$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft File: CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft (raw, json) Hash identifier: lFJzmPROZePHuzTuau2WLXto0OzkBK8GU7A95BAGnfo= Subject key identifier: 0C:B0:C3:F2:C4:65:E6:06:79:E9:48:76:09:1D:CA:CC:7A:DF:6A:D7 Authority key identifier: 08:D6:8C:F4:50:07:45:37:5F:F2:CC:58:4B:A5:FB:E5:77:BE:E3:3F Certificate issuer: /CN=A91B8D33/serialNumber=08D68CF4500745375FF2CC584BA5FBE577BEE33F Certificate serial: 0185 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft Manifest number: 017B Signing time: Sat 23 Aug 2025 03:54:07 +0000 Manifest this update: Sat 23 Aug 2025 03:54:06 +0000 Manifest next update: Sat 30 Aug 2025 03:54:06 +0000 Files and hashes: 1: CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl (hash: 4QTOhhiKwcwXRJOG2U+K8ZRa6iBSKwg0uiHLF/HO1LY=) 2: E62F8796D1BD11EFBCCC0B68C4F9AE02.roa (hash: fNs1z1deex6fcIdqMxez0n/drhicpYWMQnLuUAo17fo=) 3: 86D7DAE6D1C211EF9AA9410EC4F9AE02.roa (hash: ygqqEQTyg2IH19vlQAL4kX0HHDThJX4eE1C7WPj4wYg=) 4: C698E13ED1BD11EF9C00D867C4F9AE02.roa (hash: xRbmb+/1S1f8++5LVT2TgnO4g2wWlkEYjHuBK2BLWRw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:54:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 389 (0x185) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8D33, serialNumber=08D68CF4500745375FF2CC584BA5FBE577BEE33F Validity Not Before: Aug 23 03:54:06 2025 GMT Not After : Aug 30 03:54:06 2025 GMT Subject: CN=68a93b5e-5815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d9:d1:45:6c:45:d2:dc:2e:3c:67:14:89:2f: eb:c7:88:9e:13:6e:82:00:b5:16:c9:ec:d8:e3:4a: b6:e3:7c:cb:03:9e:c0:d6:c1:48:44:1d:01:e1:06: a1:e1:f3:ce:ae:bd:66:63:89:a1:b7:1e:a4:66:c9: 6e:ab:aa:4b:9c:8a:58:30:9c:68:40:54:a0:79:86: 30:70:da:3a:13:f5:07:73:c3:31:16:d7:a7:05:77: 84:16:e5:ca:2b:97:67:67:5c:c6:30:56:2d:aa:4d: 66:5e:5b:53:26:79:47:24:04:dc:e4:bb:fe:cf:e2: 25:bf:f6:74:b4:96:06:74:c4:c1:95:4b:8d:66:97: 21:1a:44:f6:85:bd:c0:e1:63:f9:e2:ec:5b:9c:86: 37:f5:8f:16:28:0d:c3:a0:16:dd:99:5b:f6:98:28: 30:21:dc:42:97:66:e7:00:16:b0:b3:c5:fa:64:57: aa:07:9b:d7:12:ec:15:35:12:6c:49:4b:9d:3f:f1: 95:fd:54:69:c8:1b:78:2d:35:53:72:cc:d8:f8:8f: 3c:30:ec:6b:3b:47:38:d5:2d:a6:82:78:98:5d:76: 1b:4b:b2:b5:fb:9b:9f:94:0c:35:f8:68:af:13:75: ac:74:36:2a:a4:e1:49:67:ab:b7:16:4b:e0:60:84: d8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:B0:C3:F2:C4:65:E6:06:79:E9:48:76:09:1D:CA:CC:7A:DF:6A:D7 X509v3 Authority Key Identifier: keyid:08:D6:8C:F4:50:07:45:37:5F:F2:CC:58:4B:A5:FB:E5:77:BE:E3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:bf:e6:a7:04:0d:00:62:b7:f5:3f:c0:d5:b1:43:33:47:03: 47:f6:10:31:b9:8d:44:9a:a8:1f:cc:55:38:3d:aa:68:98:ff: ab:45:7a:3f:ed:22:d0:e9:99:6d:c6:43:d2:f4:4d:45:c5:7c: b9:23:25:9d:fb:80:15:b1:75:ec:fd:0a:5f:30:dc:1b:29:b6: 3d:88:16:fd:96:fb:62:72:52:7a:df:0e:bf:14:cd:ad:01:c6: 3f:0d:a1:50:e8:97:d4:37:a4:36:83:db:24:47:30:eb:61:cb: 49:b8:a2:d3:d4:1a:41:3b:93:90:b0:f0:68:78:4e:9d:9b:a2: 06:87:dd:87:46:97:6e:7b:fd:06:38:ad:5d:35:51:e9:af:9d: d7:a1:37:6b:ce:a2:cf:c7:29:b5:ed:eb:83:df:10:f3:0c:6a: ac:ed:aa:26:a9:85:17:e9:dc:26:22:7e:93:5a:b8:ba:b7:b8: 07:7e:ba:36:6b:46:b0:bd:b5:52:70:40:86:c4:c6:25:5e:63: 21:24:03:45:ac:15:1e:c4:d6:c5:21:6b:52:de:1c:b4:62:c9: 8d:d3:62:31:9d:6a:ad:32:80:a8:88:4f:3f:0e:1f:c9:5c:35: a4:98:03:10:60:ac:bb:9e:b3:7c:0b:0e:d3:23:b5:23:ba:bb: e1:ef:ab:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhEMzMxMTAvBgNVBAUTKDA4RDY4Q0Y0NTAwNzQ1Mzc1RkYyQ0M1ODRCQTVGQkU1 NzdCRUUzM0YwHhcNMjUwODIzMDM1NDA2WhcNMjUwODMwMDM1NDA2WjAYMRYwFAYD VQQDEw02OGE5M2I1ZS01ODE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAotnRRWxF0twuPGcUiS/rx4ieE26CALUWyezY40q243zLA57A1sFIRB0B4Qah 4fPOrr1mY4mhtx6kZsluq6pLnIpYMJxoQFSgeYYwcNo6E/UHc8MxFtenBXeEFuXK K5dnZ1zGMFYtqk1mXltTJnlHJATc5Lv+z+Ilv/Z0tJYGdMTBlUuNZpchGkT2hb3A 4WP54uxbnIY39Y8WKA3DoBbdmVv2mCgwIdxCl2bnABaws8X6ZFeqB5vXEuwVNRJs SUudP/GV/VRpyBt4LTVTcszY+I88MOxrO0c41S2mgniYXXYbS7K1+5uflAw1+Giv E3WsdDYqpOFJZ6u3FkvgYITYrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAyww/LE ZeYGeelIdgkdysx632rXMB8GA1UdIwQYMBaAFAjWjPRQB0U3X/LMWEul++V3vuM/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEQzMy81OTYyNjcxMDQ3 NzcxMUVFQTZCRDUzN0VDNEY5QUUwMi9DTmFNOUZBSFJUZGY4c3hZUzZYNzVYZS00 ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NOYU05RkFIUlRkZjhzeFlTNlg3NVhlLTR6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEQzMy81OTYyNjcxMDQ3NzcxMUVFQTZCRDUzN0VDNEY5QUUwMi9DTmFNOUZBSFJU ZGY4c3hZUzZYNzVYZS00ejgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPv+anBA0AYrf1P8DVsUMzRwNH9hAxuY1EmqgfzFU4PapomP+rRXo/ 7SLQ6ZltxkPS9E1FxXy5IyWd+4AVsXXs/QpfMNwbKbY9iBb9lvticlJ63w6/FM2t AcY/DaFQ6JfUN6Q2g9skRzDrYctJuKLT1BpBO5OQsPBoeE6dm6IGh92HRpdue/0G OK1dNVHpr53XoTdrzqLPxym17euD3xDzDGqs7aomqYUX6dwmIn6TWri6t7gHfro2 a0awvbVScECGxMYlXmMhJANFrBUexNbFIWtS3hy0YsmN02IxnWqtMoCoiE8/Dh/J XDWkmAMQYKy7nrN8Cw7TI7Ujurvh76vj -----END CERTIFICATE-----Generated at Sat Aug 23 10:15:35 2025 by rpki-client