$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft File: MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft (raw, json) Hash identifier: NsTLwFQo8jndBcuRF7uF7+6hbV9+u75NhPoTkVeBjGE= Subject key identifier: 7B:AE:C8:CD:D2:79:63:2D:2C:44:49:8E:57:EC:D9:FF:4F:C9:E1:A3 Authority key identifier: 31:D2:1D:5C:EE:5F:AC:DE:F3:C8:C1:C8:7D:0D:73:91:F9:F7:3A:FF Certificate issuer: /CN=A91C8203/serialNumber=31D21D5CEE5FACDEF3C8C1C87D0D7391F9F73AFF Certificate serial: 9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft Manifest number: 9C Signing time: Sat 23 Aug 2025 06:34:35 +0000 Manifest this update: Sat 23 Aug 2025 06:34:35 +0000 Manifest next update: Sat 30 Aug 2025 06:34:35 +0000 Files and hashes: 1: MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl (hash: qXhHTnrWXoEJ7GqRbPAdaICf1fH0LQwAp2z9CwChphw=) 2: BE48D4AA927D11EF9651FC4AC4F9AE02.roa (hash: izRhlY7DGrfvs8MmjLdXrrQgAeYYKtyct/uQzFPAxkk=) 3: D9BE56E2927D11EFB83ACB5CC4F9AE02.roa (hash: gD5kq8/HSPW50HYpmldu2HRZWRqRsB+3dXKbKp9PeAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:10:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8203, serialNumber=31D21D5CEE5FACDEF3C8C1C87D0D7391F9F73AFF Validity Not Before: Aug 23 06:34:35 2025 GMT Not After : Aug 30 06:34:35 2025 GMT Subject: CN=68a960fb-1a87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2b:2c:42:c7:71:ba:f1:ae:73:8e:41:e4:22: 58:2c:61:ef:2d:b0:02:a6:06:28:b1:90:ab:31:18: 64:6d:e6:fd:a7:bd:25:e2:73:d0:89:5d:d7:26:c9: d9:8f:b4:ab:2e:e8:53:c4:f0:1f:6d:23:60:0f:b6: 1c:b9:e4:47:be:a0:d1:5f:ed:1f:52:4a:48:5a:a6: e7:af:64:00:d4:89:01:a6:87:6e:4d:c8:04:e3:c0: 54:6a:9d:42:ac:f4:4c:bd:fc:33:74:b1:5f:10:56: ec:ff:14:54:c8:3e:b0:08:a9:bc:72:40:39:b1:48: 33:59:64:f5:d6:a5:2f:51:97:89:5b:cd:12:04:d2: 32:c9:60:f2:47:c6:d3:3f:2e:02:6e:f2:aa:f1:2a: 29:ed:53:4d:87:c2:f0:7c:c8:5d:75:27:f8:05:0a: 75:85:8b:e3:b2:8c:48:99:19:70:1c:21:1c:02:41: 26:67:6c:44:2c:b3:29:fa:51:a8:03:0f:42:9a:bc: 27:a8:5a:ea:2a:0c:ee:54:68:d5:7a:63:6a:18:9f: 89:36:de:13:d7:90:9b:52:1e:b3:79:30:aa:20:fe: 31:17:d1:3f:30:b7:4f:d5:4d:28:9c:34:b8:ff:67: f5:da:aa:c0:d3:60:a1:07:7c:2e:9b:de:a8:0b:8e: 62:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:AE:C8:CD:D2:79:63:2D:2C:44:49:8E:57:EC:D9:FF:4F:C9:E1:A3 X509v3 Authority Key Identifier: keyid:31:D2:1D:5C:EE:5F:AC:DE:F3:C8:C1:C8:7D:0D:73:91:F9:F7:3A:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:7b:c6:87:22:48:15:1b:2d:e7:59:fa:65:56:3d:c5:ae:9d: 