$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft File: 1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft (raw, json) Hash identifier: h4FB5Pl6H3li8ZHLWjMnwpA6zSn+9imNLZXq4P4VEP0= Subject key identifier: 69:32:66:A2:79:1F:59:38:E2:9F:8A:79:44:BE:B0:1C:51:4A:A7:35 Authority key identifier: D6:8D:41:1A:D0:3E:73:14:F1:49:2D:06:2D:B0:D9:19:4E:9F:50:95 Certificate issuer: /CN=A91AA897/serialNumber=D68D411AD03E7314F1492D062DB0D9194E9F5095 Certificate serial: 0671 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft Manifest number: 0663 Signing time: Fri 22 Aug 2025 22:43:32 +0000 Manifest this update: Fri 22 Aug 2025 22:43:32 +0000 Manifest next update: Fri 29 Aug 2025 22:43:32 +0000 Files and hashes: 1: 1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl (hash: b1nJZ06mcu3vDGz6fpXOqAdXWobkxsOz9L47XycH0ww=) 2: 91F7C78A7F1711F089227832C4F9AE02.roa (hash: mR83LVhGM4KW80LamtIiucwx8QiIfr7c72jf36lMPNo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:43:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1649 (0x671) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA897, serialNumber=D68D411AD03E7314F1492D062DB0D9194E9F5095 Validity Not Before: Aug 22 22:43:32 2025 GMT Not After : Aug 29 22:43:32 2025 GMT Subject: CN=68a8f294-454e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:00:ee:5d:ea:e3:a2:50:df:af:2c:0f:4c:a1: 83:8d:81:c3:03:bf:cd:02:9c:31:b2:e1:46:c9:58: 6f:35:dd:ea:85:99:48:97:48:37:b4:68:bf:6f:ed: ea:2f:fb:ff:3e:16:26:31:45:7c:f4:68:0d:20:56: 6d:f9:cf:fd:3c:8e:74:08:4c:3e:51:4e:cd:1d:ac: 49:87:ab:d8:95:b6:d3:30:23:b0:ca:da:04:07:84: da:c0:8f:d6:12:9a:b2:2c:78:b1:59:6a:74:9d:8e: 80:d0:0a:8b:69:53:8c:89:d7:6b:e6:e8:e5:83:41: b9:90:bd:4a:84:00:1f:5a:e9:cf:1f:9e:41:bb:bb: 4b:70:3e:c1:d5:48:da:03:8e:e3:f2:b9:7d:c9:4c: 1f:a0:73:ee:bb:4c:4d:73:2f:17:00:a5:f5:cc:9f: 91:e8:5b:0a:cc:ce:38:91:32:72:2d:56:3c:fe:89: 07:cf:14:e9:50:c3:39:9d:bb:4f:9f:75:9d:d9:a8: e6:15:85:04:95:c2:f4:8b:d4:38:e6:53:f9:da:08: 4e:cd:d7:3d:20:31:88:10:24:12:da:78:20:be:f8: c7:03:81:1a:90:d6:91:1e:f1:a5:d2:63:a8:c5:a6: 3c:f6:77:38:3f:8a:99:2f:9c:e5:42:88:77:4e:54: 50:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:32:66:A2:79:1F:59:38:E2:9F:8A:79:44:BE:B0:1C:51:4A:A7:35 X509v3 Authority Key Identifier: keyid:D6:8D:41:1A:D0:3E:73:14:F1:49:2D:06:2D:B0:D9:19:4E:9F:50:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:7f:07:82:36:f8:ed:6c:64:eb:2e:55:69:82:3f:ba:45:e8: fe:83:f9:f2:0e:bb:74:4e:cf:55:48:82:70:25:dd:1f:1a:a4: 35:da:08:12:16:bf:a8:b7:c9:04:7c:81:82:ad:b8:eb:e7:ce: a2:3f:d5:9a:fb:88:03:1e:67:df:c5:65:98:02:2c:08:ff:c3: 5d:67:3e:22:ac:06:bb:50:0f:cb:e4:b7:e5:44:37:9c:71:4b: 19:ec:dc:e5:29:cf:ac:01:cd:5e:2d:af:e1:ca:a5:68:50:9b: 8b:be:9b:a6:01:8d:36:7a:35:92:f8:06:56:f3:9a:6a:55:f5: 1a:0c:33:71:cb:3a:93:21:17:4b:3f:f1:59:7e:70:ea:0f:9f: 53:3c:70:4c:00:18:0e:71:3a:7f:f3:ef:d9:71:65:f4:ad:5f: 75:56:ce:e7:5c:1f:4e:ed:8f:fb:d8:f1:73:74:c3:1d:1e:58: 5b:5e:d8:01:fc:6e:8c:52:8f:ca:db:28:26:84:c5:11:b1:56: b9:74:0a:17:43:01:e3:01:95:4e:b7:5d:58:40:67:bd:24:01: 1c:be:eb:93:03:6d:0e:67:ba:22:d6:3d:02:fa:c9:79:fc:b4: 94:c6:be:81:13:a8:52:b7:b1:54:5e:57:25:db:1e:16:70:f3: 81:02:28:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE4OTcxMTAvBgNVBAUTKEQ2OEQ0MTFBRDAzRTczMTRGMTQ5MkQwNjJEQjBEOTE5 NEU5RjUwOTUwHhcNMjUwODIyMjI0MzMyWhcNMjUwODI5MjI0MzMyWjAYMRYwFAYD VQQDEw02OGE4ZjI5NC00NTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ADuXerjolDfrywPTKGDjYHDA7/NApwxsuFGyVhvNd3qhZlIl0g3tGi/b+3q L/v/PhYmMUV89GgNIFZt+c/9PI50CEw+UU7NHaxJh6vYlbbTMCOwytoEB4TawI/W EpqyLHixWWp0nY6A0AqLaVOMiddr5ujlg0G5kL1KhAAfWunPH55Bu7tLcD7B1Uja A47j8rl9yUwfoHPuu0xNcy8XAKX1zJ+R6FsKzM44kTJyLVY8/okHzxTpUMM5nbtP n3Wd2ajmFYUElcL0i9Q45lP52ghOzdc9IDGIECQS2nggvvjHA4EakNaRHvGl0mOo xaY89nc4P4qZL5zlQoh3TlRQswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGkyZqJ5 H1k44p+KeUS+sBxRSqc1MB8GA1UdIwQYMBaAFNaNQRrQPnMU8UktBi2w2RlOn1CV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTg5Ny9FMUQxMTc3MDk1 QkExMUVCQjI4MTIzNzFDNEY5QUUwMi8xbzFCR3RBLWN4VHhTUzBHTGJEWkdVNmZV SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFvMUJHdEEtY3hUeFNTMEdMYkRaR1U2ZlVKVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTg5Ny9FMUQxMTc3MDk1QkExMUVCQjI4MTIzNzFDNEY5QUUwMi8xbzFCR3RBLWN4 VHhTUzBHTGJEWkdVNmZVSlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcfweCNvjtbGTrLlVpgj+6Rej+g/nyDrt0Ts9VSIJwJd0fGqQ12ggS Fr+ot8kEfIGCrbjr586iP9Wa+4gDHmffxWWYAiwI/8NdZz4irAa7UA/L5LflRDec cUsZ7NzlKc+sAc1eLa/hyqVoUJuLvpumAY02ejWS+AZW85pqVfUaDDNxyzqTIRdL P/FZfnDqD59TPHBMABgOcTp/8+/ZcWX0rV91Vs7nXB9O7Y/72PFzdMMdHlhbXtgB /G6MUo/K2ygmhMURsVa5dAoXQwHjAZVOt11YQGe9JAEcvuuTA20OZ7oi1j0C+sl5 /LSUxr6BE6hSt7FUXlcl2x4WcPOBAiiu -----END CERTIFICATE-----Generated at Sat Aug 23 19:30:58 2025 by rpki-client