$ rpki-client -vvf rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft File: 1xRtqd4o9btePeL_AMWfyFyZONo.mft (raw, json) Hash identifier: HwWHkAAjQTv1HLdj9xIsrY7yeTNmk3KVI0GF+foOplk= Subject key identifier: E4:4A:53:6A:DC:7F:50:62:DC:55:0C:49:68:DB:ED:A1:DA:F2:A0:59 Authority key identifier: D7:14:6D:A9:DE:28:F5:BB:5E:3D:E2:FF:00:C5:9F:C8:5C:99:38:DA Certificate issuer: /CN=A91D560D/serialNumber=D7146DA9DE28F5BB5E3DE2FF00C59FC85C9938DA Certificate serial: 08C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft Manifest number: 13E3 Signing time: Fri 22 Aug 2025 19:20:43 +0000 Manifest this update: Fri 22 Aug 2025 19:20:43 +0000 Manifest next update: Fri 29 Aug 2025 19:20:43 +0000 Files and hashes: 1: 1xRtqd4o9btePeL_AMWfyFyZONo.crl (hash: U+LTN/pbHcq3J/0kc048ll/jhihfeu/6+otOROgAapw=) 2: 98DE3894CCE411EFA6203F26C4F9AE02.roa (hash: VEO00g9Wl0SGw0f2i0cGvp6jjnbdvIYaLuu58A6mseU=) 3: 4E0A64703A3811F0ADB0050BC4F9AE02.roa (hash: Vqxb0PYOCR3C6cShr5awy3jVN80kFbWIBGbta/oK5uQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.crl rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2244 (0x8c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D560D, serialNumber=D7146DA9DE28F5BB5E3DE2FF00C59FC85C9938DA Validity Not Before: Aug 22 19:20:43 2025 GMT Not After : Aug 29 19:20:43 2025 GMT Subject: CN=68a8c30b-6b57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0b:38:f4:81:a6:79:c0:11:6b:34:07:ce:03: 3d:08:33:a8:fa:fd:d7:68:29:47:51:91:2d:15:10: 06:48:5a:56:f3:31:ba:06:8a:fb:11:53:b8:34:46: 57:fb:b2:99:3f:00:25:d3:6b:59:b0:61:59:b4:d2: e2:e2:25:5d:94:d4:65:d7:14:af:2d:54:68:ca:b9: f3:e3:32:91:26:88:24:5f:bb:47:12:57:a1:cd:f7: 8c:ec:a7:4e:de:82:7b:33:45:ff:d6:f2:5a:8e:a4: f3:fb:ea:60:c1:13:c6:e8:3f:5a:1f:ee:23:f2:57: f3:51:4c:a0:e5:85:8f:c6:01:9f:af:93:4a:64:a4: 61:3e:1a:87:95:44:07:a1:e9:51:29:dd:ef:a8:42: 62:e1:36:20:a1:a4:23:b4:4f:57:c3:fb:15:5b:22: f1:58:01:f1:15:a8:35:26:ed:f0:24:5c:42:85:46: 26:8c:6f:4e:2c:31:f2:11:8e:ba:34:82:87:a0:bf: 72:2f:85:a2:c4:b4:8b:d2:6d:ab:e7:45:50:d2:c5: 23:49:3a:e5:bf:6a:b4:56:c5:1f:fa:ea:87:ff:4c: 78:d2:6e:12:c9:e2:21:f1:5a:98:47:9f:ba:61:b1: 21:37:1f:8a:c3:cf:ce:6f:08:aa:a6:5c:58:d0:41: 98:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:4A:53:6A:DC:7F:50:62:DC:55:0C:49:68:DB:ED:A1:DA:F2:A0:59 X509v3 Authority Key Identifier: keyid:D7:14:6D:A9:DE:28:F5:BB:5E:3D:E2:FF:00:C5:9F:C8:5C:99:38:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:90:03:5d:95:a3:cb:ba:50:49:81:39:ba:0a:07:6c:e8:aa: 3e:22:9d:41:a8:51:c2:84:66:6e:93:85:a1:e6:42:b7:04:92: a2:11:bd:b0:55:94:94:2c:99:7e:c3:2d:16:30:dc:e4:dc:ef: 5b:57:73:b9:7f:d5:a1:78:6e:46:71:41:79:6b:f7:0a:26:b8: 67:ba:1f:50:e6:00:e8:4b:54:76:db:43:91:f4:7e:92:15:0a: 48:0d:d5:e2:18:8c:2e:3d:6a:ab:5d:e6:6e:db:6c:83:93:96: 23:9d:9c:46:fa:52:7d:ad:5f:ec:d3:b0:23:32:5f:0c:6f:3e: f9:07:d5:d9:6a:59:d8:3f:91:4e:1e:a0:67:bf:4e:02:1c:96: af:e3:c5:48:16:de:13:22:4b:f9:e3:b3:3d:75:17:3c:d9:75: f8:a0:da:13:86:29:b2:58:80:7e:9c:cc:8d:9a:20:f7:e2:fb: 8d:24:66:cd:db:5a:71:9a:ba:45:0c:bb:66:31:b3:b8:96:c8: c4:d9:ad:89:27:2a:39:d0:c2:ee:38:96:14:23:e5:b9:08:62: 2b:90:36:9a:f7:b6:2e:33:b6:0a:4d:c9:7c:86:68:d4:ca:89: 77:5d:b9:27:ef:83:dc:a0:2d:88:5e:9c:26:64:20:d8:ba:56: e9:89:fc:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU2MEQxMTAvBgNVBAUTKEQ3MTQ2REE5REUyOEY1QkI1RTNERTJGRjAwQzU5RkM4 NUM5OTM4REEwHhcNMjUwODIyMTkyMDQzWhcNMjUwODI5MTkyMDQzWjAYMRYwFAYD VQQDEw02OGE4YzMwYi02YjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQs49IGmecARazQHzgM9CDOo+v3XaClHUZEtFRAGSFpW8zG6Bor7EVO4NEZX +7KZPwAl02tZsGFZtNLi4iVdlNRl1xSvLVRoyrnz4zKRJogkX7tHElehzfeM7KdO 3oJ7M0X/1vJajqTz++pgwRPG6D9aH+4j8lfzUUyg5YWPxgGfr5NKZKRhPhqHlUQH oelRKd3vqEJi4TYgoaQjtE9Xw/sVWyLxWAHxFag1Ju3wJFxChUYmjG9OLDHyEY66 NIKHoL9yL4WixLSL0m2r50VQ0sUjSTrlv2q0VsUf+uqH/0x40m4SyeIh8VqYR5+6 YbEhNx+Kw8/ObwiqplxY0EGYgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFORKU2rc f1Bi3FUMSWjb7aHa8qBZMB8GA1UdIwQYMBaAFNcUbaneKPW7Xj3i/wDFn8hcmTja MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTYwRC82OEMzRjQ5QTQx RUUxMUVBOUNFQTFGNzVDNEY5QUUwMi8xeFJ0cWQ0bzlidGVQZUxfQU1XZnlGeVpP Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF4UnRxZDRvOWJ0ZVBlTF9BTVdmeUZ5Wk9Oby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTYwRC82OEMzRjQ5QTQxRUUxMUVBOUNFQTFGNzVDNEY5QUUwMi8xeFJ0cWQ0bzli dGVQZUxfQU1XZnlGeVpPTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9kANdlaPLulBJgTm6Cgds6Ko+Ip1BqFHChGZuk4Wh5kK3BJKiEb2w VZSULJl+wy0WMNzk3O9bV3O5f9WheG5GcUF5a/cKJrhnuh9Q5gDoS1R220OR9H6S FQpIDdXiGIwuPWqrXeZu22yDk5YjnZxG+lJ9rV/s07AjMl8Mbz75B9XZalnYP5FO HqBnv04CHJav48VIFt4TIkv547M9dRc82XX4oNoThimyWIB+nMyNmiD34vuNJGbN 21pxmrpFDLtmMbO4lsjE2a2JJyo50MLuOJYUI+W5CGIrkDaa97YuM7YKTcl8hmjU yol3Xbkn74PcoC2IXpwmZCDYulbpify8 -----END CERTIFICATE-----Generated at Sat Aug 23 10:31:20 2025 by rpki-client