$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft File: 72LxVcGXHVBJQfVx7t-sCvzFKFk.mft (raw, json) Hash identifier: M0XKkH6q8HHjXdRK0tJQfr6Ghq+L97h0n2e/DYu1bys= Subject key identifier: 94:82:21:F9:D3:65:E6:95:E2:A8:84:62:E2:D7:97:96:FF:EA:0E:E2 Authority key identifier: EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59 Certificate issuer: /CN=A91BFE6A/serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859 Certificate serial: 12B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft Manifest number: 1292 Signing time: Fri 22 Aug 2025 17:13:18 +0000 Manifest this update: Fri 22 Aug 2025 17:13:18 +0000 Manifest next update: Fri 29 Aug 2025 17:13:18 +0000 Files and hashes: 1: 72LxVcGXHVBJQfVx7t-sCvzFKFk.crl (hash: e+aB0qHsuHm3g+8TkWpdsaWi0bjai8emp1P0xqNQt6Y=) 2: 36AFB016FC6111EEAFBE4719C4F9AE02.roa (hash: 8Neml3oC6KcoFUvC+s8BLmWMEpSAAtUFs6SqBjTSq9o=) 3: ED388A1840BB11E9A6718844C4F9AE02.roa (hash: gcGbaS+C10OxA3/sWZJEHnaLaEauoh+9kGT7bNc0D6Q=) 4: CEBECC28D38811E8A763B462C4F9AE02.roa (hash: IgiJhZRqcSbgHymfJ2UkdTHsUcRz7FOMB1+md3krEv8=) 5: 5122B56A51F311E9AB54691EC4F9AE02.roa (hash: 3BEJ1gCiaz/4ZdrE3qzkDJ5+ojL/iMHnMesKRyA+c6Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:13:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4791 (0x12b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFE6A, serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859 Validity Not Before: Aug 22 17:13:18 2025 GMT Not After : Aug 29 17:13:18 2025 GMT Subject: CN=68a8a52e-fa42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0a:29:b4:0a:40:98:d5:39:0c:64:01:7e:6f: b8:53:19:b7:3c:ec:f8:45:58:40:e6:24:c5:7f:63: ee:20:60:2b:22:15:12:9c:db:bf:1b:c3:7e:97:9e: 16:6b:75:a7:cb:03:a9:46:b2:24:cd:44:c1:8f:7a: 95:a6:3b:b9:d9:89:c7:22:b3:38:61:84:0c:9d:66: a6:b9:85:12:36:48:4e:26:8b:31:7b:40:56:a7:4a: 1a:32:68:30:7a:6b:8c:5f:63:70:4e:3d:30:42:3c: 57:04:59:17:7d:01:fd:6f:14:80:d6:00:60:26:e9: c8:a6:45:e5:c6:24:da:c0:2e:0b:24:4d:49:52:2e: 57:6a:16:92:34:1b:ee:86:ec:17:71:a5:43:21:c1: ba:aa:3f:99:d3:89:27:88:92:f7:07:a3:84:bc:2c: bb:07:bb:59:83:0d:23:f8:9a:fd:2e:3b:0c:1b:20: fa:10:8d:ae:fe:2c:1f:0a:30:f3:e5:cd:c3:81:d7: 8a:08:35:a8:38:36:81:48:a3:ba:b8:5f:a0:40:c3: 30:42:61:b3:71:01:3d:9f:ec:cf:5a:e2:88:e8:5e: 47:e0:57:da:d0:1e:94:32:03:75:b3:5f:22:18:72: a3:64:d6:dc:7c:d8:37:8c:4d:93:b2:3f:81:ee:d4: 55:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:82:21:F9:D3:65:E6:95:E2:A8:84:62:E2:D7:97:96:FF:EA:0E:E2 X509v3 Authority Key