$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.mft File: t0bN0xcqIBHwIYn_La14fSnAEek.mft (raw, json) Hash identifier: rwcRKXaRha6PyNUFiSGONVzaQl6BMwG8cLAoj3lBC3w= Subject key identifier: D5:C6:C4:87:45:C5:65:FA:DD:43:90:3F:70:16:1F:8F:49:C2:C7:E2 Authority key identifier: B7:46:CD:D3:17:2A:20:11:F0:21:89:FF:2D:AD:78:7D:29:C0:11:E9 Certificate issuer: /CN=A91C1B92/serialNumber=B746CDD3172A2011F02189FF2DAD787D29C011E9 Certificate serial: 0DE2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0bN0xcqIBHwIYn_La14fSnAEek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.mft Manifest number: 0DDA Signing time: Fri 22 Aug 2025 17:59:52 +0000 Manifest this update: Fri 22 Aug 2025 17:59:52 +0000 Manifest next update: Fri 29 Aug 2025 17:59:52 +0000 Files and hashes: 1: t0bN0xcqIBHwIYn_La14fSnAEek.crl (hash: HzT6oLuGVkbmOc6KWid/t5fDds6odg7Uk+uAgFi6ofI=) 2: F8AC3DD8DB9111E9B70EDD2EC4F9AE02.roa (hash: Ik/3X8YIb0qhd0Fqkle1gmGuYbSdF2VymS/D7TZSlFk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.crl rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0bN0xcqIBHwIYn_La14fSnAEek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:59:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3554 (0xde2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1B92, serialNumber=B746CDD3172A2011F02189FF2DAD787D29C011E9 Validity Not Before: Aug 22 17:59:52 2025 GMT Not After : Aug 29 17:59:52 2025 GMT Subject: CN=68a8b018-9f8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9e:84:63:ee:a1:83:fe:5c:f5:6b:ae:bb:5b: 8a:9b:48:08:d9:57:b1:65:59:a8:9b:1b:dd:14:0f: e6:6f:82:e9:29:15:bd:3e:ec:7a:de:a7:bf:29:d4: 71:0c:7d:8a:ae:63:9b:77:6a:3b:0b:ce:0d:cc:d7: 93:23:43:64:c5:01:d7:5b:e4:cc:21:2e:51:84:14: 73:37:fa:ec:6d:27:a4:1b:c2:b1:6a:ab:7a:cb:8e: 45:aa:c1:a5:0c:b2:16:7e:af:87:42:63:e1:90:bf: 69:82:d0:03:4a:e2:79:22:bf:88:96:b4:80:2e:d7: 44:92:12:34:b3:5e:a9:36:ed:1c:ee:53:f9:7c:84: e6:9f:a8:68:17:0c:8a:7a:a0:42:4a:99:9c:b4:a7: cb:be:56:ae:e7:57:0a:f8:cb:cd:3f:6d:6b:4d:bc: b8:fe:90:61:c5:9e:78:8a:e1:3f:9a:5f:89:f2:f5: 40:b4:ab:ac:29:c9:19:bd:bb:3e:93:d4:7e:4a:18: c6:50:3e:8b:21:82:e0:ef:5a:5f:90:60:4c:51:64: c1:ae:1d:86:3f:9a:28:fd:5f:8a:a2:09:6c:27:06: c7:12:93:ce:7d:ae:64:99:fa:95:ea:9a:4f:33:06: 2e:d1:88:34:9f:16:00:47:da:74:df:74:bc:10:0b: a5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:C6:C4:87:45:C5:65:FA:DD:43:90:3F:70:16:1F:8F:49:C2:C7:E2 X509v3 Authority Key Identifier: keyid:B7:46:CD:D3:17:2A:20:11:F0:21:89:FF:2D:AD:78:7D:29:C0:11:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0bN0xcqIBHwIYn_La14fSnAEek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:64:66:67:fd:0c:8e:71:5f:1b:fb:44:95:66:b1:1d:35:1c: 83:44:c7:ef:5d:15:3a:1b:cf:e3:75:65:bb:18:8a:9b:42:66: ce:e3:6e:70:57:e2:20:1b:14:b5:0a:df:0a:e1:a5:12:fb:55: 79:5c:6d:ff:33:8e:36:ba:e4:8c:4f:c0:bc:80:a6:34:35:9f: 8e:98:07:e2:16:d9:db:d9:11:2e:50:87:48:21:35:2e:a9:82: 5d:bd:3a:5a:1d:e6:01:77:ec:d8:91:32:35:c9:98:f0:6d:4f: a6:fa:fc:ae:ac:7a:4e:d3:3f:53:5c:b3:90:a0:81:85:06:7d: cd:f4:48:14:d5:c6:40:97:59:db:69:b6:7b:d2:6b:c9:39:04: 49:cb:e2:01:05:9c:49:9a:19:9d:39:fd:f2:9b:43:20:3c:f9: b7:ed:02:39:38:97:fa:15:65:97:a2:35:78:d4:e0:07:16:3d: e1:06:95:9f:ca:12:db:a6:6d:e4:10:f4:8a:a8:34:9e:98:9b: 9f:3d:0c:72:99:ce:9a:bc:b8:2e:7a:3d:dc:ec:70:c7:78:87: 7c:38:e4:49:eb:f7:b5:e4:e2:98:fc:f7:44:c2:4f:ef:ae:bc: 61:6c:e0:c3:79:cf:f5:46:56:0b:23:70:0f:cc:e3:c8:27:6c: f1:3c:bd:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFCOTIxMTAvBgNVBAUTKEI3NDZDREQzMTcyQTIwMTFGMDIxODlGRjJEQUQ3ODdE MjlDMDExRTkwHhcNMjUwODIyMTc1OTUyWhcNMjUwODI5MTc1OTUyWjAYMRYwFAYD VQQDEw02OGE4YjAxOC05ZjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA056EY+6hg/5c9Wuuu1uKm0gI2VexZVmomxvdFA/mb4LpKRW9Pux63qe/KdRx DH2KrmObd2o7C84NzNeTI0NkxQHXW+TMIS5RhBRzN/rsbSekG8Kxaqt6y45FqsGl DLIWfq+HQmPhkL9pgtADSuJ5Ir+IlrSALtdEkhI0s16pNu0c7lP5fITmn6hoFwyK eqBCSpmctKfLvlau51cK+MvNP21rTby4/pBhxZ54iuE/ml+J8vVAtKusKckZvbs+ k9R+ShjGUD6LIYLg71pfkGBMUWTBrh2GP5oo/V+KoglsJwbHEpPOfa5kmfqV6ppP MwYu0Yg0nxYAR9p033S8EAuljQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNXGxIdF xWX63UOQP3AWH49JwsfiMB8GA1UdIwQYMBaAFLdGzdMXKiAR8CGJ/y2teH0pwBHp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUI5Mi9BQUJGQzQ5QUJE NjAxMUU5OTU2QTBGMTlDNEY5QUUwMi90MGJOMHhjcUlCSHdJWW5fTGExNGZTbkFF ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3QwYk4weGNxSUJId0lZbl9MYTE0ZlNuQUVlay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUI5Mi9BQUJGQzQ5QUJENjAxMUU5OTU2QTBGMTlDNEY5QUUwMi90MGJOMHhjcUlC SHdJWW5fTGExNGZTbkFFZWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5ZGZn/QyOcV8b+0SVZrEdNRyDRMfvXRU6G8/jdWW7GIqbQmbO425w V+IgGxS1Ct8K4aUS+1V5XG3/M442uuSMT8C8gKY0NZ+OmAfiFtnb2REuUIdIITUu qYJdvTpaHeYBd+zYkTI1yZjwbU+m+vyurHpO0z9TXLOQoIGFBn3N9EgU1cZAl1nb abZ70mvJOQRJy+IBBZxJmhmdOf3ym0MgPPm37QI5OJf6FWWXojV41OAHFj3hBpWf yhLbpm3kEPSKqDSemJufPQxymc6avLguej3c7HDHeId8OORJ6/e15OKY/PdEwk/v rrxhbODDec/1RlYLI3APzOPIJ2zxPL2q -----END CERTIFICATE-----Generated at Sun Aug 24 04:59:39 2025 by rpki-client