$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft File: 72i9vAcsq0VbbaMWDt-PtsSI3RU.mft (raw, json) Hash identifier: /3/DSlYKsEOwuXaNQSLRIxcXDZHLQs+jDn77xCRZpC8= Subject key identifier: 30:3E:A9:D5:D5:CD:54:AE:CB:38:F1:2B:87:DE:E1:7C:F6:DD:33:72 Authority key identifier: EF:68:BD:BC:07:2C:AB:45:5B:6D:A3:16:0E:DF:8F:B6:C4:88:DD:15 Certificate issuer: /CN=A91A4B9D/serialNumber=EF68BDBC072CAB455B6DA3160EDF8FB6C488DD15 Certificate serial: 34DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft Manifest number: 34D1 Signing time: Fri 22 Aug 2025 15:03:08 +0000 Manifest this update: Fri 22 Aug 2025 15:03:08 +0000 Manifest next update: Fri 29 Aug 2025 15:03:08 +0000 Files and hashes: 1: 72i9vAcsq0VbbaMWDt-PtsSI3RU.crl (hash: ojt1R+v7VZCjLPNVTenADg8s8Ko9ygFjuy/VtTU3UBU=) 2: 43BD42D8C6FA11EEB1BFF11FC4F9AE02.roa (hash: rz7KWjBZEYdZagJgiTo6rpG1kH3c3NzFacklKm2JF8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.crl rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:03:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13533 (0x34dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4B9D, serialNumber=EF68BDBC072CAB455B6DA3160EDF8FB6C488DD15 Validity Not Before: Aug 22 15:03:08 2025 GMT Not After : Aug 29 15:03:08 2025 GMT Subject: CN=68a886ac-8be3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2b:cf:54:10:15:b8:2a:b1:d9:96:9d:e9:f6: 14:c6:95:57:15:4d:c4:97:ec:1f:3e:fc:34:f4:7a: c4:2b:2b:f8:cd:d7:2b:02:1b:1b:50:2a:ca:d3:91: 43:6d:78:ce:a9:a7:71:f6:c9:69:05:9c:39:51:fd: 51:ea:d2:3f:c9:55:7c:99:70:40:9b:d1:97:05:53: 81:95:94:a6:8c:a3:7c:db:00:46:b7:d3:89:e7:1b: 13:d7:71:72:0d:c8:41:ae:a1:c2:77:cf:72:c5:1b: ef:42:32:12:af:90:f3:03:2a:ff:17:b7:fc:52:cf: c3:4b:34:52:d4:7f:6a:ef:0e:ab:47:cd:47:18:43: 47:71:57:87:a4:ba:07:32:61:e0:4e:8e:b9:8e:a6: e4:28:c8:6c:32:1b:d7:f1:72:c2:af:10:6e:eb:de: d1:f6:08:d0:86:be:3e:46:7f:c0:a0:1e:65:0b:f6: 84:04:e0:24:8e:8c:0c:32:7d:e6:e7:bd:64:50:38: c0:c0:23:c4:62:b6:c3:68:91:6e:b7:08:16:d0:35: f5:e2:c8:51:d1:be:b5:e1:c5:88:05:03:ff:2d:6e: 82:7c:eb:7c:7e:e5:0a:b1:1a:a0:2a:aa:f5:ca:0b: 55:55:c4:f7:de:6e:14:0a:e5:db:4a:93:78:21:a2: ff:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:3E:A9:D5:D5:CD:54:AE:CB:38:F1:2B:87:DE:E1:7C:F6:DD:33:72 X509v3 Authority Key Identifier: keyid:EF:68:BD:BC:07:2C:AB:45:5B:6D:A3:16:0E:DF:8F:B6:C4:88:DD:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:10:da:1d:ed:75:fc:be:37:fa:83:d7:a9:db:81:ba:42:ea: 