$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.mft File: 1RZ7lweHQQlX4l2fh1CFYPAFd24.mft (raw, json) Hash identifier: VMytoJ0JGXgGpFSvxsTobn0REhcHR2pUTmIChMp8G94= Subject key identifier: 60:57:75:52:57:BE:0B:D1:5D:40:8B:87:EA:98:35:C5:C2:12:54:33 Authority key identifier: D5:16:7B:97:07:87:41:09:57:E2:5D:9F:87:50:85:60:F0:05:77:6E Certificate issuer: /CN=A91B9011/serialNumber=D5167B970787410957E25D9F87508560F005776E Certificate serial: 05E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1RZ7lweHQQlX4l2fh1CFYPAFd24.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.mft Manifest number: 05E0 Signing time: Fri 22 Aug 2025 23:10:43 +0000 Manifest this update: Fri 22 Aug 2025 23:10:43 +0000 Manifest next update: Fri 29 Aug 2025 23:10:43 +0000 Files and hashes: 1: 1RZ7lweHQQlX4l2fh1CFYPAFd24.crl (hash: KiRDtc58lEsGXeASw1u5u/juZcaOF3ehZEabSKt+KX4=) 2: 438893AC55BE11EDBDE51983C4F9AE02.roa (hash: Y1Hqc3CucW1MGNfTEVOgwuu3xdmSB7zSj6HU8UBJr7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.crl rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1RZ7lweHQQlX4l2fh1CFYPAFd24.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:10:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1509 (0x5e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9011, serialNumber=D5167B970787410957E25D9F87508560F005776E Validity Not Before: Aug 22 23:10:43 2025 GMT Not After : Aug 29 23:10:43 2025 GMT Subject: CN=68a8f8f3-9748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2d:51:c2:a7:c5:66:cb:e7:fd:5f:92:a0:0f: dc:0b:af:07:8c:56:cc:60:db:64:3f:6b:98:97:7d: 2e:30:8c:cf:69:58:14:55:3f:c5:37:f2:4c:1d:e0: ee:a5:14:1e:82:43:31:96:88:41:a7:6b:c9:21:d0: f8:4c:ec:48:ac:80:2e:d8:46:46:bc:d4:ee:48:31: 8f:f9:a9:f3:b9:91:0a:40:c4:1c:e5:45:6a:13:1e: 70:c5:05:0e:56:0d:3f:df:6f:a5:ff:54:aa:1c:6d: 8a:21:27:3a:e2:bf:4f:d5:1d:d4:05:74:a1:e1:ca: c1:08:d3:9e:ce:92:15:ab:15:00:f1:85:eb:01:cc: 7f:01:0e:bf:b6:ce:4f:42:9b:b8:0f:e7:bd:7f:a3: b5:de:32:d7:29:80:32:30:c1:89:6b:fd:84:27:a3: a2:69:c0:67:f7:15:b8:22:60:ce:e2:33:0b:4b:9d: d9:65:91:d7:a2:c5:3d:97:38:65:fd:49:d8:3a:cd: 79:2b:62:4b:53:fa:75:48:66:6f:63:b7:b3:8c:f9: 08:5f:b4:df:d0:c6:3f:2c:0a:d0:2c:36:4b:a9:81: 98:ff:f0:7c:9b:62:fa:3f:26:16:45:d3:48:bf:ea: f6:79:b6:b1:54:e3:7c:3a:85:1d:44:82:4a:d2:ea: 0e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:57:75:52:57:BE:0B:D1:5D:40:8B:87:EA:98:35:C5:C2:12:54:33 X509v3 Authority Key Identifier: keyid:D5:16:7B:97:07:87:41:09:57:E2:5D:9F:87:50:85:60:F0:05:77:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1RZ7lweHQQlX4l2fh1CFYPAFd24.