$ rpki-client -vvf rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft File: -APDcY8OgSDUPrA0gJ9qiziE15s.mft (raw, json) Hash identifier: ZKBanONu5vS0gjyonjnOwIi9BU577JlWDpdtVy47t+k= Subject key identifier: 48:79:34:BE:F1:1C:89:DD:7B:98:58:00:79:63:41:78:44:68:04:E6 Authority key identifier: F8:03:C3:71:8F:0E:81:20:D4:3E:B0:34:80:9F:6A:8B:38:84:D7:9B Certificate issuer: /CN=A91A36B8/serialNumber=F803C3718F0E8120D43EB034809F6A8B3884D79B Certificate serial: 0262 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-APDcY8OgSDUPrA0gJ9qiziE15s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft Manifest number: 025D Signing time: Sat 23 Aug 2025 02:02:06 +0000 Manifest this update: Sat 23 Aug 2025 02:02:06 +0000 Manifest next update: Sat 30 Aug 2025 02:02:06 +0000 Files and hashes: 1: -APDcY8OgSDUPrA0gJ9qiziE15s.crl (hash: q/2M1BGjdP+hZhKMCUewdYlGtvcVaa0D1c7bsVEVHYQ=) 2: 0C04EFB43C9811EDB6A25D4FC4F9AE02.roa (hash: qFfisBxRiCqfGUur/S/I0P4ucD2aKemCvw2qjb/eV4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.crl rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-APDcY8OgSDUPrA0gJ9qiziE15s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 610 (0x262) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A36B8, serialNumber=F803C3718F0E8120D43EB034809F6A8B3884D79B Validity Not Before: Aug 23 02:02:06 2025 GMT Not After : Aug 30 02:02:06 2025 GMT Subject: CN=68a9211e-0b58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:61:c8:c1:64:12:41:ca:2b:69:f2:d2:17:ea: f0:6f:a1:70:13:9e:f7:5f:63:15:8f:22:05:5d:53: 16:47:bb:c5:b2:12:61:f7:3f:df:2e:11:e2:a3:6b: 6a:b4:34:a1:5c:03:20:ca:e7:17:b9:f7:c5:ba:fe: 42:c5:4d:78:f8:c8:de:49:56:61:62:6a:97:3c:ad: 26:58:b7:27:7c:62:11:9b:d4:45:bd:ad:8c:7d:89: 49:5a:f6:06:f1:21:13:78:6c:72:a2:62:87:29:ff: 03:fc:22:9a:0f:f1:9f:9b:45:0b:ec:5c:30:72:f8: 49:40:92:4f:91:f2:3a:d4:4a:82:86:85:94:f8:20: af:e2:62:23:2c:2f:59:3e:6a:cb:41:25:c5:df:50: b3:fa:73:97:3c:ce:31:a1:a1:db:27:e2:28:d1:5a: ec:ec:80:81:2f:c1:b6:1f:c4:e2:fb:52:84:6b:28: 29:6f:ec:3d:1a:99:d8:ff:5e:05:c4:dd:69:7f:bd: d4:57:b7:53:c3:9b:18:02:06:c4:90:89:c5:ed:9a: 9a:6d:4f:52:1d:05:97:04:59:14:24:c1:83:ea:52: b2:ef:77:e8:da:13:08:00:64:97:6f:d1:48:b2:49: 50:04:d2:ef:b3:17:f0:a9:63:59:c8:f9:0e:8b:49: fb:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:79:34:BE:F1:1C:89:DD:7B:98:58:00:79:63:41:78:44:68:04:E6 X509v3 Authority Key Identifier: keyid:F8:03:C3:71:8F:0E:81:20:D4:3E:B0:34:80:9F:6A:8B:38:84:D7:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-APDcY8OgSDUPrA0gJ9qiziE15s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:8e:ec:d6:cf:fa:0d:2d:a3:40:13:fc:dd:1c:7e:4d:b1:2c: 5f:fa:63:71:d3:92:2e:cb:dd:82:13:21:c7:d3:14:36:b5:8b: 1c:86:e2:02:9a:e2:a3:f0:98:54:1d:e7:82:4d:fe:a0:2f:43: 22:88:00:cd:2c:e4:18:17:5a:24:5a:d2:c5:c1:91:ee:4f:3c: ff:90:53:ec:88:67:5f:e7:d5:af:e5:1e:71:ac:9e:3e:2c:ca: 02:22:f2:74:9b:60:4c:04:cd:b8:4e:5c:fc:c2:74:fe:34:26: 29:39:17:bb:dd:e3:15:7d:69:3c:91:4b:74:89:58:d9:31:62: 86:43:61:83:30:4a:e9:a0:2a:71:d2:3c:cb:c2:2b:d6:51:a0: ee:cb:3c:ad:30:dd:7b:64:9b:64:39:31:a9:cb:49:a9:6d:3a: 27:cf:0f:65:b5:b1:b0:54:17:9b:ba:c7:64:04:ca:12:b3:5b: 24:91:d0:d3:66:d2:aa:39:96:32:74:dc:74:57:5e:9f:b4:f2: ae:71:30:df:7c:5b:f2:39:16:8f:f7:64:7e:84:c6:0b:06:6d: a8:9f:73:f1:cb:dc:28:9b:9a:3e:73:48:54:c2:1d:9c:92:31: ab:d8:5f:bf:e8:d3:60:af:c9:47:38:0c:42:0b:4a:3a:ac:3f: 42:31:1e:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM2QjgxMTAvBgNVBAUTKEY4MDNDMzcxOEYwRTgxMjBENDNFQjAzNDgwOUY2QThC Mzg4NEQ3OUIwHhcNMjUwODIzMDIwMjA2WhcNMjUwODMwMDIwMjA2WjAYMRYwFAYD VQQDEw02OGE5MjExZS0wYjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsWHIwWQSQcorafLSF+rwb6FwE573X2MVjyIFXVMWR7vFshJh9z/fLhHio2tq tDShXAMgyucXuffFuv5CxU14+MjeSVZhYmqXPK0mWLcnfGIRm9RFva2MfYlJWvYG 8SETeGxyomKHKf8D/CKaD/Gfm0UL7FwwcvhJQJJPkfI61EqChoWU+CCv4mIjLC9Z PmrLQSXF31Cz+nOXPM4xoaHbJ+Io0Vrs7ICBL8G2H8Ti+1KEaygpb+w9GpnY/14F xN1pf73UV7dTw5sYAgbEkInF7ZqabU9SHQWXBFkUJMGD6lKy73fo2hMIAGSXb9FI sklQBNLvsxfwqWNZyPkOi0n7tQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEh5NL7x HInde5hYAHljQXhEaATmMB8GA1UdIwQYMBaAFPgDw3GPDoEg1D6wNICfaos4hNeb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzZCOC8zODg0MTMxODJB NjMxMUVEQTEyNzIwM0ZDNEY5QUUwMi8tQVBEY1k4T2dTRFVQckEwZ0o5cWl6aUUx NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1BUERjWThPZ1NEVVByQTBnSjlxaXppRTE1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzZCOC8zODg0MTMxODJBNjMxMUVEQTEyNzIwM0ZDNEY5QUUwMi8tQVBEY1k4T2dT RFVQckEwZ0o5cWl6aUUxNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAjuzWz/oNLaNAE/zdHH5NsSxf+mNx05Iuy92CEyHH0xQ2tYschuIC muKj8JhUHeeCTf6gL0MiiADNLOQYF1okWtLFwZHuTzz/kFPsiGdf59Wv5R5xrJ4+ LMoCIvJ0m2BMBM24Tlz8wnT+NCYpORe73eMVfWk8kUt0iVjZMWKGQ2GDMErpoCpx 0jzLwivWUaDuyzytMN17ZJtkOTGpy0mpbTonzw9ltbGwVBebusdkBMoSs1skkdDT ZtKqOZYydNx0V16ftPKucTDffFvyORaP92R+hMYLBm2on3Pxy9wom5o+c0hUwh2c kjGr2F+/6NNgr8lHOAxCC0o6rD9CMR6/ -----END CERTIFICATE-----Generated at Sat Aug 23 21:31:27 2025 by rpki-client