$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft File: D3l9fCpdNafL2-hN_HPLmBnV7yM.mft (raw, json) Hash identifier: axK9Uv7t7WmVuZNRl5nzQWDNwkCnBo7FBweBcjVDOPU= Subject key identifier: 55:35:1F:B7:28:17:EE:3A:46:9F:46:5F:0E:0D:DB:E2:BC:3C:60:66 Authority key identifier: 0F:79:7D:7C:2A:5D:35:A7:CB:DB:E8:4D:FC:73:CB:98:19:D5:EF:23 Certificate issuer: /CN=A91B0913/serialNumber=0F797D7C2A5D35A7CBDBE84DFC73CB9819D5EF23 Certificate serial: 0295 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft Manifest number: 0292 Signing time: Sat 23 Aug 2025 01:51:13 +0000 Manifest this update: Sat 23 Aug 2025 01:51:13 +0000 Manifest next update: Sat 30 Aug 2025 01:51:13 +0000 Files and hashes: 1: D3l9fCpdNafL2-hN_HPLmBnV7yM.crl (hash: lloDQHOvXqAoU4ZBjOKXIo/TtlrlVA5KCrpMvWDO4L8=) 2: A1B8513612FE11ED8A1DA356C4F9AE02.roa (hash: zKt5rIlG3Ic7UH3iJOhsHCuRIq5p4/W7QWgInl/Ff3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.crl rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:51:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 661 (0x295) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0913, serialNumber=0F797D7C2A5D35A7CBDBE84DFC73CB9819D5EF23 Validity Not Before: Aug 23 01:51:13 2025 GMT Not After : Aug 30 01:51:13 2025 GMT Subject: CN=68a91e91-a572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:10:cf:f5:91:7e:e3:3d:4f:3f:5d:25:13:71: 5b:20:e9:00:47:1b:9b:dd:d7:ea:13:4d:5f:c0:73: f3:d7:b6:7a:b5:69:57:4a:4e:30:5b:d8:84:55:f3: 39:6f:ac:a5:9d:41:c0:7c:aa:10:dd:2c:ae:02:85: bc:91:a5:f4:f4:7f:a1:7f:42:db:e6:bf:7e:45:d7: f4:fb:f8:c2:9e:a1:5a:9a:6f:b6:d6:94:4d:3f:f5: ab:23:12:ca:1b:4d:a8:7b:5f:db:b3:c3:a2:6f:f4: df:b3:41:ba:56:ff:76:43:41:19:e9:4f:e8:4e:74: 0c:dc:66:ff:a3:50:85:c3:14:c2:94:f2:19:4d:11: 9b:3f:bc:ca:9c:be:c0:17:75:8e:f4:69:a6:93:df: ac:af:8f:c5:72:4d:ac:9c:e0:e8:5e:a4:47:1f:11: 0a:6b:00:d8:b3:f4:a0:4e:ac:49:53:7b:fc:af:e0: 6e:77:b8:c6:f0:49:79:be:00:f5:8c:76:f0:cb:8f: 45:fe:84:a8:7a:c6:7f:ac:ae:28:b3:31:7c:9e:fa: c8:17:b1:f2:b9:ad:4c:ec:0f:94:1c:6f:31:2b:dc: 28:fe:5e:37:b9:be:0c:e1:b6:b7:6e:8c:de:c8:a8: 82:98:b5:5a:d6:aa:c6:78:70:1e:d0:ef:07:f3:30: 0e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:35:1F:B7:28:17:EE:3A:46:9F:46:5F:0E:0D:DB:E2:BC:3C:60:66 X509v3 Authority Key Identifier: keyid:0F:79:7D:7C:2A:5D:35:A7:CB:DB:E8:4D:FC:73:CB:98:19:D5:EF:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:ac:d5:7f:6a:17:8e:5a:b1:55:30:6f:58:dc:be:e4:ce:57: d3:1d:85:d7:08:df:c7:a6:25:1a:91:32:d5:43:74:e5:67:04: 4a:8b:76:76:4c:d0:01:77:15:5d:cb:44:06:cb:d3:54:b2:4f: 6c:31:a6:0c:f0:23:fc:65:a3:f8:5a:7c:98:62:45:d4:ea:cd: ed:44:53:a0:00:96:26:93:5e:46:53:07:b3:df:a2:3f:7f:f4: 10:75:33:fa:55:f6:ac:da:52:c9:1e:29:c8:34:8b:ad:3a:81: 0d:f1:80:f9:ad:e9:1e:e8:1e:a4:d4:57:27:e7:ad:6b:09:53: 9e:f3:5b:03:6a:2f:ad:bb:57:28:e0:06:55:d3:be:d9:cd:4f: d7:cc:f8:8b:34:bc:57:e9:15:de:33:00:b7:88:65:eb:4f:d3: e7:28:24:d1:1d:67:9e:9f:ec:a7:86:04:5f:4e:29:64:ba:3a: 0d:a6:45:2f:b8:bf:d9:ff:0c:a6:e2:5d:9b:26:32:85:e7:98: 2c:b9:b7:e4:d0:0a:6d:0f:ed:94:ed:73:01:fa:25:20:67:aa: 8a:b8:17:69:d7:78:22:2d:b4:91:49:ad:ef:24:a5:e2:54:58: 39:04:1e:99:98:8c:86:82:6b:b6:92:c3:0f:6c:2e:ea:3f:fe: e0:b8:fa:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA5MTMxMTAvBgNVBAUTKDBGNzk3RDdDMkE1RDM1QTdDQkRCRTg0REZDNzNDQjk4 MTlENUVGMjMwHhcNMjUwODIzMDE1MTEzWhcNMjUwODMwMDE1MTEzWjAYMRYwFAYD VQQDEw02OGE5MWU5MS1hNTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRDP9ZF+4z1PP10lE3FbIOkARxub3dfqE01fwHPz17Z6tWlXSk4wW9iEVfM5 b6ylnUHAfKoQ3SyuAoW8kaX09H+hf0Lb5r9+Rdf0+/jCnqFamm+21pRNP/WrIxLK G02oe1/bs8Oib/Tfs0G6Vv92Q0EZ6U/oTnQM3Gb/o1CFwxTClPIZTRGbP7zKnL7A F3WO9Gmmk9+sr4/Fck2snODoXqRHHxEKawDYs/SgTqxJU3v8r+Bud7jG8El5vgD1 jHbwy49F/oSoesZ/rK4oszF8nvrIF7Hyua1M7A+UHG8xK9wo/l43ub4M4ba3boze yKiCmLVa1qrGeHAe0O8H8zAOdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFU1H7co F+46Rp9GXw4N2+K8PGBmMB8GA1UdIwQYMBaAFA95fXwqXTWny9voTfxzy5gZ1e8j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDkxMy9EQTcxM0Y5NjEy RkExMUVEODRBRDcyNTFDNEY5QUUwMi9EM2w5ZkNwZE5hZkwyLWhOX0hQTG1CblY3 eU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0QzbDlmQ3BkTmFmTDItaE5fSFBMbUJuVjd5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDkxMy9EQTcxM0Y5NjEyRkExMUVEODRBRDcyNTFDNEY5QUUwMi9EM2w5ZkNwZE5h ZkwyLWhOX0hQTG1CblY3eU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPrNV/aheOWrFVMG9Y3L7kzlfTHYXXCN/HpiUakTLVQ3TlZwRKi3Z2 TNABdxVdy0QGy9NUsk9sMaYM8CP8ZaP4WnyYYkXU6s3tRFOgAJYmk15GUwez36I/ f/QQdTP6Vfas2lLJHinINIutOoEN8YD5reke6B6k1Fcn561rCVOe81sDai+tu1co 4AZV077ZzU/XzPiLNLxX6RXeMwC3iGXrT9PnKCTRHWeen+ynhgRfTilkujoNpkUv uL/Z/wym4l2bJjKF55gsubfk0AptD+2U7XMB+iUgZ6qKuBdp13giLbSRSa3vJKXi VFg5BB6ZmIyGgmu2ksMPbC7qP/7guPrM -----END CERTIFICATE-----Generated at Sat Aug 23 16:36:39 2025 by rpki-client