8:2d:d0:16:08:dc:ef:a5:3f:21:52: 38:0c:af:bf:ae:8c:97:11:a4:5a:0f:c2:24:46:7a: e8:87:a0:c5:87:48:75:22:d3:50:ad:d5:e5:f2:ee: 81:ea:64:0b:ba:73:70:31:6e:82:b3:88:41:ae:83: b0:f7:d3:85:6a:3d:f0:cb:8b:c7:84:18:7b:66:22: ec:c9:57:86:f1:c5:c1:cc:ef:fb:5f:3a:ee:b8:07: b1:30:d0:b3:3b:24:4d:65:43:40:7a:7f:75:06:58: 34:ef:1f:b8:25:88:03:87:8b:33:23:54:10:22:d8: d3:a4:28:53:87:62:88:f2:2c:9f:ae:8f:af:53:0c: 94:5b:3a:50:8f:09:ad:73:b4:37:77:9d:84:9f:a7: 9d:38:3e:b8:8d:2a:bd:06:59:2c:48:e7:ef:49:fb: 09:65:4e:c9:d7:ad:18:26:bd:17:91:05:50:2f:d1: 0e:d5:d6:b3:b5:2e:e9:e2:15:cd:92:7f:3d:cf:b1: 87:6d:dd:a7:e4:79:2f:5d:96:90:0f:ec:e2:1d:4f: f0:fc:68:de:2c:73:6b:4d:a9:41:3e:50:d1:fa:37: d1:88:75:35:09:db:00:2f:30:d9:01:9b:40:e4:69: ea:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:DE:B3:DE:D7:4A:59:B7:A8:3A:49:D8:8A:ED:24:62:50:52:75:4D X509v3 Authority Key Identifier: keyid:D1:E7:C2:4A:74:41:4C:BD:DC:FC:D8:8E:46:C5:D5:CD:3B:3E:AE:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0efCSnRBTL3c_NiORsXVzTs-rtc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:df:ac:d4:76:b7:5d:88:93:73:05:ad:8a:aa:1f:04:d7:d9: de:11:ff:a9:36:00:71:19:45:b7:09:b4:90:13:a7:ee:3e:51: 99:a2:73:9e:ed:15:23:1f:5e:2d:4e:cc:d6:c9:87:ba:54:f1: 57:32:7a:fb:d6:e9:5d:05:52:f0:3a:63:9f:78:75:ee:67:a1: 7f:30:4c:89:36:79:32:0a:e4:56:4b:69:ee:42:d3:ac:2b:70: 54:83:06:30:fe:2a:a3:8d:73:ad:d0:85:3a:f8:01:07:d6:b8: b1:95:43:46:d7:08:8e:63:af:55:b6:db:21:65:d9:d6:77:0c: ac:7b:57:7c:4a:dd:23:c3:5f:7f:de:c0:60:6e:1f:9a:58:74: fc:ea:4e:d9:5d:d1:ea:7b:9f:44:9d:18:c2:bd:91:a2:76:fd: b2:df:22:d7:ee:0a:66:be:89:c4:9c:c2:5e:6c:65:b8:cb:0d: 3f:98:1a:14:0b:0d:84:ff:c0:4b:19:f1:45:65:2e:1b:9a:f3: 69:67:eb:32:8a:c5:79:47:97:54:03:05:bb:80:73:b9:14:f0: 07:fd:78:a7:a5:7f:06:49:b3:f4:6e:a3:ce:fc:ec:17:b4:81: 38:99:7e:cb:a9:2c:3c:ee:ed:19:fe:1e:7c:97:25:7e:bd:24: 7c:6c:bc:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA2QUYxMTAvBgNVBAUTKEQxRTdDMjRBNzQ0MTRDQkREQ0ZDRDg4RTQ2QzVENUNE M0IzRUFFRDcwHhcNMjUwODIyMjIwODM3WhcNMjUwODI5MjIwODM3WjAYMRYwFAYD VQQDEw02OGE4ZWE2NS04N2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyO48objIH8dBju+tOmNFZKd6uC3QFgjc76U/IVI4DK+/royXEaRaD8IkRnro h6DFh0h1ItNQrdXl8u6B6mQLunNwMW6Cs4hBroOw99OFaj3wy4vHhBh7ZiLsyVeG 8cXBzO/7XzruuAexMNCzOyRNZUNAen91Blg07x+4JYgDh4szI1QQItjTpChTh2KI 8iyfro+vUwyUWzpQjwmtc7Q3d52En6edOD64jSq9BlksSOfvSfsJZU7J160YJr0X kQVQL9EO1daztS7p4hXNkn89z7GHbd2n5HkvXZaQD+ziHU/w/GjeLHNrTalBPlDR +jfRiHU1CdsALzDZAZtA5GnqhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIPes97X Slm3qDpJ2IrtJGJQUnVNMB8GA1UdIwQYMBaAFNHnwkp0QUy93PzYjkbF1c07Pq7X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDZBRi9BMDk1OEYzMDVF Q0QxMUVCOTA4NzYzNzJDNEY5QUUwMi8wZWZDU25SQlRMM2NfTmlPUnNYVnpUcy1y dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBlZkNTblJCVEwzY19OaU9Sc1hWelRzLXJ0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDZBRi9BMDk1OEYzMDVFQ0QxMUVCOTA4NzYzNzJDNEY5QUUwMi8wZWZDU25SQlRM M2NfTmlPUnNYVnpUcy1ydGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBa36zUdrddiJNzBa2Kqh8E19neEf+pNgBxGUW3CbSQE6fuPlGZonOe 7RUjH14tTszWyYe6VPFXMnr71uldBVLwOmOfeHXuZ6F/MEyJNnkyCuRWS2nuQtOs K3BUgwYw/iqjjXOt0IU6+AEH1rixlUNG1wiOY69VttshZdnWdwyse1d8St0jw19/ 3sBgbh+aWHT86k7ZXdHqe59EnRjCvZGidv2y3yLX7gpmvonEnMJebGW4yw0/mBoU Cw2E/8BLGfFFZS4bmvNpZ+syisV5R5dUAwW7gHO5FPAH/XinpX8GSbP0bqPO/OwX tIE4mX7LqSw87u0Z/h58lyV+vSR8bLzM -----END CERTIFICATE-----Generated at Sat Aug 23 15:41:17 2025 by rpki-client