$ rpki-client -vvf rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft File: CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft (raw, json) Hash identifier: bgpyIFY4/zzViA5DHCq2pkzDUMdkRcScX8H/e2UeW5Q= Subject key identifier: 29:D9:2A:D6:58:1A:DB:F5:6C:45:8F:33:0D:74:82:A5:7F:9E:C4:69 Authority key identifier: 0A:8B:D2:B0:2F:F6:95:17:1D:C0:1E:8C:7E:4A:A2:D9:88:DA:3B:9A Certificate issuer: /CN=A91705D7/serialNumber=0A8BD2B02FF695171DC01E8C7E4AA2D988DA3B9A Certificate serial: F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft Manifest number: F2 Signing time: Sat 23 Aug 2025 05:27:53 +0000 Manifest this update: Sat 23 Aug 2025 05:27:52 +0000 Manifest next update: Sat 30 Aug 2025 05:27:52 +0000 Files and hashes: 1: CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl (hash: UvIRcDEBx5aTWEcu7Iqj3Jyl+gNCgWhtrURVtqE5oxM=) 2: 8C35F65C57F111F0B413224EC4F9AE02.roa (hash: voQWhVz+FM5Oce4JeqUGqkpzwLHV4T3Do9szQnC3FmQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:27:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 247 (0xf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91705D7, serialNumber=0A8BD2B02FF695171DC01E8C7E4AA2D988DA3B9A Validity Not Before: Aug 23 05:27:52 2025 GMT Not After : Aug 30 05:27:52 2025 GMT Subject: CN=68a95159-a7bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:eb:8e:94:74:f0:39:ca:e3:d0:4a:fd:1b:34: 49:9d:10:6b:31:4f:59:55:8e:47:58:ce:8f:a2:75: 5e:12:8d:25:51:bd:5d:ba:b6:34:58:dc:d6:40:2b: cb:22:b2:bc:b0:ed:b1:32:6b:f1:b7:e6:40:a4:90: 69:95:3d:3a:bf:e6:aa:73:e2:be:5f:2f:71:c7:cb: 77:8e:e2:1a:f4:38:90:35:0f:bb:c3:75:7d:dd:29: 33:c3:97:a6:0e:37:71:fb:d0:b0:49:1b:f0:df:3b: f1:2e:6c:7c:76:f5:e4:e5:31:42:c4:f2:63:15:fa: 9c:fa:0e:a4:38:2d:c1:3b:ed:8d:5b:fd:ee:88:24: b2:9b:d3:2e:e9:8b:95:36:c0:55:8c:e7:cc:dc:88: 7e:cf:b5:3c:53:f0:6b:c4:b5:76:3d:01:ca:df:e5: 30:2e:b0:52:6e:4d:46:4a:13:88:56:89:7b:09:ed: 4e:12:d4:89:9c:f5:a7:db:7b:9f:80:d2:7f:6c:00: 50:ba:c5:10:ac:d9:ef:b2:27:6b:92:05:9d:71:da: f8:c8:75:14:98:e0:3d:9a:b3:6a:33:a9:72:f4:88: 31:f7:b9:45:57:5a:45:c3:bc:8c:00:9b:ba:7a:39: 1b:e9:8d:31:63:6b:55:1c:ce:dc:5b:76:14:50:ea: 94:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:D9:2A:D6:58:1A:DB:F5:6C:45:8F:33:0D:74:82:A5:7F:9E:C4:69 X509v3 Authority Key Identifier: keyid:0A:8B:D2:B0:2F:F6:95:17:1D:C0:1E:8C:7E:4A:A2:D9:88:DA:3B:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:02:e8:ef:97:22:2f:91:ea:32:21:03:97:37:f9:06:4a:ad: 