$ rpki-client -vvf rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft File: dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft (raw, json) Hash identifier: KVCsbhxPG1/tMUPv8V8YMwUcKKBUNDTrazZ1OIwanfI= Subject key identifier: 95:7F:75:47:85:6D:BA:49:BF:93:65:CA:6E:C6:78:11:D2:9A:89:3F Authority key identifier: 75:25:33:B1:85:2F:7D:2A:C6:E7:0D:CD:EB:FD:54:7D:DC:43:8F:94 Certificate issuer: /CN=A91C72E6/serialNumber=752533B1852F7D2AC6E70DCDEBFD547DDC438F94 Certificate serial: 01B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft Manifest number: 01AA Signing time: Sat 23 Aug 2025 03:18:46 +0000 Manifest this update: Sat 23 Aug 2025 03:18:46 +0000 Manifest next update: Sat 30 Aug 2025 03:18:46 +0000 Files and hashes: 1: dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl (hash: dSIdLnXcA1/SHiltW4qTooMU7AwLP7k4s3Zp1p5L05w=) 2: 2340D07AF2F111ED91F08A4FC4F9AE02.roa (hash: VgWfSFvnBqBZBBT7n2uea4PCFkDi3gg2tHZzpCuKDJA=) 3: 23EE2B76F2F111ED91F08A4FC4F9AE02.roa (hash: gpne2Z9eCccwlEkyZjX90RD5Y2MRSV5puraHdA9qCqw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:18:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 432 (0x1b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C72E6, serialNumber=752533B1852F7D2AC6E70DCDEBFD547DDC438F94 Validity Not Before: Aug 23 03:18:46 2025 GMT Not After : Aug 30 03:18:46 2025 GMT Subject: CN=68a93316-a90f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4d:c5:1f:b6:ab:4f:6a:ad:ff:39:b2:29:60: 13:e9:ff:63:26:e9:57:e6:79:7b:bd:3d:4a:69:82: 95:49:05:7e:98:8a:33:50:7c:2b:1d:18:7f:d7:9b: da:5f:20:54:19:46:82:75:5f:c2:e6:65:97:b1:fa: 10:c1:0d:4b:3b:bc:ca:34:ed:ce:26:6f:dc:7b:23: 30:5d:96:14:7a:14:1d:59:76:ad:4d:ea:18:28:04: c6:fc:97:a6:cf:8f:1f:83:43:50:a9:ba:fb:d5:9b: 93:a8:1f:3a:88:6f:7d:9e:ac:a3:09:52:9e:01:bf: 79:55:4b:d0:09:03:91:93:39:56:44:b0:6f:e8:e6: ea:17:62:a9:50:64:0f:4a:4c:14:29:a4:a9:be:c2: 33:e3:8f:24:ed:22:08:b4:a3:24:65:1b:ab:cd:8b: fc:6e:3b:be:7f:fc:2e:9f:39:bf:66:ce:e8:21:7d: 7b:14:b1:5a:45:96:c4:19:7e:18:1b:19:66:8b:51: 92:53:e9:1c:b8:ea:86:7a:2c:02:3c:07:0b:71:5e: df:b0:8e:97:92:9c:da:e9:6a:48:f5:4b:aa:2d:45: 01:69:74:f5:b0:f7:32:d7:bd:6c:70:6b:01:96:b8: be:61:61:f5:f6:29:9d:0d:45:ce:f2:9b:44:5d:02: 16:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:7F:75:47:85:6D:BA:49:BF:93:65:CA:6E:C6:78:11:D2:9A:89:3F X509v3 Authority Key Identifier: keyid:75:25:33:B1:85:2F:7D:2A:C6:E7:0D:CD:EB:FD:54:7D:DC:43:8F:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:ad:9c:81:60:8b:19:9d:0c:7f:b9:5f:99:ee:70:72:82:be: 36:26:e5:23:4d:f0:6d:29:33:f9:a6:e9:2c:98:40:d9:4d:3a: b6:6e:84:22:3b:b5:2e:db:f7:b5:61:99:a7:d3:9a:ff:33:59: 5d:65:3b:0c:84:19:7b:45:ef:2e:19:90:20:4c:2c:2b:8a:b9: 75:f6:03:78:b1:dd:f1:2e:c3:15:3c:a6:25:c8:8d:f1:c8:24: 77:c9:b2:e5:bd:16:50:82:ec:fc:fb:56:9e:30:df:fc:a4:80: c3:87:60:5f:0d:fc:8a:b4:bd:c7:ea:9a:fc:d5:ab:1b:75:d2: 9d:f8:2b:1b:d2:48:5c:cd:cf:10:b2:76:fb:73:58:a5:9f:72: ae:5d:bf:57:58:02:75:ee:00:d9:3c:76:aa:a8:72:49:9c:cb: 89:a9:8d:7e:93:34:5a:f9:9c:b8:a0:6c:ae:2f:10:4e:c2:13: 3e:a6:8c:4e:55:d3:d3:e1:56:5f:d3:a5:16:27:b1:c9:bd:10: ff:af:be:12:c6:77:03:47:f0:be:48:ad:3b:af:f3:78:14:ef: b7:f0:61:b3:73:83:45:da:93:a5:f8:97:4b:78:d8:26:df:b1: 90:88:1f:87:24:4e:8a:94:38:e9:81:9d:41:69:8f:93:4d:16: 7f:80:28:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcyRTYxMTAvBgNVBAUTKDc1MjUzM0IxODUyRjdEMkFDNkU3MERDREVCRkQ1NDdE REM0MzhGOTQwHhcNMjUwODIzMDMxODQ2WhcNMjUwODMwMDMxODQ2WjAYMRYwFAYD VQQDEw02OGE5MzMxNi1hOTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1E3FH7arT2qt/zmyKWAT6f9jJulX5nl7vT1KaYKVSQV+mIozUHwrHRh/15va XyBUGUaCdV/C5mWXsfoQwQ1LO7zKNO3OJm/ceyMwXZYUehQdWXatTeoYKATG/Jem z48fg0NQqbr71ZuTqB86iG99nqyjCVKeAb95VUvQCQORkzlWRLBv6ObqF2KpUGQP SkwUKaSpvsIz448k7SIItKMkZRurzYv8bju+f/wunzm/Zs7oIX17FLFaRZbEGX4Y Gxlmi1GSU+kcuOqGeiwCPAcLcV7fsI6Xkpza6WpI9UuqLUUBaXT1sPcy171scGsB lri+YWH19imdDUXO8ptEXQIW1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJV/dUeF bbpJv5Nlym7GeBHSmok/MB8GA1UdIwQYMBaAFHUlM7GFL30qxucNzev9VH3cQ4+U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzJFNi9FNkU2RkIzMkYy RUExMUVEOTA5OTAwNEFDNEY5QUUwMi9kU1V6c1lVdmZTckc1dzNONl8xVWZkeERq NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RTVXpzWVV2ZlNyRzV3M042XzFVZmR4RGo1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzJFNi9FNkU2RkIzMkYyRUExMUVEOTA5OTAwNEFDNEY5QUUwMi9kU1V6c1lVdmZT ckc1dzNONl8xVWZkeERqNVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZrZyBYIsZnQx/uV+Z7nBygr42JuUjTfBtKTP5puksmEDZTTq2boQi O7Uu2/e1YZmn05r/M1ldZTsMhBl7Re8uGZAgTCwrirl19gN4sd3xLsMVPKYlyI3x yCR3ybLlvRZQguz8+1aeMN/8pIDDh2BfDfyKtL3H6pr81asbddKd+Csb0khczc8Q snb7c1iln3KuXb9XWAJ17gDZPHaqqHJJnMuJqY1+kzRa+Zy4oGyuLxBOwhM+poxO VdPT4VZf06UWJ7HJvRD/r74SxncDR/C+SK07r/N4FO+38GGzc4NF2pOl+JdLeNgm 37GQiB+HJE6KlDjpgZ1BaY+TTRZ/gCg8 -----END CERTIFICATE-----Generated at Sat Aug 23 13:34:05 2025 by rpki-client