47:77:3f:d6:d6:36:d7:2b:d2:6e:fc:17:6b:c1:5f:2c:21:10: 74:89:18:c8:55:bd:ef:e3:1f:fe:0f:63:22:6b:68:cf:59:f9: ad:fc:96:64:2c:91:20:ca:19:1a:68:26:78:8e:76:2c:d2:fb: fe:bd:0a:b6:96:d9:7a:17:37:6c:02:70:d3:e0:f4:54:cb:24: f2:3b:9c:10:1b:b5:3e:e5:66:34:51:de:c6:7d:3d:d7:e7:a6: c2:1d:7b:8a:aa:25:df:67:36:79:f3:c4:34:93:8a:f7:1c:c9: cc:ff:7d:ca:63:32:99:a8:12:28:e6:a7:25:00:6b:a5:79:f7: 57:07:95:67:10:50:b4:30:67:88:94:9c:83:78:51:65:20:b4: ef:e4:2b:a9:42:0c:62:e3:92:36:08:e3:7c:70:84:5d:4f:cb: f2:d8:5f:93:97:f6:52:d8:68:bd:ab:ed:fc:6e:fb:6d:08:74: 29:59:67:d8:25:50:c1:32:b6:cc:46:9b:33:6d:67:23:40:a2: 17:73:a4:6d:f4:be:35:ce:cf:2f:9e:8f:70:74:49:48:a6:ea: b5:7c:21:44:4a:12:91:b9:e7:24:7a:f8:78:cb:ce:62:64:d5: cd:9d:49:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgyMDMxMTAvBgNVBAUTKDMxRDIxRDVDRUU1RkFDREVGM0M4QzFDODdEMEQ3Mzkx RjlGNzNBRkYwHhcNMjUwODIzMDYzNDM1WhcNMjUwODMwMDYzNDM1WjAYMRYwFAYD VQQDEw02OGE5NjBmYi0xYTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzSssQsdxuvGuc45B5CJYLGHvLbACpgYosZCrMRhkbeb9p70l4nPQiV3XJsnZ j7SrLuhTxPAfbSNgD7YcueRHvqDRX+0fUkpIWqbnr2QA1IkBpoduTcgE48BUap1C rPRMvfwzdLFfEFbs/xRUyD6wCKm8ckA5sUgzWWT11qUvUZeJW80SBNIyyWDyR8bT Py4CbvKq8Sop7VNNh8LwfMhddSf4BQp1hYvjsoxImRlwHCEcAkEmZ2xELLMp+lGo Aw9CmrwnqFrqKgzuVGjVemNqGJ+JNt4T15CbUh6zeTCqIP4xF9E/MLdP1U0onDS4 /2f12qrA02ChB3wum96oC45i6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHuuyM3S eWMtLERJjlfs2f9PyeGjMB8GA1UdIwQYMBaAFDHSHVzuX6ze88jByH0Nc5H59zr/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODIwMy9CQzUxNURBQTky N0ExMUVGQjU2NDNDNEVDNEY5QUUwMi9NZElkWE81ZnJON3p5TUhJZlExemtmbjNP djguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01kSWRYTzVmck43enlNSElmUTF6a2ZuM092OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODIwMy9CQzUxNURBQTkyN0ExMUVGQjU2NDNDNEVDNEY5QUUwMi9NZElkWE81ZnJO N3p5TUhJZlExemtmbjNPdjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2e8aHIkgVGy3nWfplVj3Frp1Hdz/W1jbXK9Ju/BdrwV8sIRB0iRjI Vb3v4x/+D2Mia2jPWfmt/JZkLJEgyhkaaCZ4jnYs0vv+vQq2ltl6FzdsAnDT4PRU yyTyO5wQG7U+5WY0Ud7GfT3X56bCHXuKqiXfZzZ588Q0k4r3HMnM/33KYzKZqBIo 5qclAGulefdXB5VnEFC0MGeIlJyDeFFlILTv5CupQgxi45I2CON8cIRdT8vy2F+T l/ZS2Gi9q+38bvttCHQpWWfYJVDBMrbMRpszbWcjQKIXc6Rt9L41zs8vno9wdElI puq1fCFEShKRueckevh4y85iZNXNnUmh -----END CERTIFICATE-----Generated at Sat Aug 23 09:42:33 2025 by rpki-client