42:02:be:4c:05:0e:bf:49:23:80:86:bd:4e:8c:99:9a:4f:69: 9f:47:ab:a4:ef:06:f3:8b:77:1a:d7:4b:cf:56:86:24:a5:69: 16:9f:a7:d0:72:9a:0e:64:a1:bf:c6:39:6a:42:fe:ec:1f:f6: f4:02:15:e2:69:f7:4e:1a:c3:a4:ad:c7:d0:38:02:be:7e:d9: 98:2c:eb:00:24:f2:70:4c:df:cf:c5:ab:b9:3c:4e:80:8d:ba: 5e:78:e3:16:84:f3:87:7a:b8:70:07:95:86:39:88:d5:cb:0c: 3f:a8:c2:c6:f2:3a:7f:4a:d3:cf:b6:b7:6b:c7:ad:2f:3b:e9: 2f:e0:00:0b:27:e7:5b:b5:e3:e3:5c:99:ef:b1:79:37:8e:7b: b0:6c:73:b9:36:5f:ec:32:68:b5:63:6e:6e:3b:3a:be:e0:e9: 6d:bd:1e:5c:ea:1f:a5:69:54:01:18:fb:c3:41:f6:9d:c5:3b: 4a:81:96:f8:18:e5:d2:fb:80:ad:4d:e1:04:69:30:29:e5:e4: db:95:28:6d:98:50:9c:a2:ed:dd:df:82:57:25:1f:30:c1:a9: ad:bf:be:42:a2:62:33:19:fa:b4:2c:38:aa:09:66:80:44:da: 63:09:1b:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA1RDcxMTAvBgNVBAUTKDBBOEJEMkIwMkZGNjk1MTcxREMwMUU4QzdFNEFBMkQ5 ODhEQTNCOUEwHhcNMjUwODIzMDUyNzUyWhcNMjUwODMwMDUyNzUyWjAYMRYwFAYD VQQDEw02OGE5NTE1OS1hN2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvOuOlHTwOcrj0Er9GzRJnRBrMU9ZVY5HWM6PonVeEo0lUb1durY0WNzWQCvL IrK8sO2xMmvxt+ZApJBplT06v+aqc+K+Xy9xx8t3juIa9DiQNQ+7w3V93Skzw5em Djdx+9CwSRvw3zvxLmx8dvXk5TFCxPJjFfqc+g6kOC3BO+2NW/3uiCSym9Mu6YuV NsBVjOfM3Ih+z7U8U/BrxLV2PQHK3+UwLrBSbk1GShOIVol7Ce1OEtSJnPWn23uf gNJ/bABQusUQrNnvsidrkgWdcdr4yHUUmOA9mrNqM6ly9Igx97lFV1pFw7yMAJu6 ejkb6Y0xY2tVHM7cW3YUUOqUMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCnZKtZY Gtv1bEWPMw10gqV/nsRpMB8GA1UdIwQYMBaAFAqL0rAv9pUXHcAejH5KotmI2jua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDVENy9BMDgxNkVEMDE2 RDgxMUVGQkY5MDFFNUZDNEY5QUUwMi9Db3ZTc0NfMmxSY2R3QjZNZmtxaTJZamFP NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NvdlNzQ18ybFJjZHdCNk1ma3FpMllqYU81by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDVENy9BMDgxNkVEMDE2RDgxMUVGQkY5MDFFNUZDNEY5QUUwMi9Db3ZTc0NfMmxS Y2R3QjZNZmtxaTJZamFPNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4AujvlyIvkeoyIQOXN/kGSq1CAr5MBQ6/SSOAhr1OjJmaT2mfR6uk 7wbzi3ca10vPVoYkpWkWn6fQcpoOZKG/xjlqQv7sH/b0AhXiafdOGsOkrcfQOAK+ ftmYLOsAJPJwTN/Pxau5PE6AjbpeeOMWhPOHerhwB5WGOYjVyww/qMLG8jp/StPP trdrx60vO+kv4AALJ+dbtePjXJnvsXk3jnuwbHO5Nl/sMmi1Y25uOzq+4OltvR5c 6h+laVQBGPvDQfadxTtKgZb4GOXS+4CtTeEEaTAp5eTblShtmFCcou3d34JXJR8w wamtv75ComIzGfq0LDiqCWaARNpjCRvn -----END CERTIFICATE-----Generated at Sun Aug 24 03:12:05 2025 by rpki-client