$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft File: 25K4P0wYeDkNakTmrtV6d1ImNRI.mft (raw, json) Hash identifier: Yv2CiO6F5ZbA09PC6YmynxyE1GGONWawACOXMyAwiHk= Subject key identifier: 96:00:66:84:6C:91:35:F0:8F:5D:B7:6B:72:C0:68:92:68:84:6C:34 Authority key identifier: DB:92:B8:3F:4C:18:78:39:0D:6A:44:E6:AE:D5:7A:77:52:26:35:12 Certificate issuer: /CN=A91BBD5B/serialNumber=DB92B83F4C1878390D6A44E6AED57A7752263512 Certificate serial: 1D3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft Manifest number: 1D33 Signing time: Fri 22 Aug 2025 16:11:48 +0000 Manifest this update: Fri 22 Aug 2025 16:11:48 +0000 Manifest next update: Fri 29 Aug 2025 16:11:48 +0000 Files and hashes: 1: 25K4P0wYeDkNakTmrtV6d1ImNRI.crl (hash: xqfxopYq8MSiRzhy9Xi3C2UOV3dN6Pzn4Ky52iZDMPw=) 2: AB9480A6BB6811E69E8D1212C4F9AE02.roa (hash: XU2BtSx1XPF+OETuBQTO4A3xSlkRLbVqfxk4yTT8ml4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.crl rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:11:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7486 (0x1d3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBD5B, serialNumber=DB92B83F4C1878390D6A44E6AED57A7752263512 Validity Not Before: Aug 22 16:11:48 2025 GMT Not After : Aug 29 16:11:48 2025 GMT Subject: CN=68a896c4-b010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d4:6f:8e:9b:95:98:ba:83:0d:76:88:08:a2: 46:39:2d:ed:3e:03:a3:77:fd:d3:14:18:c8:31:e7: a0:bc:ac:1a:88:95:b3:3c:55:da:01:4b:13:c4:79: 4c:c5:be:9d:77:b9:8d:8b:b4:70:43:a2:af:1d:b8: 0a:22:40:2c:e9:1d:d7:e1:c9:47:59:7c:80:5c:0e: 5d:4a:d9:b4:60:cf:a6:31:f5:7e:a8:df:5a:fb:35: 85:03:03:1f:ca:f6:3a:25:2d:60:09:3d:1b:4b:f6: 07:e5:8d:a2:a3:9b:e1:96:05:bb:02:9c:c7:33:40: 0f:75:9f:7f:ba:da:dc:02:24:bd:86:b4:b3:64:3d: 73:af:75:14:1e:48:2f:59:e7:7e:88:5b:eb:94:7a: 5e:2c:20:d8:90:f2:3e:e5:48:3e:62:1e:96:a4:c7: 58:e4:df:a3:6d:4a:35:1e:69:b4:c0:55:d4:67:d5: 8f:fa:7b:95:89:c8:96:b7:75:5a:07:93:3e:1c:84: fa:1d:fc:e5:4e:16:8e:b0:e1:56:f2:8b:1d:a1:16: 05:0e:7e:81:77:2e:3a:d3:b2:ff:5e:61:0d:36:f7: 52:2c:a1:22:65:af:1b:ce:8b:b5:36:03:ab:98:f5: 2e:98:d2:53:04:5f:aa:8e:fa:d2:10:d6:f9:f5:48: 7b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:00:66:84:6C:91:35:F0:8F:5D:B7:6B:72:C0:68:92:68:84:6C:34 X509v3 Authority Key Identifier: keyid:DB:92:B8:3F:4C:18:78:39:0D:6A:44:E6:AE:D5:7A:77:52:26:35:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:e5:b1:2f:30:d4:e6:3f:1f:50:8c:e4:51:57:65:89:1c:2f: b3:59:88:fc:33:94:1d:e5:53:00:a2:8b:48:23:0c:e3:b9:ae: 6d:aa:be:30:c3:08:2a:56:4c:7f:2e:29:e4:8c:c2:a1:13:50: 6d:9c:22:24:ce:fb:8e:5a:b1:dc:a3:e0:cd:f7:eb:e1:08:22: 8c:f3:10:23:6d:a6:fe:ab:ee:4a:11:ec:68:bc:28:0d:35:2c: 1e:61:57:49:81:a2:dd:13:1e:15:52:ad:fc:0e:02:4c:33:ae: e2:e6:23:28:c2:e9:43:bf:0a:bf:30:9c:55:04:c5:4d:31:fe: fe:6b:9e:1b:f4:e0:f3:ea:b1:c5:4e:8b:c4:8c:1f:58:eb:c7: 5d:28:e5:4e:44:59:95:a5:39:27:63:9c:88:6e:54:f2:ce:65: 69:af:ea:9f:4b:08:9c:ba:9b:a3:a4:8f:75:ca:93:44:23:0b: b5:1c:e9:fc:c2:11:29:2f:13:24:b0:35:5f:24:32:48:ce:b3: 88:3b:c0:d4:0b:df:ef:97:6e:51:af:d1:20:ce:45:68:1e:67: ff:9f:9e:fa:62:8d:01:bf:20:77:2e:ec:f7:d4:0e:a9:46:d9: 38:12:22:fd:79:44:b0:3c:13:37:8f:d9:a7:48:f0:f1:5c:5e: 63:8e:26:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJENUIxMTAvBgNVBAUTKERCOTJCODNGNEMxODc4MzkwRDZBNDRFNkFFRDU3QTc3 NTIyNjM1MTIwHhcNMjUwODIyMTYxMTQ4WhcNMjUwODI5MTYxMTQ4WjAYMRYwFAYD VQQDEw02OGE4OTZjNC1iMDEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp9RvjpuVmLqDDXaICKJGOS3tPgOjd/3TFBjIMeegvKwaiJWzPFXaAUsTxHlM xb6dd7mNi7RwQ6KvHbgKIkAs6R3X4clHWXyAXA5dStm0YM+mMfV+qN9a+zWFAwMf yvY6JS1gCT0bS/YH5Y2io5vhlgW7ApzHM0APdZ9/utrcAiS9hrSzZD1zr3UUHkgv Wed+iFvrlHpeLCDYkPI+5Ug+Yh6WpMdY5N+jbUo1Hmm0wFXUZ9WP+nuViciWt3Va B5M+HIT6HfzlThaOsOFW8osdoRYFDn6Bdy4607L/XmENNvdSLKEiZa8bzou1NgOr mPUumNJTBF+qjvrSENb59Uh7AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJYAZoRs kTXwj123a3LAaJJohGw0MB8GA1UdIwQYMBaAFNuSuD9MGHg5DWpE5q7VendSJjUS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkQ1Qi8xNzAyRkMzRUJC NjcxMUU2QUUyNDA0MEZDNEY5QUUwMi8yNUs0UDB3WWVEa05ha1RtcnRWNmQxSW1O UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI1SzRQMHdZZURrTmFrVG1ydFY2ZDFJbU5SSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkQ1Qi8xNzAyRkMzRUJCNjcxMUU2QUUyNDA0MEZDNEY5QUUwMi8yNUs0UDB3WWVE a05ha1RtcnRWNmQxSW1OUkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA95bEvMNTmPx9QjORRV2WJHC+zWYj8M5Qd5VMAootIIwzjua5tqr4w wwgqVkx/LinkjMKhE1BtnCIkzvuOWrHco+DN9+vhCCKM8xAjbab+q+5KEexovCgN NSweYVdJgaLdEx4VUq38DgJMM67i5iMowulDvwq/MJxVBMVNMf7+a54b9ODz6rHF TovEjB9Y68ddKOVORFmVpTknY5yIblTyzmVpr+qfSwicupujpI91ypNEIwu1HOn8 whEpLxMksDVfJDJIzrOIO8DUC9/vl25Rr9EgzkVoHmf/n576Yo0BvyB3Luz31A6p Rtk4EiL9eUSwPBM3j9mnSPDxXF5jjiZv -----END CERTIFICATE-----Generated at Sat Aug 23 14:28:43 2025 by rpki-client