$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft File: ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft (raw, json) Hash identifier: yfr0FEH7i0p6tLnHhdCyCgA98km8q3ColBP/tti3eNo= Subject key identifier: AB:75:02:59:98:70:FF:83:A6:63:FE:2E:FE:38:A4:47:B6:5D:F5:34 Authority key identifier: 07:24:4A:99:4C:DC:4B:93:80:74:71:1C:42:48:D4:9F:9D:50:D8:27 Certificate issuer: /CN=A91CEE85/serialNumber=07244A994CDC4B938074711C4248D49F9D50D827 Certificate serial: D1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft Manifest number: CF Signing time: Sat 23 Aug 2025 05:50:39 +0000 Manifest this update: Sat 23 Aug 2025 05:50:39 +0000 Manifest next update: Sat 30 Aug 2025 05:50:39 +0000 Files and hashes: 1: ByRKmUzcS5OAdHEcQkjUn51Q2Cc.crl (hash: n30fYCU2usjgiH/LbmZ1TAfjM+bbqb3SQ6DqLxbu5jo=) 2: C2838C8245B011EFAE60CC76C4F9AE02.roa (hash: dwidYpMLAJTM9jddkunL1qdnHKOnW/Pf1EZaeXyq6Fk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.crl rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:50:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEE85, serialNumber=07244A994CDC4B938074711C4248D49F9D50D827 Validity Not Before: Aug 23 05:50:39 2025 GMT Not After : Aug 30 05:50:39 2025 GMT Subject: CN=68a956af-bbff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f0:e8:27:b7:ba:d1:7d:fa:3a:4b:ac:7c:09: 27:82:f8:ff:ba:40:3d:94:29:b6:b2:4c:9b:c3:0d: 00:03:c1:df:ac:00:49:6e:46:1c:49:5a:e8:00:f9: 04:6c:63:4c:a1:6c:12:b3:44:cb:88:88:9f:88:d0: 7e:d3:45:40:dd:a5:76:8c:ed:a4:56:d9:b6:7e:cf: bc:4e:ae:72:75:a8:71:15:75:b1:99:27:63:e2:cb: 85:93:4f:9c:3d:f7:21:20:6d:9d:c8:46:3c:02:7a: 62:07:e8:40:10:34:37:60:07:ef:97:f7:bb:7c:39: c9:e6:fb:01:cc:d6:cc:f6:4a:f5:f2:36:bb:c6:e6: 21:47:0a:d4:db:f9:17:19:85:02:e9:86:02:ce:d8: ab:d9:57:83:eb:d6:eb:55:a6:96:a9:a3:2d:98:db: a0:1b:28:bc:6f:5b:23:9e:7b:9c:f9:a8:fa:9a:59: 7e:4e:80:5f:bc:ee:8a:b5:1e:9a:f5:cc:3d:0d:ae: 0d:3a:9f:53:77:08:9f:37:26:c1:e9:f4:21:11:47: 4b:38:38:95:6a:71:59:93:f5:95:bd:7e:e3:85:16: 31:8d:f3:4a:44:2c:07:ed:6a:db:cf:88:d3:87:90: 68:bb:11:5e:2a:a7:4e:76:63:db:24:eb:c8:8c:c3: 40:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:75:02:59:98:70:FF:83:A6:63:FE:2E:FE:38:A4:47:B6:5D:F5:34 X509v3 Authority Key Identifier: keyid:07:24:4A:99:4C:DC:4B:93:80:74:71:1C:42:48:D4:9F:9D:50:D8:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:18:3e:db:7e:bc:37:4c:a5:7b:ac:b2:f6:49:42:31:02:d2: 