$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft File: PoReqE4RAwvCoQYTCJefeYoSET8.mft (raw, json) Hash identifier: 8YM2Zg+ROx5FFkdW3cVcs4AKTkUpaXvM5Smg9oLBAfI= Subject key identifier: 78:FD:37:27:D0:5F:87:0C:5A:60:3F:4C:EE:A1:30:CF:8A:7C:5B:DC Authority key identifier: 3E:84:5E:A8:4E:11:03:0B:C2:A1:06:13:08:97:9F:79:8A:12:11:3F Certificate issuer: /CN=A91A6BF5/serialNumber=3E845EA84E11030BC2A1061308979F798A12113F Certificate serial: 0C29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PoReqE4RAwvCoQYTCJefeYoSET8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft Manifest number: 0C21 Signing time: Fri 22 Aug 2025 18:48:20 +0000 Manifest this update: Fri 22 Aug 2025 18:48:20 +0000 Manifest next update: Fri 29 Aug 2025 18:48:20 +0000 Files and hashes: 1: PoReqE4RAwvCoQYTCJefeYoSET8.crl (hash: 6j4VGgdKPrJxrWbrCKF5vTIV8dKSwSeYsgwXpa5is4o=) 2: 03EE880413F511EA8D120C65C4F9AE02.roa (hash: RpJ/3A2zXQw9C0hNB2vN4upiPschgzxuaxvOtctAWMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.crl rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PoReqE4RAwvCoQYTCJefeYoSET8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:48:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3113 (0xc29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6BF5, serialNumber=3E845EA84E11030BC2A1061308979F798A12113F Validity Not Before: Aug 22 18:48:20 2025 GMT Not After : Aug 29 18:48:20 2025 GMT Subject: CN=68a8bb74-75ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2f:fa:6c:7d:4b:56:bc:82:ff:4a:14:43:18: 3a:a3:c6:a5:8b:99:5c:ce:9c:eb:41:62:ed:8a:d0: 2c:2e:dc:23:e8:0f:12:45:b9:90:60:08:2b:4b:7d: 9e:99:6f:3f:a3:9d:2f:f5:16:f4:c9:5d:49:27:bd: 02:89:aa:59:8b:bd:ac:27:42:bc:24:4e:75:07:61: 16:30:31:f8:29:65:b4:8b:9b:e7:68:c7:fc:59:6f: 90:c5:96:a0:7f:6e:2c:5f:b4:c3:0d:38:7f:ff:f9: 87:29:55:5e:6c:92:ce:75:38:09:6b:65:71:18:27: b7:f8:bd:6d:3d:ee:ef:37:ed:97:ae:dd:b3:43:ab: 3a:1a:1a:0e:0f:f7:32:e0:ef:0b:5f:ba:ea:a4:cd: 66:59:be:5d:4f:8d:92:b3:f2:5e:6d:e6:ce:75:7b: 5c:52:c0:14:93:b6:88:77:84:6a:af:12:4f:71:69: ef:3d:4f:ed:26:25:f7:de:08:6d:46:d0:4d:21:54: 6d:3e:49:ef:2f:f4:a4:b4:5c:db:8f:fb:ee:ae:d4: d4:9e:e0:98:80:f6:7a:95:2d:18:d5:60:3b:15:4c: b7:f4:02:92:59:36:b2:c1:c4:ca:94:75:ca:4c:1e: 42:0e:0e:89:73:3d:4d:e1:65:46:6c:44:26:73:4a: 37:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:FD:37:27:D0:5F:87:0C:5A:60:3F:4C:EE:A1:30:CF:8A:7C:5B:DC X509v3 Authority Key Identifier: keyid:3E:84:5E:A8:4E:11:03:0B:C2:A1:06:13:08:97:9F:79:8A:12:11:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PoReqE4RAwvCoQYTCJefeYoSET8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:43:e2:ff:68:42:72:0f:13:4e:a1:b6:f1:e1:31:63:7e:65: ae:fe:a2:27:24:2c:7c:fa:54:65:64:52:7f:6b:c7:3f:b7:48: 6b:7e:3a:25:5f:0f:ca:4f:f9:41:f8:a5:8e:f7:27:c7:1b:ad: c7:b9:f5:d3:85:b8:b7:7e:d9:18:37:d3:55:df:ec:bd:09:d0: 30:76:7f:75:e1:ae:94:38:32:42:31:62:1c:31:b1:a4:bf:2a: a6:4c:81:b1:0a:c5:62:15:b9:cf:90:62:3a:22:77:df:02:5a: 4a:6c:9f:cf:33:a2:a0:80:da:aa:6b:5d:2f:49:1f:2a:71:84: 9f:ae:62:ec:12:f8:91:b9:6a:97:fe:3e:51:bb:73:27:73:6a: a0:31:85:f9:2d:23:9d:a9:fd:65:41:af:a6:ab:ea:3b:c0:a0: 72:c0:6e:53:af:7c:b4:41:c2:aa:28:fa:46:f2:66:42:a1:7f: 67:1d:bd:ce:f5:30:d0:75:d7:d0:fd:3f:3a:36:8d:ac:69:78: 91:5a:6b:46:5c:ab:db:0d:30:8c:18:55:90:d1:db:50:f3:aa: 55:f9:da:2a:c2:e6:8a:4e:60:75:a9:1d:3b:9d:33:02:b8:ae: 2d:ad:2d:16:d0:cd:55:24:3e:86:31:d9:f5:f1:0e:fc:04:fa: 9e:41:ab:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZCRjUxMTAvBgNVBAUTKDNFODQ1RUE4NEUxMTAzMEJDMkExMDYxMzA4OTc5Rjc5 OEExMjExM0YwHhcNMjUwODIyMTg0ODIwWhcNMjUwODI5MTg0ODIwWjAYMRYwFAYD VQQDEw02OGE4YmI3NC03NWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzC/6bH1LVryC/0oUQxg6o8ali5lczpzrQWLtitAsLtwj6A8SRbmQYAgrS32e mW8/o50v9Rb0yV1JJ70CiapZi72sJ0K8JE51B2EWMDH4KWW0i5vnaMf8WW+QxZag f24sX7TDDTh///mHKVVebJLOdTgJa2VxGCe3+L1tPe7vN+2Xrt2zQ6s6GhoOD/cy 4O8LX7rqpM1mWb5dT42Ss/JebebOdXtcUsAUk7aId4RqrxJPcWnvPU/tJiX33ght RtBNIVRtPknvL/SktFzbj/vurtTUnuCYgPZ6lS0Y1WA7FUy39AKSWTaywcTKlHXK TB5CDg6Jcz1N4WVGbEQmc0o3RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHj9NyfQ X4cMWmA/TO6hMM+KfFvcMB8GA1UdIwQYMBaAFD6EXqhOEQMLwqEGEwiXn3mKEhE/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkJGNS85RDBCNDIyMjEz RjMxMUVBODBCMzc0NUZDNEY5QUUwMi9Qb1JlcUU0UkF3dkNvUVlUQ0plZmVZb1NF VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BvUmVxRTRSQXd2Q29RWVRDSmVmZVlvU0VUOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkJGNS85RDBCNDIyMjEzRjMxMUVBODBCMzc0NUZDNEY5QUUwMi9Qb1JlcUU0UkF3 dkNvUVlUQ0plZmVZb1NFVDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATQ+L/aEJyDxNOobbx4TFjfmWu/qInJCx8+lRlZFJ/a8c/t0hrfjol Xw/KT/lB+KWO9yfHG63HufXThbi3ftkYN9NV3+y9CdAwdn914a6UODJCMWIcMbGk vyqmTIGxCsViFbnPkGI6InffAlpKbJ/PM6KggNqqa10vSR8qcYSfrmLsEviRuWqX /j5Ru3Mnc2qgMYX5LSOdqf1lQa+mq+o7wKBywG5Tr3y0QcKqKPpG8mZCoX9nHb3O 9TDQddfQ/T86No2saXiRWmtGXKvbDTCMGFWQ0dtQ86pV+doqwuaKTmB1qR07nTMC uK4trS0W0M1VJD6GMdn18Q78BPqeQauQ -----END CERTIFICATE-----Generated at Sun Aug 24 03:37:48 2025 by rpki-client