$ rpki-client -vvf rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft File: 9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft (raw, json) Hash identifier: rB5oGStAwzFtqWacVmhQjBvLd1JLjXRn6zDEQKDl7Zg= Subject key identifier: 56:25:68:A6:37:C2:F6:A7:2F:AB:7F:E8:0C:9E:C1:51:45:87:92:96 Authority key identifier: F5:12:AD:66:3A:63:32:63:55:CA:8D:8E:91:00:B3:CE:AB:3C:B9:FB Certificate issuer: /CN=A91C05AD/serialNumber=F512AD663A63326355CA8D8E9100B3CEAB3CB9FB Certificate serial: 028F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft Manifest number: 0285 Signing time: Sat 23 Aug 2025 01:56:47 +0000 Manifest this update: Sat 23 Aug 2025 01:56:46 +0000 Manifest next update: Sat 30 Aug 2025 01:56:46 +0000 Files and hashes: 1: 9RKtZjpjMmNVyo2OkQCzzqs8ufs.crl (hash: AloYjqSsBVWfuU/8u0HknxHAehljD6dVLPRwyE4/MW4=) 2: 58C8DF8E1D3711ED9E2D8867C4F9AE02.roa (hash: FSYr699megaB2rJpIagzzWfYpNq6JBYAS+eCRbgyO2c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.crl rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:56:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 655 (0x28f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C05AD, serialNumber=F512AD663A63326355CA8D8E9100B3CEAB3CB9FB Validity Not Before: Aug 23 01:56:46 2025 GMT Not After : Aug 30 01:56:46 2025 GMT Subject: CN=68a91fde-02fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f3:b8:93:dc:a4:f1:2c:7e:96:59:ac:76:b2: cc:53:32:05:cc:29:3e:1a:29:f2:3d:9d:8f:5e:ae: b2:a8:b1:bb:7b:45:f7:7c:20:30:a0:e9:8a:71:48: 0f:e0:7d:45:4e:10:ef:81:01:3c:fc:58:18:4c:56: 9f:77:aa:a6:95:c6:82:b5:e4:33:ba:c9:56:87:38: 4e:6e:ca:de:e5:f8:6b:d0:dc:63:40:fd:f7:04:0b: 94:d0:68:8d:4e:83:48:d3:76:d3:38:28:ec:1b:03: 3e:b7:0e:3d:cb:42:2c:99:1c:70:a0:01:8a:77:fd: cf:b7:31:8d:4e:b6:31:a7:5f:7c:aa:d2:3f:75:7e: 05:f5:e1:d1:21:cf:4b:ec:40:9a:75:28:f8:af:55: c9:81:82:50:e8:42:41:f2:59:82:e6:c6:ba:a8:4d: 9a:9f:a0:24:31:7b:7a:b2:81:2f:6d:6f:68:a4:cb: 49:2d:71:ec:c2:b1:83:20:3b:db:f3:e9:eb:30:d3: a7:9e:63:0d:c9:57:bf:32:43:2e:7d:a3:d5:d5:d0: 1c:56:d5:ea:3b:6a:7c:d8:30:e9:0f:90:17:0f:e3: a4:37:e5:d7:60:ef:e9:f4:34:19:ee:25:31:4c:f9: 6e:79:e7:6d:d2:fd:99:d1:38:40:b4:ec:fb:de:6d: 9d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:25:68:A6:37:C2:F6:A7:2F:AB:7F:E8:0C:9E:C1:51:45:87:92:96 X509v3 Authority Key Identifier: keyid:F5:12:AD:66:3A:63:32:63:55:CA:8D:8E:91:00:B3:CE:AB:3C:B9:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:96:df:b9:c2:98:d0:45:aa:a5:82:6c:a6:48:52:9a:cc:77: 