$ rpki-client -vvf rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.mft File: 0dZcikMk4of26pFbOfXTYC0eN6Y.mft (raw, json) Hash identifier: Gbq6DPsiMEFzpAt85cdalO7aEhRnCuVJrHxlaI5ukHY= Subject key identifier: B3:40:14:90:B6:B6:99:6E:5C:7C:3B:EA:51:DA:F2:A3:78:2C:24:EE Authority key identifier: D1:D6:5C:8A:43:24:E2:87:F6:EA:91:5B:39:F5:D3:60:2D:1E:37:A6 Certificate issuer: /CN=A91743EF/serialNumber=D1D65C8A4324E287F6EA915B39F5D3602D1E37A6 Certificate serial: 183D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0dZcikMk4of26pFbOfXTYC0eN6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.mft Manifest number: 182B Signing time: Fri 22 Aug 2025 16:38:20 +0000 Manifest this update: Fri 22 Aug 2025 16:38:20 +0000 Manifest next update: Fri 29 Aug 2025 16:38:20 +0000 Files and hashes: 1: 0dZcikMk4of26pFbOfXTYC0eN6Y.crl (hash: Q9zs+KcmF8tDaWcuLEDiHrbL0qLF7cAiRCqWYO7VZao=) 2: 8B2EE9667A0911EE934F1262C4F9AE02.roa (hash: c58kYquiR7PhXwHG1m2k+88ex1+jC31dtd+q7AHBr2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.crl rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0dZcikMk4of26pFbOfXTYC0eN6Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:38:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6205 (0x183d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91743EF, serialNumber=D1D65C8A4324E287F6EA915B39F5D3602D1E37A6 Validity Not Before: Aug 22 16:38:20 2025 GMT Not After : Aug 29 16:38:20 2025 GMT Subject: CN=68a89cfc-0e3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:9c:2f:12:ce:be:c3:6b:14:ad:06:a4:1c:63: 86:68:78:bd:df:be:49:b2:d8:ab:f6:a1:13:41:0f: a7:e8:06:4c:ae:44:41:85:f6:28:1d:b2:13:5b:dc: b6:03:58:1d:c8:0e:34:87:73:e2:89:f9:d9:77:ea: 63:c4:02:ea:d8:ed:e9:3b:6e:e2:28:f2:36:84:9f: 3f:48:45:7f:d1:ea:c7:34:79:90:dc:fe:40:a6:c8: 6b:7d:03:e8:de:c9:e5:11:73:9b:e6:90:b8:93:8c: df:32:2b:7e:86:00:29:52:f3:d8:a7:f9:5a:0f:91: 45:53:9c:c5:ac:08:7b:17:d8:d9:64:84:3a:84:40: d4:e1:2e:1e:53:bc:4e:c3:87:08:c4:ec:f4:f9:68: 10:0c:13:20:b1:8d:24:2e:f2:9e:cd:f5:de:d1:6e: 8a:ef:87:fd:46:e2:34:e3:a1:fb:51:ab:26:3b:84: ec:d2:4d:e8:5d:0a:6b:4e:30:ae:35:b8:6f:a4:69: 4c:8a:94:2a:93:ea:bb:4c:8c:60:86:47:e2:f3:5a: c9:2b:aa:eb:b8:25:ac:b3:be:12:dd:78:28:6e:95: d7:88:1d:ed:ee:7d:0b:8d:bb:c8:af:c7:e7:55:07: 63:35:dd:f6:da:a8:2b:04:0f:21:63:68:fe:49:b1: c3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:40:14:90:B6:B6:99:6E:5C:7C:3B:EA:51:DA:F2:A3:78:2C:24:EE X509v3 Authority Key Identifier: keyid:D1:D6:5C:8A:43:24:E2:87:F6:EA:91:5B:39:F5:D3:60:2D:1E:37:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0dZcikMk4of26pFbOfXTYC0eN6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:31:52:7b:b2:88:e2:39:c8:d7:f9:b4:1d:9c:c2:97:ba:80: cd:d9:d2:05:a8:33:41:67:34:5b:e3:b6:20:71:22:45:b3:b2: 79:09:0b:32:2b:0f:b1:6e:1d:7f:10:86:02:ac:d5:12:06:9c: 85:5c:3c:a9:64:08:d0:44:d5:76:d1:fd:18:26:2e:d2:41:9c: 05:26:fc:0b:a6:24:d1:65:4c:15:c0:19:d1:1f:84:6c:f4:7e: 10:e8:fd:ca:47:83:d2:ba:bc:5d:3f:f1:67:d1:a4:12:29:ea: 2e:02:01:0e:ac:21:a9:e6:13:e5:57:75:eb:1a:54:bd:e7:da: 72:ba:12:f1:00:f9:f3:77:93:f9:7c:21:60:1f:c3:ae:85:49: 3f:72:55:47:da:af:0e:f8:66:ef:91:10:dc:fb:e4:0d:1b:aa: e5:d9:1a:1a:e1:dc:de:7c:d6:11:86:4d:c0:d5:24:96:38:18: a8:52:a2:96:3f:59:2c:d8:be:4f:80:c8:19:12:36:08:49:fa: 42:7e:f8:2b:b7:f4:8b:10:e3:ab:68:20:15:4f:8e:6b:05:74: 49:d7:59:bd:2c:f7:9d:94:fa:13:e5:49:b7:53:8d:19:5d:4b: 04:2b:9b:a2:33:7f:39:96:38:7f:20:e5:4c:3b:1f:de:06:bc: e3:54:54:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQzRUYxMTAvBgNVBAUTKEQxRDY1QzhBNDMyNEUyODdGNkVBOTE1QjM5RjVEMzYw MkQxRTM3QTYwHhcNMjUwODIyMTYzODIwWhcNMjUwODI5MTYzODIwWjAYMRYwFAYD VQQDEw02OGE4OWNmYy0wZTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3JwvEs6+w2sUrQakHGOGaHi9375Jstir9qETQQ+n6AZMrkRBhfYoHbITW9y2 A1gdyA40h3PiifnZd+pjxALq2O3pO27iKPI2hJ8/SEV/0erHNHmQ3P5ApshrfQPo 3snlEXOb5pC4k4zfMit+hgApUvPYp/laD5FFU5zFrAh7F9jZZIQ6hEDU4S4eU7xO w4cIxOz0+WgQDBMgsY0kLvKezfXe0W6K74f9RuI046H7UasmO4Ts0k3oXQprTjCu NbhvpGlMipQqk+q7TIxghkfi81rJK6rruCWss74S3XgobpXXiB3t7n0LjbvIr8fn VQdjNd322qgrBA8hY2j+SbHDzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLNAFJC2 tpluXHw76lHa8qN4LCTuMB8GA1UdIwQYMBaAFNHWXIpDJOKH9uqRWzn102AtHjem MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDNFRi9FNkFCQjAxMEJB NDAxMUU3QTA4RDI2NkZDNEY5QUUwMi8wZFpjaWtNazRvZjI2cEZiT2ZYVFlDMGVO NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBkWmNpa01rNG9mMjZwRmJPZlhUWUMwZU42WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDNFRi9FNkFCQjAxMEJBNDAxMUU3QTA4RDI2NkZDNEY5QUUwMi8wZFpjaWtNazRv ZjI2cEZiT2ZYVFlDMGVONlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+MVJ7sojiOcjX+bQdnMKXuoDN2dIFqDNBZzRb47YgcSJFs7J5CQsy Kw+xbh1/EIYCrNUSBpyFXDypZAjQRNV20f0YJi7SQZwFJvwLpiTRZUwVwBnRH4Rs 9H4Q6P3KR4PSurxdP/Fn0aQSKeouAgEOrCGp5hPlV3XrGlS959pyuhLxAPnzd5P5 fCFgH8OuhUk/clVH2q8O+GbvkRDc++QNG6rl2Roa4dzefNYRhk3A1SSWOBioUqKW P1ks2L5PgMgZEjYISfpCfvgrt/SLEOOraCAVT45rBXRJ11m9LPedlPoT5Um3U40Z XUsEK5uiM385ljh/IOVMOx/eBrzjVFSF -----END CERTIFICATE-----Generated at Sat Aug 23 13:18:44 2025 by rpki-client