$ rpki-client -vvf rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft File: _rhjYz3rcT99klaMcXmFhLC61mY.mft (raw, json) Hash identifier: Pke4U1x5wZZKmanOPEdctIU/3c8S+e/aytDrygjHTIE= Subject key identifier: 3D:4A:17:D3:E3:97:86:34:C9:DE:73:B8:B9:B4:8C:85:29:98:B5:A9 Authority key identifier: FE:B8:63:63:3D:EB:71:3F:7D:92:56:8C:71:79:85:84:B0:BA:D6:66 Certificate issuer: /CN=A91D50A2/serialNumber=FEB863633DEB713F7D92568C71798584B0BAD666 Certificate serial: 011E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_rhjYz3rcT99klaMcXmFhLC61mY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft Manifest number: 011C Signing time: Sat 23 Aug 2025 04:58:17 +0000 Manifest this update: Sat 23 Aug 2025 04:58:17 +0000 Manifest next update: Sat 30 Aug 2025 04:58:17 +0000 Files and hashes: 1: _rhjYz3rcT99klaMcXmFhLC61mY.crl (hash: kgKCMOsNlGRsX92Vd0Vgzo+32ihjqyBJhEKFOPjAc0A=) 2: 249FA95E9D4111EFA3DA7F75C4F9AE02.roa (hash: SAKcVkUSU/ZcJXpgMJhIHN2SX2uP3Z2m9YsmC8MIfhA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.crl rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_rhjYz3rcT99klaMcXmFhLC61mY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:58:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 286 (0x11e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D50A2, serialNumber=FEB863633DEB713F7D92568C71798584B0BAD666 Validity Not Before: Aug 23 04:58:17 2025 GMT Not After : Aug 30 04:58:17 2025 GMT Subject: CN=68a94a69-4768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:13:f3:9d:68:44:09:6e:c7:8f:e0:d9:c7:25: a1:72:31:14:14:2f:55:49:22:30:03:8a:42:e7:52: 01:76:08:57:24:bf:86:75:fb:e7:21:57:0e:39:5b: fe:62:1e:57:a0:0c:df:36:1c:55:f1:41:b4:78:71: 59:07:65:23:a0:10:7e:04:66:b0:34:82:3b:01:6d: 8f:2a:d1:19:aa:ea:48:e4:b4:34:a6:9c:ee:c5:b7: c1:70:58:32:6a:8d:88:be:84:59:bd:91:c5:78:d2: a0:7d:7e:e9:e0:00:79:e7:12:79:f5:27:10:5a:56: 55:61:82:3a:cd:a8:fc:b9:19:98:cd:8b:8a:1a:ca: da:59:a7:06:d0:1e:18:d0:14:4b:2c:67:db:05:ad: bd:98:11:d0:4e:99:3d:ee:07:93:e2:5a:e2:9d:fb: cc:3b:6d:09:a9:01:51:69:0c:a5:75:de:63:a0:12: c6:10:6a:19:80:ea:78:2b:e8:e8:1c:12:bb:d0:90: 19:e4:d7:55:a1:ab:44:83:bd:ef:8b:6f:79:79:f8: f9:55:7e:3c:84:05:59:3f:72:58:40:aa:bf:c8:3a: b4:9e:e4:f8:ed:7a:4f:7e:bf:d5:a1:8c:16:47:d5: 9f:f4:c6:11:1a:e6:c1:49:a4:3b:4c:3c:38:67:cc: df:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:4A:17:D3:E3:97:86:34:C9:DE:73:B8:B9:B4:8C:85:29:98:B5:A9 X509v3 Authority Key Identifier: keyid:FE:B8:63:63:3D:EB:71:3F:7D:92:56:8C:71:79:85:84:B0:BA:D6:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_rhjYz3rcT99klaMcXmFhLC61mY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:c3:87:57:62:b1:9d:e0:dd:c9:23:e8:4e:2b:71:41:c7:1a: 8d:33:55:de:0f:c5:f7:be:a7:f1:1b:d4:fd:bd:8c:08:ba:94: 83:19:4f:5f:cf:a3:fb:10:19:ac:26:67:0c:b1:23:8b:8e:6c: 1c:58:2f:39:c4:91:a6:65:0e:13:08:e3:d9:09:43:e7:12:a3: a4:d7:e0:21:c6:ad:eb:b3:e9:2b:d8:bf:89:7d:c9:26:a4:09: 3f:23:3b:cc:2d:50:b2:4f:0b:a6:c7:8a:91:32:97:85:58:3e: df:d9:1a:57:18:c9:51:b7:4b:f6:12:0e:9a:dc:99:f3:ff:9f: e7:ec:5a:8d:ed:e4:64:95:6d:da:9d:81:3a:17:77:18:37:b3: 16:7c:1c:8c:ca:62:fa:b6:1b:d3:af:0b:82:c7:4c:e8:1f:2f: 6c:c9:74:bc:b0:8f:49:b0:b2:68:96:9e:d9:1c:cc:79:e6:4a: 2c:c3:8f:24:9d:5a:6c:84:fc:c7:d1:73:59:18:44:c0:54:f4: b4:35:da:e0:c5:07:23:e6:13:60:6a:22:e7:9c:54:e2:93:11: 0d:04:de:26:bf:8f:eb:82:55:57:d4:a2:77:1a:d2:69:57:80: e1:47:bd:e9:1d:b4:2d:cd:f2:99:4f:90:71:4b:be:6a:29:84: 56:48:e4:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUwQTIxMTAvBgNVBAUTKEZFQjg2MzYzM0RFQjcxM0Y3RDkyNTY4QzcxNzk4NTg0 QjBCQUQ2NjYwHhcNMjUwODIzMDQ1ODE3WhcNMjUwODMwMDQ1ODE3WjAYMRYwFAYD VQQDEw02OGE5NGE2OS00NzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqxPznWhECW7Hj+DZxyWhcjEUFC9VSSIwA4pC51IBdghXJL+GdfvnIVcOOVv+ Yh5XoAzfNhxV8UG0eHFZB2UjoBB+BGawNII7AW2PKtEZqupI5LQ0ppzuxbfBcFgy ao2IvoRZvZHFeNKgfX7p4AB55xJ59ScQWlZVYYI6zaj8uRmYzYuKGsraWacG0B4Y 0BRLLGfbBa29mBHQTpk97geT4lrinfvMO20JqQFRaQyldd5joBLGEGoZgOp4K+jo HBK70JAZ5NdVoatEg73vi295efj5VX48hAVZP3JYQKq/yDq0nuT47XpPfr/VoYwW R9Wf9MYRGubBSaQ7TDw4Z8zfgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD1KF9Pj l4Y0yd5zuLm0jIUpmLWpMB8GA1UdIwQYMBaAFP64Y2M963E/fZJWjHF5hYSwutZm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTBBMi9FNEM4ODUxMkQw MjcxMUVFQkY1QjY5M0NDNEY5QUUwMi9fcmhqWXozcmNUOTlrbGFNY1htRmhMQzYx bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19yaGpZejNyY1Q5OWtsYU1jWG1GaExDNjFtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTBBMi9FNEM4ODUxMkQwMjcxMUVFQkY1QjY5M0NDNEY5QUUwMi9fcmhqWXozcmNU OTlrbGFNY1htRmhMQzYxbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmw4dXYrGd4N3JI+hOK3FBxxqNM1XeD8X3vqfxG9T9vYwIupSDGU9f z6P7EBmsJmcMsSOLjmwcWC85xJGmZQ4TCOPZCUPnEqOk1+Ahxq3rs+kr2L+Jfckm pAk/IzvMLVCyTwumx4qRMpeFWD7f2RpXGMlRt0v2Eg6a3Jnz/5/n7FqN7eRklW3a nYE6F3cYN7MWfByMymL6thvTrwuCx0zoHy9syXS8sI9JsLJolp7ZHMx55kosw48k nVpshPzH0XNZGETAVPS0NdrgxQcj5hNgaiLnnFTikxENBN4mv4/rglVX1KJ3GtJp V4DhR73pHbQtzfKZT5BxS75qKYRWSOSt -----END CERTIFICATE-----Generated at Sat Aug 23 19:36:51 2025 by rpki-client