$ rpki-client -vvf rpki.apnic.net/member_repository/A91A657F/E94BCC48603211EFA5F8EE7EC4F9AE02/R_rmMixRsd0CJJdveh0rkibQkOo.mft File: R_rmMixRsd0CJJdveh0rkibQkOo.mft (raw, json) Hash identifier: aApSTjgXUE3mK0IMyAqrbRHoUbYxS72BySkg/cgn/Pg= Subject key identifier: F8:58:B3:9F:C6:95:3D:A3:B5:B5:2C:C1:9F:70:30:A2:DE:05:70:71 Authority key identifier: 47:FA:E6:32:2C:51:B1:DD:02:24:97:6F:7A:1D:2B:92:26:D0:90:EA Certificate issuer: /CN=A91A657F/serialNumber=47FAE6322C51B1DD0224976F7A1D2B9226D090EA Certificate serial: C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_rmMixRsd0CJJdveh0rkibQkOo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A657F/E94BCC48603211EFA5F8EE7EC4F9AE02/R_rmMixRsd0CJJdveh0rkibQkOo.mft Manifest number: C2 Signing time: Sat 23 Aug 2025 06:06:21 +0000 Manifest this update: Sat 23 Aug 2025 06:06:20 +0000 Manifest next update: Sat 30 Aug 2025 06:06:20 +0000 Files and hashes: 1: R_rmMixRsd0CJJdveh0rkibQkOo.crl (hash: Tz6oulK5ivZfKv5as6WB/PYkzZsTSmqpUoqXvO2ttWc=) 2: 7564FD08603311EFA997483AC4F9AE02.roa (hash: j5L2oMlmz/AOJc/zBZV6x799FBe2Mb9/ypYCcp0WrrY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A657F/E94BCC48603211EFA5F8EE7EC4F9AE02/R_rmMixRsd0CJJdveh0rkibQkOo.crl rsync://rpki.apnic.net/member_repository/A91A657F/E94BCC48603211EFA5F8EE7EC4F9AE02/R_rmMixRsd0CJJdveh0rkibQkOo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_rmMixRsd0CJJdveh0rkibQkOo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:06:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 198 (0xc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A657F, serialNumber=47FAE6322C51B1DD0224976F7A1D2B9226D090EA Validity Not Before: Aug 23 06:06:20 2025 GMT Not After : Aug 30 06:06:20 2025 GMT Subject: CN=68a95a5c-c8a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ea:63:9b:52:dd:b3:1f:35:69:57:58:c5:e3: 6b:82:88:a2:e1:94:76:24:0b:e8:16:93:c3:75:0e: de:4c:6a:a5:0c:94:ae:e1:95:48:1b:5c:f0:e0:e3: f6:de:a6:80:a7:13:cd:e0:cd:d6:de:47:dc:a0:84: fb:c6:37:68:60:17:46:fa:81:39:49:35:a2:69:d1: 9b:e1:48:80:79:d0:82:71:57:93:c2:67:d5:a2:f5: e8:b1:f1:ea:28:ec:93:aa:f5:e0:6c:75:27:03:3c: 24:61:fa:23:7f:f1:bb:b6:a0:06:28:1c:af:de:66: f7:5c:6c:9e:f5:ac:ea:9d:41:a7:7d:f2:bf:1b:7e: 36:98:00:43:75:89:0b:64:fb:38:de:3d:6a:78:34: 3c:80:f2:64:94:7f:67:33:b7:b6:51:b4:9b:1e:3c: 71:06:be:c3:44:4a:6b:5b:28:d9:f2:86:91:07:37: ca:87:20:08:dc:d3:a4:6c:b4:33:63:9d:d7:25:12: c8:fa:05:4f:9f:85:89:de:38:a4:04:60:87:ad:2b: 5f:15:14:fe:a9:a0:d2:ff:bd:5d:85:fe:65:34:a9: 1c:45:5f:d6:5f:3f:44:e7:85:34:62:68:e4:57:2f: 1b:94:cf:e3:f0:a0:15:19:e4:08:c8:74:70:11:46: 7f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:58:B3:9F:C6:95:3D:A3:B5:B5:2C:C1:9F:70:30:A2:DE:05:70:71 X509v3 Authority Key Identifier: keyid:47:FA:E6:32:2C:51:B1:DD:02:24:97:6F:7A:1D:2B:92:26:D0:90:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A657F/E94BCC48603211EFA5F8EE7EC4F9AE02/R_rmMixRsd0CJJdveh0rkibQkOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_rmMixRsd0CJJdveh0rkibQkOo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A657F/E94BCC48603211EFA5F8EE7EC4F9AE02/R_rmMixRsd0CJJdveh0rkibQkOo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:66:98:9c:92:1a:bb:bc:7a:a4:cf:8c:97:5f:5c:74:6a:e2: 2b:e5:85:a5:e5:e7:8a:9a:0f:93:b5:1f:da:47:f5:37:c6:f9: e1:92:f5:6c:ea:a4:0b:c8:14:20:86:0c:e6:6b:48:2f:80:74: 2e:bb:41:31:fb:15:74:0f:63:62:d0:a8:9c:5f:6a:16:eb:0e: 9f:3c:14:49:88:cc:0b:8e:45:63:6e:f3:9e:7d:bf:67:2f:27: 7f:56:32:d9:3f:30:46:0a:9b:15:e0:78:58:f3:2a:20:e0:63: 6f:88:4f:ad:46:f3:4a:20:ea:87:12:ac:32:d3:9b:e0:07:34: 3d:90:cb:5a:e0:c8:11:b3:14:d8:ec:72:3c:0e:fe:e2:ee:49: f2:24:c7:61:4b:f5:aa:3d:fe:69:45:80:12:ee:b0:1a:5f:da: b2:00:7e:6f:9b:03:8d:7a:ff:7a:e0:36:fd:bf:08:6e:43:11: 3c:b9:50:8b:ac:67:4f:6c:12:50:fc:9b:24:0e:6a:72:c8:6a: dd:04:c3:61:52:f0:dc:28:f4:86:32:3d:ba:ef:5e:87:47:51: c9:bf:22:6a:71:86:c0:42:41:e2:b8:44:cd:56:a5:3e:c5:09: ad:c5:78:13:1a:7d:3a:9f:65:c1:0a:e3:17:93:eb:e9:b2:23: 7f:9b:4f:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY1N0YxMTAvBgNVBAUTKDQ3RkFFNjMyMkM1MUIxREQwMjI0OTc2RjdBMUQyQjky MjZEMDkwRUEwHhcNMjUwODIzMDYwNjIwWhcNMjUwODMwMDYwNjIwWjAYMRYwFAYD VQQDEw02OGE5NWE1Yy1jOGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyepjm1Ldsx81aVdYxeNrgoii4ZR2JAvoFpPDdQ7eTGqlDJSu4ZVIG1zw4OP2 3qaApxPN4M3W3kfcoIT7xjdoYBdG+oE5STWiadGb4UiAedCCcVeTwmfVovXosfHq KOyTqvXgbHUnAzwkYfojf/G7tqAGKByv3mb3XGye9azqnUGnffK/G342mABDdYkL ZPs43j1qeDQ8gPJklH9nM7e2UbSbHjxxBr7DREprWyjZ8oaRBzfKhyAI3NOkbLQz Y53XJRLI+gVPn4WJ3jikBGCHrStfFRT+qaDS/71dhf5lNKkcRV/WXz9E54U0Ymjk Vy8blM/j8KAVGeQIyHRwEUZ/aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPhYs5/G lT2jtbUswZ9wMKLeBXBxMB8GA1UdIwQYMBaAFEf65jIsUbHdAiSXb3odK5Im0JDq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjU3Ri9FOTRCQ0M0ODYw MzIxMUVGQTVGOEVFN0VDNEY5QUUwMi9SX3JtTWl4UnNkMENKSmR2ZWgwcmtpYlFr T28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Jfcm1NaXhSc2QwQ0pKZHZlaDBya2liUWtPby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjU3Ri9FOTRCQ0M0ODYwMzIxMUVGQTVGOEVFN0VDNEY5QUUwMi9SX3JtTWl4UnNk MENKSmR2ZWgwcmtpYlFrT28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/Zpickhq7vHqkz4yXX1x0auIr5YWl5eeKmg+TtR/aR/U3xvnhkvVs 6qQLyBQghgzma0gvgHQuu0Ex+xV0D2Ni0KicX2oW6w6fPBRJiMwLjkVjbvOefb9n Lyd/VjLZPzBGCpsV4HhY8yog4GNviE+tRvNKIOqHEqwy05vgBzQ9kMta4MgRsxTY 7HI8Dv7i7knyJMdhS/WqPf5pRYAS7rAaX9qyAH5vmwONev964Db9vwhuQxE8uVCL rGdPbBJQ/JskDmpyyGrdBMNhUvDcKPSGMj26716HR1HJvyJqcYbAQkHiuETNVqU+ xQmtxXgTGn06n2XBCuMXk+vpsiN/m08+ -----END CERTIFICATE-----Generated at Sat Aug 23 20:13:03 2025 by rpki-client