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:39:fa:3d:f6:75:f4:75:4a:c8:d6:b9:e1:79:e2:3c:1a:fe: 99:e7:21:5a:f6:ef:21:ff:68:ce:32:4b:cf:12:23:ab:a2:87: a0:c9:e5:dd:71:45:f0:f6:66:f4:14:23:c9:4e:21:18:25:c3: f9:dd:f6:7d:f3:6a:72:d1:ce:dc:c3:b6:1d:e9:bc:da:3d:63: 6f:bd:83:73:d4:72:6d:65:e8:b7:a2:42:5f:82:f7:67:b4:dc: ae:a4:2d:24:20:0e:10:fe:b0:1b:a4:86:1a:6c:f9:41:b6:22: f6:da:d9:b6:bf:87:90:f6:9b:58:49:29:89:e4:cc:13:93:69: 7b:2a:c4:06:39:3d:9a:57:b2:f7:72:08:70:76:49:17:0c:87: 6e:38:ba:a5:77:94:d4:a9:a0:fa:70:1e:e5:68:bc:ed:3e:06: db:79:4d:d1:8e:f0:f6:29:70:09:c8:a5:2c:17:64:31:f6:db: 0f:55:1e:a2:94:cc:ea:25:80:61:9c:a3:27:74:80:6d:26:9b: 6c:97:b8:b8:22:7c:d7:4e:cd:9c:08:e1:e1:82:33:f5:01:e8: 7e:c1:2b:73:4a:c4:c2:23:95:48:4a:48:17:72:42:e4:c6:0e: 66:cf:c9:7b:fe:03:c2:d3:48:8d:ae:91:02:15:38:18:e4:f3: 99:84:d6:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkwMTExMTAvBgNVBAUTKEQ1MTY3Qjk3MDc4NzQxMDk1N0UyNUQ5Rjg3NTA4NTYw RjAwNTc3NkUwHhcNMjUwODIyMjMxMDQzWhcNMjUwODI5MjMxMDQzWjAYMRYwFAYD VQQDEw02OGE4ZjhmMy05NzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAni1RwqfFZsvn/V+SoA/cC68HjFbMYNtkP2uYl30uMIzPaVgUVT/FN/JMHeDu pRQegkMxlohBp2vJIdD4TOxIrIAu2EZGvNTuSDGP+anzuZEKQMQc5UVqEx5wxQUO Vg0/32+l/1SqHG2KISc64r9P1R3UBXSh4crBCNOezpIVqxUA8YXrAcx/AQ6/ts5P Qpu4D+e9f6O13jLXKYAyMMGJa/2EJ6OiacBn9xW4ImDO4jMLS53ZZZHXosU9lzhl /UnYOs15K2JLU/p1SGZvY7ezjPkIX7Tf0MY/LArQLDZLqYGY//B8m2L6PyYWRdNI v+r2ebaxVON8OoUdRIJK0uoOjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGBXdVJX vgvRXUCLh+qYNcXCElQzMB8GA1UdIwQYMBaAFNUWe5cHh0EJV+Jdn4dQhWDwBXdu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTAxMS8zODg4RTBDNEM3 M0ExMUVCOTAwNzU1MTBDNEY5QUUwMi8xUlo3bHdlSFFRbFg0bDJmaDFDRllQQUZk MjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFSWjdsd2VIUVFsWDRsMmZoMUNGWVBBRmQyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTAxMS8zODg4RTBDNEM3M0ExMUVCOTAwNzU1MTBDNEY5QUUwMi8xUlo3bHdlSFFR bFg0bDJmaDFDRllQQUZkMjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7Ofo99nX0dUrI1rnheeI8Gv6Z5yFa9u8h/2jOMkvPEiOrooegyeXd cUXw9mb0FCPJTiEYJcP53fZ982py0c7cw7Yd6bzaPWNvvYNz1HJtZei3okJfgvdn tNyupC0kIA4Q/rAbpIYabPlBtiL22tm2v4eQ9ptYSSmJ5MwTk2l7KsQGOT2aV7L3 cghwdkkXDIduOLqld5TUqaD6cB7laLztPgbbeU3RjvD2KXAJyKUsF2Qx9tsPVR6i lMzqJYBhnKMndIBtJptsl7i4InzXTs2cCOHhgjP1Aeh+wStzSsTCI5VISkgXckLk xg5mz8l7/gPC00iNrpECFTgY5POZhNY7 -----END CERTIFICATE-----Generated at Sat Aug 23 19:38:44 2025 by rpki-client