Identifier: keyid:EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:a0:52:e6:4e:43:a4:13:da:73:e3:8a:23:5e:db:cc:c8:43: 9d:9a:ac:a9:16:33:bd:41:b5:4b:b6:ce:74:88:e8:2c:0b:38: 87:b4:29:71:70:4b:11:ed:95:b1:15:f5:7a:5b:f4:0c:70:1a: ea:b2:f1:20:56:39:38:e1:db:8f:8f:32:39:3b:08:71:f4:72: fe:8f:f1:5f:52:64:26:b9:d1:3b:eb:4e:c7:c7:e2:b7:08:8f: 2c:14:b7:1a:dc:06:14:1d:99:6d:f2:f5:e9:2a:84:63:19:ca: 7a:8e:4a:0c:0d:2f:cd:0f:de:af:a5:c6:9e:10:4c:30:95:c1: 24:66:9e:00:1e:c7:62:7b:b2:61:e9:2b:89:c9:ce:19:33:d1: e0:77:12:8e:84:75:a5:dc:f8:ca:60:2f:c6:40:0b:1a:54:f0: b8:45:c4:8e:fd:a3:75:2f:26:50:03:06:d0:a7:18:15:8e:d5: 02:96:4e:93:12:87:2b:f7:a5:eb:2b:63:a5:44:44:fd:18:69: d5:5d:35:e5:4e:9a:a3:13:44:68:d6:9a:fe:29:f8:7e:83:e9: 45:ff:f5:99:53:d1:e3:f4:a0:82:c8:b9:9b:03:08:45:d0:26: 5d:be:cb:f2:91:72:1f:3b:fd:a8:fe:df:ff:46:b2:b5:c9:b9: 0f:5a:e1:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICErcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZFNkExMTAvBgNVBAUTKEVGNjJGMTU1QzE5NzFENTA0OTQxRjU3MUVFREZBQzBB RkNDNTI4NTkwHhcNMjUwODIyMTcxMzE4WhcNMjUwODI5MTcxMzE4WjAYMRYwFAYD VQQDEw02OGE4YTUyZS1mYTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3QoptApAmNU5DGQBfm+4Uxm3POz4RVhA5iTFf2PuIGArIhUSnNu/G8N+l54W a3WnywOpRrIkzUTBj3qVpju52YnHIrM4YYQMnWamuYUSNkhOJosxe0BWp0oaMmgw emuMX2NwTj0wQjxXBFkXfQH9bxSA1gBgJunIpkXlxiTawC4LJE1JUi5XahaSNBvu huwXcaVDIcG6qj+Z04kniJL3B6OEvCy7B7tZgw0j+Jr9LjsMGyD6EI2u/iwfCjDz 5c3DgdeKCDWoODaBSKO6uF+gQMMwQmGzcQE9n+zPWuKI6F5H4Ffa0B6UMgN1s18i GHKjZNbcfNg3jE2Tsj+B7tRVHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJSCIfnT ZeaV4qiEYuLXl5b/6g7iMB8GA1UdIwQYMBaAFO9i8VXBlx1QSUH1ce7frAr8xShZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkU2QS8xRDY0MzI4RUQz ODcxMUU4QkQ3MDc1NUNDNEY5QUUwMi83Mkx4VmNHWEhWQkpRZlZ4N3Qtc0N2ekZL RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcyTHhWY0dYSFZCSlFmVng3dC1zQ3Z6RktGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkU2QS8xRDY0MzI4RUQzODcxMUU4QkQ3MDc1NUNDNEY5QUUwMi83Mkx4VmNHWEhW QkpRZlZ4N3Qtc0N2ekZLRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMoFLmTkOkE9pz44ojXtvMyEOdmqypFjO9QbVLts50iOgsCziHtClx cEsR7ZWxFfV6W/QMcBrqsvEgVjk44duPjzI5Owhx9HL+j/FfUmQmudE7607Hx+K3 CI8sFLca3AYUHZlt8vXpKoRjGcp6jkoMDS/ND96vpcaeEEwwlcEkZp4AHsdie7Jh 6SuJyc4ZM9HgdxKOhHWl3PjKYC/GQAsaVPC4RcSO/aN1LyZQAwbQpxgVjtUClk6T Eocr96XrK2OlRET9GGnVXTXlTpqjE0Ro1pr+Kfh+g+lF//WZU9Hj9KCCyLmbAwhF 0CZdvsvykXIfO/2o/t//RrK1ybkPWuE4 -----END CERTIFICATE-----Generated at Sun Aug 24 00:08:50 2025 by rpki-client