$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.mft File: d7TYOLfSKf0cdNVYLHNekbVnteI.mft (raw, json) Hash identifier: t9b6Mxu9ekJcaNBT7/gmAMY2+aDCsTjgDHO0NjJi3bo= Subject key identifier: C4:78:38:F3:69:AC:34:9B:F2:68:78:72:28:EE:C9:4C:AA:DA:33:04 Authority key identifier: 77:B4:D8:38:B7:D2:29:FD:1C:74:D5:58:2C:73:5E:91:B5:67:B5:E2 Certificate issuer: /CN=A91D9EAC/serialNumber=77B4D838B7D229FD1C74D5582C735E91B567B5E2 Certificate serial: 0415 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d7TYOLfSKf0cdNVYLHNekbVnteI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.mft Manifest number: 0410 Signing time: Sat 23 Aug 2025 00:38:15 +0000 Manifest this update: Sat 23 Aug 2025 00:38:14 +0000 Manifest next update: Sat 30 Aug 2025 00:38:14 +0000 Files and hashes: 1: d7TYOLfSKf0cdNVYLHNekbVnteI.crl (hash: lkP/C9iKDqToZEU+ATC0gkJHoooJuCn/lmQ+9hQQkTM=) 2: 55976FBE7F4A11ECB6E05A38C4F9AE02.roa (hash: gxyFLyvg9iXUzDVt1BFdSUDwgh1JJfmLmwnyPeOCm3g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.crl rsync://rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d7TYOLfSKf0cdNVYLHNekbVnteI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:38:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1045 (0x415) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9EAC, serialNumber=77B4D838B7D229FD1C74D5582C735E91B567B5E2 Validity Not Before: Aug 23 00:38:14 2025 GMT Not After : Aug 30 00:38:14 2025 GMT Subject: CN=68a90d77-e8bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4b:af:ea:fa:4b:9b:53:bf:ac:60:29:38:e5: 4b:3e:22:35:51:c1:b8:79:fe:93:52:91:ec:b8:41: dc:4c:4f:2f:b9:4c:1b:69:61:73:eb:96:26:8d:40: 62:38:b3:0c:f5:09:3e:dc:a0:6d:03:58:00:a5:00: 59:b1:25:7d:ef:1d:be:aa:5a:db:49:76:41:a5:e7: 1b:eb:8b:88:0c:61:7f:cf:32:5c:0f:64:42:e0:14: b1:4f:88:5a:ff:ee:59:1f:b9:94:9a:07:af:21:5f: a1:37:60:72:f3:0a:ff:41:b1:e5:4d:b7:18:51:db: 6b:5b:00:fd:22:27:8e:62:1b:2d:73:e4:55:cf:af: 3b:89:df:93:50:a8:3b:21:68:9f:41:bf:a4:37:d7: a2:ea:d2:dc:61:42:b6:9a:52:a5:8c:d9:7e:33:be: c0:62:f4:b9:92:28:1a:e9:64:41:24:c8:50:f0:c4: 65:42:0e:db:7c:79:21:d7:37:20:2b:14:c6:16:a8: d5:7c:44:5d:37:3a:36:80:b9:a2:4e:6e:ef:58:25: b2:0e:cd:ea:37:ba:8e:73:db:84:9e:8a:9e:9c:21: 64:ea:af:77:a0:dd:00:a0:1f:44:32:9f:ab:08:f0: 05:bd:c5:dd:17:f2:80:cc:67:5a:2f:38:b2:4f:00: bc:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:78:38:F3:69:AC:34:9B:F2:68:78:72:28:EE:C9:4C:AA:DA:33:04 X509v3 Authority Key Identifier: keyid:77:B4:D8:38:B7:D2:29:FD:1C:74:D5:58:2C:73:5E:91:B5:67:B5:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d7TYOLfSKf0cdNVYLHNekbVnteI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:b0:8a:bd:c3:12:71:4f:ba:e2:4e:42:d8:7e:c1:98:21:29: 5b:09:c2:86:32:f3:6d:08:ad:0b:22:d4:f4:08:6b:f5:d8:e1: c4:0f:47:6e:88:21:4f:dd:4e:49:f0:93:b4:1e:a4:90:59:ae: 9b:3a:8f:97:7f:bb:6a:c5:5f:06:5e:9a:fb:c0:dc:fd:51:c8: e4:e3:e7:00:1c:42:72:2e:8a:62:16:4b:a3:16:0c:29:25:1e: c4:54:5b:a2:bb:d9:42:4e:b3:2d:eb:55:d3:ae:44:90:6e:3a: 9e:c4:0d:90:f1:3b:41:2b:c3:81:04:c5:fc:92:df:bb:07:de: ca:bd:7a:cd:47:c9:0f:ad:43:94:b3:3f:1c:f2:db:27:62:02: 9d:c0:52:4e:68:7d:fa:09:c1:47:94:7a:ae:02:fb:dd:e1:37: c2:11:8b:10:65:54:04:60:e5:d5:40:71:93:e5:a8:eb:18:d9: 4c:d1:35:7f:05:3c:72:97:33:a9:68:2c:a0:2f:92:0f:0d:a3: 1a:64:79:75:69:a1:05:52:21:41:4d:b6:65:68:c5:05:d8:d6: 9e:fe:55:8d:f8:37:01:12:98:12:44:d1:bb:96:e1:3e:7e:f3: 17:00:fe:0a:69:31:cb:15:53:f3:af:74:66:28:55:06:17:3f: f1:2c:08:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlFQUMxMTAvBgNVBAUTKDc3QjREODM4QjdEMjI5RkQxQzc0RDU1ODJDNzM1RTkx QjU2N0I1RTIwHhcNMjUwODIzMDAzODE0WhcNMjUwODMwMDAzODE0WjAYMRYwFAYD VQQDEw02OGE5MGQ3Ny1lOGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuEuv6vpLm1O/rGApOOVLPiI1UcG4ef6TUpHsuEHcTE8vuUwbaWFz65YmjUBi OLMM9Qk+3KBtA1gApQBZsSV97x2+qlrbSXZBpecb64uIDGF/zzJcD2RC4BSxT4ha /+5ZH7mUmgevIV+hN2By8wr/QbHlTbcYUdtrWwD9IieOYhstc+RVz687id+TUKg7 IWifQb+kN9ei6tLcYUK2mlKljNl+M77AYvS5kiga6WRBJMhQ8MRlQg7bfHkh1zcg KxTGFqjVfERdNzo2gLmiTm7vWCWyDs3qN7qOc9uEnoqenCFk6q93oN0AoB9EMp+r CPAFvcXdF/KAzGdaLziyTwC8iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMR4OPNp rDSb8mh4cijuyUyq2jMEMB8GA1UdIwQYMBaAFHe02Di30in9HHTVWCxzXpG1Z7Xi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUVBQy81RDQ1MEZBRTdG NDYxMUVDQUVEM0VBNjJDNEY5QUUwMi9kN1RZT0xmU0tmMGNkTlZZTEhOZWtiVm50 ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q3VFlPTGZTS2YwY2ROVllMSE5la2JWbnRlSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUVBQy81RDQ1MEZBRTdGNDYxMUVDQUVEM0VBNjJDNEY5QUUwMi9kN1RZT0xmU0tm MGNkTlZZTEhOZWtiVm50ZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGsIq9wxJxT7riTkLYfsGYISlbCcKGMvNtCK0LItT0CGv12OHED0du iCFP3U5J8JO0HqSQWa6bOo+Xf7tqxV8GXpr7wNz9Ucjk4+cAHEJyLopiFkujFgwp JR7EVFuiu9lCTrMt61XTrkSQbjqexA2Q8TtBK8OBBMX8kt+7B97KvXrNR8kPrUOU sz8c8tsnYgKdwFJOaH36CcFHlHquAvvd4TfCEYsQZVQEYOXVQHGT5ajrGNlM0TV/ BTxylzOpaCygL5IPDaMaZHl1aaEFUiFBTbZlaMUF2Nae/lWN+DcBEpgSRNG7luE+ fvMXAP4KaTHLFVPzr3RmKFUGFz/xLAjT -----END CERTIFICATE-----Generated at Sat Aug 23 17:04:28 2025 by rpki-client