$ rpki-client -vvf rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft File: _J3Ma6xPPZvsntHpBk2bytz5o6k.mft (raw, json) Hash identifier: VzVlyn/jdrhajoMyv1wnU1K2tz1fYrkaU6xbATqWzO8= Subject key identifier: 45:D5:54:07:C8:B0:B0:43:87:A9:58:D2:7D:05:BD:B5:53:31:9B:29 Authority key identifier: FC:9D:CC:6B:AC:4F:3D:9B:EC:9E:D1:E9:06:4D:9B:CA:DC:F9:A3:A9 Certificate issuer: /CN=A91B673B/serialNumber=FC9DCC6BAC4F3D9BEC9ED1E9064D9BCADCF9A3A9 Certificate serial: C2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft Manifest number: C0 Signing time: Sat 23 Aug 2025 06:04:24 +0000 Manifest this update: Sat 23 Aug 2025 06:04:24 +0000 Manifest next update: Sat 30 Aug 2025 06:04:23 +0000 Files and hashes: 1: _J3Ma6xPPZvsntHpBk2bytz5o6k.crl (hash: n1p8WGug6JoExOdFpOtMGfW9g4Ehjzv+SsjDwIndb50=) 2: 390757225E1511EFB04EDA1DC4F9AE02.roa (hash: TNYuuYwAvBi+/pUa2qwV1wTrBwuN862kPVZbu/phpjQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.crl rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 194 (0xc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B673B, serialNumber=FC9DCC6BAC4F3D9BEC9ED1E9064D9BCADCF9A3A9 Validity Not Before: Aug 23 06:04:24 2025 GMT Not After : Aug 30 06:04:23 2025 GMT Subject: CN=68a959e8-95d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7c:bb:1d:3d:d2:2c:ba:bd:4b:63:2e:2c:ab: f1:83:c1:a7:e6:dc:fe:28:51:9d:49:48:04:96:25: c0:b2:d8:a0:77:9b:3d:ef:ed:3b:96:94:ab:d8:10: 79:41:57:51:7c:25:6e:30:59:49:d1:ff:40:c3:e0: 92:ef:57:c3:a8:61:9c:c4:e2:88:5b:a6:87:b5:43: 3c:1a:99:c0:7c:11:0e:64:b7:14:62:d9:20:1e:fb: ff:8e:69:03:8c:7c:8d:f4:eb:57:b4:d9:c9:8d:f1: 6e:b1:da:87:35:79:a7:58:2b:b2:6a:fb:2a:82:fa: 4a:dc:81:63:d5:8c:15:6c:79:9e:45:9a:c6:c8:c3: 0c:e2:a3:38:ec:ed:3e:bb:e6:40:c9:ab:7a:9e:d5: 63:5d:7f:73:e0:92:f6:a4:9b:bc:c2:8b:cc:ff:81: b0:15:8f:95:b7:29:36:83:31:1c:8c:f9:75:ed:bd: 23:ac:8c:7d:45:e9:87:c1:bf:5f:17:4e:a9:00:7c: b8:bd:dd:30:7d:3d:cc:48:ef:95:66:11:17:6e:8b: c9:7f:13:80:a0:8f:cd:01:4b:55:16:76:fe:b1:b9: d4:74:d9:8c:79:b7:ea:28:a3:ea:b6:d3:71:2e:e2: db:fb:90:99:48:44:bb:95:de:81:fe:6e:18:54:d1: 9b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D5:54:07:C8:B0:B0:43:87:A9:58:D2:7D:05:BD:B5:53:31:9B:29 X509v3 Authority Key Identifier: keyid:FC:9D:CC:6B:AC:4F:3D:9B:EC:9E:D1:E9:06:4D:9B:CA:DC:F9:A3:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:75:5f:3b:59:6a:1a:c4:ac:65:a7:3b:a8:89:9f:20:a2:9e: 