$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft File: _CT1OQdHh-zqsAwkJgbCvWiBmg0.mft (raw, json) Hash identifier: 1JX/33pEzR0qM+f2r/qvkeoH9M3kA9xkXLoHqU+yN2Q= Subject key identifier: 75:61:B2:63:C3:22:F0:3C:95:4D:20:46:B9:FF:BE:23:05:ED:34:BF Authority key identifier: FC:24:F5:39:07:47:87:EC:EA:B0:0C:24:26:06:C2:BD:68:81:9A:0D Certificate issuer: /CN=A91A9CBB/serialNumber=FC24F539074787ECEAB00C242606C2BD68819A0D Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft Manifest number: 47 Signing time: Sat 23 Aug 2025 07:39:25 +0000 Manifest this update: Sat 23 Aug 2025 07:39:25 +0000 Manifest next update: Sat 30 Aug 2025 07:39:25 +0000 Files and hashes: 1: _CT1OQdHh-zqsAwkJgbCvWiBmg0.crl (hash: rfxHj0R6e8zRhtOq+Bz+XXCqpYNHhUWXtc+tRuSOvVU=) 2: 947AB09E459C11F0BF881335C4F9AE02.roa (hash: ZL0Aa2llI8aydVHlIy2x+gVqsBcKLbop2xFjrlC+Qtw=) 3: 2A8C8F02198E11F09D302145C4F9AE02.roa (hash: pkFF5f+Vaat+aJOayMibpTMU9Wp7Q864DQvUc24s624=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.crl rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:39:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9CBB, serialNumber=FC24F539074787ECEAB00C242606C2BD68819A0D Validity Not Before: Aug 23 07:39:25 2025 GMT Not After : Aug 30 07:39:25 2025 GMT Subject: CN=68a9702d-0d1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7f:05:f2:e9:3a:89:e6:0b:95:e0:01:3b:0a: 72:96:6e:df:69:a4:01:1c:cc:14:8e:0a:65:b0:b6: df:ea:d6:b8:e0:c7:73:f5:2f:ee:ad:a9:27:48:c4: 00:7c:2d:c3:a5:a2:6e:6c:81:82:41:6a:3b:6d:3e: ec:11:71:0e:67:ac:39:ea:14:20:08:5b:a3:d8:33: da:18:c8:82:9b:d3:66:f4:d1:0a:ac:9e:c3:87:c4: 70:43:9b:99:c3:2b:e6:5b:cb:dc:d1:1d:13:94:9b: 67:b4:4f:8a:f4:e3:8c:c1:e6:f2:e0:21:fe:ca:98: 1a:3a:f5:ab:32:84:fe:02:d9:96:cf:64:f0:e2:4a: ee:e9:53:cc:65:68:ae:09:a2:0d:dd:7c:5b:ba:ad: 88:4b:c2:3b:15:1d:13:b6:6a:57:56:50:92:97:46: 6c:d2:c7:20:e8:48:8d:63:95:00:29:e9:0e:9e:07: 70:51:6d:b0:93:2d:c2:38:1e:4b:69:86:5f:de:1c: 15:cb:02:17:ca:eb:fd:60:1b:e9:dd:55:26:d2:cb: cb:c4:fa:bd:2c:89:60:7b:b7:0c:e6:79:64:b5:36: fb:35:0a:38:18:69:00:63:51:a6:46:ef:75:e1:e4: 13:2a:c1:3d:8e:f2:06:28:a5:a3:c7:1a:12:0f:b1: 34:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:61:B2:63:C3:22:F0:3C:95:4D:20:46:B9:FF:BE:23:05:ED:34:BF X509v3 Authority Key Identifier: keyid:FC:24:F5:39:07:47:87:EC:EA:B0:0C:24:26:06:C2:BD:68:81:9A:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:83:81:d1:a9:c3:26:99:de:73:d2:f6:ce:87:9b:ff:92:0e: 