$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft File: _0lSk8tfFeXRS6zC2xBSsuLIJcg.mft (raw, json) Hash identifier: Av3ig+Gu2+VMjKvL90CHwk5//HBBsq+rQ7BjV2cVaPs= Subject key identifier: AA:72:5B:67:8F:0D:4E:62:C1:EC:36:13:04:25:5E:17:A6:6A:C0:CC Authority key identifier: FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8 Certificate issuer: /CN=A91CEAA2/serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8 Certificate serial: 34EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft Manifest number: 34CC Signing time: Fri 22 Aug 2025 14:56:22 +0000 Manifest this update: Fri 22 Aug 2025 14:56:21 +0000 Manifest next update: Fri 29 Aug 2025 14:56:21 +0000 Files and hashes: 1: _0lSk8tfFeXRS6zC2xBSsuLIJcg.crl (hash: d7GGOuJIlkHf9fJgY5TgVj1/o6CQaPuOSXx4dnK/G3c=) 2: 767E7B3CA60211EFBFCDB65FC4F9AE02.roa (hash: mYoYyr1o64AZsjx2x5gA3CLCgmfiA6pfIdBA+yYc62o=) 3: B2306182F3F911EAB9D11D26C4F9AE02.roa (hash: BiN0k39VUnPLhlKViMIRm8mbjvoQycrvLT233B9KH/Y=) 4: 0DEF13D4FC1711EC919B6757C4F9AE02.roa (hash: xQvW4YZqb4bpCHiKIuihyp10lyfUE3gYXiSNZp52O44=) 5: 75906378FC1F11ECAD09AF21C4F9AE02.roa (hash: jD/7/ehRzXn+r7A8PWs0CNNR/EbOe0oKdg7xk/UAFqU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:56:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13546 (0x34ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEAA2, serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8 Validity Not Before: Aug 22 14:56:21 2025 GMT Not After : Aug 29 14:56:21 2025 GMT Subject: CN=68a88515-24df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:76:ea:13:3c:94:02:19:21:36:52:e8:f8:0e: 6a:59:82:aa:a5:b8:56:c6:19:f3:e0:be:cf:5f:ea: 47:d1:cd:a2:85:6b:61:69:31:7e:fe:fc:9a:dd:4f: 4f:2f:31:26:77:64:06:df:fa:42:4e:e1:aa:28:4a: 4c:e4:77:0a:ce:30:5d:42:2e:f2:8a:f6:88:28:79: a1:f4:7c:c2:16:d6:f7:13:f3:fd:98:53:be:c3:13: fd:58:6b:54:36:1b:3f:bb:71:d5:d7:b5:2b:08:c7: ee:03:17:2e:85:85:c4:45:e4:45:03:9c:99:5e:11: f3:a8:5d:e5:6a:41:c5:48:63:2b:87:80:1b:06:7e: a8:25:8a:cb:cc:93:0f:e0:0e:77:76:00:d4:0e:b9: 10:21:25:2d:7b:5b:e0:35:af:60:33:50:05:df:c6: 19:ac:f7:e8:5e:27:fb:1b:7f:69:41:60:7f:60:f3: 68:42:13:53:0b:96:aa:45:a6:86:64:68:fc:30:4b: 4d:17:45:e8:52:ef:d7:61:3c:d8:63:c4:14:75:50: f9:10:6c:bf:1c:6c:9b:cb:f4:ee:28:9a:cc:c9:49: 7c:71:61:bd:cf:a6:bc:31:87:d9:63:4d:c8:d7:ed: 4c:64:4e:79:5b:5c:c7:bb:74:4b:9a:cd:47:ef:c2: 49:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:72:5B:67:8F:0D:4E:62:C1:EC:36:13:04:25:5E:17:A6:6A:C0:CC