$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft File: fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft (raw, json) Hash identifier: IdxjeiKq6qfO/+JSUfobcPySh7xRZnZjE47kmZ+GBhY= Subject key identifier: D1:53:EB:37:49:4D:CA:ED:38:D9:37:E4:F1:A8:25:99:DE:38:13:54 Authority key identifier: 7D:D8:5E:C4:39:78:6F:D4:2E:0B:F7:B7:21:37:76:5F:05:D0:E9:FA Certificate issuer: /CN=A91AB92D/serialNumber=7DD85EC439786FD42E0BF7B72137765F05D0E9FA Certificate serial: 01D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft Manifest number: 01D0 Signing time: Sat 23 Aug 2025 02:57:44 +0000 Manifest this update: Sat 23 Aug 2025 02:57:43 +0000 Manifest next update: Sat 30 Aug 2025 02:57:43 +0000 Files and hashes: 1: fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl (hash: 03B9/V/xAbMXLg0tvT2cduMYJHHJTfEGF1CQTKMlhJ0=) 2: 99B10EC4BD3511ED837DED0DC4F9AE02.roa (hash: VjsdP0zlKHnuUM/QDxE6pyiIHcCSV1/bdfYwggvcPkg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:57:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 468 (0x1d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB92D, serialNumber=7DD85EC439786FD42E0BF7B72137765F05D0E9FA Validity Not Before: Aug 23 02:57:43 2025 GMT Not After : Aug 30 02:57:43 2025 GMT Subject: CN=68a92e28-24bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7b:d0:11:80:c1:21:1b:cc:be:6d:f6:ee:32: fa:3b:89:61:10:39:11:f7:29:77:27:34:af:16:93: 08:2a:f7:d0:25:68:95:3a:00:62:ef:b2:5b:3e:46: 4e:a1:2d:bb:a3:38:15:da:1c:d0:b8:81:3d:ed:79: 46:b9:0c:9f:87:b0:6d:a9:da:bc:97:06:d8:e4:dd: b4:51:1d:fd:41:69:3b:c8:74:5d:d5:88:ab:e0:10: 9c:2e:b3:74:62:96:0f:8a:3f:e3:88:7c:d3:a1:e2: 44:be:55:6a:37:b4:0f:c9:10:d0:1e:d9:c3:dc:d2: f2:6c:bf:1e:af:7c:66:ae:18:2e:ed:a1:98:be:a2: ee:71:35:da:1b:b1:00:2f:42:1a:2c:2e:30:a2:2c: 85:35:23:a2:5c:46:6a:73:2a:4e:ef:17:d2:28:cf: f9:ed:e4:4f:23:0f:5b:fc:33:bd:88:33:79:af:2e: 0a:bf:80:44:38:3a:67:71:73:57:39:f0:3d:ac:53: 85:25:21:4f:8a:1a:69:0a:49:16:77:af:4c:cc:3a: 1f:dd:f1:7f:43:c3:02:f7:2d:2a:38:fb:2d:90:0f: 42:40:68:b8:66:91:95:4a:0b:90:b8:4d:dd:18:60: 17:c6:77:69:80:3c:2a:02:fa:96:8c:0e:f3:05:8a: 15:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:53:EB:37:49:4D:CA:ED:38:D9:37:E4:F1:A8:25:99:DE:38:13:54 X509v3 Authority Key Identifier: keyid:7D:D8:5E:C4:39:78:6F:D4:2E:0B:F7:B7:21:37:76:5F:05:D0:E9:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:07:7e:bc:cd:f5:06:89:8b:f4:d5:75:fe:92:c7:28:90:84: ff:d9:e8:f2:61:54:f8:dd:44:6d:6b:a0:58:7d:65:2e:6e:52: 52:08:a0:84:86:35:49:70:a0:1c:ff:2a:a6:c1:c4:75:29:ff: b0:c3:cb:06:60:3e:0d:cd:13:d0:5d:f3:b6:46:a6:3b:7f:96: a9:93:cc:71:74:8a:02:11:f8:8e:59:c0:16:de:34:ab:40:2b: 63:36:b3:d8:fa:25:84:83:a8:d8:25:c1:8d:ff:a0:ef:1c:2c: 27:83:20:1c:e5:12:a3:70:59:37:06:db:fd:80:60:31:4f:0f: 96:fa:f2:ab:b8:72:22:ed:da:23:87:4a:09:f7:e0:9b:10:bd: 26:09:58:a6:ca:52:99:12:df:4b:73:7d:a1:95:be:f4:1d:76: 4d:45:c2:4a:c1:ba:7c:48:fb:59:02:c5:c9:fc:f8:17:cd:c8: d9:ac:38:0b:17:9a:da:48:8c:c2:8b:82:f2:2e:f7:25:2c:a7: c2:f9:03:b6:9d:a9:e6:48:1e:f5:ef:54:68:a8:0e:71:79:d5: 5b:fd:c6:d9:00:d1:6a:80:f5:df:cd:88:a2:f1:9c:38:e4:19: fa:91:f1:ee:0e:c7:dd:4f:a8:e9:73:d4:39:db:8a:04:4f:c0: 0c:3c:18:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI5MkQxMTAvBgNVBAUTKDdERDg1RUM0Mzk3ODZGRDQyRTBCRjdCNzIxMzc3NjVG MDVEMEU5RkEwHhcNMjUwODIzMDI1NzQzWhcNMjUwODMwMDI1NzQzWjAYMRYwFAYD VQQDEw02OGE5MmUyOC0yNGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApXvQEYDBIRvMvm327jL6O4lhEDkR9yl3JzSvFpMIKvfQJWiVOgBi77JbPkZO oS27ozgV2hzQuIE97XlGuQyfh7Btqdq8lwbY5N20UR39QWk7yHRd1Yir4BCcLrN0 YpYPij/jiHzToeJEvlVqN7QPyRDQHtnD3NLybL8er3xmrhgu7aGYvqLucTXaG7EA L0IaLC4woiyFNSOiXEZqcypO7xfSKM/57eRPIw9b/DO9iDN5ry4Kv4BEODpncXNX OfA9rFOFJSFPihppCkkWd69MzDof3fF/Q8MC9y0qOPstkA9CQGi4ZpGVSguQuE3d GGAXxndpgDwqAvqWjA7zBYoVVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNFT6zdJ TcrtONk35PGoJZneOBNUMB8GA1UdIwQYMBaAFH3YXsQ5eG/ULgv3tyE3dl8F0On6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjkyRC82QkUyQ0FEMEJE MzIxMUVEODRBODI4MDlDNEY5QUUwMi9mZGhleERsNGI5UXVDX2UzSVRkMlh3WFE2 Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZkaGV4RGw0YjlRdUNfZTNJVGQyWHdYUTZmby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjkyRC82QkUyQ0FEMEJEMzIxMUVEODRBODI4MDlDNEY5QUUwMi9mZGhleERsNGI5 UXVDX2UzSVRkMlh3WFE2Zm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1B368zfUGiYv01XX+kscokIT/2ejyYVT43URta6BYfWUublJSCKCE hjVJcKAc/yqmwcR1Kf+ww8sGYD4NzRPQXfO2RqY7f5apk8xxdIoCEfiOWcAW3jSr QCtjNrPY+iWEg6jYJcGN/6DvHCwngyAc5RKjcFk3Btv9gGAxTw+W+vKruHIi7doj h0oJ9+CbEL0mCVimylKZEt9Lc32hlb70HXZNRcJKwbp8SPtZAsXJ/PgXzcjZrDgL F5raSIzCi4LyLvclLKfC+QO2nanmSB7171RoqA5xedVb/cbZANFqgPXfzYii8Zw4 5Bn6kfHuDsfdT6jpc9Q524oET8AMPBjK -----END CERTIFICATE-----Generated at Sat Aug 23 19:28:44 2025 by rpki-client