$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft File: -gEnQNykk8ziA6-q3o68cZqsI7Q.mft (raw, json) Hash identifier: CMO+q/z0XZGkch6UKJMLBBYbjhnb0wzMVteMrYYmBCU= Subject key identifier: 00:FF:67:D9:A0:EE:13:2B:35:65:F9:3F:D9:38:F2:88:41:7B:F8:A3 Authority key identifier: FA:01:27:40:DC:A4:93:CC:E2:03:AF:AA:DE:8E:BC:71:9A:AC:23:B4 Certificate issuer: /CN=A91AF404/serialNumber=FA012740DCA493CCE203AFAADE8EBC719AAC23B4 Certificate serial: 01B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gEnQNykk8ziA6-q3o68cZqsI7Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft Manifest number: 01B1 Signing time: Sat 23 Aug 2025 03:19:29 +0000 Manifest this update: Sat 23 Aug 2025 03:19:29 +0000 Manifest next update: Sat 30 Aug 2025 03:19:29 +0000 Files and hashes: 1: -gEnQNykk8ziA6-q3o68cZqsI7Q.crl (hash: WtYC9uMnVoGh5YQoSC6jTpyVRDQWDgrp3yMWyfsWNcs=) 2: D8674A0C0ED911EE8A4E0A23C4F9AE02.roa (hash: AIB5iRq0wZoH+M+QlWHGPd+eXgQBKYvmWuJJAuisaNs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.crl rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gEnQNykk8ziA6-q3o68cZqsI7Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:19:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 439 (0x1b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF404, serialNumber=FA012740DCA493CCE203AFAADE8EBC719AAC23B4 Validity Not Before: Aug 23 03:19:29 2025 GMT Not After : Aug 30 03:19:29 2025 GMT Subject: CN=68a93341-6f6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b7:0e:b9:a6:4f:6e:56:c9:b3:4e:70:fd:be: c5:d7:9b:9f:02:50:e4:ec:b0:b4:dc:4f:80:68:44: b5:3d:06:18:d9:ef:12:72:7c:de:f9:d6:dc:b0:4f: 7f:67:73:ed:15:2a:f1:17:85:9e:5f:f1:bf:32:37: 9e:0c:aa:9e:63:14:85:7b:84:94:b1:4d:74:2b:65: e3:2f:30:59:d2:57:ed:61:eb:de:db:52:6a:44:fb: 0d:56:94:43:f9:e1:1d:0c:a9:6c:d0:36:20:f9:ad: e6:c9:f5:b2:2a:f0:b4:83:71:e3:c1:73:be:a6:19: a8:c3:80:e6:af:02:d7:20:8e:64:1d:0b:a1:21:47: d0:17:4c:72:81:6c:86:1e:86:7c:de:ff:1f:e7:42: 6c:cb:02:fc:5b:bc:63:02:ea:d4:8a:28:c1:1d:6d: c7:4e:3b:da:e7:64:94:e7:e8:d9:96:87:bc:7e:a2: fe:43:6e:e3:7b:29:9a:f7:90:8f:ad:6f:44:ea:ba: 04:50:07:5e:e8:82:64:03:36:74:72:fe:3f:0d:bf: 8d:42:75:56:17:2d:db:ba:f9:d6:41:43:0e:da:e6: a3:83:77:73:dc:87:a0:49:98:32:34:3f:a1:cc:00: 12:74:cb:f7:14:56:18:b1:49:1f:35:e3:96:19:ad: ee:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:FF:67:D9:A0:EE:13:2B:35:65:F9:3F:D9:38:F2:88:41:7B:F8:A3 X509v3 Authority Key Identifier: keyid:FA:01:27:40:DC:A4:93:CC:E2:03:AF:AA:DE:8E:BC:71:9A:AC:23:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gEnQNykk8ziA6-q3o68cZqsI7Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:1c:82:22:48:a8:d6:f2:ab:67:75:94:be:b2:49:93:1a:1b: 7f:fb:6a:60:74:ee:e6:fc:c1:f1:a1:1c:86:6b:ea:e8:b9:bb: 07:d5:d9:77:e6:9b:aa:ad:4f:1c:0b:5f:ba:2f:b9:96:8d:22: 09:5f:1e:2e:e1:41:e2:75:79:6c:4d:cf:6c:7d:e6:11:c3:d3: f3:bf:23:93:0d:d8:f4:f5:27:f7:f2:21:45:fc:4b:c7:d5:66: 7d:92:e5:2b:be:06:f8:5b:f6:54:4f:d6:07:31:40:6c:fa:2f: 99:f2:de:f9:2e:8c:96:a6:80:e8:fe:1c:29:b8:f9:ab:03:8a: 47:2c:f8:73:86:2a:08:b7:b7:28:d1:ae:7a:bf:29:04:59:7a: e0:8a:70:77:7b:26:c6:ec:cb:6f:a1:5e:e0:c4:fd:8f:14:05: 18:16:e8:b6:35:f5:68:49:41:37:aa:5f:3e:8f:a2:dc:78:b1: 9c:ee:cf:58:e5:c2:fe:ec:f6:33:09:88:77:2a:b7:a6:d7:51: 3b:1f:65:a2:9f:fc:ab:5f:33:95:9a:b6:bb:4e:84:cf:55:63: a7:83:2c:e4:4f:82:ff:8e:fc:9c:65:f4:7b:c8:c3:e6:c0:d1: c9:eb:f7:82:ad:99:d6:b3:19:d6:14:9a:85:50:5f:05:6a:5d: 85:00:a7:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY0MDQxMTAvBgNVBAUTKEZBMDEyNzQwRENBNDkzQ0NFMjAzQUZBQURFOEVCQzcx OUFBQzIzQjQwHhcNMjUwODIzMDMxOTI5WhcNMjUwODMwMDMxOTI5WjAYMRYwFAYD VQQDEw02OGE5MzM0MS02ZjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA17cOuaZPblbJs05w/b7F15ufAlDk7LC03E+AaES1PQYY2e8Scnze+dbcsE9/ Z3PtFSrxF4WeX/G/MjeeDKqeYxSFe4SUsU10K2XjLzBZ0lftYeve21JqRPsNVpRD +eEdDKls0DYg+a3myfWyKvC0g3HjwXO+phmow4DmrwLXII5kHQuhIUfQF0xygWyG HoZ83v8f50JsywL8W7xjAurUiijBHW3HTjva52SU5+jZloe8fqL+Q27jeyma95CP rW9E6roEUAde6IJkAzZ0cv4/Db+NQnVWFy3buvnWQUMO2uajg3dz3IegSZgyND+h zAASdMv3FFYYsUkfNeOWGa3u+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAD/Z9mg 7hMrNWX5P9k48ohBe/ijMB8GA1UdIwQYMBaAFPoBJ0DcpJPM4gOvqt6OvHGarCO0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjQwNC81NDQwODFEMkY0 RDgxMUVEOTgwNDZDNEFDNEY5QUUwMi8tZ0VuUU55a2s4emlBNi1xM282OGNacXNJ N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1nRW5RTnlrazh6aUE2LXEzbzY4Y1pxc0k3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjQwNC81NDQwODFEMkY0RDgxMUVEOTgwNDZDNEFDNEY5QUUwMi8tZ0VuUU55a2s4 emlBNi1xM282OGNacXNJN1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeHIIiSKjW8qtndZS+skmTGht/+2pgdO7m/MHxoRyGa+roubsH1dl3 5puqrU8cC1+6L7mWjSIJXx4u4UHidXlsTc9sfeYRw9PzvyOTDdj09Sf38iFF/EvH 1WZ9kuUrvgb4W/ZUT9YHMUBs+i+Z8t75LoyWpoDo/hwpuPmrA4pHLPhzhioIt7co 0a56vykEWXrginB3eybG7MtvoV7gxP2PFAUYFui2NfVoSUE3ql8+j6LceLGc7s9Y 5cL+7PYzCYh3Krem11E7H2Win/yrXzOVmra7ToTPVWOngyzkT4L/jvycZfR7yMPm wNHJ6/eCrZnWsxnWFJqFUF8Fal2FAKeQ -----END CERTIFICATE-----Generated at Sun Aug 24 05:02:38 2025 by rpki-client