$ rpki-client -vvf rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft File: k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft (raw, json) Hash identifier: l+EO+s/aaJCzoupYLgzZNh+Ij8Tk3Tud1dW+4HIxSSA= Subject key identifier: 6B:9E:DB:7E:0E:00:CF:33:2B:B1:C9:DE:76:D5:9C:FE:1C:E6:97:BF Authority key identifier: 93:7A:1B:5F:EB:0A:29:33:60:EA:4E:88:47:35:2E:7F:D3:6C:C7:A5 Certificate issuer: /CN=A91D73BB/serialNumber=937A1B5FEB0A293360EA4E8847352E7FD36CC7A5 Certificate serial: 0122 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft Manifest number: 0118 Signing time: Sat 23 Aug 2025 05:04:59 +0000 Manifest this update: Sat 23 Aug 2025 05:04:59 +0000 Manifest next update: Sat 30 Aug 2025 05:04:59 +0000 Files and hashes: 1: k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl (hash: PvYbTmFPB/xDXTnll33g0E8zcMXSy09OtSYfozClb0g=) 2: CFE87CFEE74911EE9E36BA2AC4F9AE02.roa (hash: 6O+gN+s3nYuHADI/TEqtB2x9DBi8NBjryPUz/maJeSc=) 3: F74BBA0E307C11F09D502B0DC4F9AE02.roa (hash: Tr2BD+TjkZLpINWnT5Dv/SJcrrMfCgyU3wvXQZmqI2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:04:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 290 (0x122) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D73BB, serialNumber=937A1B5FEB0A293360EA4E8847352E7FD36CC7A5 Validity Not Before: Aug 23 05:04:59 2025 GMT Not After : Aug 30 05:04:59 2025 GMT Subject: CN=68a94bfb-e894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:15:f9:6c:3f:f7:8e:08:b1:39:29:06:34:4d: 46:0a:a3:5f:cf:f9:0f:8f:33:18:30:e2:a1:fb:66: 97:df:23:96:97:c1:36:22:0d:55:82:3c:df:33:96: 36:c8:38:50:1d:5e:98:eb:e5:8a:bf:48:e1:56:66: 11:81:2d:d8:75:bf:e1:51:f4:d2:ef:92:92:fc:96: ca:f4:8f:59:e6:19:a4:c6:cd:11:91:f9:9d:7d:00: d7:31:cd:a0:6f:4d:40:30:dd:92:87:11:3d:33:41: c4:47:44:49:e3:d6:21:eb:10:58:3c:b3:1e:ae:80: 9d:6c:32:f9:08:12:89:59:41:c6:60:4d:db:61:53: a5:f7:76:b1:3b:c7:30:fb:90:ca:11:ac:73:47:84: 6e:7d:4e:97:e2:7b:47:f1:a9:d7:54:94:24:66:3e: 2f:a1:7b:84:d3:73:10:b1:b7:e6:7b:13:48:94:91: 6c:c0:68:b5:78:89:6d:05:8b:33:a8:99:5d:0d:b3: 47:29:58:c9:2f:b3:c4:d7:cb:6f:c5:48:37:af:bd: e5:74:8b:f6:e3:e1:7d:e0:11:20:d5:a8:96:49:0b: 6e:39:df:45:94:b4:e7:37:0f:02:fc:79:df:47:01: ca:eb:6a:db:4e:5e:20:0e:71:8c:7e:0c:50:ff:d7: a3:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:9E:DB:7E:0E:00:CF:33:2B:B1:C9:DE:76:D5:9C:FE:1C:E6:97:BF X509v3 Authority Key Identifier: