$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft File: Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft (raw, json) Hash identifier: xKwE6+fHROP5Uk7dYgnOXmtyBnqI6HtBWH0141NHjfM= Subject key identifier: 52:B0:06:00:A8:90:70:F1:F2:97:EE:1F:10:DB:30:96:A5:19:84:1B Authority key identifier: 02:9F:82:12:43:0A:8D:D7:E7:95:4F:EC:31:3F:15:DA:47:CB:44:DD Certificate issuer: /CN=A91D2FC0/serialNumber=029F8212430A8DD7E7954FEC313F15DA47CB44DD Certificate serial: 0B26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft Manifest number: 0B1D Signing time: Fri 22 Aug 2025 19:26:30 +0000 Manifest this update: Fri 22 Aug 2025 19:26:30 +0000 Manifest next update: Fri 29 Aug 2025 19:26:30 +0000 Files and hashes: 1: Ap-CEkMKjdfnlU_sMT8V2kfLRN0.crl (hash: dY/Kbazg5alHW9x0EbwBJGRhGi2pe2EM2gWXfD8JgAs=) 2: 81D0374C475111EA82F8B821C4F9AE02.roa (hash: H58uLnLgtQRXxjwDdpgj46LQrUNsRnsgJgSttmaA0KA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.crl rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2854 (0xb26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2FC0, serialNumber=029F8212430A8DD7E7954FEC313F15DA47CB44DD Validity Not Before: Aug 22 19:26:30 2025 GMT Not After : Aug 29 19:26:30 2025 GMT Subject: CN=68a8c466-8ee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b5:50:55:a1:70:5d:fa:ce:f1:f3:87:77:bf: 3a:be:be:11:18:08:ec:88:4e:57:27:d4:c9:f3:c9: 85:df:50:52:98:c6:20:06:74:c6:7a:9e:88:69:d7: ec:4c:27:2c:94:86:80:8f:30:8d:c2:3e:1c:48:15: 2f:59:f8:d8:47:2f:1d:7e:9d:14:f4:33:8a:2a:7d: 0f:fa:d4:88:3f:f6:15:ce:53:99:bc:f1:45:55:5c: 5d:32:16:52:ed:34:c4:f4:93:65:80:1b:3b:f9:4d: 71:c3:dc:ea:5d:da:7d:72:54:a7:cf:10:59:e7:c5: d2:f9:30:98:d1:06:db:9f:20:c8:97:53:95:1f:12: 43:1e:e3:0e:2a:57:e5:15:e8:fd:c3:d0:3f:68:f4: ab:cd:15:63:c1:67:b0:53:b1:c1:d5:2b:f3:93:19: a0:37:aa:2b:b6:9e:97:54:38:b8:91:a2:1e:3b:29: 76:6c:47:e0:43:e5:80:00:76:9b:81:3b:e7:1e:f0: db:0c:22:d2:ff:69:c9:a0:0c:ad:ec:2d:c6:80:88: 86:12:11:66:08:9c:c1:13:45:b4:fa:5c:9b:d6:60: bb:5d:e9:0e:6d:4e:dd:05:06:38:ea:55:30:59:dc: 2a:9b:a6:da:10:11:ea:7d:83:35:e0:63:ae:be:77: 52:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:B0:06:00:A8:90:70:F1:F2:97:EE:1F:10:DB:30:96:A5:19:84:1B X509v3 Authority Key Identifier: keyid:02:9F:82:12:43:0A:8D:D7:E7:95:4F:EC:31:3F:15:DA:47:CB:44:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:8a:23:4b:ed:28:83:cc:50:59:f9:cd:15:03:34:f1:d3:a9: 