$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft File: Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft (raw, json) Hash identifier: KzOwlICFbFztP4Gnd/3v19KSLlA33GVKOsVSx2/2RN4= Subject key identifier: 77:DA:DA:09:DC:12:23:3A:2F:86:8E:66:FE:2D:E5:2F:D6:D8:BD:04 Authority key identifier: 0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F Certificate issuer: /CN=A91AF5F7/serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F Certificate serial: 05FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft Manifest number: 05EE Signing time: Fri 22 Aug 2025 23:11:07 +0000 Manifest this update: Fri 22 Aug 2025 23:11:07 +0000 Manifest next update: Fri 29 Aug 2025 23:11:07 +0000 Files and hashes: 1: Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl (hash: TZwDZo86vbbJPIHRoz4j+/7IPwNmJ46+yIYzdODQ3aE=) 2: 4D38774A86E611EF9D6F5581C4F9AE02.roa (hash: 7ioLjk8VeJvEHBuoWRfrT57B74IDRpNgRa9+NJtrnGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:11:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1534 (0x5fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF5F7, serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F Validity Not Before: Aug 22 23:11:07 2025 GMT Not After : Aug 29 23:11:07 2025 GMT Subject: CN=68a8f90b-dad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e8:e0:36:f1:e4:cf:8e:55:c0:c9:b3:77:4f: 78:ca:01:20:96:4f:1a:6b:51:ba:20:7b:3e:ff:88: 9f:76:2a:fa:d6:9e:11:78:4f:57:f1:18:82:a0:90: 13:04:c3:e2:f7:80:ff:fc:f4:f3:51:1b:83:2b:4a: e5:fa:b8:a9:77:7f:e3:ac:29:42:ed:e5:51:47:f7: f0:5a:ab:60:43:92:d6:70:9c:93:11:af:40:55:76: a1:48:57:7a:90:29:a5:fe:63:d0:80:fd:e9:00:90: 9d:51:d1:c0:82:77:ed:70:3c:8c:03:85:a2:08:e5: 6e:1d:12:3d:ac:ab:c9:41:9f:35:fb:b3:d5:00:47: b6:ae:94:7e:5a:02:25:a3:7c:fd:f2:dd:30:c0:8b: 05:53:87:56:06:1d:41:8e:d9:67:62:38:6d:cd:a6: 2c:19:b8:c1:bb:08:0d:d2:92:5d:e2:26:5e:db:4e: 18:84:da:bd:76:3c:26:94:49:f5:e6:c0:78:48:b8: e3:c4:97:e0:2a:42:92:59:20:55:8b:de:28:4a:8c: e6:4e:e6:c7:4f:09:cf:d2:78:6e:99:fe:66:7d:bb: 03:22:30:9d:90:18:92:5f:9e:67:2f:a8:2f:0f:de: 81:75:d8:0d:ec:a0:23:2f:12:72:ce:9f:c0:62:89: 0f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:DA:DA:09:DC:12:23:3A:2F:86:8E:66:FE:2D:E5:2F:D6:D8:BD:04 X509v3 Authority Key Identifier: keyid:0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:29:57:a3:fa:6a:e5:26:32:6e:c2:7c:33:89:c2:cf:ea:7a: 1f:4f:59:a4:20:1e:91:e9:89:d5:0b:e7:a8:89:55:29:30:29: 14:84:14:07:db:75:fe:e9:44:e6:8e:6c:3b:e6:60:83:f7:ee: c2:85:5e:7b:78:4d:5a:db:a9:22:a3:48:a9:8d:f6:30:89:c4: 79:8f:45:c2:5b:c0:fc:e8:33:df:ac:10:59:e9:10:44:08:19: 3d:12:9a:f3:81:c9:cd:3d:4c:b5:54:ac:17:e4:b5:f0:2d:71: 1b:7f:7a:0b:96:c2:43:5c:16:6c:33:7a:95:f6:1c:a9:73:c0: fa:e6:97:b3:1e:3c:3e:eb:82:3f:5b:2f:58:1c:79:9b:02:5f: 2b:11:75:e4:a3:b9:77:a3:cf:bf:ae:2c:ad:2a:e8:bf:f2:56: 53:f6:8e:b5:7d:e4:37:f9:0a:23:87:51:08:5b:9a:b3:23:46: 5d:9b:ee:0a:ba:0a:ba:10:96:36:f9:71:f1:bc:55:69:83:ee: b2:97:5d:51:75:7e:47:5c:61:74:b5:6f:1c:4e:80:01:c8:61: c2:f6:d5:b6:a6:8a:e7:62:d1:74:28:85:02:4e:50:4f:a6:c6: a5:71:e8:33:f9:b2:e8:d9:4d:c1:ae:3d:a5:27:b5:4d:a9:63: ca:d5:1b:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY1RjcxMTAvBgNVBAUTKDBBMjc3RDI2QTlDMjQwMkI4QTFDRDQ1Nzc5MzVFNEYz QzI1OUMxOUYwHhcNMjUwODIyMjMxMTA3WhcNMjUwODI5MjMxMTA3WjAYMRYwFAYD VQQDEw02OGE4ZjkwYi1kYWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxujgNvHkz45VwMmzd094ygEglk8aa1G6IHs+/4ifdir61p4ReE9X8RiCoJAT BMPi94D//PTzURuDK0rl+ripd3/jrClC7eVRR/fwWqtgQ5LWcJyTEa9AVXahSFd6 kCml/mPQgP3pAJCdUdHAgnftcDyMA4WiCOVuHRI9rKvJQZ81+7PVAEe2rpR+WgIl o3z98t0wwIsFU4dWBh1BjtlnYjhtzaYsGbjBuwgN0pJd4iZe204YhNq9djwmlEn1 5sB4SLjjxJfgKkKSWSBVi94oSozmTubHTwnP0nhumf5mfbsDIjCdkBiSX55nL6gv D96BddgN7KAjLxJyzp/AYokPOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHfa2gnc EiM6L4aOZv4t5S/W2L0EMB8GA1UdIwQYMBaAFAonfSapwkArihzUV3k15PPCWcGf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjVGNy80NEZDRTU2OEM3 ODQxMUVCQUQ0Qzk2NTlDNEY5QUUwMi9DaWQ5SnFuQ1FDdUtITlJYZVRYazg4Slp3 WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NpZDlKcW5DUUN1S0hOUlhlVFhrODhKWndaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjVGNy80NEZDRTU2OEM3ODQxMUVCQUQ0Qzk2NTlDNEY5QUUwMi9DaWQ5SnFuQ1FD dUtITlJYZVRYazg4Slp3WjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+KVej+mrlJjJuwnwzicLP6nofT1mkIB6R6YnVC+eoiVUpMCkUhBQH 23X+6UTmjmw75mCD9+7ChV57eE1a26kio0ipjfYwicR5j0XCW8D86DPfrBBZ6RBE CBk9EprzgcnNPUy1VKwX5LXwLXEbf3oLlsJDXBZsM3qV9hypc8D65pezHjw+64I/ Wy9YHHmbAl8rEXXko7l3o8+/riytKui/8lZT9o61feQ3+Qojh1EIW5qzI0Zdm+4K ugq6EJY2+XHxvFVpg+6yl11RdX5HXGF0tW8cToAByGHC9tW2pornYtF0KIUCTlBP psalcegz+bLo2U3Brj2lJ7VNqWPK1Rs2 -----END CERTIFICATE-----Generated at Sun Aug 24 00:43:39 2025 by rpki-client