$ rpki-client -vvf rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft File: 64sK0sB2YghSy8N4kOZK1Aa0ieg.mft (raw, json) Hash identifier: BlBnv93gTIOO4ic3Hn3y1UJdKhPrbCZ3oZ+opog52sc= Subject key identifier: 25:21:83:A8:B2:F1:46:63:7C:2E:9F:05:40:DE:F9:C7:0B:6B:6C:47 Authority key identifier: EB:8B:0A:D2:C0:76:62:08:52:CB:C3:78:90:E6:4A:D4:06:B4:89:E8 Certificate issuer: /CN=A91C72B1/serialNumber=EB8B0AD2C076620852CBC37890E64AD406B489E8 Certificate serial: 0D40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft Manifest number: 0D36 Signing time: Fri 22 Aug 2025 18:08:42 +0000 Manifest this update: Fri 22 Aug 2025 18:08:41 +0000 Manifest next update: Fri 29 Aug 2025 18:08:41 +0000 Files and hashes: 1: 64sK0sB2YghSy8N4kOZK1Aa0ieg.crl (hash: QjbVZ8er5scAgqbydJqFt+5oH+G8Cya0k2BCqFiiBOg=) 2: 6714424C3C9111EA9416CA78C4F9AE02.roa (hash: YQKzakVZRwkEoSkOxzmifYwaHBBE1uM/hdsf+7QDJq4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.crl rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:08:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3392 (0xd40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C72B1, serialNumber=EB8B0AD2C076620852CBC37890E64AD406B489E8 Validity Not Before: Aug 22 18:08:41 2025 GMT Not After : Aug 29 18:08:41 2025 GMT Subject: CN=68a8b229-119c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:25:56:ef:71:2c:be:d8:a6:23:33:90:01:f1: ef:6b:7d:8f:1b:1f:75:d2:40:85:fe:b2:d7:04:96: b1:a7:4f:8a:cd:53:c3:c3:b8:ad:21:fd:16:08:ca: 43:fb:82:83:ae:54:f0:62:d7:61:f8:75:26:80:09: 8e:67:3a:f3:4e:92:b1:c1:f4:06:ca:aa:9c:e0:a4: 51:cc:dd:3d:ef:57:a3:f1:f4:bf:20:a7:0e:ac:95: 93:14:9e:a8:31:ea:df:1e:32:5a:d3:62:2a:06:21: 1d:a3:51:2b:3a:0d:27:60:ee:86:4a:0e:05:38:68: 6f:44:9d:95:8d:d4:d8:71:7d:22:c0:5a:19:c5:b7: 04:a5:3a:7c:9a:a7:5d:2d:8c:be:d5:77:1c:8a:2c: 21:86:61:41:ff:38:53:e5:e4:a8:a1:dc:af:4d:c0: ef:7d:da:71:46:ff:a6:d6:90:25:4a:ec:43:59:01: a4:7d:f4:cd:7c:73:31:f5:40:24:8c:aa:86:d6:0c: 41:16:96:dc:55:d7:f5:9f:d0:5f:8d:72:9b:1c:c5: 26:5c:1f:e4:27:c3:6d:ad:70:bb:89:56:83:0d:76: 7a:af:6a:6a:0c:a7:02:09:3b:a2:c9:67:bb:4c:80: 6c:36:85:64:41:25:9c:b5:59:b1:e1:6c:db:d5:7f: c6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:21:83:A8:B2:F1:46:63:7C:2E:9F:05:40:DE:F9:C7:0B:6B:6C:47 X509v3 Authority Key Identifier: keyid:EB:8B:0A:D2:C0:76:62:08:52:CB:C3:78:90:E6:4A:D4:06:B4:89:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:af:d6:62:b8:72:3d:ea:39:b7:c9:d3:55:9b:04:ec:46:5f: 