$ rpki-client -vvf rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft File: RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft (raw, json) Hash identifier: 0dG6vt6gC2FndRYDO+DDMJWMG3hM4toeqSa8nsHdifY= Subject key identifier: D4:E7:01:51:7C:55:25:3B:FC:D6:5F:6C:AA:5B:A1:FF:B2:5C:FA:5A Authority key identifier: 45:33:7D:C5:E4:83:9E:49:81:91:29:DE:A2:A9:46:1B:02:1C:D1:90 Certificate issuer: /CN=A91A78A7/serialNumber=45337DC5E4839E49819129DEA2A9461B021CD190 Certificate serial: 02AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTN9xeSDnkmBkSneoqlGGwIc0ZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft Manifest number: 02A6 Signing time: Sat 23 Aug 2025 01:47:09 +0000 Manifest this update: Sat 23 Aug 2025 01:47:08 +0000 Manifest next update: Sat 30 Aug 2025 01:47:08 +0000 Files and hashes: 1: RTN9xeSDnkmBkSneoqlGGwIc0ZA.crl (hash: QCYxSyHdjnBnLrlV85rbN172v7qUn+oS0i/SiAivIL8=) 2: D470449E0E4411ED9C0F5B45C4F9AE02.roa (hash: M5cm8ltbxVdRcxdqwX20eH12vgkHWhKoQMG7Vy7tBQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.crl rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTN9xeSDnkmBkSneoqlGGwIc0ZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 682 (0x2aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A78A7, serialNumber=45337DC5E4839E49819129DEA2A9461B021CD190 Validity Not Before: Aug 23 01:47:08 2025 GMT Not After : Aug 30 01:47:08 2025 GMT Subject: CN=68a91d9d-b05a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:27:7a:c4:c0:1f:a1:3e:03:7e:19:41:c5:49: fd:a2:d1:1a:1e:a6:64:40:03:d7:88:8a:d5:cc:a5: 6d:c7:a2:2e:56:2e:1c:d5:71:92:f2:be:7b:98:72: 83:ae:f1:d8:cc:e1:6a:b3:e9:73:2f:70:43:83:43: 36:72:b9:fa:6e:4d:e8:b1:1e:b9:5e:12:26:f3:7a: 54:c9:f9:3d:e5:b8:3c:03:34:b0:d9:45:3e:d7:87: d6:db:12:8c:48:74:61:61:bb:94:e8:a1:62:10:20: 68:2b:32:78:3b:72:d8:f8:7a:80:05:23:92:a6:cc: 08:c4:71:52:23:4e:da:00:36:d5:d8:dd:db:c7:ce: fc:86:5a:49:34:bc:99:98:1d:12:ef:8d:55:6c:94: 6a:a5:4e:91:e1:86:0f:c9:b6:c4:fe:80:d6:5f:62: 73:11:ef:14:69:29:18:c0:36:e7:ea:f7:4d:e3:8d: 08:c5:3e:5f:5e:2b:b7:f9:10:02:dc:72:54:54:c0: 92:3c:03:bd:ad:f8:a8:4a:bd:e9:eb:7f:8a:c8:d0: 43:dd:b3:1c:57:da:f3:74:8e:d4:ed:f2:94:bd:5f: d0:87:0c:cf:fa:1f:27:08:ab:f6:1b:a7:69:d8:d2: 1e:eb:7b:6a:f9:7f:6c:ab:51:0f:69:0c:67:28:83: 46:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:E7:01:51:7C:55:25:3B:FC:D6:5F:6C:AA:5B:A1:FF:B2:5C:FA:5A X509v3 Authority Key Identifier: keyid:45:33:7D:C5:E4:83:9E:49:81:91:29:DE:A2:A9:46:1B:02:1C:D1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTN9xeSDnkmBkSneoqlGGwIc0ZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:84:9c:e0:cf:c0:cd:e7:89:5a:b5:74:c7:26:38:8a:7b:8b: e1:57:92:69:2a:07:18:74:c8:06:60:c9:62:7f:ef:83:ea:f1: 91:56:97:1c:f7:64:c4:61:3b:b7:46:14:5b:6b:07:64:af:db: 52:4b:f4:c8:fd:73:8d:82:3b:9e:15:d5:8e:79:d7:53:92:11: 41:57:32:f3:87:be:ef:c2:de:a7:53:44:3d:77:31:e2:21:45: a2:21:1d:6f:2b:c7:c6:a2:ee:e6:69:76:91:20:f8:4c:91:18: 32:ab:bd:e0:51:63:cd:71:6c:7f:f8:be:09:ba:04:f9:cc:db: f6:4e:d6:92:18:6f:b7:45:58:35:d2:c8:cf:9b:1a:9c:da:34: 42:06:50:de:53:bb:80:96:3b:cc:8d:58:98:a6:65:03:52:89: 53:33:3d:c1:a1:dc:b1:70:16:05:cc:6b:24:e0:74:f2:ba:b5: a8:f6:af:b1:c2:ca:0e:73:48:0b:e1:52:d0:6e:30:b1:23:a8: c0:28:21:f9:5e:72:5d:29:97:fd:e7:76:f4:6b:25:37:a8:54: 49:d8:f5:73:4e:0b:31:47:c7:bf:af:cd:58:82:7a:1d:c0:81: 2b:a1:9e:e1:8c:25:f2:a2:d2:f8:73:0b:69:8f:1a:76:90:5d: 2e:d4:5f:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc4QTcxMTAvBgNVBAUTKDQ1MzM3REM1RTQ4MzlFNDk4MTkxMjlERUEyQTk0NjFC MDIxQ0QxOTAwHhcNMjUwODIzMDE0NzA4WhcNMjUwODMwMDE0NzA4WjAYMRYwFAYD VQQDEw02OGE5MWQ5ZC1iMDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqyd6xMAfoT4DfhlBxUn9otEaHqZkQAPXiIrVzKVtx6IuVi4c1XGS8r57mHKD rvHYzOFqs+lzL3BDg0M2crn6bk3osR65XhIm83pUyfk95bg8AzSw2UU+14fW2xKM SHRhYbuU6KFiECBoKzJ4O3LY+HqABSOSpswIxHFSI07aADbV2N3bx878hlpJNLyZ mB0S741VbJRqpU6R4YYPybbE/oDWX2JzEe8UaSkYwDbn6vdN440IxT5fXiu3+RAC 3HJUVMCSPAO9rfioSr3p63+KyNBD3bMcV9rzdI7U7fKUvV/QhwzP+h8nCKv2G6dp 2NIe63tq+X9sq1EPaQxnKINGFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNTnAVF8 VSU7/NZfbKpbof+yXPpaMB8GA1UdIwQYMBaAFEUzfcXkg55JgZEp3qKpRhsCHNGQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzhBNy8xMDRCMTk0NjBD QkQxMUVEQUE3N0QxMkRDNEY5QUUwMi9SVE45eGVTRG5rbUJrU25lb3FsR0d3SWMw WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JUTjl4ZVNEbmttQmtTbmVvcWxHR3dJYzBaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzhBNy8xMDRCMTk0NjBDQkQxMUVEQUE3N0QxMkRDNEY5QUUwMi9SVE45eGVTRG5r bUJrU25lb3FsR0d3SWMwWkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlhJzgz8DN54latXTHJjiKe4vhV5JpKgcYdMgGYMlif++D6vGRVpcc 92TEYTu3RhRbawdkr9tSS/TI/XONgjueFdWOeddTkhFBVzLzh77vwt6nU0Q9dzHi IUWiIR1vK8fGou7maXaRIPhMkRgyq73gUWPNcWx/+L4JugT5zNv2TtaSGG+3RVg1 0sjPmxqc2jRCBlDeU7uAljvMjViYpmUDUolTMz3BodyxcBYFzGsk4HTyurWo9q+x wsoOc0gL4VLQbjCxI6jAKCH5XnJdKZf953b0ayU3qFRJ2PVzTgsxR8e/r81Ygnod wIEroZ7hjCXyotL4cwtpjxp2kF0u1F9y -----END CERTIFICATE-----Generated at Sat Aug 23 20:28:00 2025 by rpki-client