$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft File: dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft (raw, json) Hash identifier: J4RG1P29UYrp3pjcZUidTnSUNko9gUJQ7ZaM25dBXnM= Subject key identifier: FD:D8:AD:4E:BC:87:3F:22:89:26:D2:89:99:3D:7D:4D:21:C4:76:59 Authority key identifier: 74:BF:2F:E2:6D:44:FF:EF:63:DE:68:3F:42:42:48:24:0F:B7:22:9A Certificate issuer: /CN=A91A2C5A/serialNumber=74BF2FE26D44FFEF63DE683F424248240FB7229A Certificate serial: 022B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft Manifest number: 0227 Signing time: Sat 23 Aug 2025 02:08:51 +0000 Manifest this update: Sat 23 Aug 2025 02:08:50 +0000 Manifest next update: Sat 30 Aug 2025 02:08:50 +0000 Files and hashes: 1: dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl (hash: mcbDgZx7JZNB4tCV1wlRSp1i3BqOl9RUJMG646lEfhI=) 2: 88DA4EC83E3511ED8B05E85AC4F9AE02.roa (hash: Bpmtc+dst8i9fWSSTK2qFRlGSZiBtVfIZ/yU5akTF90=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 555 (0x22b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2C5A, serialNumber=74BF2FE26D44FFEF63DE683F424248240FB7229A Validity Not Before: Aug 23 02:08:50 2025 GMT Not After : Aug 30 02:08:50 2025 GMT Subject: CN=68a922b2-9bb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:45:e5:ab:88:a3:b1:20:a1:9a:34:6c:65:50: f5:de:24:dd:de:c4:2a:68:39:ae:86:a8:f7:75:7b: 82:4e:81:40:65:ce:8d:a0:61:35:f0:a5:5c:12:49: 91:25:51:6b:f2:22:b9:d2:88:94:83:70:34:05:0c: 2b:a1:41:ca:02:9c:62:0b:1b:8a:ab:78:d4:ea:b1: 99:f5:6f:13:80:7f:bb:99:d3:92:9f:64:0e:fa:e8: 58:42:f1:2e:12:c4:a9:f0:72:cd:fb:00:3c:1f:09: 13:9e:23:9b:9a:32:79:68:73:40:53:a9:87:f0:db: 4a:03:d1:c9:d3:ed:08:b7:72:94:f1:fe:58:83:5b: 9f:6a:c6:a2:52:d7:2d:c8:f9:67:57:86:ad:29:38: be:74:8b:16:bf:6b:5f:4b:69:d4:94:cf:37:ff:9d: e7:0c:cd:14:eb:05:97:ec:08:2d:ef:37:dc:4a:f1: b4:c1:bc:06:6f:7d:bc:1d:03:38:03:35:b6:cb:1e: f6:61:36:d0:78:06:bd:f9:77:fa:4e:c6:97:32:b6: e9:1b:39:21:cb:46:e4:9d:d4:c3:ba:48:a8:bf:73: 93:b1:d6:49:ca:58:e8:b4:e7:ea:cd:cb:cf:57:9e: d8:8c:bb:ab:58:b9:ec:40:89:a0:29:3c:46:31:0d: f2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D8:AD:4E:BC:87:3F:22:89:26:D2:89:99:3D:7D:4D:21:C4:76:59 X509v3 Authority Key Identifier: keyid:74:BF:2F:E2:6D:44:FF:EF:63:DE:68:3F:42:42:48:24:0F:B7:22:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:11:3a:62:3f:1b:eb:37:16:99:7b:d3:6d:3e:bb:f2:b4:5f: 