81:98:21:4d:a3:e2:9b:af:9c:34:5f:7c:2b:e0:6f:f6:33:a2: fe:ba:fa:65:f4:a1:20:20:95:82:df:3b:54:7a:b4:dc:a9:f0: f8:7d:16:a5:12:d3:7e:f3:5b:80:44:87:e1:b6:84:8b:0d:f4: cd:91:dd:7d:7c:a4:eb:64:45:3d:9a:bf:7f:93:19:44:19:7e: 67:86:9f:1f:09:c7:c0:e0:8e:9e:38:74:98:21:54:2a:42:65: 76:5c:a6:68:10:69:ba:d4:e3:47:30:d2:03:cd:10:b7:f2:cb: bb:08:dc:b2:e6:33:95:54:55:a0:45:06:1e:e3:e8:46:c9:e4: e6:cb:7c:69:b7:8b:33:1a:b8:30:9f:58:02:d8:e8:d8:ae:c7: 04:4d:63:af:2c:d8:10:1d:91:1c:9d:88:7d:23:a2:a1:2a:a1: ba:d1:2c:a1:6e:49:6f:fc:20:14:22:0d:82:d4:01:e2:f0:1e: 0d:4d:9a:b1:af:f7:eb:27:d6:c7:13:d1:77:76:38:fd:2c:d9: 27:d2:8e:a5:05:91:3e:80:18:e5:63:88:ad:06:17:69:2a:fa: 4e:7f:70:a1:51:68:4b:3b:ec:2c:64:ce:25:1b:14:6b:db:80: fc:30:da:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRCOUQxMTAvBgNVBAUTKEVGNjhCREJDMDcyQ0FCNDU1QjZEQTMxNjBFREY4RkI2 QzQ4OEREMTUwHhcNMjUwODIyMTUwMzA4WhcNMjUwODI5MTUwMzA4WjAYMRYwFAYD VQQDEw02OGE4ODZhYy04YmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsivPVBAVuCqx2Zad6fYUxpVXFU3El+wfPvw09HrEKyv4zdcrAhsbUCrK05FD bXjOqadx9slpBZw5Uf1R6tI/yVV8mXBAm9GXBVOBlZSmjKN82wBGt9OJ5xsT13Fy DchBrqHCd89yxRvvQjISr5DzAyr/F7f8Us/DSzRS1H9q7w6rR81HGENHcVeHpLoH MmHgTo65jqbkKMhsMhvX8XLCrxBu697R9gjQhr4+Rn/AoB5lC/aEBOAkjowMMn3m 571kUDjAwCPEYrbDaJFutwgW0DX14shR0b614cWIBQP/LW6CfOt8fuUKsRqgKqr1 ygtVVcT33m4UCuXbSpN4IaL/xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDA+qdXV zVSuyzjxK4fe4Xz23TNyMB8GA1UdIwQYMBaAFO9ovbwHLKtFW22jFg7fj7bEiN0V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEI5RC85NUFEMDM4ODFE OUUxMUUyODgwRTg2OEUwOEIwMkNEMi83Mmk5dkFjc3EwVmJiYU1XRHQtUHRzU0kz UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcyaTl2QWNzcTBWYmJhTVdEdC1QdHNTSTNSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEI5RC85NUFEMDM4ODFEOUUxMUUyODgwRTg2OEUwOEIwMkNEMi83Mmk5dkFjc3Ew VmJiYU1XRHQtUHRzU0kzUlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3ENod7XX8vjf6g9ep24G6QuqBmCFNo+Kbr5w0X3wr4G/2M6L+uvpl 9KEgIJWC3ztUerTcqfD4fRalEtN+81uARIfhtoSLDfTNkd19fKTrZEU9mr9/kxlE GX5nhp8fCcfA4I6eOHSYIVQqQmV2XKZoEGm61ONHMNIDzRC38su7CNyy5jOVVFWg RQYe4+hGyeTmy3xpt4szGrgwn1gC2OjYrscETWOvLNgQHZEcnYh9I6KhKqG60Syh bklv/CAUIg2C1AHi8B4NTZqxr/frJ9bHE9F3djj9LNkn0o6lBZE+gBjlY4itBhdp KvpOf3ChUWhLO+wsZM4lGxRr24D8MNr5 -----END CERTIFICATE-----Generated at Sun Aug 24 00:48:46 2025 by rpki-client