$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft File: c_S729eiHW57nkv1sMgXIszCHWc.mft (raw, json) Hash identifier: YXba1l8oJGsBek0MB3zrzWNpQ1P8lqcRhMSwhAmrDtk= Subject key identifier: 0A:94:EF:54:C7:CE:A8:F5:D1:F5:65:92:AB:20:E1:4F:C5:D6:C0:F1 Authority key identifier: 73:F4:BB:DB:D7:A2:1D:6E:7B:9E:4B:F5:B0:C8:17:22:CC:C2:1D:67 Certificate issuer: /CN=A91BDDB8/serialNumber=73F4BBDBD7A21D6E7B9E4BF5B0C81722CCC21D67 Certificate serial: 11F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_S729eiHW57nkv1sMgXIszCHWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft Manifest number: 11E9 Signing time: Fri 22 Aug 2025 17:18:06 +0000 Manifest this update: Fri 22 Aug 2025 17:18:05 +0000 Manifest next update: Fri 29 Aug 2025 17:18:05 +0000 Files and hashes: 1: c_S729eiHW57nkv1sMgXIszCHWc.crl (hash: xDGiG1z4WUiAEiQ0he9KSJksqlNcQ5uH2xrxwKvT9m0=) 2: 732BAF02BF5D11EB8199C943C4F9AE02.roa (hash: 19PePHoFF22nUkndMtbal1vAJr/Bweg8ayj4IBTrMGk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.crl rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_S729eiHW57nkv1sMgXIszCHWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:18:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4599 (0x11f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDDB8, serialNumber=73F4BBDBD7A21D6E7B9E4BF5B0C81722CCC21D67 Validity Not Before: Aug 22 17:18:05 2025 GMT Not After : Aug 29 17:18:05 2025 GMT Subject: CN=68a8a64e-6dc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:8c:2d:b0:33:72:45:c0:0e:ee:6a:65:9f:e5: 5a:22:62:22:da:bc:bd:bb:48:7d:f7:44:a4:99:78: f2:fc:45:dc:e5:60:c8:30:3e:f8:c6:b5:ab:04:0f: aa:76:74:62:44:74:b5:ec:18:5e:9d:d8:8a:38:6c: 70:7f:07:c0:4d:7d:51:a2:16:b8:00:15:34:f4:cf: 18:b6:0b:4c:e4:ab:6d:43:73:fa:e7:8a:f0:af:dc: b0:b8:52:9b:a1:d7:59:29:bf:4f:2e:a1:02:ff:6d: 30:60:4c:18:88:94:fd:d1:ab:12:d3:6b:a1:7e:de: 3e:63:8a:ea:26:85:90:39:b2:29:a6:90:f1:57:77: b2:e1:e9:5a:9b:c9:44:1f:cb:31:36:df:c0:ba:ca: e9:d1:12:d2:1b:69:e2:12:7b:39:dc:39:fa:41:94: 27:c4:62:6e:26:3e:b4:3f:4f:9a:ea:2c:41:38:42: 89:68:65:f6:df:d9:c3:bd:d3:f6:82:f4:56:d9:33: cb:b8:22:16:75:ca:f7:21:18:63:d0:d3:3e:33:4f: eb:1a:21:ed:f8:92:69:ff:c2:96:36:75:9a:11:71: fa:d5:13:8b:44:0c:d4:7d:ab:1b:49:91:4c:2a:ce: 14:50:03:fe:79:d4:88:be:51:91:3c:87:ff:9b:ba: 43:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:94:EF:54:C7:CE:A8:F5:D1:F5:65:92:AB:20:E1:4F:C5:D6:C0:F1 X509v3 Authority Key Identifier: keyid:73:F4:BB:DB:D7:A2:1D:6E:7B:9E:4B:F5:B0:C8:17:22:CC:C2:1D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_S729eiHW57nkv1sMgXIszCHWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:0a:34:12:62:60:00:c3:f6:09:ed:5d:b5:b0:26:52:2f:ab: 85:9b:14:64:a8:04:91:fa:e7:41:88:24:f8:c9:1b:1f:ac:72: 6e:5d:cb:1b:83:63:83:26:bf:83:82:3d:7b:83:2a:88:f3:4b: 75:dd:7f:ad:15:25:1f:94:6c:31:a7:a5:8c:7f:6f:62:ac:b9: f0:1c:f0:44:a9:4a:7f:3d:f2:80:b8:d7:71:6f:96:92:5d:c3: 60:93:f9:d8:7a:1f:1c:a2:fb:45:48:40:c8:e1:2d:c0:71:8e: 83:58:f9:2c:a9:e1:c4:55:ce:e3:98:b1:98:40:d2:e3:53:b0: 30:e9:21:a0:f5:bb:70:01:8b:49:c4:bc:48:65:a9:ef:b1:20: 31:8d:7a:70:de:01:5b:3d:db:57:0c:a2:bb:2f:dc:56:7f:44: 79:41:30:a9:99:75:6a:56:27:c1:e9:27:13:f7:22:e7:65:a1: 83:b4:99:c7:45:da:a8:78:d2:74:b2:c7:35:e8:ef:2f:fe:c4: 1f:64:f5:68:2a:53:1d:84:25:c7:ba:15:88:35:c7:96:e5:a4: 91:04:b3:19:ec:28:2e:ee:da:36:9f:90:74:46:50:a5:08:76: e7:3f:23:e7:cd:ca:e2:a9:9b:12:16:1d:87:aa:c2:47:ea:c9: 95:eb:79:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkREQjgxMTAvBgNVBAUTKDczRjRCQkRCRDdBMjFENkU3QjlFNEJGNUIwQzgxNzIy Q0NDMjFENjcwHhcNMjUwODIyMTcxODA1WhcNMjUwODI5MTcxODA1WjAYMRYwFAYD VQQDEw02OGE4YTY0ZS02ZGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3IwtsDNyRcAO7mpln+VaImIi2ry9u0h990SkmXjy/EXc5WDIMD74xrWrBA+q dnRiRHS17BhendiKOGxwfwfATX1Roha4ABU09M8YtgtM5KttQ3P654rwr9ywuFKb oddZKb9PLqEC/20wYEwYiJT90asS02uhft4+Y4rqJoWQObIpppDxV3ey4elam8lE H8sxNt/Ausrp0RLSG2niEns53Dn6QZQnxGJuJj60P0+a6ixBOEKJaGX239nDvdP2 gvRW2TPLuCIWdcr3IRhj0NM+M0/rGiHt+JJp/8KWNnWaEXH61ROLRAzUfasbSZFM Ks4UUAP+edSIvlGRPIf/m7pDUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAqU71TH zqj10fVlkqsg4U/F1sDxMB8GA1UdIwQYMBaAFHP0u9vXoh1ue55L9bDIFyLMwh1n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRERCOC9EM0REMzdGOEYz QjMxMUU4ODhEMzcyMjhDNEY5QUUwMi9jX1M3MjllaUhXNTdua3Yxc01nWElzekNI V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NfUzcyOWVpSFc1N25rdjFzTWdYSXN6Q0hXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RERCOC9EM0REMzdGOEYzQjMxMUU4ODhEMzcyMjhDNEY5QUUwMi9jX1M3MjllaUhX NTdua3Yxc01nWElzekNIV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdCjQSYmAAw/YJ7V21sCZSL6uFmxRkqASR+udBiCT4yRsfrHJuXcsb g2ODJr+Dgj17gyqI80t13X+tFSUflGwxp6WMf29irLnwHPBEqUp/PfKAuNdxb5aS XcNgk/nYeh8covtFSEDI4S3AcY6DWPksqeHEVc7jmLGYQNLjU7Aw6SGg9btwAYtJ xLxIZanvsSAxjXpw3gFbPdtXDKK7L9xWf0R5QTCpmXVqVifB6ScT9yLnZaGDtJnH RdqoeNJ0ssc16O8v/sQfZPVoKlMdhCXHuhWINceW5aSRBLMZ7Cgu7to2n5B0RlCl CHbnPyPnzcriqZsSFh2HqsJH6smV63mo -----END CERTIFICATE-----Generated at Sat Aug 23 18:24:33 2025 by rpki-client