6c:c6:22:b9:a5:57:cd:e9:cc:7f:57:94:92:20:41:db:19:37: 3e:eb:65:6c:cc:c5:19:f8:1a:a2:94:f4:b0:77:0b:30:00:7c: 52:80:08:91:63:db:7b:6c:50:8a:e0:a9:87:8c:b1:f4:6e:05: 0f:47:ce:e1:f3:82:8e:10:d5:6a:4e:26:d1:86:bd:6a:3a:19: 79:62:79:4f:68:18:b4:b0:af:d8:9d:0d:95:2b:07:84:6c:fa: ba:0a:7c:da:9c:03:dc:9a:08:b4:de:ac:67:e8:03:43:70:95: 6f:d7:60:77:72:9a:fd:06:13:f2:08:38:df:72:5f:78:79:00: 55:dd:a6:47:b6:11:9e:ae:59:e7:bf:d3:38:b5:10:56:73:08: bf:50:72:4f:6a:c2:c4:a1:ce:0b:3a:0e:9f:6a:35:f5:c5:a3: 71:d5:68:89:74:1d:3a:d3:9f:ed:72:7c:c8:2a:55:89:b9:a6: 7b:08:ac:6b:b8:d4:28:9c:42:6a:7c:ce:3b:43:a3:c1:ee:51: d6:2b:25:59:e7:77:4b:28:ed:85:7e:42:ae:bd:b8:73:15:78: b4:c8:10:34:4c:41:9a:0b:e8:77:6b:37:ca:62:5a:a8:ff:86: 0e:36:d2:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcyQjExMTAvBgNVBAUTKEVCOEIwQUQyQzA3NjYyMDg1MkNCQzM3ODkwRTY0QUQ0 MDZCNDg5RTgwHhcNMjUwODIyMTgwODQxWhcNMjUwODI5MTgwODQxWjAYMRYwFAYD VQQDEw02OGE4YjIyOS0xMTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwCVW73EsvtimIzOQAfHva32PGx910kCF/rLXBJaxp0+KzVPDw7itIf0WCMpD +4KDrlTwYtdh+HUmgAmOZzrzTpKxwfQGyqqc4KRRzN0971ej8fS/IKcOrJWTFJ6o MerfHjJa02IqBiEdo1ErOg0nYO6GSg4FOGhvRJ2VjdTYcX0iwFoZxbcEpTp8mqdd LYy+1XcciiwhhmFB/zhT5eSoodyvTcDvfdpxRv+m1pAlSuxDWQGkffTNfHMx9UAk jKqG1gxBFpbcVdf1n9BfjXKbHMUmXB/kJ8NtrXC7iVaDDXZ6r2pqDKcCCTuiyWe7 TIBsNoVkQSWctVmx4Wzb1X/G6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCUhg6iy 8UZjfC6fBUDe+ccLa2xHMB8GA1UdIwQYMBaAFOuLCtLAdmIIUsvDeJDmStQGtIno MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzJCMS8yQTQ1Rjk4MERF QzkxMUU5QUFBN0VDMzNDNEY5QUUwMi82NHNLMHNCMllnaFN5OE40a09aSzFBYTBp ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY0c0swc0IyWWdoU3k4TjRrT1pLMUFhMGllZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzJCMS8yQTQ1Rjk4MERFQzkxMUU5QUFBN0VDMzNDNEY5QUUwMi82NHNLMHNCMlln aFN5OE40a09aSzFBYTBpZWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnr9ZiuHI96jm3ydNVmwTsRl9sxiK5pVfN6cx/V5SSIEHbGTc+62Vs zMUZ+BqilPSwdwswAHxSgAiRY9t7bFCK4KmHjLH0bgUPR87h84KOENVqTibRhr1q Ohl5YnlPaBi0sK/YnQ2VKweEbPq6CnzanAPcmgi03qxn6ANDcJVv12B3cpr9BhPy CDjfcl94eQBV3aZHthGerlnnv9M4tRBWcwi/UHJPasLEoc4LOg6fajX1xaNx1WiJ dB0605/tcnzIKlWJuaZ7CKxruNQonEJqfM47Q6PB7lHWKyVZ53dLKO2FfkKuvbhz FXi0yBA0TEGaC+h3azfKYlqo/4YONtIi -----END CERTIFICATE-----Generated at Sat Aug 23 16:24:58 2025 by rpki-client