6d:2a:dc:17:a3:0c:81:ec:21:62:28:a5:d2:a7:a7:bc:1d:b5: 74:32:75:0f:f3:1e:e7:31:c8:ac:e4:d4:8c:df:87:e7:8f:23: e0:28:1d:c6:78:9f:b1:77:1d:0a:11:d3:65:5b:85:30:95:3c: b1:7c:02:e6:af:b5:8c:69:cb:b0:f1:89:82:eb:72:69:a4:24: b3:7f:31:55:d2:cd:13:a1:e8:a3:43:eb:03:4c:1e:cc:77:9e: 58:b0:60:6f:3a:92:e9:69:7b:a6:18:3c:d9:60:de:e2:9d:9a: f7:e9:44:ae:0a:72:7a:05:c2:12:aa:37:f4:c0:12:58:f3:d1: 34:b1:11:a1:bc:3b:ba:f6:76:a4:9c:d8:47:6f:90:48:02:d0: 26:15:ac:7e:36:14:01:00:f6:e5:2c:29:f7:34:8a:e2:7b:9e: 32:5b:cc:28:6e:1c:6f:69:d2:a0:bd:02:fd:57:11:3c:ea:30: 19:8e:6d:58:b9:1d:fc:60:d6:9c:b2:b7:8f:3b:14:60:67:1d: 5c:ab:61:3e:b8:01:77:c2:ab:1f:04:c5:a6:6d:2a:a1:75:f0: dc:d1:25:14:44:a5:ba:4c:95:2e:d2:81:bb:e5:f2:80:dd:7d: 8e:a9:86:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTJDNUExMTAvBgNVBAUTKDc0QkYyRkUyNkQ0NEZGRUY2M0RFNjgzRjQyNDI0ODI0 MEZCNzIyOUEwHhcNMjUwODIzMDIwODUwWhcNMjUwODMwMDIwODUwWjAYMRYwFAYD VQQDEw02OGE5MjJiMi05YmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApUXlq4ijsSChmjRsZVD13iTd3sQqaDmuhqj3dXuCToFAZc6NoGE18KVcEkmR JVFr8iK50oiUg3A0BQwroUHKApxiCxuKq3jU6rGZ9W8TgH+7mdOSn2QO+uhYQvEu EsSp8HLN+wA8HwkTniObmjJ5aHNAU6mH8NtKA9HJ0+0It3KU8f5Yg1ufasaiUtct yPlnV4atKTi+dIsWv2tfS2nUlM83/53nDM0U6wWX7Agt7zfcSvG0wbwGb328HQM4 AzW2yx72YTbQeAa9+Xf6TsaXMrbpGzkhy0bkndTDukiov3OTsdZJyljotOfqzcvP V57YjLurWLnsQImgKTxGMQ3yHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP3YrU68 hz8iiSbSiZk9fU0hxHZZMB8GA1UdIwQYMBaAFHS/L+JtRP/vY95oP0JCSCQPtyKa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkM1QS8wQUVGMEZEODNF MzIxMUVEOEREN0UwNkFDNEY5QUUwMi9kTDh2NG0xRV8tOWozbWdfUWtKSUpBLTNJ cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RMOHY0bTFFXy05ajNtZ19Ra0pJSkEtM0lwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MkM1QS8wQUVGMEZEODNFMzIxMUVEOEREN0UwNkFDNEY5QUUwMi9kTDh2NG0xRV8t OWozbWdfUWtKSUpBLTNJcG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHETpiPxvrNxaZe9NtPrvytF9tKtwXowyB7CFiKKXSp6e8HbV0MnUP 8x7nMcis5NSM34fnjyPgKB3GeJ+xdx0KEdNlW4UwlTyxfALmr7WMacuw8YmC63Jp pCSzfzFV0s0ToeijQ+sDTB7Md55YsGBvOpLpaXumGDzZYN7inZr36USuCnJ6BcIS qjf0wBJY89E0sRGhvDu69naknNhHb5BIAtAmFax+NhQBAPblLCn3NIrie54yW8wo bhxvadKgvQL9VxE86jAZjm1YuR38YNacsrePOxRgZx1cq2E+uAF3wqsfBMWmbSqh dfDc0SUURKW6TJUu0oG75fKA3X2OqYbo -----END CERTIFICATE-----Generated at Sat Aug 23 21:19:33 2025 by rpki-client