X509v3 Authority Key Identifier: keyid:FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:cd:46:0b:54:71:9a:60:15:93:d7:bb:32:56:c0:b1:96:af: fa:50:04:3e:ec:1f:03:cf:67:3b:1f:20:a2:49:11:97:59:b8: 83:dc:bc:af:0c:70:d3:fd:d5:c7:e4:f6:04:6e:cd:b7:b7:b5: c0:2d:fb:1c:d7:99:21:40:db:09:c1:42:5a:b0:1b:e9:40:08: 1a:75:9d:84:1c:34:75:23:c8:15:38:a4:34:0b:f3:5a:99:1b: 5b:57:19:c5:71:43:e9:31:5f:3f:e3:02:2c:e5:a8:bb:4f:16: 57:12:e7:d0:d0:5f:38:b5:13:b3:ba:0e:bb:31:9e:7d:a4:65: 11:84:5c:59:66:f5:50:8d:1f:0a:1b:0f:9b:13:25:f6:28:7f: 6b:01:03:96:51:4a:15:8a:79:7f:04:d8:6e:25:64:33:17:54: be:93:a4:60:5e:76:1f:3f:64:cf:af:5c:ef:d9:d2:9b:6f:f7: 08:c2:53:91:c4:63:51:87:fd:18:ad:9b:f9:60:65:d0:e1:3e: 88:f8:0a:93:1c:c8:a1:4c:e2:b8:f1:09:a6:ea:f8:9d:11:a3: f1:34:ec:c3:09:33:a7:f2:fa:ac:bd:db:5d:d1:38:81:31:93: c6:23:c2:ec:b5:c4:f5:b0:cb:1b:1d:7f:c5:90:61:9d:ee:0e: 6c:2d:a0:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VBQTIxMTAvBgNVBAUTKEZGNDk1MjkzQ0I1RjE1RTVEMTRCQUNDMkRCMTA1MkIy RTJDODI1QzgwHhcNMjUwODIyMTQ1NjIxWhcNMjUwODI5MTQ1NjIxWjAYMRYwFAYD VQQDEw02OGE4ODUxNS0yNGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7XbqEzyUAhkhNlLo+A5qWYKqpbhWxhnz4L7PX+pH0c2ihWthaTF+/vya3U9P LzEmd2QG3/pCTuGqKEpM5HcKzjBdQi7yivaIKHmh9HzCFtb3E/P9mFO+wxP9WGtU Nhs/u3HV17UrCMfuAxcuhYXEReRFA5yZXhHzqF3lakHFSGMrh4AbBn6oJYrLzJMP 4A53dgDUDrkQISUte1vgNa9gM1AF38YZrPfoXif7G39pQWB/YPNoQhNTC5aqRaaG ZGj8MEtNF0XoUu/XYTzYY8QUdVD5EGy/HGyby/TuKJrMyUl8cWG9z6a8MYfZY03I 1+1MZE55W1zHu3RLms1H78JJIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKpyW2eP DU5iwew2EwQlXhemasDMMB8GA1UdIwQYMBaAFP9JUpPLXxXl0UuswtsQUrLiyCXI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUFBMi9EMkFCMjkyQzFE OTkxMUUyQkE1MjlBODYwOEIwMkNEMi9fMGxTazh0ZkZlWFJTNnpDMnhCU3N1TElK Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18wbFNrOHRmRmVYUlM2ekMyeEJTc3VMSUpjZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUFBMi9EMkFCMjkyQzFEOTkxMUUyQkE1MjlBODYwOEIwMkNEMi9fMGxTazh0ZkZl WFJTNnpDMnhCU3N1TElKY2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/zUYLVHGaYBWT17syVsCxlq/6UAQ+7B8Dz2c7HyCiSRGXWbiD3Lyv DHDT/dXH5PYEbs23t7XALfsc15khQNsJwUJasBvpQAgadZ2EHDR1I8gVOKQ0C/Na mRtbVxnFcUPpMV8/4wIs5ai7TxZXEufQ0F84tROzug67MZ59pGURhFxZZvVQjR8K Gw+bEyX2KH9rAQOWUUoVinl/BNhuJWQzF1S+k6RgXnYfP2TPr1zv2dKbb/cIwlOR xGNRh/0YrZv5YGXQ4T6I+AqTHMihTOK48Qmm6vidEaPxNOzDCTOn8vqsvdtd0TiB MZPGI8LstcT1sMsbHX/FkGGd7g5sLaDN -----END CERTIFICATE-----Generated at Sat Aug 23 14:12:02 2025 by rpki-client