$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft File: n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft (raw, json) Hash identifier: 1N+KTjaazuXq8kl8nG1LxjCKdUtIHJ2cYPihTCpigHw= Subject key identifier: 81:14:B4:57:91:33:86:D9:EE:43:18:4A:E6:C8:AC:83:C7:F4:06:C1 Authority key identifier: 9F:E0:0C:19:CE:0B:8F:96:EC:F8:9A:35:7F:7D:1A:F5:58:F9:6F:F5 Certificate issuer: /CN=A91D7578/serialNumber=9FE00C19CE0B8F96ECF89A357F7D1AF558F96FF5 Certificate serial: 01BA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft Manifest number: 01BA Signing time: Fri 22 Aug 2025 23:04:44 +0000 Manifest this update: Fri 22 Aug 2025 23:04:43 +0000 Manifest next update: Fri 29 Aug 2025 23:04:43 +0000 Files and hashes: 1: n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.crl (hash: sZrfCmgE0qQmGNnszRSRuIxDvGd1SJmtUelF0ktYfdk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.crl rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:04:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 442 (0x1ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7578, serialNumber=9FE00C19CE0B8F96ECF89A357F7D1AF558F96FF5 Validity Not Before: Aug 22 23:04:43 2025 GMT Not After : Aug 29 23:04:43 2025 GMT Subject: CN=68a8f78b-98ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:aa:4e:0c:a3:bd:ed:30:75:e7:80:5f:c8:23: c5:60:93:ef:33:35:33:7f:88:57:e0:90:a4:a7:94: 09:6a:62:fe:0f:f7:91:38:65:aa:36:1f:73:f5:84: 9d:a2:dd:d1:ee:0d:be:32:e1:a0:89:12:69:c1:67: 17:60:8b:9a:f1:7f:d1:0f:6a:4c:f5:9e:d3:4d:53: 59:d8:f6:08:01:0c:7e:78:21:e2:b2:9a:de:30:ba: 97:72:76:28:15:7d:cd:94:ed:36:02:89:88:23:30: 0a:f8:a6:fa:40:b9:4b:26:56:bd:cd:6b:a0:f3:ec: c7:42:8e:87:9d:99:76:37:a0:55:86:a4:af:cd:06: 92:6c:72:c4:fb:5b:9b:6c:46:a6:80:cb:e5:b0:3c: a0:d4:97:15:ca:5b:d5:e1:d0:ac:ae:4f:d4:d0:4d: f7:ad:40:25:66:e4:36:c4:00:36:17:f4:59:c2:f9: 7f:d3:85:cf:fb:7f:95:d0:ed:87:91:7b:a7:ec:85: bb:85:e9:c8:d3:a8:69:73:da:84:9e:89:82:44:33: 01:e6:3b:8e:d7:29:bd:b1:9f:76:05:c2:9e:fd:21: 26:02:a3:39:0f:25:be:fc:ce:6c:c6:28:cf:3c:2a: d8:54:72:9e:2a:c1:c6:93:6e:cd:cf:6f:e2:6d:57: 00:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:14:B4:57:91:33:86:D9:EE:43:18:4A:E6:C8:AC:83:C7:F4:06:C1 X509v3 Authority Key Identifier: keyid:9F:E0:0C:19:CE:0B:8F:96:EC:F8:9A:35:7F:7D:1A:F5:58:F9:6F:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:66:aa:02:e6:57:3d:24:de:48:b3:2d:22:dd:39:27:83:df: fd:89:66:60:5a:81:aa:9d:a0:1e:f6:ca:d4:d8:e2:fd:76:3d: 85:c5:b1:57:d1:d0:ef:82:27:06:53:a9:77:ce:6a:00:a5:86: 97:89:fe:b2:13:c5:10:de:83:84:2d:c2:e2:19:db:2e:2a:9d: d2:52:94:f9:88:bd:b1:20:f5:80:6d:ee:56:6e:b0:74:9b:e0: a5:d5:63:8a:f1:6b:bd:b9:9b:15:91:eb:d1:96:6f:e0:98:95: d6:d5:72:d9:79:c6:3b:e0:bd:eb:59:ce:1f:75:0b:35:1d:7e: 1d:19:06:63:8f:4b:e3:1d:8f:41:69:cc:85:cd:17:3c:9b:cb: 24:ac:c2:55:ca:32:64:43:5e:00:f9:44:3d:ba:16:9f:3d:87: bb:60:be:7a:71:c3:16:c0:9e:ba:4a:a2:e6:ba:89:17:69:42: 2a:31:ca:e9:11:50:70:a2:12:cd:ed:5d:ca:c0:fe:7f:cb:f7: f5:8d:d1:b3:b9:6b:52:22:7e:41:9a:b0:11:46:3a:82:f9:b8: 5a:11:01:46:71:ba:80:00:1f:5c:a5:38:a9:b2:90:29:fd:8e: 8c:b2:2e:78:d8:38:7a:f5:a6:84:2d:b7:93:e4:6b:fc:01:aa: 2b:ff:4c:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc1NzgxMTAvBgNVBAUTKDlGRTAwQzE5Q0UwQjhGOTZFQ0Y4OUEzNTdGN0QxQUY1 NThGOTZGRjUwHhcNMjUwODIyMjMwNDQzWhcNMjUwODI5MjMwNDQzWjAYMRYwFAYD VQQDEw02OGE4Zjc4Yi05OGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw6pODKO97TB154BfyCPFYJPvMzUzf4hX4JCkp5QJamL+D/eROGWqNh9z9YSd ot3R7g2+MuGgiRJpwWcXYIua8X/RD2pM9Z7TTVNZ2PYIAQx+eCHispreMLqXcnYo FX3NlO02AomIIzAK+Kb6QLlLJla9zWug8+zHQo6HnZl2N6BVhqSvzQaSbHLE+1ub bEamgMvlsDyg1JcVylvV4dCsrk/U0E33rUAlZuQ2xAA2F/RZwvl/04XP+3+V0O2H kXun7IW7henI06hpc9qEnomCRDMB5juO1ym9sZ92BcKe/SEmAqM5DyW+/M5sxijP PCrYVHKeKsHGk27Nz2/ibVcAQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIEUtFeR M4bZ7kMYSubIrIPH9AbBMB8GA1UdIwQYMBaAFJ/gDBnOC4+W7PiaNX99GvVY+W/1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzU3OC82NzAwNThCNERG RjgxMUVEOTUxNTNEMzFDNEY5QUUwMi9uLUFNR2M0TGo1YnMtSm8xZjMwYTlWajVi X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL24tQU1HYzRMajVicy1KbzFmMzBhOVZqNWJfVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzU3OC82NzAwNThCNERGRjgxMUVEOTUxNTNEMzFDNEY5QUUwMi9uLUFNR2M0TGo1 YnMtSm8xZjMwYTlWajViX1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDZqoC5lc9JN5Isy0i3Tkng9/9iWZgWoGqnaAe9srU2OL9dj2FxbFX 0dDvgicGU6l3zmoApYaXif6yE8UQ3oOELcLiGdsuKp3SUpT5iL2xIPWAbe5WbrB0 m+Cl1WOK8Wu9uZsVkevRlm/gmJXW1XLZecY74L3rWc4fdQs1HX4dGQZjj0vjHY9B acyFzRc8m8skrMJVyjJkQ14A+UQ9uhafPYe7YL56ccMWwJ66SqLmuokXaUIqMcrp EVBwohLN7V3KwP5/y/f1jdGzuWtSIn5BmrARRjqC+bhaEQFGcbqAAB9cpTipspAp /Y6Msi542Dh69aaELbeT5Gv8Aaor/0xK -----END CERTIFICATE-----Generated at Sat Aug 23 12:28:03 2025 by rpki-client