$ rpki-client -vvf rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft File: -rpT9D2gDiGn6veS1I_bdpV6gLw.mft (raw, json) Hash identifier: rRmK2xANctorunIDBoAkJAiTikHp9QgzaBsTwJoOC1s= Subject key identifier: DD:3A:F9:45:74:FE:15:3E:4C:ED:4E:25:F5:45:40:4A:37:FE:E0:F8 Authority key identifier: FA:BA:53:F4:3D:A0:0E:21:A7:EA:F7:92:D4:8F:DB:76:95:7A:80:BC Certificate issuer: /CN=A91D25E5/serialNumber=FABA53F43DA00E21A7EAF792D48FDB76957A80BC Certificate serial: 0654 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rpT9D2gDiGn6veS1I_bdpV6gLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft Manifest number: 064E Signing time: Fri 22 Aug 2025 22:47:52 +0000 Manifest this update: Fri 22 Aug 2025 22:47:51 +0000 Manifest next update: Fri 29 Aug 2025 22:47:51 +0000 Files and hashes: 1: -rpT9D2gDiGn6veS1I_bdpV6gLw.crl (hash: w0Av8ifiJ2BnbQZ9vXajMW0uUPoS2YaDzPsIRjCB5A8=) 2: EB8DE9B49B6411EBA08FBE84C4F9AE02.roa (hash: u94MQjoE9DI5ldBDPfqmoxt1XvvR3zVSKElHRq9GZVQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.crl rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rpT9D2gDiGn6veS1I_bdpV6gLw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:47:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1620 (0x654) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D25E5, serialNumber=FABA53F43DA00E21A7EAF792D48FDB76957A80BC Validity Not Before: Aug 22 22:47:51 2025 GMT Not After : Aug 29 22:47:51 2025 GMT Subject: CN=68a8f398-899c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f1:1b:41:d9:12:0a:56:57:c6:68:f2:13:e0: 7a:8d:c9:62:0d:b9:82:6d:49:5a:5d:0d:0d:55:56: 6e:c2:24:63:04:df:83:70:c1:ee:af:57:bb:3c:76: e9:28:7e:4f:b0:c9:84:bd:4a:e7:ac:3d:95:b1:92: c7:05:0b:f2:5d:17:95:4d:a2:b1:94:ed:1c:9c:a0: 0b:90:89:d2:6b:ce:98:ef:7f:b3:c6:73:1b:2d:c7: 8d:08:38:29:07:6b:17:bf:b1:ec:04:b2:aa:c7:9b: 06:33:9b:e4:85:87:84:45:be:ca:39:52:c1:d7:55: 6d:ff:0a:7b:eb:66:7c:18:54:c4:af:a4:d1:56:83: a4:16:f9:05:bf:40:92:d1:89:25:f3:e8:bc:37:10: 21:12:ec:7d:28:ab:4a:2e:2f:68:6e:d8:b4:61:39: 9f:38:82:41:85:5a:1a:c1:3f:a3:8b:d7:75:29:44: d4:91:45:47:7f:aa:4e:da:0b:22:d6:9e:b0:65:a3: b9:24:5c:90:b3:8e:36:6c:53:c4:d1:1a:91:65:da: 24:52:87:0c:ec:86:c8:b6:df:89:20:f3:34:8c:be: 0c:b7:fb:8e:56:6f:20:59:cb:d6:11:08:12:02:0c: f6:a8:28:c9:f9:25:32:2a:29:fa:49:ed:5d:49:05: 3b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:3A:F9:45:74:FE:15:3E:4C:ED:4E:25:F5:45:40:4A:37:FE:E0:F8 X509v3 Authority Key Identifier: