$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft File: -2uUY2HwxcguKwZ0DUuosLmTU_g.mft (raw, json) Hash identifier: YcfnHUI+H9/tk+x95uxAlBl1QfGfxYTlD0XokAgXL2M= Subject key identifier: CF:06:F5:56:87:8D:D1:58:35:C9:24:D2:AC:3F:35:02:21:22:C5:C9 Authority key identifier: FB:6B:94:63:61:F0:C5:C8:2E:2B:06:74:0D:4B:A8:B0:B9:93:53:F8 Certificate issuer: /CN=A91C6A35/serialNumber=FB6B946361F0C5C82E2B06740D4BA8B0B99353F8 Certificate serial: 71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-2uUY2HwxcguKwZ0DUuosLmTU_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft Manifest number: 70 Signing time: Sat 23 Aug 2025 07:07:08 +0000 Manifest this update: Sat 23 Aug 2025 07:07:08 +0000 Manifest next update: Sat 30 Aug 2025 07:07:08 +0000 Files and hashes: 1: -2uUY2HwxcguKwZ0DUuosLmTU_g.crl (hash: GxHP0VgY8cfcQmop58FkmEzeat+1vWt7zZzgnynfRfQ=) 2: 06D77958D49411EFA8DF5E69C4F9AE02.roa (hash: SIysPbQ0shw6SImSP7LGItvtceoka+GBhE2dzjDub+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.crl rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-2uUY2HwxcguKwZ0DUuosLmTU_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:07:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6A35, serialNumber=FB6B946361F0C5C82E2B06740D4BA8B0B99353F8 Validity Not Before: Aug 23 07:07:08 2025 GMT Not After : Aug 30 07:07:08 2025 GMT Subject: CN=68a9689c-a299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c1:63:11:63:ac:a1:f8:70:15:93:90:3c:9b: 22:7b:c4:2e:87:e1:ae:98:39:c3:ca:d4:35:67:0b: 88:e6:ac:4a:04:11:d3:22:60:eb:1e:e1:33:dc:bb: a7:de:52:34:61:dc:ae:53:7c:6b:55:bb:6d:4f:03: 03:7b:fc:de:ba:fb:05:8b:d5:02:f2:31:9a:ce:bf: 05:42:9f:ec:fe:6d:9f:43:3f:ee:8f:37:84:01:e6: 19:22:2b:6e:40:bb:f0:d9:81:5b:f8:24:8a:b3:60: e6:e0:60:9b:a2:d7:e6:9b:b8:11:03:9e:11:a2:53: 0e:bd:7c:6f:6b:19:84:8d:0a:6e:b8:05:80:5b:ab: 4b:3c:14:d2:e0:30:18:61:fc:96:63:17:b0:e1:8d: ef:da:9f:be:be:5c:e9:4b:c6:5b:d2:e6:08:92:d7: a2:1b:dc:fc:71:31:25:21:95:0c:1a:64:79:ba:a5: 17:0a:71:82:7a:3f:b1:bd:06:00:f4:e4:53:9c:ea: c1:75:f1:e3:54:f1:31:55:d6:ae:2c:b9:e6:1d:25: e7:c1:07:d5:7c:7c:9d:2c:d6:3b:20:df:11:13:f1: 33:3c:70:1a:14:28:91:fd:38:fd:a3:bf:f0:39:ad: 48:9d:53:ad:1d:8f:e1:b9:1c:31:c4:18:39:f5:0f: 02:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:06:F5:56:87:8D:D1:58:35:C9:24:D2:AC:3F:35:02:21:22:C5:C9 X509v3 Authority Key Identifier: keyid:FB:6B:94:63:61:F0:C5:C8:2E:2B:06:74:0D:4B:A8:B0:B9:93:53:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-2uUY2HwxcguKwZ0DUuosLmTU_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:c8:ee:53:26:38:30:20:b1:98:29:9d:a7:17:0c:1b:5f:d2: ad:1d:10:65:bd:1a:be:be:37:f1:2a:d1:c2:19:7f:57:bb:63: 89:51:db:5b:53:51:b3:40:26:60:64:2b:52:a8:a3:4a:e3:24: 91:f8:82:8e:36:9e:77:18:32:72:81:24:10:98:8a:3d:0a:ce: 40:aa:1c:4b:51:11:4b:ff:4c:36:8c:88:c6:ff:c3:7e:61:84: fe:9f:c3:ff:aa:86:8d:30:7f:2c:c9:81:bd:3b:12:fe:5f:81: b1:75:dd:93:7f:37:54:dc:c2:5d:e1:d8:34:5e:15:4e:b5:83: 86:cb:ea:63:16:c0:0c:6e:ff:e2:bd:dd:92:da:2b:dc:45:12: 42:23:b5:1b:2f:c9:05:fd:fa:28:b8:41:bd:e1:5b:7f:a8:13: 1c:41:0c:c4:e4:a9:22:d0:c6:f7:4d:ed:01:e8:cb:a8:a9:c5: 7e:8f:1f:f7:16:d9:b3:ea:3c:e8:bd:d8:5c:c3:a1:3e:5b:e3: 35:20:a0:b9:79:f0:1c:2c:23:87:5a:f9:ce:8e:22:89:a9:be: 45:12:8e:1b:4e:7e:82:e1:03:27:11:3b:3e:4e:06:be:61:79: 0d:66:e8:bc:87:e8:54:bb:42:0c:93:19:62:9f:4a:7e:f6:ca: 4a:2a:01:a3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NkEzNTExMC8GA1UEBRMoRkI2Qjk0NjM2MUYwQzVDODJFMkIwNjc0MEQ0QkE4QjBC OTkzNTNGODAeFw0yNTA4MjMwNzA3MDhaFw0yNTA4MzAwNzA3MDhaMBgxFjAUBgNV BAMTDTY4YTk2ODljLWEyOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9wWMRY6yh+HAVk5A8myJ7xC6H4a6YOcPK1DVnC4jmrEoEEdMiYOse4TPcu6fe UjRh3K5TfGtVu21PAwN7/N66+wWL1QLyMZrOvwVCn+z+bZ9DP+6PN4QB5hkiK25A u/DZgVv4JIqzYObgYJui1+abuBEDnhGiUw69fG9rGYSNCm64BYBbq0s8FNLgMBhh /JZjF7Dhje/an76+XOlLxlvS5giS16Ib3PxxMSUhlQwaZHm6pRcKcYJ6P7G9BgD0 5FOc6sF18eNU8TFV1q4sueYdJefBB9V8fJ0s1jsg3xET8TM8cBoUKJH9OP2jv/A5 rUidU60dj+G5HDHEGDn1DwI5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzwb1VoeN 0Vg1ySTSrD81AiEixckwHwYDVR0jBBgwFoAU+2uUY2HwxcguKwZ0DUuosLmTU/gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2QTM1L0ExNTlGNzgyRDQ5 MjExRUZCNTY0REU2MkM0RjlBRTAyLy0ydVVZMkh3eGNndUt3WjBEVXVvc0xtVFVf Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLTJ1VVkySHd4Y2d1S3daMERVdW9zTG1UVV9nLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2 QTM1L0ExNTlGNzgyRDQ5MjExRUZCNTY0REU2MkM0RjlBRTAyLy0ydVVZMkh3eGNn dUt3WjBEVXVvc0xtVFVfZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJrI7lMmODAgsZgpnacXDBtf0q0dEGW9Gr6+N/Eq0cIZf1e7Y4lR21tT UbNAJmBkK1Koo0rjJJH4go42nncYMnKBJBCYij0KzkCqHEtREUv/TDaMiMb/w35h hP6fw/+qho0wfyzJgb07Ev5fgbF13ZN/N1Tcwl3h2DReFU61g4bL6mMWwAxu/+K9 3ZLaK9xFEkIjtRsvyQX9+ii4Qb3hW3+oExxBDMTkqSLQxvdN7QHoy6ipxX6PH/cW 2bPqPOi92FzDoT5b4zUgoLl58BwsI4da+c6OIompvkUSjhtOfoLhAycROz5OBr5h eQ1m6LyH6FS7QgyTGWKfSn72ykoqAaM= -----END CERTIFICATE-----Generated at Sat Aug 23 19:33:37 2025 by rpki-client