$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft File: esDADw_KR57kZeT39UXoyUmT1hw.mft (raw, json) Hash identifier: ySVOqcic3Y/UdDB5pP/07E4EDGh+/nfj4D0xcdiJGRY= Subject key identifier: F7:FB:ED:F4:E1:B6:37:08:DA:B4:71:C6:05:8E:6F:04:F3:20:1B:F4 Authority key identifier: 7A:C0:C0:0F:0F:CA:47:9E:E4:65:E4:F7:F5:45:E8:C9:49:93:D6:1C Certificate issuer: /CN=A91D1691/serialNumber=7AC0C00F0FCA479EE465E4F7F545E8C94993D61C Certificate serial: 2473 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esDADw_KR57kZeT39UXoyUmT1hw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft Manifest number: 2448 Signing time: Fri 22 Aug 2025 15:51:20 +0000 Manifest this update: Fri 22 Aug 2025 15:51:20 +0000 Manifest next update: Fri 29 Aug 2025 15:51:20 +0000 Files and hashes: 1: esDADw_KR57kZeT39UXoyUmT1hw.crl (hash: 9Q4rYP8YA63znL/EeOTRahkOdDjCGXaczJ1kFHh6468=) 2: E8976FF0928211EF8D2A551EC4F9AE02.roa (hash: ZQDzR5Xdny7JF3r/Zb16j0lL2mL345yAUojH7vcVjic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.crl rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esDADw_KR57kZeT39UXoyUmT1hw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:51:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9331 (0x2473) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1691, serialNumber=7AC0C00F0FCA479EE465E4F7F545E8C94993D61C Validity Not Before: Aug 22 15:51:20 2025 GMT Not After : Aug 29 15:51:20 2025 GMT Subject: CN=68a891f8-8d2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:54:c6:53:e7:cb:ad:f3:81:42:5b:c0:82:1a: 9b:c8:f7:b9:c5:b3:8f:8c:50:6d:19:58:1c:31:5c: 5a:ea:a4:71:f3:72:82:b2:d8:db:d8:e1:ec:cf:9e: 07:be:11:6a:2d:3c:e5:5c:e4:e1:3d:cc:87:e0:6a: 6e:3d:18:c8:be:c4:ae:9c:de:9a:9b:70:2d:4b:24: 7b:48:06:19:33:25:44:a0:d3:76:63:1d:33:00:ed: 93:e0:f0:9d:be:02:d8:b4:f2:6d:60:77:6c:95:71: c2:9f:c0:ff:37:8f:4d:3d:d7:28:01:04:72:34:b8: 98:e5:68:58:43:af:e3:d2:0e:ee:2c:2e:bd:4f:4d: ac:03:cf:68:77:9c:f6:cb:56:b6:76:ae:f7:33:40: e0:48:65:11:d8:89:6d:a0:81:4c:e0:0d:84:25:09: 0c:ea:81:69:4e:d6:d6:43:dc:0a:19:04:7e:51:79: 64:88:7a:0b:00:16:96:f8:12:95:f8:cf:a7:32:a8: 4e:3c:40:a4:62:76:41:50:7a:c9:46:b2:46:92:18: 6f:ed:83:89:f6:3c:07:4e:c8:ca:bf:99:cb:b5:7f: e8:29:54:5a:80:9d:a8:90:23:67:0a:68:fa:4b:28: 66:ac:4e:8b:51:60:27:35:f0:9b:2a:4c:7a:0a:17: dc:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:FB:ED:F4:E1:B6:37:08:DA:B4:71:C6:05:8E:6F:04:F3:20:1B:F4 X509v3 Authority Key Identifier: keyid:7A:C0:C0:0F:0F:CA:47:9E:E4:65:E4:F7:F5:45:E8:C9:49:93:D6:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esDADw_KR57kZeT39UXoyUmT1hw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:16:86:98:ed:d8:36:4a:b9:f3:b3:8f:07:16:01:7e:35:f0: b9:50:3d:d0:19:38:39:f5:a0:28:48:c1:a2:20:51:e3:6c:64: 9a:60:a9:1e:23:c7:c5:42:56:29:de:3f:fe:0f:25:6a:4f:af: 78:5a:5d:91:8e:57:26:48:e6:ce:e8:4e:89:de:ee:3c:f2:98: 44:3b:dc:11:7a:2c:87:e9:05:d1:6d:40:52:ed:15:76:15:c6: 58:ce:8d:c1:44:58:92:71:33:ee:05:74:46:9f:60:6f:73:44: 82:11:7d:3d:d2:19:10:2e:5f:0e:f5:b9:2e:04:28:3d:29:cf: 4e:20:08:85:92:89:40:cd:34:59:dc:6d:d1:34:ae:53:e3:1a: da:2e:96:27:1b:9c:40:4c:df:de:98:bf:7b:ba:c0:fb:f1:7e: 3d:be:b0:96:70:3f:ba:5a:2c:74:2b:63:6f:8a:bd:c2:cd:50: f2:ae:5a:5f:9e:57:62:03:a5:20:fb:52:c7:cf:c5:c5:6e:7d: f5:a6:d5:17:fa:56:07:a7:d2:62:e1:44:c5:48:ee:25:a1:df: dd:75:53:a5:8c:b5:62:73:67:eb:86:9f:78:12:e5:c5:0b:d5: dd:9d:48:00:68:97:ef:58:d8:1c:72:35:63:db:b6:ba:ed:18: 94:cf:b0:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE2OTExMTAvBgNVBAUTKDdBQzBDMDBGMEZDQTQ3OUVFNDY1RTRGN0Y1NDVFOEM5 NDk5M0Q2MUMwHhcNMjUwODIyMTU1MTIwWhcNMjUwODI5MTU1MTIwWjAYMRYwFAYD VQQDEw02OGE4OTFmOC04ZDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA51TGU+fLrfOBQlvAghqbyPe5xbOPjFBtGVgcMVxa6qRx83KCstjb2OHsz54H vhFqLTzlXOThPcyH4GpuPRjIvsSunN6am3AtSyR7SAYZMyVEoNN2Yx0zAO2T4PCd vgLYtPJtYHdslXHCn8D/N49NPdcoAQRyNLiY5WhYQ6/j0g7uLC69T02sA89od5z2 y1a2dq73M0DgSGUR2IltoIFM4A2EJQkM6oFpTtbWQ9wKGQR+UXlkiHoLABaW+BKV +M+nMqhOPECkYnZBUHrJRrJGkhhv7YOJ9jwHTsjKv5nLtX/oKVRagJ2okCNnCmj6 SyhmrE6LUWAnNfCbKkx6ChfcKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPf77fTh tjcI2rRxxgWObwTzIBv0MB8GA1UdIwQYMBaAFHrAwA8Pykee5GXk9/VF6MlJk9Yc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTY5MS81QUZDMjY5MjY1 MkIxMUU1OTdBODY4ODFDNEY5QUUwMi9lc0RBRHdfS1I1N2taZVQzOVVYb3lVbVQx aHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VzREFEd19LUjU3a1plVDM5VVhveVVtVDFody5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTY5MS81QUZDMjY5MjY1MkIxMUU1OTdBODY4ODFDNEY5QUUwMi9lc0RBRHdfS1I1 N2taZVQzOVVYb3lVbVQxaHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKFoaY7dg2Srnzs48HFgF+NfC5UD3QGTg59aAoSMGiIFHjbGSaYKke I8fFQlYp3j/+DyVqT694Wl2RjlcmSObO6E6J3u488phEO9wReiyH6QXRbUBS7RV2 FcZYzo3BRFiScTPuBXRGn2Bvc0SCEX090hkQLl8O9bkuBCg9Kc9OIAiFkolAzTRZ 3G3RNK5T4xraLpYnG5xATN/emL97usD78X49vrCWcD+6Wix0K2Nvir3CzVDyrlpf nldiA6Ug+1LHz8XFbn31ptUX+lYHp9Ji4UTFSO4lod/ddVOljLVic2frhp94EuXF C9XdnUgAaJfvWNgccjVj27a67RiUz7Dj -----END CERTIFICATE-----Generated at Sun Aug 24 00:44:22 2025 by rpki-client