9b:cf:ed:58:a8:5c:83:b1:9c:d3:7c:dd:74:10:1b:54:a8:6b: 80:07:f6:3c:c4:4e:d8:e4:a4:dd:49:bc:29:58:9a:f3:21:18: db:a4:75:c2:6a:e6:73:49:44:34:fa:9b:44:a3:3a:7d:66:ff: 10:16:09:e4:70:83:6d:36:86:6b:a0:d5:fc:cf:ee:19:64:25: e0:89:9c:82:48:e4:6c:bd:40:8e:03:51:8f:e2:1f:e1:7f:65: 30:5b:f1:6c:93:9e:b6:13:c6:47:77:ed:22:4e:2c:e6:d0:c2: d4:a3:bd:72:ac:39:1d:a9:1e:9d:c0:17:9b:17:8b:8a:d9:a7: 7a:64:9b:45:8f:e6:1f:49:96:52:42:5f:cf:c3:f6:e7:52:fb: 3d:58:d8:be:0d:2f:de:0b:2e:d3:99:e0:e4:41:4e:76:e4:a0: 4f:0e:70:f3:94:34:76:4c:40:ff:f4:20:da:5c:38:2d:41:d9: aa:c9:01:b5:b4:a6:33:85:6f:1b:52:b8:8d:c0:9f:e4:1f:b7: 08:25:e9:d2:45:0f:af:12:32:19:e0:d0:20:cf:44:b1:3d:5f: d5:b5:29:17:a9:40:23:e4:92:5a:e0:e1:1b:b0:76:84:68:4a: 3c:a1:22:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY3M0IxMTAvBgNVBAUTKEZDOURDQzZCQUM0RjNEOUJFQzlFRDFFOTA2NEQ5QkNB RENGOUEzQTkwHhcNMjUwODIzMDYwNDI0WhcNMjUwODMwMDYwNDIzWjAYMRYwFAYD VQQDEw02OGE5NTllOC05NWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwXy7HT3SLLq9S2MuLKvxg8Gn5tz+KFGdSUgEliXAstigd5s97+07lpSr2BB5 QVdRfCVuMFlJ0f9Aw+CS71fDqGGcxOKIW6aHtUM8GpnAfBEOZLcUYtkgHvv/jmkD jHyN9OtXtNnJjfFusdqHNXmnWCuyavsqgvpK3IFj1YwVbHmeRZrGyMMM4qM47O0+ u+ZAyat6ntVjXX9z4JL2pJu8wovM/4GwFY+Vtyk2gzEcjPl17b0jrIx9RemHwb9f F06pAHy4vd0wfT3MSO+VZhEXbovJfxOAoI/NAUtVFnb+sbnUdNmMebfqKKPqttNx LuLb+5CZSES7ld6B/m4YVNGb3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEXVVAfI sLBDh6lY0n0FvbVTMZspMB8GA1UdIwQYMBaAFPydzGusTz2b7J7R6QZNm8rc+aOp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjczQi83OTQ2MzBDQzVE RkUxMUVGOEM3RTgxN0JDNEY5QUUwMi9fSjNNYTZ4UFBadnNudEhwQmsyYnl0ejVv NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19KM01hNnhQUFp2c250SHBCazJieXR6NW82ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjczQi83OTQ2MzBDQzVERkUxMUVGOEM3RTgxN0JDNEY5QUUwMi9fSjNNYTZ4UFBa dnNudEhwQmsyYnl0ejVvNmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7dV87WWoaxKxlpzuoiZ8gop6bz+1YqFyDsZzTfN10EBtUqGuAB/Y8 xE7Y5KTdSbwpWJrzIRjbpHXCauZzSUQ0+ptEozp9Zv8QFgnkcINtNoZroNX8z+4Z ZCXgiZyCSORsvUCOA1GP4h/hf2UwW/Fsk562E8ZHd+0iTizm0MLUo71yrDkdqR6d wBebF4uK2ad6ZJtFj+YfSZZSQl/Pw/bnUvs9WNi+DS/eCy7TmeDkQU525KBPDnDz lDR2TED/9CDaXDgtQdmqyQG1tKYzhW8bUriNwJ/kH7cIJenSRQ+vEjIZ4NAgz0Sx PV/VtSkXqUAj5JJa4OEbsHaEaEo8oSI7 -----END CERTIFICATE-----Generated at Sat Aug 23 10:28:47 2025 by rpki-client