3a:8b:e1:36:4c:6c:55:d3:e1:a2:dc:3f:1d:64:8f:42:cb:88: 87:82:fb:9a:91:d4:75:b8:4d:52:28:42:bd:d9:85:11:42:11: 7b:16:a6:9f:85:24:3c:d0:83:db:11:00:fc:6d:8d:cd:ba:39: 25:22:67:c3:76:0b:f4:38:32:b2:5b:4f:cd:82:1a:83:ab:05: 48:48:8f:1a:1a:85:c3:63:c7:99:0a:c0:40:3b:55:84:df:a1: 33:fd:13:5e:43:a3:92:40:75:87:d6:36:65:73:6a:ec:cf:a8: 40:84:03:6a:eb:e8:e9:b1:e8:d5:42:5f:b9:89:a5:6a:b8:0c: b0:9f:3b:3c:f2:04:db:63:4a:61:7d:f6:1d:44:39:8c:f3:5b: b4:76:64:b3:3f:41:71:95:31:10:b2:ad:d9:e2:69:d2:7e:db: 55:34:7f:3d:fe:c4:9a:fd:19:91:12:9e:90:93:48:00:e0:88: 37:3d:55:c9:7f:d9:6b:80:b7:9a:66:37:8a:5c:aa:22:93:a4: 7e:c6:f0:8a:2a:e4:81:44:b4:8d:55:5e:4a:f7:37:ff:52:c4: 04:31:ec:3a:c1:93:cb:aa:98:cf:16:df:90:a9:79:c1:94:b2: 7f:ca:e6:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VFODUxMTAvBgNVBAUTKDA3MjQ0QTk5NENEQzRCOTM4MDc0NzExQzQyNDhENDlG OUQ1MEQ4MjcwHhcNMjUwODIzMDU1MDM5WhcNMjUwODMwMDU1MDM5WjAYMRYwFAYD VQQDEw02OGE5NTZhZi1iYmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0vDoJ7e60X36OkusfAkngvj/ukA9lCm2skybww0AA8HfrABJbkYcSVroAPkE bGNMoWwSs0TLiIifiNB+00VA3aV2jO2kVtm2fs+8Tq5ydahxFXWxmSdj4suFk0+c PfchIG2dyEY8AnpiB+hAEDQ3YAfvl/e7fDnJ5vsBzNbM9kr18ja7xuYhRwrU2/kX GYUC6YYCztir2VeD69brVaaWqaMtmNugGyi8b1sjnnuc+aj6mll+ToBfvO6KtR6a 9cw9Da4NOp9TdwifNybB6fQhEUdLODiVanFZk/WVvX7jhRYxjfNKRCwH7Wrbz4jT h5BouxFeKqdOdmPbJOvIjMNAsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKt1AlmY cP+DpmP+Lv44pEe2XfU0MB8GA1UdIwQYMBaAFAckSplM3EuTgHRxHEJI1J+dUNgn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUU4NS9GQzY2RjVBRTQ1 QUQxMUVGQjQzNUVCNkZDNEY5QUUwMi9CeVJLbVV6Y1M1T0FkSEVjUWtqVW41MVEy Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0J5UkttVXpjUzVPQWRIRWNRa2pVbjUxUTJDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUU4NS9GQzY2RjVBRTQ1QUQxMUVGQjQzNUVCNkZDNEY5QUUwMi9CeVJLbVV6Y1M1 T0FkSEVjUWtqVW41MVEyQ2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAGD7bfrw3TKV7rLL2SUIxAtI6i+E2TGxV0+Gi3D8dZI9Cy4iHgvua kdR1uE1SKEK92YURQhF7FqafhSQ80IPbEQD8bY3NujklImfDdgv0ODKyW0/NghqD qwVISI8aGoXDY8eZCsBAO1WE36Ez/RNeQ6OSQHWH1jZlc2rsz6hAhANq6+jpsejV Ql+5iaVquAywnzs88gTbY0phffYdRDmM81u0dmSzP0FxlTEQsq3Z4mnSfttVNH89 /sSa/RmREp6Qk0gA4Ig3PVXJf9lrgLeaZjeKXKoik6R+xvCKKuSBRLSNVV5K9zf/ UsQEMew6wZPLqpjPFt+QqXnBlLJ/yuYU -----END CERTIFICATE-----Generated at Sat Aug 23 15:03:38 2025 by rpki-client