$ rpki-client -vvf rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft File: 0Ll9wB2J8jqAX75YYe43vwmcP_A.mft (raw, json) Hash identifier: aYAkYXAxfvrE9cMnFjKhFAmq7hnZMfFBS6UvJ0rhPQM= Subject key identifier: 8D:91:16:30:96:3D:1A:0E:BB:CE:8A:B9:93:43:E8:EA:C9:68:69:AC Authority key identifier: D0:B9:7D:C0:1D:89:F2:3A:80:5F:BE:58:61:EE:37:BF:09:9C:3F:F0 Certificate issuer: /CN=A91B62BF/serialNumber=D0B97DC01D89F23A805FBE5861EE37BF099C3FF0 Certificate serial: 0C57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Ll9wB2J8jqAX75YYe43vwmcP_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft Manifest number: 0C45 Signing time: Fri 22 Aug 2025 18:45:10 +0000 Manifest this update: Fri 22 Aug 2025 18:45:10 +0000 Manifest next update: Fri 29 Aug 2025 18:45:10 +0000 Files and hashes: 1: 0Ll9wB2J8jqAX75YYe43vwmcP_A.crl (hash: EZhv+65VPyssbloal9Ku+wIYXs1OPfUQmuYco681zAI=) 2: 498ED6046FD011EDA007D478C4F9AE02.roa (hash: lwkH9V+4ruYpDtKVAny/uyyCWO7r9GoTBPNu4gEXlEg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.crl rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Ll9wB2J8jqAX75YYe43vwmcP_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:45:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3159 (0xc57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B62BF, serialNumber=D0B97DC01D89F23A805FBE5861EE37BF099C3FF0 Validity Not Before: Aug 22 18:45:10 2025 GMT Not After : Aug 29 18:45:10 2025 GMT Subject: CN=68a8bab6-15e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ef:5b:36:ea:ab:0d:41:e2:d3:49:67:8d:2c: 31:1c:bf:04:66:2c:b0:0a:66:98:9b:a3:61:fb:1e: fe:92:8f:c0:21:4c:7d:1f:9b:50:a6:e3:d0:41:2a: 85:c5:ca:3d:03:ab:f6:29:90:90:d1:cb:63:e0:9b: 2d:08:77:77:9f:67:b8:4a:42:d7:2b:74:f4:ff:b6: 4d:70:34:7c:3d:48:c9:37:80:24:22:e7:5e:db:94: c0:a5:f9:3a:5a:a3:de:12:75:50:39:6e:a0:a9:1e: e1:c7:bd:c7:61:49:98:1e:00:27:00:d7:b7:f7:f1: 41:ac:fe:fb:db:2e:52:6c:be:71:d4:8b:f0:0e:b2: c7:a7:4d:cb:9f:e5:4a:76:a7:c6:44:fc:3f:de:cf: 74:fc:cf:a3:c6:60:fe:0e:35:cf:8a:47:5d:e6:7f: ed:a0:77:f5:4f:5f:2f:16:c6:0f:f6:15:ba:e5:13: e9:10:e2:d2:99:18:9a:08:0e:75:a0:cf:c6:e6:0d: 16:c1:20:6b:9a:bd:ff:d2:a7:07:ce:b1:f2:7b:7d: 82:f3:be:3a:34:25:6c:7f:2b:5f:bc:fc:ad:31:5b: 1c:75:98:21:3f:44:dd:bf:48:d4:bd:37:14:3c:bd: 3c:30:0c:ee:a0:10:e1:ff:5c:73:9b:31:bc:1a:3f: c6:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:91:16:30:96:3D:1A:0E:BB:CE:8A:B9:93:43:E8:EA:C9:68:69:AC X509v3 Authority Key Identifier: keyid:D0:B9:7D:C0:1D:89:F2:3A:80:5F:BE:58:61:EE:37:BF:09:9C:3F:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Ll9wB2J8jqAX75YYe43vwmcP_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:da:c9:28:8f:b2:1d:ff:c9:d1:bf:40:af:81:b2:13:94:81: 56:6c:a8:d4:17:45:32:94:80:18:9b:ac:43:51:a5:18:9f:a6: e3:00:b0:96:cb:6e:a5:a2:d3:93:d5:a2:38:b6:fb:e4:7c:2d: 81:17:92:1c:66:1a:07:08:48:b0:62:54:03:2c:4a:61:77:5f: 77:fb:4f:54:0d:7e:fe:21:aa:4a:26:01:28:62:07:31:8e:ca: 8e:e8:26:d4:40:9e:dc:a1:d4:2b:39:fc:05:0d:68:9e:c5:e5: 6d:80:cd:97:28:3f:cd:ab:04:ce:78:68:2d:7a:ae:d1:cc:de: ab:74:b1:41:1f:44:ae:3f:b4:97:14:61:c5:2a:0c:23:26:a9: 1c:d8:c3:bd:d4:d0:8c:1e:2f:2f:0a:c4:28:3c:39:00:17:ea: e5:f9:a6:1e:fd:2d:46:2c:a3:ac:b4:82:14:35:8e:1e:6c:80: 88:10:e4:ea:ca:ef:08:fe:2e:5f:6a:14:19:c6:d7:e5:b6:f0: 16:0d:29:77:e8:98:05:48:18:91:5c:a5:ad:b4:d2:80:ea:9a: 6f:a5:6f:c7:28:5e:23:7f:ba:81:29:1a:86:ad:3f:96:1d:fd: 80:b5:ce:47:28:d4:c7:35:26:f9:66:28:1e:1a:34:a1:34:68: 00:08:16:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYyQkYxMTAvBgNVBAUTKEQwQjk3REMwMUQ4OUYyM0E4MDVGQkU1ODYxRUUzN0JG MDk5QzNGRjAwHhcNMjUwODIyMTg0NTEwWhcNMjUwODI5MTg0NTEwWjAYMRYwFAYD VQQDEw02OGE4YmFiNi0xNWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1O9bNuqrDUHi00lnjSwxHL8EZiywCmaYm6Nh+x7+ko/AIUx9H5tQpuPQQSqF xco9A6v2KZCQ0ctj4JstCHd3n2e4SkLXK3T0/7ZNcDR8PUjJN4AkIude25TApfk6 WqPeEnVQOW6gqR7hx73HYUmYHgAnANe39/FBrP772y5SbL5x1IvwDrLHp03Ln+VK dqfGRPw/3s90/M+jxmD+DjXPikdd5n/toHf1T18vFsYP9hW65RPpEOLSmRiaCA51 oM/G5g0WwSBrmr3/0qcHzrHye32C8746NCVsfytfvPytMVscdZghP0Tdv0jUvTcU PL08MAzuoBDh/1xzmzG8Gj/GtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI2RFjCW PRoOu86KuZND6OrJaGmsMB8GA1UdIwQYMBaAFNC5fcAdifI6gF++WGHuN78JnD/w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjJCRi80NEVDNTEwNjEw MzAxMUVBQjExMkEyMzJDNEY5QUUwMi8wTGw5d0IySjhqcUFYNzVZWWU0M3Z3bWNQ X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBMbDl3QjJKOGpxQVg3NVlZZTQzdndtY1BfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjJCRi80NEVDNTEwNjEwMzAxMUVBQjExMkEyMzJDNEY5QUUwMi8wTGw5d0IySjhq cUFYNzVZWWU0M3Z3bWNQX0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAU2skoj7Id/8nRv0CvgbITlIFWbKjUF0UylIAYm6xDUaUYn6bjALCW y26lotOT1aI4tvvkfC2BF5IcZhoHCEiwYlQDLEphd193+09UDX7+IapKJgEoYgcx jsqO6CbUQJ7codQrOfwFDWiexeVtgM2XKD/NqwTOeGgteq7RzN6rdLFBH0SuP7SX FGHFKgwjJqkc2MO91NCMHi8vCsQoPDkAF+rl+aYe/S1GLKOstIIUNY4ebICIEOTq yu8I/i5fahQZxtfltvAWDSl36JgFSBiRXKWttNKA6ppvpW/HKF4jf7qBKRqGrT+W Hf2Atc5HKNTHNSb5ZigeGjShNGgACBaR -----END CERTIFICATE-----Generated at Sun Aug 24 05:15:56 2025 by rpki-client