00:e6:df:93:72:c3:18:9e:5a:a9:4e:24:2b:c8:9b:c8:f1:86: 2a:23:4d:1e:43:79:cd:d1:28:b6:cc:20:1c:e9:28:68:cf:ea: 78:6e:5a:ef:9c:da:c8:18:dd:52:33:74:7d:02:3c:2f:af:a0: d3:30:73:93:3e:af:a7:ca:96:7c:e5:db:8b:4b:39:1e:02:be: 69:df:00:13:45:b1:65:a6:e1:6b:51:a8:78:92:80:0c:e0:8b: f0:ae:2d:42:08:5f:ea:6b:cb:1a:9c:c8:83:9b:a8:01:64:ed: 59:11:12:46:e0:ba:d5:57:7c:ed:f4:a2:d2:89:42:1f:23:ab: c4:f1:12:06:9e:2e:dd:27:5c:64:a0:04:39:94:3a:37:f6:8e: b6:19:81:5c:04:11:73:8f:c1:c5:50:c6:97:c3:b6:1b:49:9f: bf:95:5f:40:fe:bc:ba:a7:d4:a8:c1:83:8b:1e:23:05:d4:62: 8a:ac:27:76:ea:5f:a1:0c:b5:bd:1a:d4:b2:60:51:71:82:c7: b1:77:ac:21:13:d1:0e:71:79:60:cd:87:b6:eb:03:cd:21:5e: ad:40:e7:54:72:d5:2e:0f:5c:4d:ef:69:de:a9:b2:0d:15:17: 92:b8:ef:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCyYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJGQzAxMTAvBgNVBAUTKDAyOUY4MjEyNDMwQThERDdFNzk1NEZFQzMxM0YxNURB NDdDQjQ0REQwHhcNMjUwODIyMTkyNjMwWhcNMjUwODI5MTkyNjMwWjAYMRYwFAYD VQQDEw02OGE4YzQ2Ni04ZWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzbVQVaFwXfrO8fOHd786vr4RGAjsiE5XJ9TJ88mF31BSmMYgBnTGep6Iadfs TCcslIaAjzCNwj4cSBUvWfjYRy8dfp0U9DOKKn0P+tSIP/YVzlOZvPFFVVxdMhZS 7TTE9JNlgBs7+U1xw9zqXdp9clSnzxBZ58XS+TCY0QbbnyDIl1OVHxJDHuMOKlfl Fej9w9A/aPSrzRVjwWewU7HB1SvzkxmgN6ortp6XVDi4kaIeOyl2bEfgQ+WAAHab gTvnHvDbDCLS/2nJoAyt7C3GgIiGEhFmCJzBE0W0+lyb1mC7XekObU7dBQY46lUw Wdwqm6baEBHqfYM14GOuvndS6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFKwBgCo kHDx8pfuHxDbMJalGYQbMB8GA1UdIwQYMBaAFAKfghJDCo3X55VP7DE/FdpHy0Td MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkZDMC8yQTgxNUEwODQ3 NTAxMUVBOENEOTc2MUZDNEY5QUUwMi9BcC1DRWtNS2pkZm5sVV9zTVQ4VjJrZkxS TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FwLUNFa01LamRmbmxVX3NNVDhWMmtmTFJOMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkZDMC8yQTgxNUEwODQ3NTAxMUVBOENEOTc2MUZDNEY5QUUwMi9BcC1DRWtNS2pk Zm5sVV9zTVQ4VjJrZkxSTjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiiiNL7SiDzFBZ+c0VAzTx06kA5t+TcsMYnlqpTiQryJvI8YYqI00e Q3nN0Si2zCAc6Shoz+p4blrvnNrIGN1SM3R9Ajwvr6DTMHOTPq+nypZ85duLSzke Ar5p3wATRbFlpuFrUah4koAM4Ivwri1CCF/qa8sanMiDm6gBZO1ZERJG4LrVV3zt 9KLSiUIfI6vE8RIGni7dJ1xkoAQ5lDo39o62GYFcBBFzj8HFUMaXw7YbSZ+/lV9A /ry6p9SowYOLHiMF1GKKrCd26l+hDLW9GtSyYFFxgsexd6whE9EOcXlgzYe26wPN IV6tQOdUctUuD1xN72neqbINFReSuO9b -----END CERTIFICATE-----Generated at Sat Aug 23 15:42:55 2025 by rpki-client