$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft File: tZ39tQipur3Pjaqv4_PeaVn7E6o.mft (raw, json) Hash identifier: wSU3YG88hrnciyxvGHf/1bh4RBffcnOsjaF3HJJ9IG4= Subject key identifier: 88:A1:8C:89:4C:DF:74:A8:2D:6C:B0:38:36:AD:AE:68:1B:6B:03:7B Authority key identifier: B5:9D:FD:B5:08:A9:BA:BD:CF:8D:AA:AF:E3:F3:DE:69:59:FB:13:AA Certificate issuer: /CN=A91D1A9C/serialNumber=B59DFDB508A9BABDCF8DAAAFE3F3DE6959FB13AA Certificate serial: D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZ39tQipur3Pjaqv4_PeaVn7E6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft Manifest number: D1 Signing time: Sat 23 Aug 2025 05:48:19 +0000 Manifest this update: Sat 23 Aug 2025 05:48:19 +0000 Manifest next update: Sat 30 Aug 2025 05:48:19 +0000 Files and hashes: 1: tZ39tQipur3Pjaqv4_PeaVn7E6o.crl (hash: XINyH8ivYlMc8N6yPTKcKgG/qmikW8PXn1k/vfVKIvw=) 2: 31A71E34407111EFAC14A640C4F9AE02.roa (hash: o7hk30ShUIz7UkIOVQj3yZK9QaxLJPC0RUpttTojnJI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.crl rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZ39tQipur3Pjaqv4_PeaVn7E6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:48:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1A9C, serialNumber=B59DFDB508A9BABDCF8DAAAFE3F3DE6959FB13AA Validity Not Before: Aug 23 05:48:19 2025 GMT Not After : Aug 30 05:48:19 2025 GMT Subject: CN=68a95623-7fce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9f:4b:97:cf:1e:2e:7f:cb:e3:c9:1b:08:12: 98:1b:ff:e8:c0:7a:82:2c:64:38:2c:de:fc:42:9f: 93:f3:b2:05:53:06:b8:09:f3:64:1a:2b:80:1c:70: b5:37:c3:bc:1d:33:a9:e3:df:12:2e:a7:05:88:4e: 35:f2:08:b8:7a:13:ed:8e:f1:36:86:0b:dd:bd:69: a3:8f:ee:0a:e2:d9:70:03:22:00:d5:e1:5e:b3:ae: 3c:53:b7:b0:ee:ea:40:a0:e1:9c:8b:d9:24:13:27: fb:4b:65:23:14:19:68:8b:65:5c:60:c0:45:a8:34: f5:1f:d1:e7:4e:d3:b2:e0:90:fb:2a:6b:c7:1c:5d: 99:2b:3e:1c:4c:f1:1c:d3:a6:f7:a4:ac:aa:3e:65: 68:bd:a3:93:42:c2:24:9f:42:60:76:5f:db:5d:9b: 52:50:51:f9:ad:0a:89:9a:97:c5:37:ae:c5:09:3e: 7d:f8:1e:99:93:f1:61:1e:8f:95:2d:bb:53:ab:4b: 0b:27:d3:5c:9b:77:46:b5:ec:50:0c:8a:45:bf:5f: 52:2f:09:9f:ba:eb:51:f0:fc:42:ba:f5:0a:9e:5b: de:fa:a7:f6:e4:34:eb:91:2f:15:43:eb:38:ad:df: e9:98:ee:7d:61:b9:ca:6e:7f:fe:1b:2d:86:ba:59: 4d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:A1:8C:89:4C:DF:74:A8:2D:6C:B0:38:36:AD:AE:68:1B:6B:03:7B X509v3 Authority Key Identifier: keyid:B5:9D:FD:B5:08:A9:BA:BD:CF:8D:AA:AF:E3:F3:DE:69:59:FB:13:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZ39tQipur3Pjaqv4_PeaVn7E6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:7c:3a:a7:db:39:73:8b:d4:e7:f8:45:af:9d:94:b5:d5:6d: 59:27:22:22:8a:61:ec:e3:c5:c3:6a:7d:1c:4f:0d:8d:60:7b: d0:91:47:c4:1d:ef:b4:21:fd:91:2f:a4:f1:4b:e6:05:16:30: 56:fb:52:0e:dc:d0:99:eb:60:f7:48:9b:d5:4c:5b:93:00:f1: e6:c0:eb:b2:73:97:3b:71:7b:36:5a:89:db:9a:60:22:a5:6d: de:1b:fa:ce:ab:00:3b:f6:02:b1:78:1d:6f:19:9c:fd:a1:62: 88:5c:2d:0b:7f:f2:2a:7e:bd:8f:db:41:a1:ed:8c:95:77:d5: c3:cc:e6:c8:66:05:a2:05:de:4c:0f:6d:14:bb:b9:45:f1:bf: 91:d8:52:3f:67:09:08:f2:ad:6f:f5:7d:6e:a7:b7:fc:82:f7: 26:8b:86:06:0f:6d:c9:53:51:1d:b3:ef:1f:52:47:2c:40:80: 1c:d5:2e:9a:b9:c7:c3:9e:27:74:46:da:0c:4f:03:7e:de:01: a7:ff:7b:f0:0f:de:82:c8:63:20:b5:a4:7c:4e:49:39:78:8b: f3:ca:ce:9b:22:94:4e:5b:89:0e:22:b7:1d:29:e6:87:1d:ed: 58:39:68:af:7c:0f:8d:04:cb:7c:54:c5:ae:8b:eb:17:4e:61: fb:cc:02:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFBOUMxMTAvBgNVBAUTKEI1OURGREI1MDhBOUJBQkRDRjhEQUFBRkUzRjNERTY5 NTlGQjEzQUEwHhcNMjUwODIzMDU0ODE5WhcNMjUwODMwMDU0ODE5WjAYMRYwFAYD VQQDEw02OGE5NTYyMy03ZmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1p9Ll88eLn/L48kbCBKYG//owHqCLGQ4LN78Qp+T87IFUwa4CfNkGiuAHHC1 N8O8HTOp498SLqcFiE418gi4ehPtjvE2hgvdvWmjj+4K4tlwAyIA1eFes648U7ew 7upAoOGci9kkEyf7S2UjFBloi2VcYMBFqDT1H9HnTtOy4JD7KmvHHF2ZKz4cTPEc 06b3pKyqPmVovaOTQsIkn0Jgdl/bXZtSUFH5rQqJmpfFN67FCT59+B6Zk/FhHo+V LbtTq0sLJ9Ncm3dGtexQDIpFv19SLwmfuutR8PxCuvUKnlve+qf25DTrkS8VQ+s4 rd/pmO59YbnKbn/+Gy2GullN2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIihjIlM 33SoLWywODatrmgbawN7MB8GA1UdIwQYMBaAFLWd/bUIqbq9z42qr+Pz3mlZ+xOq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUE5Qy84RThCM0U3RTQw NzAxMUVGQjRBMTgwMEFDNEY5QUUwMi90WjM5dFFpcHVyM1BqYXF2NF9QZWFWbjdF Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RaMzl0UWlwdXIzUGphcXY0X1BlYVZuN0U2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUE5Qy84RThCM0U3RTQwNzAxMUVGQjRBMTgwMEFDNEY5QUUwMi90WjM5dFFpcHVy M1BqYXF2NF9QZWFWbjdFNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtfDqn2zlzi9Tn+EWvnZS11W1ZJyIiimHs48XDan0cTw2NYHvQkUfE He+0If2RL6TxS+YFFjBW+1IO3NCZ62D3SJvVTFuTAPHmwOuyc5c7cXs2WonbmmAi pW3eG/rOqwA79gKxeB1vGZz9oWKIXC0Lf/Iqfr2P20Gh7YyVd9XDzObIZgWiBd5M D20Uu7lF8b+R2FI/ZwkI8q1v9X1up7f8gvcmi4YGD23JU1Eds+8fUkcsQIAc1S6a ucfDnid0RtoMTwN+3gGn/3vwD96CyGMgtaR8Tkk5eIvzys6bIpROW4kOIrcdKeaH He1YOWivfA+NBMt8VMWui+sXTmH7zAJ5 -----END CERTIFICATE-----Generated at Sun Aug 24 01:00:54 2025 by rpki-client