$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.mft File: MEsColZqFjrazh-lIaMKfmJqwR4.mft (raw, json) Hash identifier: jqnZ5BLncj5fgKG0SdARSJgFhdUK4HkLw5+wAgqK3Dk= Subject key identifier: 2C:FE:25:FA:6C:90:75:42:B8:55:C7:ED:29:D4:65:24:04:A1:8C:69 Authority key identifier: 30:4B:02:A2:56:6A:16:3A:DA:CE:1F:A5:21:A3:0A:7E:62:6A:C1:1E Certificate issuer: /CN=A91CAECE/serialNumber=304B02A2566A163ADACE1FA521A30A7E626AC11E Certificate serial: 47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MEsColZqFjrazh-lIaMKfmJqwR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.mft Manifest number: 46 Signing time: Sat 23 Aug 2025 07:37:40 +0000 Manifest this update: Sat 23 Aug 2025 07:37:39 +0000 Manifest next update: Sat 30 Aug 2025 07:37:39 +0000 Files and hashes: 1: MEsColZqFjrazh-lIaMKfmJqwR4.crl (hash: AjiaYsmuuikPNg7zv/ol6+GByR8foQ8yeUv2c2NwOC8=) 2: 07063FA4134B11F0B48EFA0AC4F9AE02.roa (hash: WNVrInNAUMIDrW85MacHTXC8HeXu1LqrkLU97EbnyxY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.crl rsync://rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MEsColZqFjrazh-lIaMKfmJqwR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:37:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAECE, serialNumber=304B02A2566A163ADACE1FA521A30A7E626AC11E Validity Not Before: Aug 23 07:37:39 2025 GMT Not After : Aug 30 07:37:39 2025 GMT Subject: CN=68a96fc3-cfd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a2:c5:5d:fd:1d:a0:55:25:dc:54:b1:cb:6a: 64:8f:48:a1:6c:1a:2a:33:fa:4b:0a:7d:1c:1f:92: 3b:7c:73:65:92:96:11:6b:f4:af:99:1a:5e:52:cb: d2:b4:83:91:b0:59:ce:34:60:25:97:2b:91:91:56: 2c:c2:db:ad:9c:e1:ee:6a:17:62:03:27:a0:fb:96: 02:bd:1b:a0:46:26:8c:da:e1:57:08:be:86:4d:e4: 9e:2d:68:92:3a:d8:0b:74:7e:92:15:1a:a1:98:79: 99:06:23:41:35:30:0a:e9:e1:0f:ed:ec:22:4c:a7: a6:04:ec:e4:ae:8b:59:5e:20:d0:34:bd:50:3b:d9: c9:cc:01:de:a4:90:fe:e1:ab:c7:9f:1f:ed:df:a4: 1f:55:07:5e:80:37:8e:54:41:68:62:6d:5f:95:d5: e2:2d:c6:5b:c3:13:25:99:54:39:22:c1:0a:da:5e: 2c:f8:e3:28:75:82:03:de:9a:65:bd:be:7d:8c:92: 30:1e:b9:8e:d0:a5:37:f5:82:f5:a6:29:23:23:28: 3f:ee:32:d6:2e:75:63:f6:fb:4c:b9:96:b1:e4:85: c7:0a:77:f1:bf:53:97:1a:ce:44:9c:6b:28:aa:05: 9f:88:93:2f:97:57:ff:91:ab:0d:b2:b9:ec:dc:82: ea:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:FE:25:FA:6C:90:75:42:B8:55:C7:ED:29:D4:65:24:04:A1:8C:69 X509v3 Authority Key Identifier: keyid:30:4B:02:A2:56:6A:16:3A:DA:CE:1F:A5:21:A3:0A:7E:62:6A:C1:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MEsColZqFjrazh-lIaMKfmJqwR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:bf:07:5e:ed:c3:22:ce:cd:5b:d2:42:5b:fa:a1:42:e8:0a: 1f:99:11:74:c9:75:44:36:c9:f0:a6:66:6a:1b:f8:4f:c1:a3: 01:7f:98:50:31:61:9e:cb:06:2f:9e:00:49:63:b6:88:6f:d3: b8:77:7b:56:9e:c5:6c:f1:fd:32:0f:92:74:4c:9d:3b:62:99: 75:4b:df:25:6b:91:21:88:ea:08:51:68:ed:35:f5:83:a4:09: d6:d9:49:2d:f4:d7:38:4c:03:c1:00:8c:2e:75:cb:36:86:2b: 52:11:5f:a4:e5:a4:c4:52:79:d0:ea:14:fd:58:f7:23:6c:81: a5:c8:e8:86:ff:38:51:bc:9f:57:23:48:f6:62:02:ef:43:2b: 05:5e:b9:0f:d0:47:14:d5:1a:d3:87:20:52:2c:e5:6b:94:5c: 60:b9:5d:19:c0:01:00:7e:44:d6:bc:e3:c9:e6:36:52:50:7b: 1d:a9:dc:d9:87:1c:4a:b2:25:61:3b:6f:1c:44:27:f6:38:f4: 21:37:32:68:a2:dd:b3:41:fe:34:d4:14:c1:5d:a3:5d:fb:26: e8:eb:69:0b:d9:37:4e:66:3d:21:f2:34:f8:77:28:37:da:81: 62:db:9d:74:97:ec:09:33:9a:8c:24:49:64:f6:42:37:fa:7e: fb:f5:2f:41 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QUVDRTExMC8GA1UEBRMoMzA0QjAyQTI1NjZBMTYzQURBQ0UxRkE1MjFBMzBBN0U2 MjZBQzExRTAeFw0yNTA4MjMwNzM3MzlaFw0yNTA4MzAwNzM3MzlaMBgxFjAUBgNV BAMTDTY4YTk2ZmMzLWNmZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCoosVd/R2gVSXcVLHLamSPSKFsGioz+ksKfRwfkjt8c2WSlhFr9K+ZGl5Sy9K0 g5GwWc40YCWXK5GRVizC262c4e5qF2IDJ6D7lgK9G6BGJoza4VcIvoZN5J4taJI6 2At0fpIVGqGYeZkGI0E1MArp4Q/t7CJMp6YE7OSui1leINA0vVA72cnMAd6kkP7h q8efH+3fpB9VB16AN45UQWhibV+V1eItxlvDEyWZVDkiwQraXiz44yh1ggPemmW9 vn2MkjAeuY7QpTf1gvWmKSMjKD/uMtYudWP2+0y5lrHkhccKd/G/U5cazkScayiq BZ+Iky+XV/+Rqw2yuezcgurrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULP4l+myQ dUK4VcftKdRlJAShjGkwHwYDVR0jBBgwFoAUMEsColZqFjrazh+lIaMKfmJqwR4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNBRUNFLzNERjREQzkyMTM0 QTExRjBBNjk2ODQ4N0M0RjlBRTAyL01Fc0NvbFpxRmpyYXpoLWxJYU1LZm1KcXdS NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTUVzQ29sWnFGanJhemgtbElhTUtmbUpxd1I0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNB RUNFLzNERjREQzkyMTM0QTExRjBBNjk2ODQ4N0M0RjlBRTAyL01Fc0NvbFpxRmpy YXpoLWxJYU1LZm1KcXdSNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADK/B17twyLOzVvSQlv6oULoCh+ZEXTJdUQ2yfCmZmob+E/BowF/mFAx YZ7LBi+eAEljtohv07h3e1aexWzx/TIPknRMnTtimXVL3yVrkSGI6ghRaO019YOk CdbZSS301zhMA8EAjC51yzaGK1IRX6TlpMRSedDqFP1Y9yNsgaXI6Ib/OFG8n1cj SPZiAu9DKwVeuQ/QRxTVGtOHIFIs5WuUXGC5XRnAAQB+RNa848nmNlJQex2p3NmH HEqyJWE7bxxEJ/Y49CE3Mmii3bNB/jTUFMFdo137JujraQvZN05mPSHyNPh3KDfa gWLbnXSX7AkzmowkSWT2Qjf6fvv1L0E= -----END CERTIFICATE-----Generated at Sat Aug 23 15:33:24 2025 by rpki-client