$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.mft File: r-73ovgxqXVbE7N-tum5HYHoqeg.mft (raw, json) Hash identifier: Q2qHsZqWJZF08wibD/KJ5kFdHq/4R9drb7Rmrsexjg4= Subject key identifier: A3:CB:62:52:64:E2:B7:F6:33:87:94:85:0C:53:A2:36:E6:67:69:77 Authority key identifier: AF:EE:F7:A2:F8:31:A9:75:5B:13:B3:7E:B6:E9:B9:1D:81:E8:A9:E8 Certificate issuer: /CN=A91A6F2D/serialNumber=AFEEF7A2F831A9755B13B37EB6E9B91D81E8A9E8 Certificate serial: 0602 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-73ovgxqXVbE7N-tum5HYHoqeg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.mft Manifest number: 05FD Signing time: Fri 22 Aug 2025 23:05:02 +0000 Manifest this update: Fri 22 Aug 2025 23:05:01 +0000 Manifest next update: Fri 29 Aug 2025 23:05:01 +0000 Files and hashes: 1: r-73ovgxqXVbE7N-tum5HYHoqeg.crl (hash: vd69QkxQ7m6O4Kuyj0/d3CQgN3dllMqqzs0c+rejGM8=) 2: C17E1DDCBC7111EBB1423E5FC4F9AE02.roa (hash: LpIzyfQvDqArXC9hZJ5ZqGifDCSL9ldak3ZwH8S2NRY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.crl rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-73ovgxqXVbE7N-tum5HYHoqeg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:05:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1538 (0x602) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6F2D, serialNumber=AFEEF7A2F831A9755B13B37EB6E9B91D81E8A9E8 Validity Not Before: Aug 22 23:05:01 2025 GMT Not After : Aug 29 23:05:01 2025 GMT Subject: CN=68a8f79e-9627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:cd:10:fc:19:9a:d3:65:35:75:a7:4b:f6:85: 63:8c:9e:23:96:4d:40:cd:c1:9f:cd:78:c6:63:0c: 94:89:cd:a2:b1:6e:53:c0:2e:7c:96:75:f6:37:8c: 14:f5:80:22:80:55:18:6a:74:5e:c1:c2:89:30:fe: 17:33:0e:e4:ad:0e:48:da:b5:d6:f0:e4:48:0a:47: 0a:6c:96:5d:15:8d:cd:95:a8:44:a3:2f:ea:2a:e6: 52:9b:bf:94:0a:4e:48:44:6f:2d:8a:7e:d9:fa:af: 2a:fd:50:1a:89:48:76:68:a4:8d:b8:78:b4:2e:50: b1:57:b1:cc:d3:f9:33:23:98:71:a5:a9:55:62:60: ea:e0:d8:3a:3d:e0:57:42:a6:7c:1a:e4:cd:7f:b3: 59:e2:21:e1:62:08:c2:64:fa:fa:bb:da:9f:f7:82: 07:cb:03:fb:b3:8c:6e:77:b6:d1:59:1e:b4:27:ed: 35:8d:b8:f0:d2:9c:ef:56:d7:98:f3:c0:df:dd:0e: a2:04:54:ef:d3:cd:0b:6c:02:df:34:92:eb:77:ad: d4:b1:70:6a:2a:e0:8f:bb:90:95:17:e3:68:54:d2: d6:26:e5:65:57:3a:43:b5:16:a1:0b:a6:1d:b4:8a: 57:41:82:62:46:e5:c3:ce:21:33:f8:30:8d:c3:a8: e4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:CB:62:52:64:E2:B7:F6:33:87:94:85:0C:53:A2:36:E6:67:69:77 X509v3 Authority Key Identifier: keyid:AF:EE:F7:A2:F8:31:A9:75:5B:13:B3:7E:B6:E9:B9:1D:81:E8:A9:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-73ovgxqXVbE7N-tum5HYHoqeg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:ca:0f:b1:7a:73:6f:bb:a3:e6:53:76:bd:19:74:93:9c:13: 7f:e2:a3:e3:9f:78:64:0e:bf:54:c1:a8:fa:ad:e8:fd:84:32: 0b:e4:f7:71:3c:1c:70:68:91:c0:04:2a:70:73:aa:8f:f8:53: d3:03:2e:d1:69:96:fb:9c:d1:28:70:98:cf:00:d7:59:6f:43: 55:cb:8a:cb:b4:53:20:f1:94:4d:1b:05:78:4d:0e:f1:c6:c1: d9:8d:18:e5:01:77:6e:98:cc:44:b4:e5:0b:48:ae:eb:5f:9a: fa:04:2a:e9:d1:63:a1:4e:fd:e9:7c:a3:d6:e6:9c:65:49:18: 11:89:c0:ee:18:b3:2b:bd:29:a2:21:84:3e:de:67:bf:1e:8e: b0:7c:1a:2e:a1:ca:71:af:21:29:a1:70:1a:ab:07:d6:e1:fc: d5:4f:81:8a:23:2c:bc:18:35:8b:59:87:15:c7:d4:1a:57:6a: 65:be:ac:2e:48:2b:bf:dc:f5:c5:e0:cf:86:d1:70:f4:a8:7b: 6d:43:3a:e0:e4:98:b6:e5:33:12:4d:c7:e0:01:ac:e1:05:2f: b6:f3:bc:b2:1a:b4:4f:9b:6f:50:f9:11:c2:62:8f:8e:16:4b: db:65:fa:d9:44:17:6b:ee:54:65:5d:a5:fe:f7:cc:ec:7f:9d: 0f:7e:5c:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZGMkQxMTAvBgNVBAUTKEFGRUVGN0EyRjgzMUE5NzU1QjEzQjM3RUI2RTlCOTFE ODFFOEE5RTgwHhcNMjUwODIyMjMwNTAxWhcNMjUwODI5MjMwNTAxWjAYMRYwFAYD VQQDEw02OGE4Zjc5ZS05NjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzs0Q/Bma02U1dadL9oVjjJ4jlk1AzcGfzXjGYwyUic2isW5TwC58lnX2N4wU 9YAigFUYanRewcKJMP4XMw7krQ5I2rXW8ORICkcKbJZdFY3NlahEoy/qKuZSm7+U Ck5IRG8tin7Z+q8q/VAaiUh2aKSNuHi0LlCxV7HM0/kzI5hxpalVYmDq4Ng6PeBX QqZ8GuTNf7NZ4iHhYgjCZPr6u9qf94IHywP7s4xud7bRWR60J+01jbjw0pzvVteY 88Df3Q6iBFTv080LbALfNJLrd63UsXBqKuCPu5CVF+NoVNLWJuVlVzpDtRahC6Yd tIpXQYJiRuXDziEz+DCNw6jkywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKPLYlJk 4rf2M4eUhQxTojbmZ2l3MB8GA1UdIwQYMBaAFK/u96L4Mal1WxOzfrbpuR2B6Kno MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkYyRC9GRDg2MEY2OEJD NkUxMUVCQjhDNjQ4NTRDNEY5QUUwMi9yLTczb3ZneHFYVmJFN04tdHVtNUhZSG9x ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ItNzNvdmd4cVhWYkU3Ti10dW01SFlIb3FlZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkYyRC9GRDg2MEY2OEJDNkUxMUVCQjhDNjQ4NTRDNEY5QUUwMi9yLTczb3ZneHFY VmJFN04tdHVtNUhZSG9xZWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjyg+xenNvu6PmU3a9GXSTnBN/4qPjn3hkDr9Uwaj6rej9hDIL5Pdx PBxwaJHABCpwc6qP+FPTAy7RaZb7nNEocJjPANdZb0NVy4rLtFMg8ZRNGwV4TQ7x xsHZjRjlAXdumMxEtOULSK7rX5r6BCrp0WOhTv3pfKPW5pxlSRgRicDuGLMrvSmi IYQ+3me/Ho6wfBouocpxryEpoXAaqwfW4fzVT4GKIyy8GDWLWYcVx9QaV2plvqwu SCu/3PXF4M+G0XD0qHttQzrg5Ji25TMSTcfgAazhBS+287yyGrRPm29Q+RHCYo+O FkvbZfrZRBdr7lRlXaX+98zsf50Pflwg -----END CERTIFICATE-----Generated at Sat Aug 23 23:59:20 2025 by rpki-client