$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/S0w6zHYgyo0mn3fC-L5soNohdic.mft File: S0w6zHYgyo0mn3fC-L5soNohdic.mft (raw, json) Hash identifier: jymJCfMMSeOsnfUdH0Z4jiQIF0tidyaeGfef2oNkIFs= Subject key identifier: BD:3B:7F:AB:BC:C9:B0:A5:B9:16:BC:C3:90:3E:C1:B7:3B:19:A6:90 Authority key identifier: 4B:4C:3A:CC:76:20:CA:8D:26:9F:77:C2:F8:BE:6C:A0:DA:21:76:27 Certificate issuer: /CN=A91C6CD5/serialNumber=4B4C3ACC7620CA8D269F77C2F8BE6CA0DA217627 Certificate serial: 044B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0w6zHYgyo0mn3fC-L5soNohdic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/S0w6zHYgyo0mn3fC-L5soNohdic.mft Manifest number: 0445 Signing time: Sat 23 Aug 2025 00:30:16 +0000 Manifest this update: Sat 23 Aug 2025 00:30:15 +0000 Manifest next update: Sat 30 Aug 2025 00:30:15 +0000 Files and hashes: 1: S0w6zHYgyo0mn3fC-L5soNohdic.crl (hash: GzxMUveAAnQyPsZoVcNxuCcQ7VIEzss3XLXS2mkGNtA=) 2: AE0AFE846ADE11ECADF2FE5DC4F9AE02.roa (hash: Hj2ed/vfEs3kfitU1w0BAdoi0iJDtRaYFfE12UdPkyo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/S0w6zHYgyo0mn3fC-L5soNohdic.crl rsync://rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/S0w6zHYgyo0mn3fC-L5soNohdic.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0w6zHYgyo0mn3fC-L5soNohdic.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:30:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1099 (0x44b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6CD5, serialNumber=4B4C3ACC7620CA8D269F77C2F8BE6CA0DA217627 Validity Not Before: Aug 23 00:30:15 2025 GMT Not After : Aug 30 00:30:15 2025 GMT Subject: CN=68a90b98-a0a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ac:4e:98:97:44:d5:aa:83:54:69:90:ea:66: 39:bb:09:97:de:09:dd:75:25:89:32:70:a3:c4:50: 03:df:e6:a3:7b:10:ab:66:e0:44:01:f0:fd:9c:2f: b5:03:64:25:12:d2:a9:08:c7:b4:78:bb:af:d5:bd: 28:83:b5:76:0c:b5:33:4a:44:b1:d2:e3:e0:53:59: e2:3a:a0:28:16:33:19:80:46:bd:41:78:0a:42:e6: 83:0a:d8:01:af:74:0a:ad:66:4c:b1:38:2b:97:da: 89:0f:0a:5f:a4:61:17:fa:a7:c5:a3:4e:7a:f7:d0: 6f:38:06:5b:88:38:37:d8:6f:5f:f6:e8:61:a8:4b: 63:c2:04:29:34:1f:ad:24:32:ca:e0:ce:e8:80:a7: 99:84:af:92:16:cd:bc:9b:56:93:98:fc:8e:d1:26: 66:09:ff:23:f8:20:4b:f8:de:1c:a6:ec:86:34:02: e1:f2:6e:8b:8f:9b:4f:d2:73:d7:72:58:ca:c4:00: e3:1e:28:f2:40:17:80:1d:83:82:2e:cc:5b:da:66: 0e:ef:f9:ca:8f:1a:e7:ec:75:7a:2f:c8:a7:97:b5: 94:e4:ce:3b:5a:1d:8d:0d:70:14:38:8e:93:dd:1d: ee:64:a7:2e:58:e9:df:7e:1d:4f:91:83:50:f5:4f: 42:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:3B:7F:AB:BC:C9:B0:A5:B9:16:BC:C3:90:3E:C1:B7:3B:19:A6:90 X509v3 Authority Key Identifier: keyid:4B:4C:3A:CC:76:20:CA:8D:26:9F:77:C2:F8:BE:6C:A0:DA:21:76:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/S0w6zHYgyo0mn3fC-L5soNohdic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0w6zHYgyo0mn3fC-L5soNohdic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/S0w6zHYgyo0mn3fC-L5soNohdic.