$ rpki-client -vvf rpki.apnic.net/member_repository/A91A679F/A1525F6C2F9211EBB3EBAF29C4F9AE02/Ny468IjbN1qP-RmFiy3MXH_Epeg.mft File: Ny468IjbN1qP-RmFiy3MXH_Epeg.mft (raw, json) Hash identifier: lV7QtNTcKg8Z4669faylM+430ko/vsknGIH1GQJMm1s= Subject key identifier: 51:26:CE:19:93:91:2F:98:5D:A1:CE:D0:AA:EB:D2:00:BA:D5:2D:77 Authority key identifier: 37:2E:3A:F0:88:DB:37:5A:8F:F9:19:85:8B:2D:CC:5C:7F:C4:A5:E8 Certificate issuer: /CN=A91A679F/serialNumber=372E3AF088DB375A8FF919858B2DCC5C7FC4A5E8 Certificate serial: 077B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny468IjbN1qP-RmFiy3MXH_Epeg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A679F/A1525F6C2F9211EBB3EBAF29C4F9AE02/Ny468IjbN1qP-RmFiy3MXH_Epeg.mft Manifest number: 0768 Signing time: Fri 22 Aug 2025 21:46:51 +0000 Manifest this update: Fri 22 Aug 2025 21:46:51 +0000 Manifest next update: Fri 29 Aug 2025 21:46:51 +0000 Files and hashes: 1: Ny468IjbN1qP-RmFiy3MXH_Epeg.crl (hash: JbaYjhR8wrlBYwitzIhujA/pIJ7t3BVlO237gz6QINM=) 2: B033793C686D11EE8607594CC4F9AE02.roa (hash: JOi7OHLhFtdHcYqhgYyNkkEIbuwvBfapNIuWdidQbmc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A679F/A1525F6C2F9211EBB3EBAF29C4F9AE02/Ny468IjbN1qP-RmFiy3MXH_Epeg.crl rsync://rpki.apnic.net/member_repository/A91A679F/A1525F6C2F9211EBB3EBAF29C4F9AE02/Ny468IjbN1qP-RmFiy3MXH_Epeg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny468IjbN1qP-RmFiy3MXH_Epeg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1915 (0x77b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A679F, serialNumber=372E3AF088DB375A8FF919858B2DCC5C7FC4A5E8 Validity Not Before: Aug 22 21:46:51 2025 GMT Not After : Aug 29 21:46:51 2025 GMT Subject: CN=68a8e54b-ee09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b1:ab:d0:39:13:2f:ee:b9:ed:07:0a:61:51: 32:d0:ab:66:ab:1f:0e:93:b0:06:a1:9e:d1:07:a0: ce:f8:65:09:37:82:46:82:1e:2f:89:70:ee:b1:6d: ce:0e:45:6f:50:90:df:53:66:63:e9:cb:a1:d8:a9: 54:01:50:26:85:d3:50:03:48:0b:6a:12:56:a2:30: ae:ac:ce:c2:d3:b4:73:7e:58:7b:4c:1f:6c:df:9c: 0f:ba:7c:80:bc:29:5e:a3:ad:64:08:9e:58:83:12: dc:15:63:95:6b:65:ef:f6:a4:eb:c7:ef:c0:bd:52: fc:86:44:cc:0e:ae:f7:76:42:9d:63:a1:f0:d6:ea: c8:f0:c9:e3:c4:18:5f:57:b1:22:32:a6:68:df:b6: 8a:15:d6:3e:92:c3:85:6c:fa:0d:14:2e:ad:31:04: b1:6d:c1:e1:b0:cd:63:c7:42:77:7a:f5:37:9e:ac: d7:5b:ac:32:fa:bf:ca:53:e2:5e:00:a6:7b:60:ce: bf:35:5f:2d:15:9a:d2:ff:fb:43:f4:81:8e:7d:5a: 5c:25:10:38:be:e0:f3:b7:75:2d:85:3e:02:ce:9c: 15:b1:e5:f5:28:4a:85:53:21:0a:64:e1:89:c5:6f: aa:e6:c6:c7:fa:68:89:bb:13:ce:a5:53:6b:35:21: 03:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:26:CE:19:93:91:2F:98:5D:A1:CE:D0:AA:EB:D2:00:BA:D5:2D:77 X509v3 Authority Key Identifier: keyid:37:2E:3A:F0:88:DB:37:5A:8F:F9:19:85:8B:2D:CC:5C:7F:C4:A5:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A679F/A1525F6C2F9211EBB3EBAF29C4F9AE02/Ny468IjbN1qP-RmFiy3MXH_Epeg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny468IjbN1qP-RmFiy3MXH_Epeg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A679F/A1525F6C2F9211EBB3EBAF29C4F9AE02/Ny468IjbN1qP-RmFiy3MXH_Epeg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:75:25:f5:86:b9:f3:78:5a:fc:d1:a4:04:69:aa:3a:8d:9b: ff:b5:4e:c8:c9:2d:47:81:be:d9:b8:a2:1e:ca:72:f3:48:fe: dd:dd:3c:fa:6a:94:05:85:7b:9d:09:7c:b4:4e:ee:cf:51:d7: b8:e9:08:f8:d4:fc:ea:87:81:9d:6b:28:cd:36:f8:20:a0:1d: 03:b5:8e:04:06:aa:65:b1:9f:05:cc:15:1c:25:4e:84:38:dd: 29:f8:f6:20:bc:8c:fe:d3:3f:67:7f:08:41:5e:da:4b:d7:46: 81:43:e6:c3:b0:e3:ec:b8:65:0e:94:44:68:f4:87:9e:84:77: 5c:5d:eb:34:f5:f7:3b:6e:0e:b5:a6:5b:bc:cf:27:53:62:87: 8f:8b:67:cc:51:c8:1f:fb:ac:c7:bd:93:ef:a6:7a:80:90:14: 13:65:09:21:77:c3:7f:74:72:05:c6:d4:19:24:f3:d8:0a:7d: b5:f1:3c:21:87:5b:e6:bb:de:97:4d:03:3e:b5:32:5b:08:a6: f4:a7:8f:fa:f7:20:5f:a7:4a:46:c9:8b:1c:61:14:db:43:a3: 84:12:cc:b7:6e:2e:69:73:44:07:ef:2e:0b:c8:93:9a:92:cd: 53:6e:f9:60:91:ff:22:1c:a6:a7:f2:1c:7a:59:54:4c:be:ea: 07:19:85:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY3OUYxMTAvBgNVBAUTKDM3MkUzQUYwODhEQjM3NUE4RkY5MTk4NThCMkRDQzVD N0ZDNEE1RTgwHhcNMjUwODIyMjE0NjUxWhcNMjUwODI5MjE0NjUxWjAYMRYwFAYD VQQDEw02OGE4ZTU0Yi1lZTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxrGr0DkTL+657QcKYVEy0Ktmqx8Ok7AGoZ7RB6DO+GUJN4JGgh4viXDusW3O DkVvUJDfU2Zj6cuh2KlUAVAmhdNQA0gLahJWojCurM7C07Rzflh7TB9s35wPunyA vCleo61kCJ5YgxLcFWOVa2Xv9qTrx+/AvVL8hkTMDq73dkKdY6Hw1urI8MnjxBhf V7EiMqZo37aKFdY+ksOFbPoNFC6tMQSxbcHhsM1jx0J3evU3nqzXW6wy+r/KU+Je AKZ7YM6/NV8tFZrS//tD9IGOfVpcJRA4vuDzt3UthT4CzpwVseX1KEqFUyEKZOGJ xW+q5sbH+miJuxPOpVNrNSEDCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFEmzhmT kS+YXaHO0Krr0gC61S13MB8GA1UdIwQYMBaAFDcuOvCI2zdaj/kZhYstzFx/xKXo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjc5Ri9BMTUyNUY2QzJG OTIxMUVCQjNFQkFGMjlDNEY5QUUwMi9OeTQ2OElqYk4xcVAtUm1GaXkzTVhIX0Vw ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL055NDY4SWpiTjFxUC1SbUZpeTNNWEhfRXBlZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Njc5Ri9BMTUyNUY2QzJGOTIxMUVCQjNFQkFGMjlDNEY5QUUwMi9OeTQ2OElqYk4x cVAtUm1GaXkzTVhIX0VwZWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDdSX1hrnzeFr80aQEaao6jZv/tU7IyS1Hgb7ZuKIeynLzSP7d3Tz6 apQFhXudCXy0Tu7PUde46Qj41Pzqh4GdayjNNvggoB0DtY4EBqplsZ8FzBUcJU6E ON0p+PYgvIz+0z9nfwhBXtpL10aBQ+bDsOPsuGUOlERo9IeehHdcXes09fc7bg61 plu8zydTYoePi2fMUcgf+6zHvZPvpnqAkBQTZQkhd8N/dHIFxtQZJPPYCn218Twh h1vmu96XTQM+tTJbCKb0p4/69yBfp0pGyYscYRTbQ6OEEsy3bi5pc0QH7y4LyJOa ks1Tbvlgkf8iHKan8hx6WVRMvuoHGYUb -----END CERTIFICATE-----Generated at Sat Aug 23 14:21:40 2025 by rpki-client