keyid:FA:BA:53:F4:3D:A0:0E:21:A7:EA:F7:92:D4:8F:DB:76:95:7A:80:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rpT9D2gDiGn6veS1I_bdpV6gLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:9c:fc:17:f8:9c:c3:17:d6:c1:c7:ba:00:3e:d3:1d:b2:ad: 29:0b:5e:f7:56:4e:ca:13:17:a4:b2:65:0c:2a:c2:8f:90:78: 44:ab:9d:61:d1:ae:a3:67:85:8b:2b:07:93:a1:5b:84:2f:a4: 34:32:8a:18:a3:2a:c3:e9:a1:63:52:3f:05:03:80:21:72:30: ad:53:43:2d:f7:0c:c6:d4:91:ca:1f:3b:c4:6d:d6:e7:54:81: d2:09:8a:fa:20:9c:5b:a8:58:7a:c9:6b:49:3c:35:93:80:c5: f4:75:9f:a5:dc:da:cf:78:39:48:37:1b:bd:82:a2:8f:1d:c9: 6c:e6:a3:86:7b:49:25:9d:46:4a:d4:fc:5f:48:b7:da:84:61: c8:b0:b2:ef:b6:50:75:09:0f:a3:fa:74:4d:ea:55:82:d9:e6: 65:c8:88:12:6a:9b:a4:be:78:e2:cd:d0:9f:6a:6c:af:44:99: df:ae:5d:df:3c:aa:65:5c:f6:be:b5:3c:47:69:a2:f9:2c:34: 86:3c:11:e1:9c:1b:c5:f4:5a:40:d2:f6:f7:4b:e6:28:7d:0e: 9b:45:74:db:c5:35:88:c1:14:8f:e1:e0:d3:ba:63:3a:ea:07: 2b:db:5b:b2:a5:bd:45:54:f4:da:33:3b:01:b1:5c:1d:41:91: 42:42:56:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI1RTUxMTAvBgNVBAUTKEZBQkE1M0Y0M0RBMDBFMjFBN0VBRjc5MkQ0OEZEQjc2 OTU3QTgwQkMwHhcNMjUwODIyMjI0NzUxWhcNMjUwODI5MjI0NzUxWjAYMRYwFAYD VQQDEw02OGE4ZjM5OC04OTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwfEbQdkSClZXxmjyE+B6jcliDbmCbUlaXQ0NVVZuwiRjBN+DcMHur1e7PHbp KH5PsMmEvUrnrD2VsZLHBQvyXReVTaKxlO0cnKALkInSa86Y73+zxnMbLceNCDgp B2sXv7HsBLKqx5sGM5vkhYeERb7KOVLB11Vt/wp762Z8GFTEr6TRVoOkFvkFv0CS 0Ykl8+i8NxAhEux9KKtKLi9obti0YTmfOIJBhVoawT+ji9d1KUTUkUVHf6pO2gsi 1p6wZaO5JFyQs442bFPE0RqRZdokUocM7IbItt+JIPM0jL4Mt/uOVm8gWcvWEQgS Agz2qCjJ+SUyKin6Se1dSQU7CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN06+UV0 /hU+TO1OJfVFQEo3/uD4MB8GA1UdIwQYMBaAFPq6U/Q9oA4hp+r3ktSP23aVeoC8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjVFNS9FQ0JGMDBFODlC NEIxMUVCOTczMEExNTRDNEY5QUUwMi8tcnBUOUQyZ0RpR242dmVTMUlfYmRwVjZn THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1ycFQ5RDJnRGlHbjZ2ZVMxSV9iZHBWNmdMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjVFNS9FQ0JGMDBFODlCNEIxMUVCOTczMEExNTRDNEY5QUUwMi8tcnBUOUQyZ0Rp R242dmVTMUlfYmRwVjZnTHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/nPwX+JzDF9bBx7oAPtMdsq0pC173Vk7KExeksmUMKsKPkHhEq51h 0a6jZ4WLKweToVuEL6Q0MooYoyrD6aFjUj8FA4AhcjCtU0Mt9wzG1JHKHzvEbdbn VIHSCYr6IJxbqFh6yWtJPDWTgMX0dZ+l3NrPeDlINxu9gqKPHcls5qOGe0klnUZK 1PxfSLfahGHIsLLvtlB1CQ+j+nRN6lWC2eZlyIgSapukvnjizdCfamyvRJnfrl3f PKplXPa+tTxHaaL5LDSGPBHhnBvF9FpA0vb3S+YofQ6bRXTbxTWIwRSP4eDTumM6 6gcr21uypb1FVPTaMzsBsVwdQZFCQlay -----END CERTIFICATE-----Generated at Sun Aug 24 07:02:21 2025 by rpki-client