$ rpki-client -vvf rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft File: CROi4pwkcA4hQx4EweNJf9X5qAA.mft (raw, json) Hash identifier: iV7au8EK65nOd1TH4sJ2QGSkNMQxPo2Vy/OhGCnariQ= Subject key identifier: 7A:AE:5D:BB:0E:A6:AF:4E:20:60:92:33:DB:7D:DF:D6:81:AB:12:A2 Authority key identifier: 09:13:A2:E2:9C:24:70:0E:21:43:1E:04:C1:E3:49:7F:D5:F9:A8:00 Certificate issuer: /CN=A91D65C2/serialNumber=0913A2E29C24700E21431E04C1E3497FD5F9A800 Certificate serial: 013E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft Manifest number: 0135 Signing time: Sat 23 Aug 2025 04:42:32 +0000 Manifest this update: Sat 23 Aug 2025 04:42:31 +0000 Manifest next update: Sat 30 Aug 2025 04:42:31 +0000 Files and hashes: 1: CROi4pwkcA4hQx4EweNJf9X5qAA.crl (hash: QlSk/pgNb5e05gKi8vtiyQByCme9xpxxhm6Gi83G4sE=) 2: C3A53484B06011EEA1D18B7FC4F9AE02.roa (hash: 6BXa0l0XZh/eGvl4ynq5V2Aj3lZVf/u92wrWO9e9+lA=) 3: AA134FD6BD1411EE95F45624C4F9AE02.roa (hash: 0ui5S8hmz9C0Ock78UXOuJaT2l8PyKzUulCehXJDbXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.crl rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:42:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 318 (0x13e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D65C2, serialNumber=0913A2E29C24700E21431E04C1E3497FD5F9A800 Validity Not Before: Aug 23 04:42:31 2025 GMT Not After : Aug 30 04:42:31 2025 GMT Subject: CN=68a946b7-ca0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0c:56:59:07:be:b8:63:e1:b1:dd:00:82:84: 30:22:e8:8e:0b:b6:86:27:34:5a:43:76:1f:41:7e: a5:4f:56:6c:d3:6d:93:52:79:09:99:81:6b:17:95: 57:f4:de:a5:2b:54:76:3b:1f:07:63:52:64:9c:90: e9:45:1d:9c:c3:c4:14:e0:59:77:8c:f2:f7:cc:78: e0:7f:43:28:d5:34:6f:35:98:45:c1:40:1f:7f:ed: 23:e3:65:53:71:5c:6c:69:67:54:04:67:ce:54:31: d8:1d:06:96:a9:9e:8e:d2:41:ff:5c:30:8a:6f:8e: 46:08:2b:ee:68:aa:31:ac:98:df:ce:b9:bd:62:fa: 6d:e2:a5:94:c8:ca:16:31:dc:01:8d:69:bc:53:37: 9c:45:fd:11:96:3f:55:e5:ac:46:d8:08:ab:3e:80: 50:8e:b0:6e:af:14:dc:0b:d4:61:62:7c:19:1c:0a: b4:23:2a:cf:ad:9f:f4:72:69:60:25:f8:76:20:54: db:9f:95:b0:9a:aa:63:a4:ef:a7:4a:71:fc:66:20: 6c:b8:cb:ee:26:e2:e1:0b:3c:9c:6c:3e:76:22:eb: 8b:a7:44:d9:0d:94:e1:49:f6:3e:e3:94:2f:8f:de: 2d:e6:a6:e2:03:51:9a:ed:f0:87:80:4b:1b:88:48: 61:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:AE:5D:BB:0E:A6:AF:4E:20:60:92:33:DB:7D:DF:D6:81:AB:12:A2 X509v3 Authority Key Identifier: keyid:09:13:A2:E2:9C:24:70:0E:21:43:1E:04:C1:E3:49:7F:D5:F9:A8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:ac:8e:b2:10:3c:48:5e:5d:55:05:9c:2e:23:58:e4:80:e3: ff:00:74:d0:0d:74:f5:32:6f:3a:08:68:91:97:8e:0d:9b:3d: af:15:ea:b3:61:49:a0:be:c5:aa:79:1b:49:cc:83:8b:ce:d5: fd:fc:ed:bb:ae:cd:86:d0:00:66:38:66:57:17:3e:8b:0b:5a: 2e:ee:f9:4f:ea:15:a1:18:14:68:68:3f:7b:29:ef:b2:b0:88: 53:3a:9e:72:1e:f8:37:67:0a:58:38:68:21:93:f9:2d:49:5d: e7:56:25:d4:91:b1:e8:39:5f:51:e7:4a:d0:e3:cf:f0:ff:0e: c6:ea:48:b8:c7:a1:7a:9b:74:dd:e6:31:d5:50:cc:58:6e:63: 10:9e:69:55:fb:e8:85:5a:54:8e:d5:95:c8:1b:53:40:ae:7a: 1a:83:24:c1:4b:3e:a0:5b:7b:6f:4a:f5:79:a9:6d:12:28:89: cf:79:3d:41:dc:63:0c:ac:94:71:e4:44:40:e5:94:a6:aa:6e: 91:cf:6e:01:78:bc:8e:c8:54:1a:2e:87:e9:5e:57:ba:3e:f7: 29:77:e4:d3:76:ed:f8:68:fc:78:c2:37:f5:81:eb:8a:35:25: 1f:d1:9a:fb:bc:0f:41:0e:38:94:05:4f:7b:be:71:f2:99:13: d5:c8:6c:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY1QzIxMTAvBgNVBAUTKDA5MTNBMkUyOUMyNDcwMEUyMTQzMUUwNEMxRTM0OTdG RDVGOUE4MDAwHhcNMjUwODIzMDQ0MjMxWhcNMjUwODMwMDQ0MjMxWjAYMRYwFAYD VQQDEw02OGE5NDZiNy1jYTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQxWWQe+uGPhsd0AgoQwIuiOC7aGJzRaQ3YfQX6lT1Zs022TUnkJmYFrF5VX 9N6lK1R2Ox8HY1JknJDpRR2cw8QU4Fl3jPL3zHjgf0Mo1TRvNZhFwUAff+0j42VT cVxsaWdUBGfOVDHYHQaWqZ6O0kH/XDCKb45GCCvuaKoxrJjfzrm9Yvpt4qWUyMoW MdwBjWm8UzecRf0Rlj9V5axG2AirPoBQjrBurxTcC9RhYnwZHAq0IyrPrZ/0cmlg Jfh2IFTbn5WwmqpjpO+nSnH8ZiBsuMvuJuLhCzycbD52IuuLp0TZDZThSfY+45Qv j94t5qbiA1Ga7fCHgEsbiEhhMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHquXbsO pq9OIGCSM9t939aBqxKiMB8GA1UdIwQYMBaAFAkTouKcJHAOIUMeBMHjSX/V+agA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjVDMi83NkVFNzk1Q0Iw NjAxMUVFQkJCRjY1N0NDNEY5QUUwMi9DUk9pNHB3a2NBNGhReDRFd2VOSmY5WDVx QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NST2k0cHdrY0E0aFF4NEV3ZU5KZjlYNXFBQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjVDMi83NkVFNzk1Q0IwNjAxMUVFQkJCRjY1N0NDNEY5QUUwMi9DUk9pNHB3a2NB NGhReDRFd2VOSmY5WDVxQUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClrI6yEDxIXl1VBZwuI1jkgOP/AHTQDXT1Mm86CGiRl44Nmz2vFeqz YUmgvsWqeRtJzIOLztX9/O27rs2G0ABmOGZXFz6LC1ou7vlP6hWhGBRoaD97Ke+y sIhTOp5yHvg3ZwpYOGghk/ktSV3nViXUkbHoOV9R50rQ48/w/w7G6ki4x6F6m3Td 5jHVUMxYbmMQnmlV++iFWlSO1ZXIG1NArnoagyTBSz6gW3tvSvV5qW0SKInPeT1B 3GMMrJRx5ERA5ZSmqm6Rz24BeLyOyFQaLofpXle6Pvcpd+TTdu34aPx4wjf1geuK NSUf0Zr7vA9BDjiUBU97vnHymRPVyGx7 -----END CERTIFICATE-----Generated at Sun Aug 24 00:49:28 2025 by rpki-client