$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft File: m505clsn1CAoE4UWNJL_dfFRE9o.mft (raw, json) Hash identifier: i7MJVnlZ6hKYkDO1zEhOY1tmzNp4MiteYkXNqrF1MHI= Subject key identifier: DE:F6:D5:95:92:DD:6A:46:A2:63:D1:4F:9F:6B:39:62:5B:10:16:FF Authority key identifier: 9B:9D:39:72:5B:27:D4:20:28:13:85:16:34:92:FF:75:F1:51:13:DA Certificate issuer: /CN=A91C7EF2/serialNumber=9B9D39725B27D420281385163492FF75F15113DA Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m505clsn1CAoE4UWNJL_dfFRE9o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft Manifest number: 15 Signing time: Sat 23 Aug 2025 08:15:39 +0000 Manifest this update: Sat 23 Aug 2025 08:15:38 +0000 Manifest next update: Sat 30 Aug 2025 08:15:38 +0000 Files and hashes: 1: m505clsn1CAoE4UWNJL_dfFRE9o.crl (hash: kSdQ+wbY6wH6I8qZeoR6xIXKoQlDMd51HbbqDIUX3CU=) 2: D24370A6638211F087594469C4F9AE02.roa (hash: BC9hUQT1LjynnO8EIFYzWbutVI812gfFy3AK+b9ATvM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.crl rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m505clsn1CAoE4UWNJL_dfFRE9o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7EF2, serialNumber=9B9D39725B27D420281385163492FF75F15113DA Validity Not Before: Aug 23 08:15:38 2025 GMT Not After : Aug 30 08:15:38 2025 GMT Subject: CN=68a978ab-e557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:39:63:69:29:29:58:6f:9d:0b:03:22:86:61: 33:6a:9c:0a:75:01:14:47:7c:95:43:b1:bb:8f:55: d7:3d:ce:4b:59:54:9b:f2:00:73:52:1e:f6:b7:8c: 66:49:ff:0c:35:0a:d1:7f:f8:ee:02:a5:ce:64:cb: c8:c9:09:3d:c4:8b:87:da:da:df:07:f6:68:b1:56: dc:ef:0f:02:2e:9b:f2:0e:47:63:1c:6c:2b:5d:95: 63:8e:33:1d:60:9b:1a:9f:17:54:c4:be:1f:33:53: 18:e6:20:52:5b:27:12:f0:6c:bc:22:ed:5c:89:74: da:4b:52:dc:50:27:3e:9b:9b:3c:5d:15:f4:28:29: 95:60:93:b9:7a:d9:71:d1:90:e2:b0:47:bb:34:cd: 1e:f8:52:14:33:89:e4:6c:c8:e6:bd:9f:28:de:a6: d2:1e:68:fc:07:6b:25:fd:58:7e:cf:78:98:cd:fe: 77:18:71:51:7a:66:ec:94:31:04:f4:28:09:5f:e4: 29:37:66:5e:6c:e0:57:0e:8d:e6:e8:86:08:74:bb: e6:02:db:5d:00:c0:d1:cf:4a:32:ef:ef:72:4f:88: 67:65:91:f7:07:d2:41:82:77:34:3e:aa:d6:6f:7b: a7:36:06:44:da:f9:85:c5:00:29:61:4e:5a:e3:b6: 4d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:F6:D5:95:92:DD:6A:46:A2:63:D1:4F:9F:6B:39:62:5B:10:16:FF X509v3 Authority Key Identifier: keyid:9B:9D:39:72:5B:27:D4:20:28:13:85:16:34:92:FF:75:F1:51:13:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m505clsn1CAoE4UWNJL_dfFRE9o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:7e:41:dd:e5:45:28:40:11:e8:9a:1d:57:07:df:1b:4c:af: 