$ rpki-client -vvf rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.mft File: n60jAjoVW9JbIkKAY6wZeHznwr4.mft (raw, json) Hash identifier: 681I6VG9hX//xzd7g6/27Yai79CtN8CEanvSJQY888A= Subject key identifier: 4F:03:09:32:A8:23:90:60:4C:F8:0E:5F:7D:5C:7F:29:34:09:DC:67 Authority key identifier: 9F:AD:23:02:3A:15:5B:D2:5B:22:42:80:63:AC:19:78:7C:E7:C2:BE Certificate issuer: /CN=A91B53AF/serialNumber=9FAD23023A155BD25B22428063AC19787CE7C2BE Certificate serial: 0792 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n60jAjoVW9JbIkKAY6wZeHznwr4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.mft Manifest number: 078C Signing time: Fri 22 Aug 2025 21:36:52 +0000 Manifest this update: Fri 22 Aug 2025 21:36:52 +0000 Manifest next update: Fri 29 Aug 2025 21:36:52 +0000 Files and hashes: 1: n60jAjoVW9JbIkKAY6wZeHznwr4.crl (hash: yEjv2RON+SRQ4hh9F4uTKLxCQ1e+m6EmU1330V/37bk=) 2: 5E802AC41DB911EB90A5461AC4F9AE02.roa (hash: 41aqCCC0CIJrASUZjn/UMATRac/pjiORpElfAzdM3kk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.crl rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n60jAjoVW9JbIkKAY6wZeHznwr4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:36:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1938 (0x792) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B53AF, serialNumber=9FAD23023A155BD25B22428063AC19787CE7C2BE Validity Not Before: Aug 22 21:36:52 2025 GMT Not After : Aug 29 21:36:52 2025 GMT Subject: CN=68a8e2f4-c476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c2:7d:b5:31:86:e3:8f:ce:c4:22:74:d5:f1: a3:42:1d:5f:75:93:80:9c:4c:11:ff:f9:06:61:4b: e7:0d:fb:89:34:6a:d9:a6:aa:96:3f:70:af:46:bc: 33:81:d9:93:45:f5:3a:3d:e2:64:90:40:23:4f:df: d3:cd:bf:7a:cd:63:ec:f9:b6:1a:a6:8b:41:b9:10: 32:20:9a:08:9c:2c:23:36:42:41:84:b5:f9:9f:b7: a8:f0:7e:05:42:28:40:67:70:a9:09:ef:45:40:03: 57:57:bb:0e:3a:c1:1b:4c:8b:af:3b:8b:5a:74:d8: 41:27:b3:73:d4:37:d6:4c:8e:2b:d2:2a:82:fc:cd: bb:4a:ab:f3:b1:d6:28:64:68:5f:56:3a:9f:f0:8f: a1:e5:b7:2b:69:e3:54:9f:bd:d4:0f:2d:17:50:09: 03:da:d0:cf:20:5d:58:12:e7:8d:2d:01:20:37:23: 28:87:33:da:6f:6a:d2:b3:ec:86:ae:33:b8:39:50: f4:31:33:f4:3a:08:66:d0:a7:10:33:7e:42:eb:b9: df:57:4e:c8:24:f6:16:62:05:d7:9d:a5:9f:5c:6c: 64:93:ee:fa:06:c1:7a:4b:a5:f2:40:14:2e:45:aa: a3:2a:ae:06:28:a3:fd:a4:d3:00:0d:71:6d:7d:13: cb:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:03:09:32:A8:23:90:60:4C:F8:0E:5F:7D:5C:7F:29:34:09:DC:67 X509v3 Authority Key Identifier: keyid:9F:AD:23:02:3A:15:5B:D2:5B:22:42:80:63:AC:19:78:7C:E7:C2:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n60jAjoVW9JbIkKAY6wZeHznwr4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:e0:53:d4:fa:6a:7c:d8:08:1d:9c:f9:36:36:77:46:5c:9a: f3:d3:66:b0:8b:65:dc:69:cf:54:0b:0c:31:44:2f:33:70:ea: 70:c2:af:c4:87:14:7a:99:ae:03:ce:03:e1:23:9b:eb:7c:64: ae:e6:97:61:6a:5c:f8:7b:f3:93:93:d1:a4:58:44:48:ec:da: 65:a1:90:4f:c9:ab:6d:4f:af:7f:d2:03:32:15:ea:47:7b:05: 0c:a1:69:48:a3:25:dc:7c:55:f8:a9:91:d7:34:91:85:3c:b6: 2f:23:e1:74:8b:4c:e2:7e:d7:4c:49:9d:77:d4:19:7d:16:fb: c8:d0:65:b5:a4:0d:f3:b5:62:a2:c8:98:fe:59:62:0a:df:01: 17:69:53:86:ef:81:7e:54:ba:03:a2:d1:21:7d:ae:89:e6:97: dd:f1:ff:d7:52:f6:10:1d:9f:2c:2f:19:da:b8:70:36:94:46: 66:ea:05:bf:78:9d:61:cd:22:4e:62:7f:4e:20:ca:4e:06:4d: 0f:fa:d4:f0:53:5c:a8:6a:97:16:bd:06:52:e6:dd:fa:4c:9e: 25:30:c5:43:df:11:7e:ce:4c:04:d9:b5:c9:ce:41:41:32:bd: 4d:24:2c:b2:b7:0c:6b:53:7b:de:34:df:fa:70:30:64:99:97: ea:a9:a6:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUzQUYxMTAvBgNVBAUTKDlGQUQyMzAyM0ExNTVCRDI1QjIyNDI4MDYzQUMxOTc4 N0NFN0MyQkUwHhcNMjUwODIyMjEzNjUyWhcNMjUwODI5MjEzNjUyWjAYMRYwFAYD VQQDEw02OGE4ZTJmNC1jNDc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3MJ9tTGG44/OxCJ01fGjQh1fdZOAnEwR//kGYUvnDfuJNGrZpqqWP3CvRrwz gdmTRfU6PeJkkEAjT9/Tzb96zWPs+bYapotBuRAyIJoInCwjNkJBhLX5n7eo8H4F QihAZ3CpCe9FQANXV7sOOsEbTIuvO4tadNhBJ7Nz1DfWTI4r0iqC/M27SqvzsdYo ZGhfVjqf8I+h5bcraeNUn73UDy0XUAkD2tDPIF1YEueNLQEgNyMohzPab2rSs+yG rjO4OVD0MTP0Oghm0KcQM35C67nfV07IJPYWYgXXnaWfXGxkk+76BsF6S6XyQBQu RaqjKq4GKKP9pNMADXFtfRPLFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE8DCTKo I5BgTPgOX31cfyk0CdxnMB8GA1UdIwQYMBaAFJ+tIwI6FVvSWyJCgGOsGXh858K+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTNBRi8xRjQ5MzI1QzFE QjgxMUVCOTFEMDQzMTlDNEY5QUUwMi9uNjBqQWpvVlc5SmJJa0tBWTZ3WmVIem53 cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL242MGpBam9WVzlKYklrS0FZNndaZUh6bndyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTNBRi8xRjQ5MzI1QzFEQjgxMUVCOTFEMDQzMTlDNEY5QUUwMi9uNjBqQWpvVlc5 SmJJa0tBWTZ3WmVIem53cjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAR4FPU+mp82AgdnPk2NndGXJrz02awi2Xcac9UCwwxRC8zcOpwwq/E hxR6ma4DzgPhI5vrfGSu5pdhalz4e/OTk9GkWERI7NploZBPyattT69/0gMyFepH ewUMoWlIoyXcfFX4qZHXNJGFPLYvI+F0i0ziftdMSZ131Bl9FvvI0GW1pA3ztWKi yJj+WWIK3wEXaVOG74F+VLoDotEhfa6J5pfd8f/XUvYQHZ8sLxnauHA2lEZm6gW/ eJ1hzSJOYn9OIMpOBk0P+tTwU1yoapcWvQZS5t36TJ4lMMVD3xF+zkwE2bXJzkFB Mr1NJCyytwxrU3veNN/6cDBkmZfqqaYe -----END CERTIFICATE-----Generated at Sun Aug 24 05:03:08 2025 by rpki-client