$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft File: redjNI0CWa0SzYi3ZNOYy4rHQMk.mft (raw, json) Hash identifier: sDwByGMQ0qLGmDdASU4lSe8zc8t/FGMai+WFY9b0Syg= Subject key identifier: 38:43:17:6E:72:84:4C:2A:72:0A:E2:DE:AD:9E:88:55:44:3C:A4:13 Authority key identifier: AD:E7:63:34:8D:02:59:AD:12:CD:88:B7:64:D3:98:CB:8A:C7:40:C9 Certificate issuer: /CN=A91BBCC9/serialNumber=ADE763348D0259AD12CD88B764D398CB8AC740C9 Certificate serial: 0614 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/redjNI0CWa0SzYi3ZNOYy4rHQMk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft Manifest number: 060B Signing time: Fri 22 Aug 2025 23:01:07 +0000 Manifest this update: Fri 22 Aug 2025 23:01:07 +0000 Manifest next update: Fri 29 Aug 2025 23:01:07 +0000 Files and hashes: 1: redjNI0CWa0SzYi3ZNOYy4rHQMk.crl (hash: 6WKNm9rUqd58v89O8V7b4cyR/G7OKLTfWQ3qUKQDOQE=) 2: B69C27DCB6D711EB9D603F7DC4F9AE02.roa (hash: ClA7TsoBf9is9kiaEyUF4SSCiNxpgXXELAtT3dKemLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.crl rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/redjNI0CWa0SzYi3ZNOYy4rHQMk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1556 (0x614) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBCC9, serialNumber=ADE763348D0259AD12CD88B764D398CB8AC740C9 Validity Not Before: Aug 22 23:01:07 2025 GMT Not After : Aug 29 23:01:07 2025 GMT Subject: CN=68a8f6b3-f5da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:77:9f:35:b6:f2:92:ac:c7:46:00:a0:b3:98: 49:e1:39:d5:85:0f:ac:2b:ef:b2:9a:09:0f:e7:c3: b4:e9:0d:89:47:ce:99:ed:3e:36:62:c9:41:59:ef: f7:14:95:ee:b5:f1:2c:b7:a6:f5:e2:0f:af:0d:d5: 83:96:74:25:76:4e:f2:f9:35:32:f3:bf:fa:be:41: ad:44:65:31:ee:3e:fb:7c:bd:9c:fd:36:02:ae:3b: 9f:71:56:0c:af:36:47:68:1f:88:f0:4a:44:74:cb: 04:04:7b:c0:b3:cf:65:8f:5e:02:b3:1e:8b:b3:ba: 0e:39:8e:a7:da:82:83:1e:85:52:f2:be:ac:41:09: 80:fd:34:c1:4b:3b:5d:b3:36:8e:91:d7:7a:4a:c0: 66:0f:0f:c7:ab:54:12:28:33:7a:9a:2f:34:08:d2: c2:e5:9b:7e:9b:69:b0:31:df:4d:37:bf:fd:82:7a: 7f:40:13:c1:d9:2b:45:5b:53:05:65:14:34:60:86: 97:70:a1:5e:87:9f:5f:35:ee:c4:59:fc:db:c7:3f: 31:eb:1c:16:72:f6:2b:b8:f9:e2:11:cf:6f:eb:1d: 23:ac:12:c6:b3:a8:d8:6f:a4:5e:62:8f:8e:0b:a4: ab:64:8d:ea:1d:68:b1:17:5b:c9:c1:dd:d0:62:33: 9f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:43:17:6E:72:84:4C:2A:72:0A:E2:DE:AD:9E:88:55:44:3C:A4:13 X509v3 Authority Key Identifier: keyid:AD:E7:63:34:8D:02:59:AD:12:CD:88:B7:64:D3:98:CB:8A:C7:40:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/redjNI0CWa0SzYi3ZNOYy4rHQMk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:41:a2:dd:1d:1b:57:cd:21:e8:f7:fd:08:c1:4d:2e:99:71: d7:e5:df:e4:83:83:20:21:2d:64:64:a8:9e:86:c9:bc:32:61: c5:d3:c3:0a:65:86:d3:19:ef:9d:79:77:a2:22:af:18:6f:be: 31:86:e4:5e:f3:1b:16:ba:8d:2a:07:33:b9:76:52:5a:63:d4: 42:00:61:e1:7b:7f:51:dd:61:6d:d2:d4:d9:46:b9:24:70:af: 68:fd:a0:14:4d:87:a1:ea:c4:7b:3b:ec:54:fd:b4:a5:ee:4d: e2:67:6b:76:74:08:cf:1e:c1:87:e1:74:fe:d1:a8:75:eb:69: c1:52:f4:41:92:ce:4e:5f:2d:10:fd:11:94:57:8c:e6:d8:10: 27:4c:f5:f8:e6:70:0c:89:31:cf:02:1a:3e:65:df:c3:87:d6: 29:e0:e7:71:27:95:52:10:76:2f:0b:f3:18:ad:3d:67:2f:dd: 21:41:c9:78:27:75:41:88:e4:41:49:8d:e6:4e:6b:f6:a3:ed: dc:72:04:1e:a9:6d:4e:23:42:98:9d:11:52:90:3a:fc:a1:8c: 10:0d:1b:15:8c:eb:7b:7c:65:56:83:74:0d:d8:0a:0d:b4:b6: 4d:15:d5:91:4e:fd:0c:70:2e:fd:5b:25:45:00:0f:7d:93:d9: 08:e2:17:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJDQzkxMTAvBgNVBAUTKEFERTc2MzM0OEQwMjU5QUQxMkNEODhCNzY0RDM5OENC OEFDNzQwQzkwHhcNMjUwODIyMjMwMTA3WhcNMjUwODI5MjMwMTA3WjAYMRYwFAYD VQQDEw02OGE4ZjZiMy1mNWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqHefNbbykqzHRgCgs5hJ4TnVhQ+sK++ymgkP58O06Q2JR86Z7T42YslBWe/3 FJXutfEst6b14g+vDdWDlnQldk7y+TUy87/6vkGtRGUx7j77fL2c/TYCrjufcVYM rzZHaB+I8EpEdMsEBHvAs89lj14Csx6Ls7oOOY6n2oKDHoVS8r6sQQmA/TTBSztd szaOkdd6SsBmDw/Hq1QSKDN6mi80CNLC5Zt+m2mwMd9NN7/9gnp/QBPB2StFW1MF ZRQ0YIaXcKFeh59fNe7EWfzbxz8x6xwWcvYruPniEc9v6x0jrBLGs6jYb6ReYo+O C6SrZI3qHWixF1vJwd3QYjOfQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDhDF25y hEwqcgri3q2eiFVEPKQTMB8GA1UdIwQYMBaAFK3nYzSNAlmtEs2It2TTmMuKx0DJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkNDOS9EMzBCMTVDMEI2 Q0YxMUVCODRFQjE4NTFDNEY5QUUwMi9yZWRqTkkwQ1dhMFN6WWkzWk5PWXk0ckhR TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JlZGpOSTBDV2EwU3pZaTNaTk9ZeTRySFFNay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkNDOS9EMzBCMTVDMEI2Q0YxMUVCODRFQjE4NTFDNEY5QUUwMi9yZWRqTkkwQ1dh MFN6WWkzWk5PWXk0ckhRTWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyQaLdHRtXzSHo9/0IwU0umXHX5d/kg4MgIS1kZKiehsm8MmHF08MK ZYbTGe+deXeiIq8Yb74xhuRe8xsWuo0qBzO5dlJaY9RCAGHhe39R3WFt0tTZRrkk cK9o/aAUTYeh6sR7O+xU/bSl7k3iZ2t2dAjPHsGH4XT+0ah162nBUvRBks5OXy0Q /RGUV4zm2BAnTPX45nAMiTHPAho+Zd/Dh9Yp4OdxJ5VSEHYvC/MYrT1nL90hQcl4 J3VBiORBSY3mTmv2o+3ccgQeqW1OI0KYnRFSkDr8oYwQDRsVjOt7fGVWg3QN2AoN tLZNFdWRTv0McC79WyVFAA99k9kI4hcQ -----END CERTIFICATE-----Generated at Sun Aug 24 00:03:36 2025 by rpki-client