3f:6e:f7:a8:60:77:88:87:f7:4f:79:b4:54:b1:ad:e8:03:f8: 0e:d0:b7:9d:6e:1c:9d:a1:8b:d5:a1:e6:76:63:b4:56:8b:89: d5:0d:01:e5:ce:5b:b9:a7:1c:ef:44:d0:03:8d:7b:b3:2b:cb: 65:7f:04:7a:02:11:ab:6c:ed:4e:1e:ba:90:04:fd:12:52:ec: 27:ef:5c:3b:96:22:5d:9f:93:6e:1e:39:ad:34:ff:38:bd:a0: c2:f6:6e:57:ca:1e:74:b7:ff:72:84:67:af:54:b5:41:69:9a: 37:fe:15:21:2a:c9:5a:ad:a8:a0:79:3b:94:62:8d:53:fd:67: 2d:0d:d4:b4:27:08:9e:dc:b7:94:23:38:1f:84:d8:5b:c2:1e: f6:fc:b9:39:d5:4d:07:45:05:1b:ed:69:50:db:c2:87:97:22: 1f:e8:af:ea:e9:fa:b3:d9:af:c3:51:04:95:cc:09:32:d2:ef: 01:82:95:54:ae:13:7c:56:e6:64:5f:38:a8:bf:6d:0c:47:27: 66:f6:40:9e:23:36:4a:f2:ab:ae:4f:f9:d5:84:a7:f6:67:38: 63:37:39:ee:91:1a:42:28:76:05:b9:85:1f:e0:5f:01:6e:3c: b5:b4:73:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA1QUQxMTAvBgNVBAUTKEY1MTJBRDY2M0E2MzMyNjM1NUNBOEQ4RTkxMDBCM0NF QUIzQ0I5RkIwHhcNMjUwODIzMDE1NjQ2WhcNMjUwODMwMDE1NjQ2WjAYMRYwFAYD VQQDEw02OGE5MWZkZS0wMmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArfO4k9yk8Sx+llmsdrLMUzIFzCk+GinyPZ2PXq6yqLG7e0X3fCAwoOmKcUgP 4H1FThDvgQE8/FgYTFafd6qmlcaCteQzuslWhzhObsre5fhr0NxjQP33BAuU0GiN ToNI03bTOCjsGwM+tw49y0IsmRxwoAGKd/3PtzGNTrYxp198qtI/dX4F9eHRIc9L 7ECadSj4r1XJgYJQ6EJB8lmC5sa6qE2an6AkMXt6soEvbW9opMtJLXHswrGDIDvb 8+nrMNOnnmMNyVe/MkMufaPV1dAcVtXqO2p82DDpD5AXD+OkN+XXYO/p9DQZ7iUx TPlueedt0v2Z0ThAtOz73m2d7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFYlaKY3 wvanL6t/6AyewVFFh5KWMB8GA1UdIwQYMBaAFPUSrWY6YzJjVcqNjpEAs86rPLn7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDVBRC85NUJFM0JENjFE MzMxMUVEOTZBMTBBNjBDNEY5QUUwMi85Ukt0Wmpwak1tTlZ5bzJPa1FDenpxczh1 ZnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlSS3RaanBqTW1OVnlvMk9rUUN6enFzOHVmcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDVBRC85NUJFM0JENjFEMzMxMUVEOTZBMTBBNjBDNEY5QUUwMi85Ukt0Wmpwak1t TlZ5bzJPa1FDenpxczh1ZnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6lt+5wpjQRaqlgmymSFKazHc/bveoYHeIh/dPebRUsa3oA/gO0Led bhydoYvVoeZ2Y7RWi4nVDQHlzlu5pxzvRNADjXuzK8tlfwR6AhGrbO1OHrqQBP0S Uuwn71w7liJdn5NuHjmtNP84vaDC9m5Xyh50t/9yhGevVLVBaZo3/hUhKslaraig eTuUYo1T/WctDdS0Jwie3LeUIzgfhNhbwh72/Lk51U0HRQUb7WlQ28KHlyIf6K/q 6fqz2a/DUQSVzAky0u8BgpVUrhN8VuZkXziov20MRydm9kCeIzZK8quuT/nVhKf2 ZzhjNznukRpCKHYFuYUf4F8Bbjy1tHOP -----END CERTIFICATE-----Generated at Sun Aug 24 03:34:55 2025 by rpki-client