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:4d:56:ed:de:9e:a1:3a:0a:d0:44:70:e1:fb:ba:4d:cd:81: 89:e5:25:28:da:64:45:8f:fd:3b:63:71:12:d2:81:3d:74:0f: 83:11:f1:fb:d6:ce:bc:48:4c:78:60:56:41:33:9d:2b:28:5a: 54:70:7d:c2:7b:3f:0c:df:dd:e7:fd:ae:09:2f:57:1c:6f:1a: 8c:e9:35:49:b9:9b:ed:23:a5:c9:75:5e:62:34:7c:24:54:af: 65:79:21:ff:df:4c:dc:cb:f8:09:5c:27:19:8c:9a:c9:94:35: 69:4d:df:ca:f7:41:50:b7:a0:33:d2:0f:c7:0b:f7:f0:89:b4: 73:7e:4c:3e:ba:3b:e9:f8:cb:a1:b8:34:a4:49:c7:63:00:86: 15:87:9e:b7:62:3e:e6:bc:ea:9f:91:c3:52:2f:26:23:7e:73: e5:e1:05:e3:24:3b:fd:0b:fb:37:d2:cd:87:58:8c:15:ba:11: 6e:0d:a0:52:a5:99:e2:00:d2:70:80:7f:bc:e7:23:6a:8f:4a: 48:3e:d5:72:2c:f0:31:c8:4c:43:a6:7b:fd:9b:eb:c6:53:9b: 3d:fd:3d:89:dd:bf:80:77:7b:58:9b:45:63:2b:71:29:e6:ac: 04:02:03:91:9f:21:af:cd:1d:c1:e0:37:7e:80:75:9c:86:1a: 35:d8:de:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZDRDUxMTAvBgNVBAUTKDRCNEMzQUNDNzYyMENBOEQyNjlGNzdDMkY4QkU2Q0Ew REEyMTc2MjcwHhcNMjUwODIzMDAzMDE1WhcNMjUwODMwMDAzMDE1WjAYMRYwFAYD VQQDEw02OGE5MGI5OC1hMGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6xOmJdE1aqDVGmQ6mY5uwmX3gnddSWJMnCjxFAD3+ajexCrZuBEAfD9nC+1 A2QlEtKpCMe0eLuv1b0og7V2DLUzSkSx0uPgU1niOqAoFjMZgEa9QXgKQuaDCtgB r3QKrWZMsTgrl9qJDwpfpGEX+qfFo05699BvOAZbiDg32G9f9uhhqEtjwgQpNB+t JDLK4M7ogKeZhK+SFs28m1aTmPyO0SZmCf8j+CBL+N4cpuyGNALh8m6Lj5tP0nPX cljKxADjHijyQBeAHYOCLsxb2mYO7/nKjxrn7HV6L8inl7WU5M47Wh2NDXAUOI6T 3R3uZKcuWOnffh1PkYNQ9U9CLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL07f6u8 ybCluRa8w5A+wbc7GaaQMB8GA1UdIwQYMBaAFEtMOsx2IMqNJp93wvi+bKDaIXYn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkNENS84MDRCMUU5MjZB REExMUVDQUNBN0E1MzBDNEY5QUUwMi9TMHc2ekhZZ3lvMG1uM2ZDLUw1c29Ob2hk aWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MwdzZ6SFlneW8wbW4zZkMtTDVzb05vaGRpYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkNENS84MDRCMUU5MjZBREExMUVDQUNBN0E1MzBDNEY5QUUwMi9TMHc2ekhZZ3lv MG1uM2ZDLUw1c29Ob2hkaWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQTVbt3p6hOgrQRHDh+7pNzYGJ5SUo2mRFj/07Y3ES0oE9dA+DEfH7 1s68SEx4YFZBM50rKFpUcH3Cez8M393n/a4JL1ccbxqM6TVJuZvtI6XJdV5iNHwk VK9leSH/30zcy/gJXCcZjJrJlDVpTd/K90FQt6Az0g/HC/fwibRzfkw+ujvp+Muh uDSkScdjAIYVh563Yj7mvOqfkcNSLyYjfnPl4QXjJDv9C/s30s2HWIwVuhFuDaBS pZniANJwgH+85yNqj0pIPtVyLPAxyExDpnv9m+vGU5s9/T2J3b+Ad3tYm0VjK3Ep 5qwEAgORnyGvzR3B4Dd+gHWchho12N4B -----END CERTIFICATE-----Generated at Sat Aug 23 19:36:44 2025 by rpki-client