$ rpki-client -vvf rpki.apnic.net/member_repository/A91955D9/C54F2246A28511EFB66B1811C4F9AE02/V7WDK0kAGBnK4cy5LNsctGiH4Jw.mft File: V7WDK0kAGBnK4cy5LNsctGiH4Jw.mft (raw, json) Hash identifier: XqFlaqbkx89d0K9Nyn1xR751ngEW6WQTePUlIgt2uQY= Subject key identifier: B4:2C:BB:82:DD:2C:8E:31:CD:08:9A:6C:9F:2E:1D:0A:25:CB:19:E7 Authority key identifier: 57:B5:83:2B:49:00:18:19:CA:E1:CC:B9:2C:DB:1C:B4:68:87:E0:9C Certificate issuer: /CN=A91955D9/serialNumber=57B5832B49001819CAE1CCB92CDB1CB46887E09C Certificate serial: 9B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V7WDK0kAGBnK4cy5LNsctGiH4Jw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91955D9/C54F2246A28511EFB66B1811C4F9AE02/V7WDK0kAGBnK4cy5LNsctGiH4Jw.mft Manifest number: 97 Signing time: Sat 23 Aug 2025 06:42:48 +0000 Manifest this update: Sat 23 Aug 2025 06:42:47 +0000 Manifest next update: Sat 30 Aug 2025 06:42:47 +0000 Files and hashes: 1: V7WDK0kAGBnK4cy5LNsctGiH4Jw.crl (hash: ypxsnCAzOcpbgP/P6P4XA7iThr9wVPuyB3Hxo3ZT0Fw=) 2: EC509DE4501211F0BE5D2025C4F9AE02.roa (hash: 59709TYd4BYZbsPTssB//DoW2gqjEPI/Hf7sdt1S0uw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91955D9/C54F2246A28511EFB66B1811C4F9AE02/V7WDK0kAGBnK4cy5LNsctGiH4Jw.crl rsync://rpki.apnic.net/member_repository/A91955D9/C54F2246A28511EFB66B1811C4F9AE02/V7WDK0kAGBnK4cy5LNsctGiH4Jw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V7WDK0kAGBnK4cy5LNsctGiH4Jw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:42:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 155 (0x9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91955D9, serialNumber=57B5832B49001819CAE1CCB92CDB1CB46887E09C Validity Not Before: Aug 23 06:42:47 2025 GMT Not After : Aug 30 06:42:47 2025 GMT Subject: CN=68a962e8-31d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:dc:d7:69:68:d9:9c:cd:d2:47:34:82:5e:6a: b2:78:b2:73:40:3f:41:75:d8:74:88:37:f5:33:fb: 9f:93:99:00:76:89:fc:22:4b:9a:8d:a5:8c:53:50: f0:2a:50:ce:e3:0f:9e:a2:6a:f5:81:6d:27:5a:26: 9a:7f:da:7b:27:6e:e5:35:ce:a0:64:0b:86:e0:68: d9:5f:5c:68:ea:b9:2f:36:42:e8:41:b9:95:85:02: 50:c6:5c:2a:92:d7:c7:ee:27:3f:87:92:61:9f:41: 30:d6:92:e0:f4:18:56:57:09:36:fd:a5:89:89:e3: fe:2e:e8:6e:15:ff:ca:db:30:fb:e0:75:76:87:25: 1b:29:e6:62:54:d6:67:66:1c:9b:fa:90:08:bc:46: 24:6c:e5:02:77:c1:f0:0a:87:ad:d2:ff:4a:22:1e: 11:f8:30:8b:f0:35:4e:18:d3:09:4e:c9:7c:48:6e: cb:c1:9d:c5:9c:4f:40:28:82:d0:4e:59:24:0b:71: 06:f5:78:87:c4:97:08:7b:6f:39:d9:7d:49:64:c3: b3:42:31:c0:11:d7:3e:3f:f8:15:f4:34:ef:d7:49: ae:8e:2e:7a:bd:59:e4:e1:11:f9:90:b1:32:6d:d8: 79:3c:6c:81:9c:f1:a4:11:07:32:39:d7:07:a2:4b: e4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:2C:BB:82:DD:2C:8E:31:CD:08:9A:6C:9F:2E:1D:0A:25:CB:19:E7 X509v3 Authority Key Identifier: keyid:57:B5:83:2B:49:00:18:19:CA:E1:CC:B9:2C:DB:1C:B4:68:87:E0:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91955D9/C54F2246A28511EFB66B1811C4F9AE02/V7WDK0kAGBnK4cy5LNsctGiH4Jw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V7WDK0kAGBnK4cy5LNsctGiH4Jw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955D9/C54F2246A28511EFB66B1811C4F9AE02/V7WDK0kAGBnK4cy5LNsctGiH4Jw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:29:15:1b:01:19:fe:91:56:fe:3d:ef:95:9c:e8:26:9b:2a: 4e:15:0c:35:f6:4e:b7:05:6c:30:8f:6a:3e:12:0c:39:b3:ae: c3:a0:4d:df:3d:21:ab:32:26:52:f5:1b:61:20:f7:ef:9a:ee: 95:e5:f8:75:82:5f:4e:49:a2:b6:e7:f3:9a:63:f3:32:2e:91: 6a:47:14:ca:e9:d3:9d:53:5f:8f:76:21:dc:43:e9:62:d7:bb: 23:cc:ed:6f:11:de:d6:23:2f:d9:08:4e:1e:80:dc:31:e9:d0: ef:c7:e0:ce:f0:ba:48:39:c7:83:79:e8:d2:25:b0:f1:52:db: 53:38:0c:03:6a:32:fa:95:7e:1d:62:3d:45:72:a8:01:c9:8d: 68:c6:a9:94:45:22:f3:44:0c:b9:84:2d:16:78:52:a0:34:5a: 0c:f3:21:b4:be:64:f2:6c:9b:1b:82:9c:fb:2e:b2:52:a1:6a: 2f:41:00:6b:6a:f7:bb:c0:bb:08:38:50:b3:f3:fa:40:15:4b: 4e:28:2b:6a:43:13:3d:93:94:11:a1:79:27:f3:a8:a0:bc:2c: 71:0f:32:88:4b:bb:c2:7c:6b:32:58:1c:cc:7d:d1:04:6a:32: 09:6c:8a:2d:3d:15:9c:9c:c8:de:a9:f3:2f:28:05:a6:fa:f0: ed:5e:3c:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU1RDkxMTAvBgNVBAUTKDU3QjU4MzJCNDkwMDE4MTlDQUUxQ0NCOTJDREIxQ0I0 Njg4N0UwOUMwHhcNMjUwODIzMDY0MjQ3WhcNMjUwODMwMDY0MjQ3WjAYMRYwFAYD VQQDEw02OGE5NjJlOC0zMWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzNzXaWjZnM3SRzSCXmqyeLJzQD9Bddh0iDf1M/ufk5kAdon8IkuajaWMU1Dw KlDO4w+eomr1gW0nWiaaf9p7J27lNc6gZAuG4GjZX1xo6rkvNkLoQbmVhQJQxlwq ktfH7ic/h5Jhn0Ew1pLg9BhWVwk2/aWJieP+LuhuFf/K2zD74HV2hyUbKeZiVNZn Zhyb+pAIvEYkbOUCd8HwCoet0v9KIh4R+DCL8DVOGNMJTsl8SG7LwZ3FnE9AKILQ TlkkC3EG9XiHxJcIe2852X1JZMOzQjHAEdc+P/gV9DTv10muji56vVnk4RH5kLEy bdh5PGyBnPGkEQcyOdcHokvkhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLQsu4Ld LI4xzQiabJ8uHQolyxnnMB8GA1UdIwQYMBaAFFe1gytJABgZyuHMuSzbHLRoh+Cc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTVEOS9DNTRGMjI0NkEy ODUxMUVGQjY2QjE4MTFDNEY5QUUwMi9WN1dESzBrQUdCbks0Y3k1TE5zY3RHaUg0 SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1Y3V0RLMGtBR0JuSzRjeTVMTnNjdEdpSDRKdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTVEOS9DNTRGMjI0NkEyODUxMUVGQjY2QjE4MTFDNEY5QUUwMi9WN1dESzBrQUdC bks0Y3k1TE5zY3RHaUg0SncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0KRUbARn+kVb+Pe+VnOgmmypOFQw19k63BWwwj2o+Egw5s67DoE3f PSGrMiZS9RthIPfvmu6V5fh1gl9OSaK25/OaY/MyLpFqRxTK6dOdU1+PdiHcQ+li 17sjzO1vEd7WIy/ZCE4egNwx6dDvx+DO8LpIOceDeejSJbDxUttTOAwDajL6lX4d Yj1FcqgByY1oxqmURSLzRAy5hC0WeFKgNFoM8yG0vmTybJsbgpz7LrJSoWovQQBr ave7wLsIOFCz8/pAFUtOKCtqQxM9k5QRoXkn86igvCxxDzKIS7vCfGsyWBzMfdEE ajIJbIotPRWcnMjeqfMvKAWm+vDtXjyt -----END CERTIFICATE-----Generated at Sat Aug 23 19:15:42 2025 by rpki-client