$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.mft File: up0rragmh4TwCuhYcC744p5ytLw.mft (raw, json) Hash identifier: 7Ike4ZPXSufb44MW8gK6CqMIqwjCKwKQWju0qLl/6Ng= Subject key identifier: 7C:3E:35:BF:C0:52:5E:2D:54:7D:0D:11:1F:B4:92:BF:39:6F:0C:E6 Authority key identifier: BA:9D:2B:AD:A8:26:87:84:F0:0A:E8:58:70:2E:F8:E2:9E:72:B4:BC Certificate issuer: /CN=A91A9EE2/serialNumber=BA9D2BADA8268784F00AE858702EF8E29E72B4BC Certificate serial: 34DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0rragmh4TwCuhYcC744p5ytLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.mft Manifest number: 34C8 Signing time: Fri 22 Aug 2025 14:30:06 +0000 Manifest this update: Fri 22 Aug 2025 14:30:06 +0000 Manifest next update: Fri 29 Aug 2025 14:30:06 +0000 Files and hashes: 1: up0rragmh4TwCuhYcC744p5ytLw.crl (hash: iIyCalq6i8YgqYa/HJjas1mtbDs4cS80XjynIfjj7A0=) 2: 58D5764A683311ECB9C17757C4F9AE02.roa (hash: 9sEgtc+Sp4Uok1SqtxGHbFLBelwmukEEkeYE5w5yi/o=) 3: D4A8FF0273ED11F08E63C02DC4F9AE02.roa (hash: ApP9kmn+5JHiG5SuT5S92MP3i+OCCKbJEPxMhqV6acY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.crl rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0rragmh4TwCuhYcC744p5ytLw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:30:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13532 (0x34dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9EE2, serialNumber=BA9D2BADA8268784F00AE858702EF8E29E72B4BC Validity Not Before: Aug 22 14:30:06 2025 GMT Not After : Aug 29 14:30:06 2025 GMT Subject: CN=68a87eee-d2e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c0:17:65:6f:98:e3:b0:4d:ce:3c:35:8a:1c: c9:4e:44:92:f1:12:e6:44:44:d9:5b:4a:e8:99:6c: ee:c8:2a:6e:0b:ef:c8:bd:29:4a:cf:24:bd:5a:3b: f5:20:c5:b9:23:32:c6:da:8b:ba:77:53:d6:1c:13: cb:fe:9f:7d:eb:f9:37:d3:ff:ad:be:ba:9c:b2:bc: 13:a6:14:94:94:2a:37:f9:b1:eb:b3:78:74:92:f7: 40:03:c5:01:c3:2d:d2:1a:6d:52:c5:11:f5:d9:2e: 35:b6:54:39:9f:c3:77:00:48:d9:61:aa:70:88:a4: 68:82:e6:c2:54:20:87:24:c4:51:95:ce:ac:4c:1e: 1c:d2:60:54:12:af:1f:7a:97:13:9a:7a:18:62:e5: d6:9f:82:66:63:53:41:5a:8f:f0:de:d9:52:aa:c1: 3e:69:83:d8:53:f3:5d:97:71:a3:2d:f1:ca:70:53: 99:ca:28:4f:4c:d7:3e:8f:f5:ea:90:af:5f:fd:ec: de:fa:d2:20:d5:9d:64:39:13:c4:f5:1d:a0:ca:1b: 81:ec:95:a7:ff:50:17:e5:f3:95:dc:07:a2:3d:2a: 15:d2:51:ce:7c:37:1d:fa:fd:ff:13:75:44:05:d5: 55:2a:fd:33:37:88:2c:41:98:69:12:7e:28:14:01: 20:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:3E:35:BF:C0:52:5E:2D:54:7D:0D:11:1F:B4:92:BF:39:6F:0C:E6 X509v3 Authority Key Identifier: keyid:BA:9D:2B:AD:A8:26:87:84:F0:0A:E8:58:70:2E:F8:E2:9E:72:B4:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0rragmh4TwCuhYcC744p5ytLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:83:d1:3b:c0:69:1d:e1:90:1b:7e:d8:3e:67:0a:e0:c1:ef: 57:e4:4c:9c:5e:3f:07:09:33:49:a9:6c:f2:03:66:67:ad:e3: f9:df:af:68:b4:0a:88:be:a0:dc:3c:8d:a6:13:39:a9:97:84: 0a:2c:ae:7d:3e:9c:a4:f6:ae:90:d7:a7:5f:fb:aa:dc:9b:74: f8:f8:53:86:31:7a:e5:0a:e0:19:46:d6:4e:e1:3c:b4:2b:8c: 93:9f:b6:43:48:fd:cc:e8:55:a4:11:d1:e3:a9:15:1e:fa:19: 48:02:37:b1:06:b5:82:c5:d8:c9:77:17:82:a0:b3:11:85:1e: 2a:aa:db:47:9e:48:b0:1d:dc:54:20:2a:39:59:8f:cd:a7:32: 0e:b3:d7:13:7e:bf:65:6f:f1:89:ab:87:63:a4:f3:f9:6d:68: bd:d6:92:76:47:86:1f:34:d4:ac:21:df:ac:aa:63:48:22:dd: 60:f6:21:9e:58:4d:36:68:15:9d:4f:89:c5:b5:90:46:26:a5: 14:67:92:80:b2:4e:23:8a:42:22:55:73:14:1e:86:8c:39:52: cf:15:61:e4:5b:1e:19:ce:49:34:ca:fc:a9:1a:03:9b:64:14: 57:0f:d5:cf:c5:84:7e:b4:cb:21:97:bc:46:fd:e7:ba:9c:d6: 59:e9:81:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlFRTIxMTAvBgNVBAUTKEJBOUQyQkFEQTgyNjg3ODRGMDBBRTg1ODcwMkVGOEUy OUU3MkI0QkMwHhcNMjUwODIyMTQzMDA2WhcNMjUwODI5MTQzMDA2WjAYMRYwFAYD VQQDEw02OGE4N2VlZS1kMmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1MAXZW+Y47BNzjw1ihzJTkSS8RLmRETZW0romWzuyCpuC+/IvSlKzyS9Wjv1 IMW5IzLG2ou6d1PWHBPL/p996/k30/+tvrqcsrwTphSUlCo3+bHrs3h0kvdAA8UB wy3SGm1SxRH12S41tlQ5n8N3AEjZYapwiKRogubCVCCHJMRRlc6sTB4c0mBUEq8f epcTmnoYYuXWn4JmY1NBWo/w3tlSqsE+aYPYU/Ndl3GjLfHKcFOZyihPTNc+j/Xq kK9f/eze+tIg1Z1kORPE9R2gyhuB7JWn/1AX5fOV3AeiPSoV0lHOfDcd+v3/E3VE BdVVKv0zN4gsQZhpEn4oFAEgQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHw+Nb/A Ul4tVH0NER+0kr85bwzmMB8GA1UdIwQYMBaAFLqdK62oJoeE8AroWHAu+OKecrS8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUVFMi82NDMyNEREODFE ODgxMUUyQkRFRjE0RTEwOEIwMkNEMi91cDBycmFnbWg0VHdDdWhZY0M3NDRwNXl0 THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VwMHJyYWdtaDRUd0N1aFljQzc0NHA1eXRMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUVFMi82NDMyNEREODFEODgxMUUyQkRFRjE0RTEwOEIwMkNEMi91cDBycmFnbWg0 VHdDdWhZY0M3NDRwNXl0THcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5g9E7wGkd4ZAbftg+Zwrgwe9X5EycXj8HCTNJqWzyA2ZnreP5369o tAqIvqDcPI2mEzmpl4QKLK59Ppyk9q6Q16df+6rcm3T4+FOGMXrlCuAZRtZO4Ty0 K4yTn7ZDSP3M6FWkEdHjqRUe+hlIAjexBrWCxdjJdxeCoLMRhR4qqttHnkiwHdxU ICo5WY/NpzIOs9cTfr9lb/GJq4djpPP5bWi91pJ2R4YfNNSsId+sqmNIIt1g9iGe WE02aBWdT4nFtZBGJqUUZ5KAsk4jikIiVXMUHoaMOVLPFWHkWx4Zzkk0yvypGgOb ZBRXD9XPxYR+tMshl7xG/ee6nNZZ6YEe -----END CERTIFICATE-----Generated at Sun Aug 24 06:37:12 2025 by rpki-client