$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.mft File: d5zZIVaek_nSaxOlqn43bPtfBpA.mft (raw, json) Hash identifier: ygHswCLDoSEJu39E2nGALpkSaAU31olzgo7NPz6QkKc= Subject key identifier: 44:6A:BC:30:1E:36:B6:31:97:D9:FF:BF:23:0A:07:4A:6E:22:42:DE Authority key identifier: 77:9C:D9:21:56:9E:93:F9:D2:6B:13:A5:AA:7E:37:6C:FB:5F:06:90 Certificate issuer: /CN=A91AF317/serialNumber=779CD921569E93F9D26B13A5AA7E376CFB5F0690 Certificate serial: 067C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5zZIVaek_nSaxOlqn43bPtfBpA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.mft Manifest number: 0676 Signing time: Fri 22 Aug 2025 22:36:22 +0000 Manifest this update: Fri 22 Aug 2025 22:36:22 +0000 Manifest next update: Fri 29 Aug 2025 22:36:22 +0000 Files and hashes: 1: d5zZIVaek_nSaxOlqn43bPtfBpA.crl (hash: R8/zAezmvE/HZddEEXE40RhtKSZSG3oCBPoKfFumuBc=) 2: 291E55288C7111EBA752313FC4F9AE02.roa (hash: A4h072jPvWuDDgO/u+pRW1SBWKkT2qV8RaMiezxbECY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.crl rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5zZIVaek_nSaxOlqn43bPtfBpA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:36:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1660 (0x67c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF317, serialNumber=779CD921569E93F9D26B13A5AA7E376CFB5F0690 Validity Not Before: Aug 22 22:36:22 2025 GMT Not After : Aug 29 22:36:22 2025 GMT Subject: CN=68a8f0e6-d604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9e:71:0c:29:cc:e4:cd:ee:85:59:ed:e7:c9: 6a:f1:c2:50:9a:19:03:de:cb:64:4e:69:4a:fe:df: b1:37:74:0f:19:b6:aa:1f:ef:6c:c2:52:63:2c:29: 00:58:18:4e:b2:c4:02:a3:55:55:8d:0b:c8:3c:ca: e2:c1:40:6f:ae:b2:1b:8a:8f:00:e3:41:02:a0:d4: 82:48:ab:7f:b1:19:a9:d8:bd:07:13:11:c6:93:c2: b6:1b:18:ee:e1:ac:44:d7:1d:b7:e8:9d:a5:01:db: 48:ba:0f:93:f2:ea:84:b2:53:b3:b7:b3:60:78:2c: 74:7e:d8:60:7a:f1:18:19:ff:e1:38:ce:74:a8:f1: 96:a5:ab:20:8b:0b:f8:8e:5a:74:43:0e:c6:02:4b: 54:f4:10:f1:ad:ab:9c:f5:43:db:a9:a7:7f:26:00: db:c1:a1:df:01:2c:3c:e6:c2:d8:ac:1c:4e:5e:83: 5e:e7:11:4f:66:b0:6a:55:41:cf:fb:e7:ce:0f:43: 7e:f1:62:d2:1b:b4:7f:92:de:fd:49:51:6c:22:f2: dc:62:b4:ca:65:28:6b:1d:5e:58:d6:19:aa:ac:ba: 75:67:0d:de:8f:1d:91:7f:22:8d:ac:06:d9:3a:38: ed:d1:1b:bf:b9:cf:bf:59:ea:4d:73:b8:1a:01:4c: 2b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:6A:BC:30:1E:36:B6:31:97:D9:FF:BF:23:0A:07:4A:6E:22:42:DE X509v3 Authority Key Identifier: keyid:77:9C:D9:21:56:9E:93:F9:D2:6B:13:A5:AA:7E:37:6C:FB:5F:06:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5zZIVaek_nSaxOlqn43bPtfBpA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:74:e5:01:48:7c:17:4c:f5:8f:eb:3c:89:8c:db:23:67:ac: e0:f0:2a:8c:9a:98:c4:be:c3:53:9c:28:bb:8a:1d:4c:4c:19: 91:e7:b8:de:87:b9:35:be:41:be:50:a4:f1:69:e4:d6:80:f4: 6b:fd:17:d3:7b:01:f2:47:25:f9:4d:61:09:13:6e:ed:2b:ed: 42:8c:19:cf:d7:1e:26:bf:02:ba:2d:39:6b:13:b1:40:87:e2: be:22:75:dc:b4:24:ef:5e:34:84:14:09:fa:16:b4:2e:f1:7d: ca:1d:e5:b0:11:20:e6:d7:3e:09:d4:bb:ba:cd:63:8a:28:98: 26:ca:94:9e:6c:cd:ce:e8:d0:86:af:2a:aa:50:5f:22:36:43: 59:f0:ed:6a:ef:1d:1e:5e:fc:1f:0e:8e:b1:37:d2:53:f3:d1: 5a:a8:bf:7c:1d:81:16:95:38:a0:16:f3:dc:e5:ed:69:9a:68: 71:54:b0:ff:a4:0d:7b:5a:80:f4:9c:66:8b:3e:3b:45:d0:9f: 88:8d:80:b1:07:ad:12:99:cf:43:3c:36:0c:11:be:8b:9d:f8: 06:8a:d1:a6:ce:5c:bb:2b:7c:3c:03:2f:c1:c3:c3:df:d5:e8: 96:ca:ac:ab:f6:ca:75:2b:36:50:1e:da:8a:8c:60:cd:0d:ef: 65:39:a0:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYzMTcxMTAvBgNVBAUTKDc3OUNEOTIxNTY5RTkzRjlEMjZCMTNBNUFBN0UzNzZD RkI1RjA2OTAwHhcNMjUwODIyMjIzNjIyWhcNMjUwODI5MjIzNjIyWjAYMRYwFAYD VQQDEw02OGE4ZjBlNi1kNjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqp5xDCnM5M3uhVnt58lq8cJQmhkD3stkTmlK/t+xN3QPGbaqH+9swlJjLCkA WBhOssQCo1VVjQvIPMriwUBvrrIbio8A40ECoNSCSKt/sRmp2L0HExHGk8K2Gxju 4axE1x236J2lAdtIug+T8uqEslOzt7NgeCx0fthgevEYGf/hOM50qPGWpasgiwv4 jlp0Qw7GAktU9BDxrauc9UPbqad/JgDbwaHfASw85sLYrBxOXoNe5xFPZrBqVUHP ++fOD0N+8WLSG7R/kt79SVFsIvLcYrTKZShrHV5Y1hmqrLp1Zw3ejx2RfyKNrAbZ Ojjt0Ru/uc+/WepNc7gaAUwrbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFERqvDAe NrYxl9n/vyMKB0puIkLeMB8GA1UdIwQYMBaAFHec2SFWnpP50msTpap+N2z7XwaQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjMxNy80RkQ1NzY4MDhD NkYxMUVCQkE4MTlGMzFDNEY5QUUwMi9kNXpaSVZhZWtfblNheE9scW40M2JQdGZC cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q1elpJVmFla19uU2F4T2xxbjQzYlB0ZkJwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjMxNy80RkQ1NzY4MDhDNkYxMUVCQkE4MTlGMzFDNEY5QUUwMi9kNXpaSVZhZWtf blNheE9scW40M2JQdGZCcEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOdOUBSHwXTPWP6zyJjNsjZ6zg8CqMmpjEvsNTnCi7ih1MTBmR57je h7k1vkG+UKTxaeTWgPRr/RfTewHyRyX5TWEJE27tK+1CjBnP1x4mvwK6LTlrE7FA h+K+InXctCTvXjSEFAn6FrQu8X3KHeWwESDm1z4J1Lu6zWOKKJgmypSebM3O6NCG ryqqUF8iNkNZ8O1q7x0eXvwfDo6xN9JT89FaqL98HYEWlTigFvPc5e1pmmhxVLD/ pA17WoD0nGaLPjtF0J+IjYCxB60Smc9DPDYMEb6LnfgGitGmzly7K3w8Ay/Bw8Pf 1eiWyqyr9sp1KzZQHtqKjGDNDe9lOaDc -----END CERTIFICATE-----Generated at Sat Aug 23 19:09:47 2025 by rpki-client