$ rpki-client -vvf rpki.apnic.net/member_repository/A91676E2/2259A186D85411ECB9E1E486C4F9AE02/M0SkOWDcSkdzux3w_wON9BYPNXo.mft File: M0SkOWDcSkdzux3w_wON9BYPNXo.mft (raw, json) Hash identifier: chKYX16BPIs1I+T9aOJQpTULyosOTHOrhhY9kP/Rtuo= Subject key identifier: 1F:78:98:D9:C8:B2:18:13:51:0D:60:3C:CB:9C:C4:9E:5D:88:7A:C9 Authority key identifier: 33:44:A4:39:60:DC:4A:47:73:BB:1D:F0:FF:03:8D:F4:16:0F:35:7A Certificate issuer: /CN=A91676E2/serialNumber=3344A43960DC4A4773BB1DF0FF038DF4160F357A Certificate serial: 035B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M0SkOWDcSkdzux3w_wON9BYPNXo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91676E2/2259A186D85411ECB9E1E486C4F9AE02/M0SkOWDcSkdzux3w_wON9BYPNXo.mft Manifest number: 0343 Signing time: Sat 23 Aug 2025 01:22:15 +0000 Manifest this update: Sat 23 Aug 2025 01:22:14 +0000 Manifest next update: Sat 30 Aug 2025 01:22:14 +0000 Files and hashes: 1: M0SkOWDcSkdzux3w_wON9BYPNXo.crl (hash: TtKyrosRi8qqHECGnRntQYE14nQMwQ7nwezwYB9eZfo=) 2: 4D03B06C83FA11EF9E6EC075C4F9AE02.roa (hash: hpv7gHEkBMfI8IhiYswhvBmYC+76f/Bx92ErHlGJsZw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91676E2/2259A186D85411ECB9E1E486C4F9AE02/M0SkOWDcSkdzux3w_wON9BYPNXo.crl rsync://rpki.apnic.net/member_repository/A91676E2/2259A186D85411ECB9E1E486C4F9AE02/M0SkOWDcSkdzux3w_wON9BYPNXo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M0SkOWDcSkdzux3w_wON9BYPNXo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:22:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 859 (0x35b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91676E2, serialNumber=3344A43960DC4A4773BB1DF0FF038DF4160F357A Validity Not Before: Aug 23 01:22:14 2025 GMT Not After : Aug 30 01:22:14 2025 GMT Subject: CN=68a917c7-d223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:be:29:57:e9:62:98:a3:54:13:78:52:73:6b: 96:33:ba:45:0f:fe:cd:75:f2:45:bc:b7:29:68:ac: 84:cd:09:7f:d3:74:ab:b2:77:e9:65:6a:16:e3:5f: 21:65:45:1c:12:72:50:b7:cb:e9:be:fe:7a:30:1f: b2:f6:b8:05:0e:eb:98:5f:ee:9e:95:c6:98:bf:e6: 41:11:35:31:31:5a:66:76:3a:a0:01:23:1d:b9:08: f7:7f:a7:f3:e7:9f:81:6f:9f:24:8a:b2:55:02:9b: 2b:96:b9:05:27:d2:7b:1c:ce:8a:4f:fd:f0:69:e5: df:43:78:6b:51:05:b8:08:cd:b3:b2:63:cf:57:2c: 55:94:29:d1:a7:01:f0:dd:f5:5c:6f:96:d3:d8:d4: 55:69:af:bb:be:0e:51:50:7b:e9:22:e2:c4:55:72: 0c:af:25:43:e1:02:c0:04:93:28:4f:0d:e5:51:b9: e8:ca:51:90:58:ef:36:f5:75:ab:35:61:84:65:a4: 1e:1e:c3:63:0f:08:a3:53:68:32:ec:d4:98:04:99: 89:8c:98:67:0b:26:99:31:c6:d5:86:57:e2:c8:ae: 0b:17:83:ab:6d:7c:2c:0d:6a:61:4b:72:f5:3c:4f: 28:ec:80:4b:6a:5a:54:4b:f2:e9:c2:b6:32:c7:db: 87:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:78:98:D9:C8:B2:18:13:51:0D:60:3C:CB:9C:C4:9E:5D:88:7A:C9 X509v3 Authority Key Identifier: keyid:33:44:A4:39:60:DC:4A:47:73:BB:1D:F0:FF:03:8D:F4:16:0F:35:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91676E2/2259A186D85411ECB9E1E486C4F9AE02/M0SkOWDcSkdzux3w_wON9BYPNXo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M0SkOWDcSkdzux3w_wON9BYPNXo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91676E2/2259A186D85411ECB9E1E486C4F9AE02/M0SkOWDcSkdzux3w_wON9BYPNXo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:ea:b8:56:5b:cd:79:1e:cc:36:f5:99:1a:a7:8c:7a:fe:27: 2c:38:be:f5:3a:31:93:91:bb:e9:39:a3:9b:42:cc:98:7f:04: 03:da:86:20:b5:7e:4c:f2:64:91:8e:83:fa:52:47:69:f3:84: 02:47:c4:ac:c0:c5:6f:b2:58:4f:e5:75:6a:42:33:4a:8d:43: 09:77:30:61:0d:11:36:31:73:2d:ca:7a:3d:16:76:5f:d6:cd: 0d:50:dc:5f:95:b2:3e:49:25:1d:25:82:c4:e1:0c:80:1e:b7: c2:de:27:40:c3:5b:6b:55:fa:86:5b:37:ec:a8:f8:d0:6e:2f: f3:a3:53:ec:19:ad:dd:ab:a4:7c:2b:2f:e9:df:f3:fb:11:6f: c9:8a:d7:be:3f:04:d3:75:38:91:e1:70:bb:04:93:c8:31:ff: 8c:ee:17:1a:75:75:29:62:19:08:2d:49:d7:d0:9e:ab:b8:05: 2e:ef:66:ca:96:93:43:20:ac:65:4f:b0:4f:75:d7:9e:dd:d5: 02:a9:ef:ce:94:06:c8:12:45:9f:7d:0c:c1:43:ab:88:27:5b: eb:6d:b5:c0:74:9c:53:40:aa:2c:a6:8e:9a:fc:d5:93:5f:1c: 32:c7:2b:94:bc:ab:9b:cb:0b:4e:11:57:6a:6a:78:7b:c8:4f: fb:3f:a6:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njc2RTIxMTAvBgNVBAUTKDMzNDRBNDM5NjBEQzRBNDc3M0JCMURGMEZGMDM4REY0 MTYwRjM1N0EwHhcNMjUwODIzMDEyMjE0WhcNMjUwODMwMDEyMjE0WjAYMRYwFAYD VQQDEw02OGE5MTdjNy1kMjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyb4pV+limKNUE3hSc2uWM7pFD/7NdfJFvLcpaKyEzQl/03SrsnfpZWoW418h ZUUcEnJQt8vpvv56MB+y9rgFDuuYX+6elcaYv+ZBETUxMVpmdjqgASMduQj3f6fz 55+Bb58kirJVApsrlrkFJ9J7HM6KT/3waeXfQ3hrUQW4CM2zsmPPVyxVlCnRpwHw 3fVcb5bT2NRVaa+7vg5RUHvpIuLEVXIMryVD4QLABJMoTw3lUbnoylGQWO829XWr NWGEZaQeHsNjDwijU2gy7NSYBJmJjJhnCyaZMcbVhlfiyK4LF4OrbXwsDWphS3L1 PE8o7IBLalpUS/LpwrYyx9uHPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB94mNnI shgTUQ1gPMucxJ5diHrJMB8GA1UdIwQYMBaAFDNEpDlg3EpHc7sd8P8DjfQWDzV6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzZFMi8yMjU5QTE4NkQ4 NTQxMUVDQjlFMUU0ODZDNEY5QUUwMi9NMFNrT1dEY1NrZHp1eDN3X3dPTjlCWVBO WG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00wU2tPV0RjU2tkenV4M3dfd09OOUJZUE5Yby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzZFMi8yMjU5QTE4NkQ4NTQxMUVDQjlFMUU0ODZDNEY5QUUwMi9NMFNrT1dEY1Nr ZHp1eDN3X3dPTjlCWVBOWG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAi6rhWW815Hsw29Zkap4x6/icsOL71OjGTkbvpOaObQsyYfwQD2oYg tX5M8mSRjoP6Ukdp84QCR8SswMVvslhP5XVqQjNKjUMJdzBhDRE2MXMtyno9FnZf 1s0NUNxflbI+SSUdJYLE4QyAHrfC3idAw1trVfqGWzfsqPjQbi/zo1PsGa3dq6R8 Ky/p3/P7EW/Jite+PwTTdTiR4XC7BJPIMf+M7hcadXUpYhkILUnX0J6ruAUu72bK lpNDIKxlT7BPddee3dUCqe/OlAbIEkWffQzBQ6uIJ1vrbbXAdJxTQKospo6a/NWT XxwyxyuUvKubywtOEVdqanh7yE/7P6YU -----END CERTIFICATE-----Generated at Sun Aug 24 00:50:29 2025 by rpki-client