$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft File: RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft (raw, json) Hash identifier: anO/ysQKv55hPwyCqg9Ucl82e4J/yZM1PbTZRr350F4= Subject key identifier: 47:72:CC:E1:76:36:B2:68:9D:6E:B1:50:B9:59:D9:39:04:E8:80:09 Authority key identifier: 47:0A:93:44:9E:61:1F:A9:AD:05:A2:89:D6:18:82:20:B5:FC:FC:3A Certificate issuer: /CN=A91CB8BA/serialNumber=470A93449E611FA9AD05A289D6188220B5FCFC3A Certificate serial: 08F2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft Manifest number: 08E1 Signing time: Fri 22 Aug 2025 20:34:01 +0000 Manifest this update: Fri 22 Aug 2025 20:34:01 +0000 Manifest next update: Fri 29 Aug 2025 20:34:01 +0000 Files and hashes: 1: RwqTRJ5hH6mtBaKJ1hiCILX8_Do.crl (hash: UdKkLynvaS4P0RGm/Rc5k/bm+rgTndqWGyUfgafmAQM=) 2: 465DBB30BA8811EAAF996D39C4F9AE02.roa (hash: 23ndFVCcLg+/bCNKhL706A7YBuPjvG2i31lg9YjdTYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.crl rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:34:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2290 (0x8f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB8BA, serialNumber=470A93449E611FA9AD05A289D6188220B5FCFC3A Validity Not Before: Aug 22 20:34:01 2025 GMT Not After : Aug 29 20:34:01 2025 GMT Subject: CN=68a8d439-490d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:95:9f:c7:d9:a2:a9:23:0a:07:6a:b5:82:fa: 6b:28:1b:02:b8:07:7e:a5:4f:dd:a7:19:5f:bc:1c: c0:6d:9d:d5:9d:97:4f:66:cc:fc:6e:e7:d0:80:2f: 35:98:d8:41:16:9a:a4:08:9e:68:19:ea:1d:8b:69: 12:1f:61:74:b1:2c:88:d0:ef:7f:d2:de:60:9e:42: 37:7f:29:a8:64:c9:19:65:d3:c6:7a:18:e5:be:5d: b1:9f:d4:a8:54:4b:f1:d3:e1:0c:a8:87:6e:5c:bb: c3:a0:4f:ff:87:5d:b6:8c:3a:61:73:7e:a6:bc:68: e8:63:9c:db:5c:a9:55:1f:c0:05:98:b9:71:b0:bc: 1e:be:74:c6:f1:b8:ef:2d:e9:9e:c8:c9:c9:ed:2e: 85:c5:46:13:10:3d:02:62:cf:57:e3:e2:35:6e:ab: dc:33:5e:2b:f7:60:25:7d:36:d1:a0:a3:6b:f2:70: 5d:0a:b7:bd:9b:57:c2:c1:8e:68:00:14:6d:2a:d3: 30:51:f6:53:3b:ff:26:47:a4:21:a9:2b:48:3d:46: fa:02:36:ed:5e:39:27:0c:f1:c1:1f:19:d9:02:4c: d3:ba:bd:05:72:a8:a2:54:98:95:05:dd:04:ba:c9: d7:42:ef:6f:3d:e7:46:8d:c2:e4:bc:13:c2:df:f0: 01:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:72:CC:E1:76:36:B2:68:9D:6E:B1:50:B9:59:D9:39:04:E8:80:09 X509v3 Authority Key Identifier: keyid:47:0A:93:44:9E:61:1F:A9:AD:05:A2:89:D6:18:82:20:B5:FC:FC:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:bf:12:b2:5c:94:fc:c2:52:c6:ed:b5:95:f2:7b:a4:65:02: f9:6c:6f:63:00:e6:87:4e:a3:a0:d2:5a:0a:a6:e8:b6:53:48: b3:2e:4a:51:3a:b5:23:e9:1a:46:ab:53:4f:93:0e:d8:6f:31: 08:7c:e8:a5:18:63:69:75:cb:74:d2:68:62:61:29:7e:d8:ce: 5d:6e:cc:51:c3:20:f1:85:1a:6e:18:46:c7:a2:80:8d:78:e6: dd:70:be:67:fa:fb:1d:b6:ce:f8:75:aa:ae:d8:53:66:a4:93: 5e:b9:af:fe:f8:12:1e:86:35:8d:0b:9f:15:4d:50:9c:cf:4c: c0:87:ad:45:00:df:bb:d5:11:cf:7a:bd:ea:1b:7a:6f:21:9b: 6d:58:a2:1e:7a:9e:ab:45:0b:7b:f5:9d:85:bf:47:52:36:61: 90:ac:77:f5:43:9c:e9:48:d7:ae:c0:86:90:d0:97:32:a2:42: b3:c0:a7:4b:8a:c9:ae:1b:d7:fa:e3:5f:ef:20:5d:56:9c:0a: b4:6b:ee:30:48:3e:dc:e0:f6:07:93:1e:6b:64:eb:f8:07:c3: 4b:a5:2d:ce:2d:aa:08:19:79:53:00:29:79:6e:c2:e3:38:bb: c9:89:34:8b:c0:ea:b3:da:37:7c:d7:32:d6:97:d3:93:18:89: 74:1f:e9:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I4QkExMTAvBgNVBAUTKDQ3MEE5MzQ0OUU2MTFGQTlBRDA1QTI4OUQ2MTg4MjIw QjVGQ0ZDM0EwHhcNMjUwODIyMjAzNDAxWhcNMjUwODI5MjAzNDAxWjAYMRYwFAYD VQQDEw02OGE4ZDQzOS00OTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5Wfx9miqSMKB2q1gvprKBsCuAd+pU/dpxlfvBzAbZ3VnZdPZsz8bufQgC81 mNhBFpqkCJ5oGeodi2kSH2F0sSyI0O9/0t5gnkI3fymoZMkZZdPGehjlvl2xn9So VEvx0+EMqIduXLvDoE//h122jDphc36mvGjoY5zbXKlVH8AFmLlxsLwevnTG8bjv LemeyMnJ7S6FxUYTED0CYs9X4+I1bqvcM14r92AlfTbRoKNr8nBdCre9m1fCwY5o ABRtKtMwUfZTO/8mR6QhqStIPUb6AjbtXjknDPHBHxnZAkzTur0FcqiiVJiVBd0E usnXQu9vPedGjcLkvBPC3/ABzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEdyzOF2 NrJonW6xULlZ2TkE6IAJMB8GA1UdIwQYMBaAFEcKk0SeYR+prQWiidYYgiC1/Pw6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjhCQS8yQjczMkU3MEJB ODUxMUVBQkE4MzhFMzBDNEY5QUUwMi9Sd3FUUko1aEg2bXRCYUtKMWhpQ0lMWDhf RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1J3cVRSSjVoSDZtdEJhS0oxaGlDSUxYOF9Eby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjhCQS8yQjczMkU3MEJBODUxMUVBQkE4MzhFMzBDNEY5QUUwMi9Sd3FUUko1aEg2 bXRCYUtKMWhpQ0lMWDhfRG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArvxKyXJT8wlLG7bWV8nukZQL5bG9jAOaHTqOg0loKpui2U0izLkpR OrUj6RpGq1NPkw7YbzEIfOilGGNpdct00mhiYSl+2M5dbsxRwyDxhRpuGEbHooCN eObdcL5n+vsdts74daqu2FNmpJNeua/++BIehjWNC58VTVCcz0zAh61FAN+71RHP er3qG3pvIZttWKIeep6rRQt79Z2Fv0dSNmGQrHf1Q5zpSNeuwIaQ0JcyokKzwKdL ismuG9f641/vIF1WnAq0a+4wSD7c4PYHkx5rZOv4B8NLpS3OLaoIGXlTACl5bsLj OLvJiTSLwOqz2jd81zLWl9OTGIl0H+l0 -----END CERTIFICATE-----Generated at Sat Aug 23 18:16:31 2025 by rpki-client