$ rpki-client -vvf rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft File: Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft (raw, json) Hash identifier: X3Vg8Q9ISUALjSEFYAc6B0e3Ex2ecIV+R/x35EhXGDU= Subject key identifier: D7:B2:31:A6:31:5F:D9:CB:B6:E5:8B:E7:84:07:25:D1:FC:43:F9:FF Authority key identifier: 0D:AF:4F:1A:C5:81:98:93:1A:D5:C0:00:7F:52:55:A7:9D:D0:E4:C7 Certificate issuer: /CN=A91D462A/serialNumber=0DAF4F1AC58198931AD5C0007F5255A79DD0E4C7 Certificate serial: CD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft Manifest number: C8 Signing time: Fri 22 Aug 2025 16:26:45 +0000 Manifest this update: Fri 22 Aug 2025 16:26:45 +0000 Manifest next update: Fri 29 Aug 2025 16:26:45 +0000 Files and hashes: 1: Da9PGsWBmJMa1cAAf1JVp53Q5Mc.crl (hash: 93HgNuL9qz9WkQnGegU0e1gNflTX6WT3U3tOTR8wxj0=) 2: D5BFBE9E591811EF80AA9F21C4F9AE02.roa (hash: Be1e/Cdz8VdYcqGFGYCyAGRq8xP47qVzQCL7lbjwbsc=) 3: 626CA672591911EFAF1F1D23C4F9AE02.roa (hash: qW4tv57PdJFsLgd8tlpnpMjIsJF0H5vXkIX6yK4Jq7I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.crl rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:26:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 205 (0xcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D462A, serialNumber=0DAF4F1AC58198931AD5C0007F5255A79DD0E4C7 Validity Not Before: Aug 22 16:26:45 2025 GMT Not After : Aug 29 16:26:45 2025 GMT Subject: CN=68a89a45-dadd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:8f:cb:a1:71:22:5c:76:3d:12:38:c4:d3:04: 4d:23:1c:e7:03:96:72:7d:96:ef:b7:9b:03:87:a8: 87:99:5f:d6:fb:e0:53:55:ca:04:74:83:6f:ba:02: e0:b6:8e:df:2a:07:7e:75:4d:01:0d:60:4b:b8:2d: 30:3f:39:52:78:14:bf:d2:2e:5a:35:37:ff:ea:26: f0:b2:bb:b0:f3:e1:7e:51:23:09:51:11:6e:35:1c: db:cf:9f:85:47:57:f0:25:83:e1:11:17:3c:f2:3b: 25:bf:01:1b:8f:7b:fc:0f:b0:8e:9e:8c:fe:60:75: fe:19:4d:0f:6f:33:46:b2:5e:5a:80:f3:79:cd:9f: 02:9c:01:4b:ab:45:30:16:d5:f5:36:54:46:a0:5d: be:63:10:67:95:7b:dd:69:1e:c4:23:de:3d:16:55: c1:2a:45:f3:41:5a:ad:cb:49:82:30:37:76:9b:ec: d8:2e:4a:e3:b3:ff:fe:de:8d:5a:ad:26:24:72:3a: e8:e3:d7:65:b5:71:3c:2d:e3:c1:62:ec:4d:3b:49: fc:7b:49:45:a2:c8:5f:dd:85:89:09:0c:18:58:46: 9b:70:e7:f0:a3:55:ba:3a:82:e8:31:13:46:37:60: 6c:c8:81:8f:06:e1:74:d4:6a:45:85:de:41:5b:b8: d1:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:B2:31:A6:31:5F:D9:CB:B6:E5:8B:E7:84:07:25:D1:FC:43:F9:FF X509v3 Authority Key Identifier: keyid:0D:AF:4F:1A:C5:81:98:93:1A:D5:C0:00:7F:52:55:A7:9D:D0:E4:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:d0:a9:4f:e8:de:91:28:34:1e:98:08:0d:5f:5e:cc:3e:79: 78:d8:6d:32:5c:61:96:6f:11:7e:6f:56:61:69:01:a1:3b:78: a0:e6:c6:25:0e:26:11:85:56:b6:d7:21:9d:48:e6:0e:ab:1d: 4b:92:13:e6:66:67:79:50:86:39:86:ce:08:d0:cf:85:fa:cf: 09:e5:0a:0a:71:18:db:29:34:88:72:30:96:08:57:a8:49:11: 58:f5:78:73:2d:cb:6e:62:60:a7:59:14:7f:86:d3:fc:07:22: a2:c9:03:71:80:03:5a:a3:5c:8f:4b:c0:6e:11:90:e3:0f:5b: bf:16:77:24:ec:15:b8:cd:98:6e:3e:ac:13:89:c7:96:2e:3f: 29:a0:6e:7e:62:4b:21:be:42:ac:6b:ba:1e:27:45:af:4c:29: e4:d3:ba:45:f6:d5:ba:96:65:c9:8a:d1:d2:22:cc:9a:ba:75: bf:81:ca:88:ff:48:63:c6:5f:df:3f:6a:ee:ec:97:42:b1:dd: e6:cb:06:4d:df:9a:67:b4:c8:ad:60:2c:57:4f:7e:6c:cd:6f: e1:3e:0e:4c:97:22:60:11:1a:32:ab:be:66:9e:7f:01:3b:01: 0e:2a:12:82:e2:5f:75:0c:1d:81:e6:2f:d6:0a:f3:68:b5:4a: 40:cb:40:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ2MkExMTAvBgNVBAUTKDBEQUY0RjFBQzU4MTk4OTMxQUQ1QzAwMDdGNTI1NUE3 OUREMEU0QzcwHhcNMjUwODIyMTYyNjQ1WhcNMjUwODI5MTYyNjQ1WjAYMRYwFAYD VQQDEw02OGE4OWE0NS1kYWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7I/LoXEiXHY9EjjE0wRNIxznA5ZyfZbvt5sDh6iHmV/W++BTVcoEdINvugLg to7fKgd+dU0BDWBLuC0wPzlSeBS/0i5aNTf/6ibwsruw8+F+USMJURFuNRzbz5+F R1fwJYPhERc88jslvwEbj3v8D7COnoz+YHX+GU0PbzNGsl5agPN5zZ8CnAFLq0Uw FtX1NlRGoF2+YxBnlXvdaR7EI949FlXBKkXzQVqty0mCMDd2m+zYLkrjs//+3o1a rSYkcjro49dltXE8LePBYuxNO0n8e0lFoshf3YWJCQwYWEabcOfwo1W6OoLoMRNG N2BsyIGPBuF01GpFhd5BW7jRhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNeyMaYx X9nLtuWL54QHJdH8Q/n/MB8GA1UdIwQYMBaAFA2vTxrFgZiTGtXAAH9SVaed0OTH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDYyQS80RUJBODQ2RTU4 NTYxMUVGOTQxNDQ1NUZDNEY5QUUwMi9EYTlQR3NXQm1KTWExY0FBZjFKVnA1M1E1 TWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0RhOVBHc1dCbUpNYTFjQUFmMUpWcDUzUTVNYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDYyQS80RUJBODQ2RTU4NTYxMUVGOTQxNDQ1NUZDNEY5QUUwMi9EYTlQR3NXQm1K TWExY0FBZjFKVnA1M1E1TWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAs0KlP6N6RKDQemAgNX17MPnl42G0yXGGWbxF+b1ZhaQGhO3ig5sYl DiYRhVa21yGdSOYOqx1LkhPmZmd5UIY5hs4I0M+F+s8J5QoKcRjbKTSIcjCWCFeo SRFY9XhzLctuYmCnWRR/htP8ByKiyQNxgANao1yPS8BuEZDjD1u/Fnck7BW4zZhu PqwTiceWLj8poG5+YkshvkKsa7oeJ0WvTCnk07pF9tW6lmXJitHSIsyaunW/gcqI /0hjxl/fP2ru7JdCsd3mywZN35pntMitYCxXT35szW/hPg5MlyJgERoyq75mnn8B OwEOKhKC4l91DB2B5i/WCvNotUpAy0Cz -----END CERTIFICATE-----Generated at Sat Aug 23 12:40:06 2025 by rpki-client