$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft File: E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft (raw, json) Hash identifier: x8Me7T5JK8B4oaCs1uzjFtB3SisP/BMX6HbJLu396lI= Subject key identifier: 23:B0:43:AA:1D:1B:EA:D8:76:A6:15:88:A3:63:22:5E:B5:49:EB:2E Authority key identifier: 13:67:41:BD:9E:87:0F:06:EC:E5:CB:35:5B:8C:75:71:CC:96:BA:74 Certificate issuer: /CN=A91CE9D6/serialNumber=136741BD9E870F06ECE5CB355B8C7571CC96BA74 Certificate serial: 0A32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft Manifest number: 0A1C Signing time: Fri 22 Aug 2025 19:56:24 +0000 Manifest this update: Fri 22 Aug 2025 19:56:24 +0000 Manifest next update: Fri 29 Aug 2025 19:56:24 +0000 Files and hashes: 1: E2dBvZ6HDwbs5cs1W4x1ccyWunQ.crl (hash: TUxDMwoyLJhbvn4D0oiTE+9VYW/sJhO5NGXCdP5tkKo=) 2: 722D43AC7A5A11EABD77E486C4F9AE02.roa (hash: dz0lDVUdbKurIPgLKnTIK+TUvk2MtsrFSHr5aV4oHoA=) 3: E4EFE6905ECB11ECA9B55A3BC4F9AE02.roa (hash: ACLukHzl4iP7lAUKq3zWaW1x17F+UkqOsay4tSs+0D0=) 4: A1C764027A5B11EA98745A0EC4F9AE02.roa (hash: WPHw7kNP0n6c5UltUwmrIvy70bAxnVBFcfWA6in4LsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.crl rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:56:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2610 (0xa32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE9D6, serialNumber=136741BD9E870F06ECE5CB355B8C7571CC96BA74 Validity Not Before: Aug 22 19:56:24 2025 GMT Not After : Aug 29 19:56:24 2025 GMT Subject: CN=68a8cb68-5455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fe:30:6b:60:7b:65:fb:d4:8c:0e:bb:85:2a: 2f:6d:dc:6b:81:8b:30:1d:ad:9f:8e:a7:e7:32:b7: 60:e6:ac:39:e2:ad:95:06:b4:c2:47:c7:ad:12:cb: 43:b4:c6:74:66:c2:f2:e3:35:b7:d0:a0:a7:3b:90: 71:56:1d:e3:ec:ef:a4:d7:46:dc:a4:bd:51:00:37: ed:9f:5d:a1:fa:c3:45:88:76:b9:1b:c8:97:c6:83: d4:6a:8a:30:10:b0:46:45:91:7e:4f:79:c6:ef:17: 83:3a:5f:1e:04:30:0d:53:5f:5c:0e:e3:3d:3e:17: 1d:dd:57:20:28:20:7e:09:e8:98:ee:5d:dc:62:5e: 03:00:78:69:e0:b1:b1:22:69:fc:13:14:96:5a:2c: 45:31:3e:b2:16:f1:90:22:3a:83:01:1d:e3:61:f5: b4:d7:6b:83:69:bc:3c:e1:19:7e:97:38:da:72:73: 29:2e:77:19:0c:7d:14:99:d7:e7:87:77:fb:c5:10: b1:18:a2:0a:c5:cb:fc:9d:c3:3c:a2:9a:b6:9b:f8: 1b:4b:7e:af:d3:4b:2a:8f:d1:91:20:b3:30:48:e2: 67:ca:4a:3d:32:e1:b6:dd:72:2a:46:fc:5f:85:4b: 37:ab:e0:93:e6:c8:09:d1:0a:34:60:0a:93:b3:16: 69:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:B0:43:AA:1D:1B:EA:D8:76:A6:15:88:A3:63:22:5E:B5:49:EB:2E X509v3 Authority Key Identifier: keyid:13:67:41:BD:9E:87:0F:06:EC:E5:CB:35:5B:8C:75:71:CC:96:BA:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:dc:81:32:52:9a:5a:0f:dc:28:c1:4f:57:7c:99:ac:27:79: 63:88:1f:b0:f6:10:ff:f9:ac:a3:81:68:a4:ee:71:dc:ee:04: ed:3b:04:5d:72:58:fa:d6:ab:96:50:10:e4:d6:f4:3e:fb:2a: 9f:39:8a:11:94:b3:ef:68:d1:1b:a6:56:8f:dc:61:25:23:82: be:78:24:d6:1f:65:cb:b3:0e:ea:1a:36:44:28:0e:d5:6f:5e: 0e:6a:49:b5:61:0c:9b:04:38:60:1c:01:90:31:fc:d2:e9:4c: 0e:89:77:91:f5:54:cb:07:0f:cd:10:01:12:ca:55:22:a1:d9: 13:55:2c:d5:c4:bf:a3:ed:de:13:ea:3e:6d:d0:11:43:67:10: ae:04:de:64:8d:06:eb:aa:4f:20:6d:61:b2:05:8d:29:aa:ca: 12:44:c4:91:b5:41:59:d3:1f:3e:b0:5c:7e:42:91:c0:c2:02: 8e:aa:7d:0d:f6:3f:ad:dc:bb:c0:25:36:bd:4c:7c:1e:b0:c8: 67:2c:cd:01:ec:fd:a1:05:4e:69:e8:49:a0:86:ef:9a:b8:86: 1b:20:72:b0:47:ab:29:ba:03:f8:32:57:06:dd:9b:15:fd:63: 25:13:b6:0d:18:24:a4:7b:88:86:7b:a6:ff:2e:0c:cd:ef:a6: 53:5b:70:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U5RDYxMTAvBgNVBAUTKDEzNjc0MUJEOUU4NzBGMDZFQ0U1Q0IzNTVCOEM3NTcx Q0M5NkJBNzQwHhcNMjUwODIyMTk1NjI0WhcNMjUwODI5MTk1NjI0WjAYMRYwFAYD VQQDEw02OGE4Y2I2OC01NDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArv4wa2B7ZfvUjA67hSovbdxrgYswHa2fjqfnMrdg5qw54q2VBrTCR8etEstD tMZ0ZsLy4zW30KCnO5BxVh3j7O+k10bcpL1RADftn12h+sNFiHa5G8iXxoPUaoow ELBGRZF+T3nG7xeDOl8eBDANU19cDuM9Phcd3VcgKCB+CeiY7l3cYl4DAHhp4LGx Imn8ExSWWixFMT6yFvGQIjqDAR3jYfW012uDabw84Rl+lzjacnMpLncZDH0Umdfn h3f7xRCxGKIKxcv8ncM8opq2m/gbS36v00sqj9GRILMwSOJnyko9MuG23XIqRvxf hUs3q+CT5sgJ0Qo0YAqTsxZpkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCOwQ6od G+rYdqYViKNjIl61SesuMB8GA1UdIwQYMBaAFBNnQb2ehw8G7OXLNVuMdXHMlrp0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTlENi85RTY2RjUxMjdB NTUxMUVBQkZCRTk0N0FDNEY5QUUwMi9FMmRCdlo2SER3YnM1Y3MxVzR4MWNjeVd1 blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UyZEJ2WjZIRHdiczVjczFXNHgxY2N5V3VuUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTlENi85RTY2RjUxMjdBNTUxMUVBQkZCRTk0N0FDNEY5QUUwMi9FMmRCdlo2SER3 YnM1Y3MxVzR4MWNjeVd1blEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAo3IEyUppaD9wowU9XfJmsJ3ljiB+w9hD/+ayjgWik7nHc7gTtOwRd clj61quWUBDk1vQ++yqfOYoRlLPvaNEbplaP3GElI4K+eCTWH2XLsw7qGjZEKA7V b14Oakm1YQybBDhgHAGQMfzS6UwOiXeR9VTLBw/NEAESylUiodkTVSzVxL+j7d4T 6j5t0BFDZxCuBN5kjQbrqk8gbWGyBY0pqsoSRMSRtUFZ0x8+sFx+QpHAwgKOqn0N 9j+t3LvAJTa9THwesMhnLM0B7P2hBU5p6Emghu+auIYbIHKwR6spugP4MlcG3ZsV /WMlE7YNGCSke4iGe6b/LgzN76ZTW3Bl -----END CERTIFICATE-----Generated at Sat Aug 23 13:53:58 2025 by rpki-client