$ rpki-client -vvf rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.mft File: 2K83cS1WsbaT720D40bADPPwST4.mft (raw, json) Hash identifier: /4ETJocX20fSC+83F+4xpRybkMBJ0YZrQ4x5J4EMIDE= Subject key identifier: A5:78:1F:C4:7A:43:4F:AC:45:C7:03:64:A5:55:75:C5:DA:63:68:58 Authority key identifier: D8:AF:37:71:2D:56:B1:B6:93:EF:6D:03:E3:46:C0:0C:F3:F0:49:3E Certificate issuer: /CN=A91A86D0/serialNumber=D8AF37712D56B1B693EF6D03E346C00CF3F0493E Certificate serial: 0F7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K83cS1WsbaT720D40bADPPwST4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.mft Manifest number: 0F71 Signing time: Fri 22 Aug 2025 17:41:27 +0000 Manifest this update: Fri 22 Aug 2025 17:41:26 +0000 Manifest next update: Fri 29 Aug 2025 17:41:26 +0000 Files and hashes: 1: 2K83cS1WsbaT720D40bADPPwST4.crl (hash: BrkO4UyKpNH2zz7j3R3pBDMGge1QqvRUOZ78PWmV4S4=) 2: CC99502E382F11EEAB87A63EC4F9AE02.roa (hash: H75rCk5vM8kD4h9GxneHBI+FagArNRGg0zjNp/brQWY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.crl rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K83cS1WsbaT720D40bADPPwST4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:41:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3967 (0xf7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A86D0, serialNumber=D8AF37712D56B1B693EF6D03E346C00CF3F0493E Validity Not Before: Aug 22 17:41:26 2025 GMT Not After : Aug 29 17:41:26 2025 GMT Subject: CN=68a8abc7-1645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f8:64:23:78:62:10:16:30:2c:7d:fd:ed:9d: 8e:bf:73:fd:94:f9:18:fd:a3:01:56:0f:88:b7:11: f1:7a:70:af:a6:c5:1e:1b:a5:bb:78:f3:04:c1:7d: e1:97:f7:ef:1e:6e:34:74:61:de:84:4a:bf:47:94: 3b:a3:84:cb:47:e6:be:e7:f8:47:2e:fb:df:95:6c: d7:fd:3e:0a:71:dd:af:c7:da:8f:76:b5:27:ee:20: 74:85:e1:a1:a4:ec:19:03:c8:12:33:90:db:3b:c9: 1e:6c:40:57:a2:80:9d:b4:b6:fc:99:c0:8e:7b:b9: c7:5e:63:22:39:ae:50:9c:30:3b:8f:28:bb:45:96: 2e:7d:5f:0b:fb:ea:21:e6:98:ae:8f:5c:ea:ea:65: b7:16:48:3f:96:a5:89:d2:bf:b8:7e:14:6e:69:28: b0:40:5e:10:51:ac:e7:c3:e1:d4:35:da:ef:ea:ae: 9d:d7:7d:2d:4e:f2:ca:8d:db:fa:06:11:46:16:ef: bc:3d:78:2d:f1:29:b8:6e:72:81:6e:dc:18:2e:81: d0:f8:7c:9b:4d:f8:97:0b:c0:3f:d4:d8:bc:2e:3e: e5:3c:50:a9:2b:1f:61:d2:4c:1b:43:03:cd:ec:56: 45:69:c9:04:2a:8d:57:4b:53:ca:ee:30:1a:a3:6a: 42:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:78:1F:C4:7A:43:4F:AC:45:C7:03:64:A5:55:75:C5:DA:63:68:58 X509v3 Authority Key Identifier: keyid:D8:AF:37:71:2D:56:B1:B6:93:EF:6D:03:E3:46:C0:0C:F3:F0:49:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K83cS1WsbaT720D40bADPPwST4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:42:3f:3f:c0:b2:28:a0:33:e6:18:69:0d:d3:8d:45:21:7c: de:dd:22:cb:6f:e8:02:d0:58:62:78:a9:1f:ee:12:a1:91:e5: 4d:4a:50:3d:2c:f3:dd:8c:d9:6a:58:d5:86:f1:ae:b7:5b:99: 6e:97:bc:ab:72:8d:9b:9a:d0:1f:38:c6:02:63:7e:50:3b:70: 7f:ae:de:24:42:a2:fd:d2:b3:84:e1:0e:8b:8a:f5:10:ba:52: d9:bc:5e:c9:a1:f4:34:d1:10:f1:98:0f:c9:23:89:80:2a:62: a6:43:41:00:5b:91:bc:2a:d6:9f:95:23:02:60:0a:99:b2:5d: 12:20:b3:63:bd:83:e7:d3:95:ec:0c:ad:db:7b:19:90:a3:0e: a2:27:d8:ea:56:e7:59:65:32:7e:cc:7c:89:ff:25:8c:7c:50: 74:16:4f:81:ee:ea:a6:79:fd:43:4a:c7:41:37:11:0c:38:b9: 7b:f7:d3:21:d6:4a:42:eb:09:d2:2f:90:43:5b:5f:ef:e9:d5: d7:59:06:74:13:52:59:65:9d:9f:1c:00:ca:8b:62:6c:59:26: fc:11:ba:a1:97:36:7b:c0:01:38:60:9d:1a:68:7c:47:a9:c5: 0e:5e:25:50:46:d4:7c:22:18:37:6a:07:ec:12:eb:75:69:b1: ce:b7:bf:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD38wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg2RDAxMTAvBgNVBAUTKEQ4QUYzNzcxMkQ1NkIxQjY5M0VGNkQwM0UzNDZDMDBD RjNGMDQ5M0UwHhcNMjUwODIyMTc0MTI2WhcNMjUwODI5MTc0MTI2WjAYMRYwFAYD VQQDEw02OGE4YWJjNy0xNjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAovhkI3hiEBYwLH397Z2Ov3P9lPkY/aMBVg+ItxHxenCvpsUeG6W7ePMEwX3h l/fvHm40dGHehEq/R5Q7o4TLR+a+5/hHLvvflWzX/T4Kcd2vx9qPdrUn7iB0heGh pOwZA8gSM5DbO8kebEBXooCdtLb8mcCOe7nHXmMiOa5QnDA7jyi7RZYufV8L++oh 5piuj1zq6mW3Fkg/lqWJ0r+4fhRuaSiwQF4QUaznw+HUNdrv6q6d130tTvLKjdv6 BhFGFu+8PXgt8Sm4bnKBbtwYLoHQ+HybTfiXC8A/1Ni8Lj7lPFCpKx9h0kwbQwPN 7FZFackEKo1XS1PK7jAao2pCcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKV4H8R6 Q0+sRccDZKVVdcXaY2hYMB8GA1UdIwQYMBaAFNivN3EtVrG2k+9tA+NGwAzz8Ek+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODZEMC9GQTc4QjA0NDZG Q0UxMUU5ODhDNDRCM0VDNEY5QUUwMi8ySzgzY1MxV3NiYVQ3MjBENDBiQURQUHdT VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJLODNjUzFXc2JhVDcyMEQ0MGJBRFBQd1NUNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODZEMC9GQTc4QjA0NDZGQ0UxMUU5ODhDNDRCM0VDNEY5QUUwMi8ySzgzY1MxV3Ni YVQ3MjBENDBiQURQUHdTVDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwQj8/wLIooDPmGGkN041FIXze3SLLb+gC0FhieKkf7hKhkeVNSlA9 LPPdjNlqWNWG8a63W5lul7yrco2bmtAfOMYCY35QO3B/rt4kQqL90rOE4Q6LivUQ ulLZvF7JofQ00RDxmA/JI4mAKmKmQ0EAW5G8KtaflSMCYAqZsl0SILNjvYPn05Xs DK3bexmQow6iJ9jqVudZZTJ+zHyJ/yWMfFB0Fk+B7uqmef1DSsdBNxEMOLl799Mh 1kpC6wnSL5BDW1/v6dXXWQZ0E1JZZZ2fHADKi2JsWSb8EbqhlzZ7wAE4YJ0aaHxH qcUOXiVQRtR8Ihg3agfsEut1abHOt7+W -----END CERTIFICATE-----Generated at Sat Aug 23 18:38:57 2025 by rpki-client