$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft File: dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft (raw, json) Hash identifier: 0poz5jUwEFQwebxTxjb7RsplnFSFlrCgFylaKcz1BmU= Subject key identifier: 85:EC:2E:B3:8F:F5:41:58:A7:0A:EF:15:74:4B:96:DC:F0:92:84:19 Authority key identifier: 74:7C:C7:CB:DB:22:BD:9A:48:2D:33:51:80:9D:EA:9B:C1:46:02:84 Certificate issuer: /CN=A91AD705/serialNumber=747CC7CBDB22BD9A482D3351809DEA9BC1460284 Certificate serial: 02D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHzHy9sivZpILTNRgJ3qm8FGAoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft Manifest number: 02D2 Signing time: Sat 23 Aug 2025 01:36:24 +0000 Manifest this update: Sat 23 Aug 2025 01:36:24 +0000 Manifest next update: Sat 30 Aug 2025 01:36:24 +0000 Files and hashes: 1: dHzHy9sivZpILTNRgJ3qm8FGAoQ.crl (hash: +LmLs0Ki1hHlfdFFlAvXkOwDrq8F1zgJKZttI1xhAm0=) 2: D628208AFB7611EC96592431C4F9AE02.roa (hash: tDCtD935JtRcgKFjdurBw3JcU/lSCjaGyyfEOwNOFIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.crl rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHzHy9sivZpILTNRgJ3qm8FGAoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:36:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 726 (0x2d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD705, serialNumber=747CC7CBDB22BD9A482D3351809DEA9BC1460284 Validity Not Before: Aug 23 01:36:24 2025 GMT Not After : Aug 30 01:36:24 2025 GMT Subject: CN=68a91b18-0d95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b7:c2:95:9b:1d:41:10:ce:85:23:63:6e:b5: 83:a0:01:8d:be:6a:2c:2f:ed:0e:1c:6f:52:0f:27: 20:bd:0f:76:89:74:1b:69:b8:b9:50:86:38:27:c1: 8d:e3:f1:0b:db:ef:8e:58:82:d1:2d:ca:52:0e:ae: 70:3a:e7:d8:fb:ba:d6:51:17:08:46:11:07:92:94: ca:2a:35:58:fb:5b:34:cb:a1:16:4b:a4:b3:71:65: f3:d1:a7:3c:6d:0b:5a:6f:d8:bc:87:5c:e0:8b:a9: 65:47:04:26:27:e1:4d:91:51:20:0f:dd:3b:99:8a: d8:98:16:e9:64:19:11:5f:b4:ac:b4:e9:f6:42:5d: 67:e8:0f:4c:a5:50:3a:70:0a:75:56:60:69:f8:6b: 40:a4:6c:8e:1e:bb:cb:09:f5:0c:55:85:56:35:c8: be:9b:26:eb:6b:fd:aa:b3:91:ef:87:a5:1b:93:9b: 18:59:aa:2f:9f:3b:99:63:44:53:23:f4:4c:90:3e: e8:72:2f:ae:af:8f:4a:ca:d2:2a:48:16:dc:1d:da: e5:84:6f:fc:fc:90:86:72:28:9b:28:4e:7c:ac:97: 7f:1b:65:b8:80:34:4a:04:de:e2:91:b5:c1:9c:3f: 7b:c4:3b:e2:64:f5:f6:6d:fa:92:41:20:db:a6:59: 65:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:EC:2E:B3:8F:F5:41:58:A7:0A:EF:15:74:4B:96:DC:F0:92:84:19 X509v3 Authority Key Identifier: keyid:74:7C:C7:CB:DB:22:BD:9A:48:2D:33:51:80:9D:EA:9B:C1:46:02:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHzHy9sivZpILTNRgJ3qm8FGAoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:20:0e:f9:83:67:af:7d:d0:4e:e9:5b:ed:cf:5d:1f:c7:54: 0d:37:70:bb:cf:6f:0f:71:6c:e3:40:43:8a:8d:52:3d:04:d0: 9c:8a:c3:f3:69:91:4f:29:5b:93:2e:16:2f:bf:25:28:ac:57: 97:92:80:b6:9a:61:f3:93:e9:40:70:0b:9f:cf:69:8b:ee:8b: 7a:03:3a:3e:88:59:43:db:6a:28:0b:58:e7:02:77:f3:bf:fc: 7c:a3:90:e4:32:e5:00:fd:00:af:98:24:ac:20:b9:a2:55:6b: 4f:5b:1f:c0:51:73:cf:93:97:5e:2f:76:78:92:f8:d8:af:4a: 9b:ce:bd:de:72:45:9c:f2:5d:eb:ec:45:32:2f:b4:3d:cc:04: 04:1f:36:f6:0d:92:db:27:fd:91:85:f2:3d:57:eb:88:e4:67: 14:e9:b0:01:97:94:7d:fb:47:7c:76:98:16:63:5a:e7:b7:ce: 58:63:ba:e8:70:21:10:44:8a:f3:22:4d:18:70:1e:1f:3d:40: 35:f9:f3:a5:72:bc:d1:83:ee:04:42:d9:3f:cb:ce:7c:97:66: 92:fb:3c:1a:b8:60:13:85:9c:5d:c6:4c:4f:f6:b8:2a:99:0f: e6:c9:f1:ce:32:7c:45:5d:07:32:c7:cf:53:96:50:fc:b2:fd: 81:c2:ab:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ3MDUxMTAvBgNVBAUTKDc0N0NDN0NCREIyMkJEOUE0ODJEMzM1MTgwOURFQTlC QzE0NjAyODQwHhcNMjUwODIzMDEzNjI0WhcNMjUwODMwMDEzNjI0WjAYMRYwFAYD VQQDEw02OGE5MWIxOC0wZDk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzrfClZsdQRDOhSNjbrWDoAGNvmosL+0OHG9SDycgvQ92iXQbabi5UIY4J8GN 4/EL2++OWILRLcpSDq5wOufY+7rWURcIRhEHkpTKKjVY+1s0y6EWS6SzcWXz0ac8 bQtab9i8h1zgi6llRwQmJ+FNkVEgD907mYrYmBbpZBkRX7SstOn2Ql1n6A9MpVA6 cAp1VmBp+GtApGyOHrvLCfUMVYVWNci+mybra/2qs5Hvh6Ubk5sYWaovnzuZY0RT I/RMkD7oci+ur49KytIqSBbcHdrlhG/8/JCGciibKE58rJd/G2W4gDRKBN7ikbXB nD97xDviZPX2bfqSQSDbplllwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIXsLrOP 9UFYpwrvFXRLltzwkoQZMB8GA1UdIwQYMBaAFHR8x8vbIr2aSC0zUYCd6pvBRgKE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDcwNS9CQTFEQjc2MkZC NzQxMUVDOTZBNUI0MzBDNEY5QUUwMi9kSHpIeTlzaXZacElMVE5SZ0ozcW04RkdB b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RIekh5OXNpdlpwSUxUTlJnSjNxbThGR0FvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDcwNS9CQTFEQjc2MkZCNzQxMUVDOTZBNUI0MzBDNEY5QUUwMi9kSHpIeTlzaXZa cElMVE5SZ0ozcW04RkdBb1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmIA75g2evfdBO6Vvtz10fx1QNN3C7z28PcWzjQEOKjVI9BNCcisPz aZFPKVuTLhYvvyUorFeXkoC2mmHzk+lAcAufz2mL7ot6Azo+iFlD22ooC1jnAnfz v/x8o5DkMuUA/QCvmCSsILmiVWtPWx/AUXPPk5deL3Z4kvjYr0qbzr3eckWc8l3r 7EUyL7Q9zAQEHzb2DZLbJ/2RhfI9V+uI5GcU6bABl5R9+0d8dpgWY1rnt85YY7ro cCEQRIrzIk0YcB4fPUA1+fOlcrzRg+4EQtk/y858l2aS+zwauGAThZxdxkxP9rgq mQ/myfHOMnxFXQcyx89TllD8sv2BwquY -----END CERTIFICATE-----Generated at Sat Aug 23 17:19:35 2025 by rpki-client