6f:c8:c2:e5:4a:ec:da:c5:9a:3c:0f:9a:e9:bc:b8:80:f1:33: 51:ed:a5:70:6b:ab:fb:eb:d8:c7:b3:ac:e5:13:57:4a:25:e2: 97:47:25:1a:ff:9e:4a:8e:67:77:94:bf:21:4c:14:d1:26:46: 8d:7c:df:5a:6b:03:95:f5:3e:88:cf:42:8c:69:fd:9a:89:52: 92:5d:a9:57:a0:0e:06:0d:a5:55:c7:66:22:2a:66:c0:07:dc: 7a:34:2f:63:83:6d:42:c9:00:d6:e4:19:f5:c2:b5:ad:30:49: 32:58:b9:e4:b5:6d:bb:b8:72:98:4f:6b:fb:04:9f:4c:64:4c: d9:d7:be:43:71:55:6d:a4:e3:1b:37:0d:78:3f:5c:1f:3b:30: 85:ad:35:db:02:3b:0c:9e:3f:21:7a:30:48:71:87:74:b4:2b: 7f:ef:81:a2:cd:b0:87:f5:4c:36:98:cc:61:51:0a:1d:e5:a1: 94:1c:06:29:f3:54:0e:f6:30:19:75:0f:f7:04:82:d3:b5:3c: 66:5e:54:07:65:92:6b:2d:cd:e5:7f:d8:75:0b:5e:f3:e4:03: c4:05:26:55:22:85:02:12:d9:b1:78:5d:ea:21:b9:84:a4:b5: be:a6:48:4a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OUNCQjExMC8GA1UEBRMoRkMyNEY1MzkwNzQ3ODdFQ0VBQjAwQzI0MjYwNkMyQkQ2 ODgxOUEwRDAeFw0yNTA4MjMwNzM5MjVaFw0yNTA4MzAwNzM5MjVaMBgxFjAUBgNV BAMTDTY4YTk3MDJkLTBkMWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzfwXy6TqJ5guV4AE7CnKWbt9ppAEczBSOCmWwtt/q1rjgx3P1L+6tqSdIxAB8 LcOlom5sgYJBajttPuwRcQ5nrDnqFCAIW6PYM9oYyIKb02b00QqsnsOHxHBDm5nD K+Zby9zRHROUm2e0T4r044zB5vLgIf7KmBo69asyhP4C2ZbPZPDiSu7pU8xlaK4J og3dfFu6rYhLwjsVHRO2aldWUJKXRmzSxyDoSI1jlQAp6Q6eB3BRbbCTLcI4Hktp hl/eHBXLAhfK6/1gG+ndVSbSy8vE+r0siWB7twzmeWS1Nvs1CjgYaQBjUaZG73Xh 5BMqwT2O8gYopaPHGhIPsTQbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdWGyY8Mi 8DyVTSBGuf++IwXtNL8wHwYDVR0jBBgwFoAU/CT1OQdHh+zqsAwkJgbCvWiBmg0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5Q0JCL0Q1M0JEMTQ2MTVC MTExRjBBMjc3NEEwOUM0RjlBRTAyL19DVDFPUWRIaC16cXNBd2tKZ2JDdldpQm1n MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX0NUMU9RZEhoLXpxc0F3a0pnYkN2V2lCbWcwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 Q0JCL0Q1M0JEMTQ2MTVCMTExRjBBMjc3NEEwOUM0RjlBRTAyL19DVDFPUWRIaC16 cXNBd2tKZ2JDdldpQm1nMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAKDgdGpwyaZ3nPS9s6Hm/+SDm/IwuVK7NrFmjwPmum8uIDxM1HtpXBr q/vr2MezrOUTV0ol4pdHJRr/nkqOZ3eUvyFMFNEmRo1831prA5X1PojPQoxp/ZqJ UpJdqVegDgYNpVXHZiIqZsAH3Ho0L2ODbULJANbkGfXCta0wSTJYueS1bbu4cphP a/sEn0xkTNnXvkNxVW2k4xs3DXg/XB87MIWtNdsCOwyePyF6MEhxh3S0K3/vgaLN sIf1TDaYzGFRCh3loZQcBinzVA72MBl1D/cEgtO1PGZeVAdlkmstzeV/2HULXvPk A8QFJlUihQIS2bF4XeohuYSktb6mSEo= -----END CERTIFICATE-----Generated at Sat Aug 23 22:38:38 2025 by rpki-client