$ rpki-client -vvf rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft File: 33nDugFSYeOshDI5zkcDWQHWapQ.mft (raw, json) Hash identifier: 4w2MzcoQDA7wh3ZT582DQm2jxfyGPJcyzHLK+9BVRpg= Subject key identifier: A0:8B:66:8C:B3:05:83:FE:4C:A4:8A:3A:46:54:83:2C:97:2D:CC:A6 Authority key identifier: DF:79:C3:BA:01:52:61:E3:AC:84:32:39:CE:47:03:59:01:D6:6A:94 Certificate issuer: /CN=A91C572B/serialNumber=DF79C3BA015261E3AC843239CE47035901D66A94 Certificate serial: 01A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft Manifest number: 019E Signing time: Sat 23 Aug 2025 03:30:00 +0000 Manifest this update: Sat 23 Aug 2025 03:30:00 +0000 Manifest next update: Sat 30 Aug 2025 03:30:00 +0000 Files and hashes: 1: 33nDugFSYeOshDI5zkcDWQHWapQ.crl (hash: 1fCtgSk8eorEOf5q0/ZGjK4/b6NYO9WdYEy6K5lgJdA=) 2: 18DC0A381C0311EE9B0F2938C4F9AE02.roa (hash: wznc2xIu+Db8dBh8TB4MLEtEwoDgpd9YS1hyNvKSiTQ=) 3: 17C68D301C0311EE9B0F2938C4F9AE02.roa (hash: iplB9XZjSOwQ5O2H5iEJJvDG/Nz+QwUOR0kvaV5InLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.crl rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:29:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 424 (0x1a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C572B, serialNumber=DF79C3BA015261E3AC843239CE47035901D66A94 Validity Not Before: Aug 23 03:30:00 2025 GMT Not After : Aug 30 03:30:00 2025 GMT Subject: CN=68a935b8-2e28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4e:8d:6b:d4:56:24:75:7f:b8:c3:ce:63:15: eb:3a:31:ca:f5:25:a9:b2:7a:d4:05:ba:e4:24:57: 49:d0:3e:84:22:f8:8d:82:c0:d0:ca:7f:28:ae:99: 23:6d:0b:07:9d:c1:fb:b1:50:14:c7:7c:05:5e:ea: d7:8a:8b:78:f2:d2:aa:ee:4d:26:d9:3b:7c:d4:f8: 52:2b:42:79:5b:d0:ee:06:b9:35:e2:42:3e:0a:92: fe:91:17:22:5f:f4:bd:e8:fa:33:f8:b4:0a:75:48: 55:c4:5d:1f:10:22:bd:02:aa:b0:92:89:b2:cb:8e: 73:0a:38:92:78:32:e5:1c:ca:28:68:19:14:b1:62: 79:6a:37:10:e3:06:d5:7b:e9:08:d3:4c:c3:37:81: 6b:da:35:00:1f:77:a3:87:ed:43:e1:62:1e:fd:25: 3a:fd:d1:69:67:e6:f5:16:74:4c:2e:05:ec:b9:26: 32:65:ec:f6:2e:42:a0:09:95:fe:65:e3:7c:13:ee: 2f:23:81:f3:f6:e9:9d:b3:77:32:4d:56:cb:e0:75: cc:04:9c:46:6a:17:45:64:b5:6f:21:44:5f:f9:7b: ad:2e:b6:af:21:df:7e:a0:b1:78:1f:3e:b6:18:be: a4:84:11:dc:7b:0d:15:d9:52:86:6f:48:e0:22:f4: 71:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:8B:66:8C:B3:05:83:FE:4C:A4:8A:3A:46:54:83:2C:97:2D:CC:A6 X509v3 Authority Key Identifier: keyid:DF:79:C3:BA:01:52:61:E3:AC:84:32:39:CE:47:03:59:01:D6:6A:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:ea:81:10:bc:e0:52:68:4d:f1:a1:87:d4:32:52:bd:e1:03: 49:43:58:a1:95:db:19:c9:20:dd:91:fc:10:ce:95:72:db:94: 41:19:4a:3e:55:c4:2f:f7:0d:db:1c:c9:46:9a:42:6b:12:e0: 52:f5:fa:6a:a6:db:bb:ef:20:14:e4:96:73:d0:b9:71:11:87: d3:d3:0a:08:19:e8:9e:cd:08:13:74:7e:43:4f:af:2b:f4:63: 7d:50:bd:ec:01:67:8d:a8:66:27:a9:b2:78:32:79:cf:2a:b3: 50:1d:ca:84:e2:93:01:d8:57:82:f3:82:08:69:a6:12:68:95: 4b:3c:08:0a:45:d7:c3:f5:d7:42:e3:15:dd:7e:9b:04:cc:28: c2:dc:07:28:c7:c5:f8:1b:6c:6c:8e:9e:e5:26:d6:04:72:2a: b8:13:f9:b2:ca:a5:b0:fa:e7:5d:5c:37:3e:7e:2d:86:a9:1e: d2:4a:cb:8d:a9:da:03:8d:7e:6b:5e:f8:8b:5d:12:60:4d:07: 0c:28:4e:48:22:50:bc:54:9e:d2:8f:5d:c1:60:dd:b2:3c:c8: 99:f6:6f:e5:b0:48:fa:fb:19:50:47:a4:5b:ef:2e:3f:7b:98: 97:fe:c7:93:73:47:3f:6f:8a:65:81:de:28:84:08:40:e9:09: 72:1b:c0:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU3MkIxMTAvBgNVBAUTKERGNzlDM0JBMDE1MjYxRTNBQzg0MzIzOUNFNDcwMzU5 MDFENjZBOTQwHhcNMjUwODIzMDMzMDAwWhcNMjUwODMwMDMzMDAwWjAYMRYwFAYD VQQDEw02OGE5MzViOC0yZTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq06Na9RWJHV/uMPOYxXrOjHK9SWpsnrUBbrkJFdJ0D6EIviNgsDQyn8orpkj bQsHncH7sVAUx3wFXurXiot48tKq7k0m2Tt81PhSK0J5W9DuBrk14kI+CpL+kRci X/S96Poz+LQKdUhVxF0fECK9Aqqwkomyy45zCjiSeDLlHMooaBkUsWJ5ajcQ4wbV e+kI00zDN4Fr2jUAH3ejh+1D4WIe/SU6/dFpZ+b1FnRMLgXsuSYyZez2LkKgCZX+ ZeN8E+4vI4Hz9umds3cyTVbL4HXMBJxGahdFZLVvIURf+XutLravId9+oLF4Hz62 GL6khBHcew0V2VKGb0jgIvRx3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKCLZoyz BYP+TKSKOkZUgyyXLcymMB8GA1UdIwQYMBaAFN95w7oBUmHjrIQyOc5HA1kB1mqU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTcyQi9GN0U1QzE2ODBF OUExMUVFQTY0NDlFNzFDNEY5QUUwMi8zM25EdWdGU1llT3NoREk1emtjRFdRSFdh cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMzbkR1Z0ZTWWVPc2hESTV6a2NEV1FIV2FwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTcyQi9GN0U1QzE2ODBFOUExMUVFQTY0NDlFNzFDNEY5QUUwMi8zM25EdWdGU1ll T3NoREk1emtjRFdRSFdhcFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAX6oEQvOBSaE3xoYfUMlK94QNJQ1ihldsZySDdkfwQzpVy25RBGUo+ VcQv9w3bHMlGmkJrEuBS9fpqptu77yAU5JZz0LlxEYfT0woIGeiezQgTdH5DT68r 9GN9UL3sAWeNqGYnqbJ4MnnPKrNQHcqE4pMB2FeC84IIaaYSaJVLPAgKRdfD9ddC 4xXdfpsEzCjC3Acox8X4G2xsjp7lJtYEciq4E/myyqWw+uddXDc+fi2GqR7SSsuN qdoDjX5rXviLXRJgTQcMKE5IIlC8VJ7Sj13BYN2yPMiZ9m/lsEj6+xlQR6Rb7y4/ e5iX/seTc0c/b4plgd4ohAhA6QlyG8AV -----END CERTIFICATE-----Generated at Sat Aug 23 16:45:20 2025 by rpki-client