7e:7a:7f:cf:1c:62:66:39:c7:3f:ba:9d:2d:d1:38:6a:bf:80: 07:1f:72:af:68:80:6b:40:8a:7b:4a:3b:be:ff:46:b3:4f:43: ed:52:44:00:88:f6:d9:b9:3e:ef:37:b0:e5:af:ac:09:ce:31: e3:69:e1:c1:3a:39:b8:90:17:8d:e9:91:7c:b8:57:74:bd:c2: 8f:9c:ad:f4:90:4e:e2:40:e2:61:6d:ee:25:a6:ff:69:25:c0: 4e:d9:ee:1c:51:9c:56:44:fd:82:7e:84:3f:69:e3:80:fe:b3: 1f:8b:88:0b:14:cd:b7:6d:33:06:9c:5a:51:dd:fe:56:f7:3c: eb:35:db:a6:2a:80:0a:f8:2a:46:a4:ea:33:95:09:24:07:38: a1:5f:3c:93:10:66:25:0c:9b:54:76:35:bf:be:cf:78:c8:8b: 97:4a:86:64:36:e8:d1:4b:5a:94:f6:a3:93:8d:76:ff:08:67: ce:84:c2:d8:68:24:17:4f:6b:54:2d:66:4b:12:27:40:f6:89: b7:b1:c2:95:7f:d4:19:69:e0:0a:44:af:ef:d2:38:8c:54:d1: ce:b7:46:d5:2a:d8:74:97:05:c6:4e:81:9b:04:e4:9a:fd:37: f5:0b:cc:6f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD N0VGMjExMC8GA1UEBRMoOUI5RDM5NzI1QjI3RDQyMDI4MTM4NTE2MzQ5MkZGNzVG MTUxMTNEQTAeFw0yNTA4MjMwODE1MzhaFw0yNTA4MzAwODE1MzhaMBgxFjAUBgNV BAMTDTY4YTk3OGFiLWU1NTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/OWNpKSlYb50LAyKGYTNqnAp1ARRHfJVDsbuPVdc9zktZVJvyAHNSHva3jGZJ /ww1CtF/+O4Cpc5ky8jJCT3Ei4fa2t8H9mixVtzvDwIum/IOR2McbCtdlWOOMx1g mxqfF1TEvh8zUxjmIFJbJxLwbLwi7VyJdNpLUtxQJz6bmzxdFfQoKZVgk7l62XHR kOKwR7s0zR74UhQzieRsyOa9nyjeptIeaPwHayX9WH7PeJjN/ncYcVF6ZuyUMQT0 KAlf5Ck3Zl5s4FcOjebohgh0u+YC210AwNHPSjLv73JPiGdlkfcH0kGCdzQ+qtZv e6c2BkTa+YXFAClhTlrjtk2NAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3vbVlZLd akaiY9FPn2s5YlsQFv8wHwYDVR0jBBgwFoAUm505clsn1CAoE4UWNJL/dfFRE9ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3RUYyLzYyMjZDOTM2NjM4 MTExRjBBMzNEMjM2NEM0RjlBRTAyL201MDVjbHNuMUNBb0U0VVdOSkxfZGZGUkU5 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbTUwNWNsc24xQ0FvRTRVV05KTF9kZkZSRTlvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 RUYyLzYyMjZDOTM2NjM4MTExRjBBMzNEMjM2NEM0RjlBRTAyL201MDVjbHNuMUNB b0U0VVdOSkxfZGZGUkU5by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIJ+Qd3lRShAEeiaHVcH3xtMr356f88cYmY5xz+6nS3ROGq/gAcfcq9o gGtAintKO77/RrNPQ+1SRACI9tm5Pu83sOWvrAnOMeNp4cE6ObiQF43pkXy4V3S9 wo+crfSQTuJA4mFt7iWm/2klwE7Z7hxRnFZE/YJ+hD9p44D+sx+LiAsUzbdtMwac WlHd/lb3POs126YqgAr4Kkak6jOVCSQHOKFfPJMQZiUMm1R2Nb++z3jIi5dKhmQ2 6NFLWpT2o5ONdv8IZ86EwthoJBdPa1QtZksSJ0D2ibexwpV/1Blp4ApEr+/SOIxU 0c63RtUq2HSXBcZOgZsE5Jr9N/ULzG8= -----END CERTIFICATE-----Generated at Sat Aug 23 14:03:17 2025 by rpki-client