keyid:93:7A:1B:5F:EB:0A:29:33:60:EA:4E:88:47:35:2E:7F:D3:6C:C7:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:ad:71:3a:dc:3d:02:1f:3f:0b:c2:9d:ea:0d:90:64:8e:2d: 2e:b2:fe:37:ec:3a:ca:be:b8:38:ff:08:66:71:4d:7d:90:e7: 44:75:75:e6:bb:d8:45:de:d1:46:5b:40:6f:30:7d:79:f9:3e: 03:43:7e:02:88:d2:cc:57:ac:f8:28:3a:97:09:b5:d3:4d:25: f1:28:f5:5f:63:39:82:16:fb:74:7b:60:5b:d4:d2:88:08:70: cb:95:12:f4:87:c5:17:4c:53:17:9e:76:94:04:23:16:26:c8: e5:c9:c6:97:5f:54:f2:3a:54:30:45:f9:7e:15:a2:09:a8:4a: b6:e3:c3:d9:cb:8e:15:0a:d0:14:03:7a:27:61:c9:bf:c1:ce: 97:28:98:25:d8:c3:31:01:cd:08:f1:20:d2:8d:06:c5:5c:f1: c6:a7:26:b3:dc:9b:45:56:84:4d:22:60:b6:9b:9b:2f:22:ef: 39:34:2a:8d:25:be:fb:1c:dc:2e:cf:b3:ed:51:36:74:cd:50: 52:f2:d4:56:ab:0e:69:91:65:9a:ad:cb:3d:22:74:bc:d9:ab: 89:4d:3a:b2:fb:ff:86:6a:d9:e7:6e:5e:29:df:bb:5a:85:0f: ca:da:71:8d:75:1d:50:7d:fa:95:2c:aa:ea:5b:b4:58:88:52: f5:eb:6a:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDczQkIxMTAvBgNVBAUTKDkzN0ExQjVGRUIwQTI5MzM2MEVBNEU4ODQ3MzUyRTdG RDM2Q0M3QTUwHhcNMjUwODIzMDUwNDU5WhcNMjUwODMwMDUwNDU5WjAYMRYwFAYD VQQDEw02OGE5NGJmYi1lODk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsBX5bD/3jgixOSkGNE1GCqNfz/kPjzMYMOKh+2aX3yOWl8E2Ig1VgjzfM5Y2 yDhQHV6Y6+WKv0jhVmYRgS3Ydb/hUfTS75KS/JbK9I9Z5hmkxs0RkfmdfQDXMc2g b01AMN2ShxE9M0HER0RJ49Yh6xBYPLMeroCdbDL5CBKJWUHGYE3bYVOl93axO8cw +5DKEaxzR4RufU6X4ntH8anXVJQkZj4voXuE03MQsbfmexNIlJFswGi1eIltBYsz qJldDbNHKVjJL7PE18tvxUg3r73ldIv24+F94BEg1aiWSQtuOd9FlLTnNw8C/Hnf RwHK62rbTl4gDnGMfgxQ/9ejHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGue234O AM8zK7HJ3nbVnP4c5pe/MB8GA1UdIwQYMBaAFJN6G1/rCikzYOpOiEc1Ln/TbMel MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzNCQi83RUQ1NzU4NkUx OEQxMUVFOTkwRkVDNEZDNEY5QUUwMi9rM29iWC1zS0tUTmc2azZJUnpVdWY5TnN4 NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2szb2JYLXNLS1ROZzZrNklSelV1ZjlOc3g2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzNCQi83RUQ1NzU4NkUxOEQxMUVFOTkwRkVDNEZDNEY5QUUwMi9rM29iWC1zS0tU Tmc2azZJUnpVdWY5TnN4NlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBerXE63D0CHz8Lwp3qDZBkji0usv437DrKvrg4/whmcU19kOdEdXXm u9hF3tFGW0BvMH15+T4DQ34CiNLMV6z4KDqXCbXTTSXxKPVfYzmCFvt0e2Bb1NKI CHDLlRL0h8UXTFMXnnaUBCMWJsjlycaXX1TyOlQwRfl+FaIJqEq248PZy44VCtAU A3onYcm/wc6XKJgl2MMxAc0I8SDSjQbFXPHGpyaz3JtFVoRNImC2m5svIu85NCqN Jb77HNwuz7PtUTZ0zVBS8tRWqw5pkWWarcs9InS82auJTTqy+/+Gatnnbl4p37ta hQ/K2nGNdR1QffqVLKrqW7RYiFL162qt -----END CERTIFICATE-----Generated at Sat Aug 23 10:41:43 2025 by rpki-client