$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft File: 31FHCxXowUGvL6hGoowDs4WRurQ.mft (raw, json) Hash identifier: elQ8pfk5QUJ/ngWZrMRFwsZYNvFQWBSP2G1M5IXs/EY= Subject key identifier: 59:56:A5:A7:BA:CC:02:C8:C8:48:B3:E2:1A:50:37:18:EB:5D:3D:DE Authority key identifier: DF:51:47:0B:15:E8:C1:41:AF:2F:A8:46:A2:8C:03:B3:85:91:BA:B4 Certificate issuer: /CN=A91DB7E9/serialNumber=DF51470B15E8C141AF2FA846A28C03B38591BAB4 Certificate serial: 0170 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft Manifest number: 0166 Signing time: Sat 23 Aug 2025 04:12:40 +0000 Manifest this update: Sat 23 Aug 2025 04:12:40 +0000 Manifest next update: Sat 30 Aug 2025 04:12:40 +0000 Files and hashes: 1: 31FHCxXowUGvL6hGoowDs4WRurQ.crl (hash: jgnZ+jO45CPRICqOZzn0kGQzx+BwQgucpviVEc5b0RY=) 2: 7B50FA5EA13911EF8B634635C4F9AE02.roa (hash: J8+lxSFWmAdItoP7AGJ9n1czEhUKmEFacTRv8zqHb88=) 3: 367E2CC86E2F11EE9F5DEF32C4F9AE02.roa (hash: mZ/f/kYNljSI/Y1NgwFenBb3960hqwOok7c22vWxduM=) 4: 361777766E2F11EE9F5DEF32C4F9AE02.roa (hash: LjDyklpsY4tER3qyvIF/MVWeA44K8qWvTHC+14bUFS4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.crl rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:12:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 368 (0x170) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB7E9, serialNumber=DF51470B15E8C141AF2FA846A28C03B38591BAB4 Validity Not Before: Aug 23 04:12:40 2025 GMT Not After : Aug 30 04:12:40 2025 GMT Subject: CN=68a93fb8-4000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ad:57:b6:29:34:74:51:a7:6d:47:f5:05:f7: db:f5:8e:bf:6b:d2:97:f6:5e:ec:c1:96:66:4b:ee: 28:8b:0d:b0:8d:d6:fc:b5:c4:39:38:d4:b2:8f:3c: 66:be:33:d6:01:7c:9e:1f:1e:8f:ad:5c:f4:b5:80: 3b:cc:7e:21:89:99:73:b5:0f:67:40:79:a9:23:b1: c9:43:c7:b6:06:26:97:bd:83:69:fc:2a:54:b6:d2: c5:39:df:3c:d1:17:ae:14:1a:4e:2e:24:54:8a:34: 02:5d:78:91:ef:db:ba:ce:28:bd:bb:7c:92:7b:e9: 09:ec:cc:33:3b:3c:6e:32:bd:40:d9:d7:7c:72:f2: a5:29:42:84:64:82:2d:00:61:e5:45:4d:95:20:09: eb:49:fe:db:97:66:b5:6f:14:5f:e9:11:c1:57:e8: 2d:3a:2b:01:98:73:b2:fd:aa:5c:13:b0:da:fc:32: 94:79:18:ba:6d:cc:6e:89:7c:b5:59:2b:11:7c:82: e9:ff:cf:cc:5b:8e:b9:a9:f2:a4:4a:28:05:97:35: 59:bb:0b:b6:67:11:64:fb:7f:3b:c9:68:c6:e7:2f: e9:0c:a1:e8:7a:0d:51:f1:21:a9:32:f7:96:94:36: e8:e7:d2:b8:68:2d:3f:0c:fc:9e:b3:eb:94:51:1f: 70:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:56:A5:A7:BA:CC:02:C8:C8:48:B3:E2:1A:50:37:18:EB:5D:3D:DE X509v3 Authority Key Identifier: keyid:DF:51:47:0B:15:E8:C1:41:AF:2F:A8:46:A2:8C:03:B3:85:91:BA:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:22:88:53:49:a8:e5:2a:a3:91:a1:46:a4:fa:d7:19:c9:e5: 87:38:da:9c:b5:3f:6e:fb:b2:92:d3:fe:87:ec:f8:eb:33:e5: 66:4c:38:02:5e:7b:9f:8a:cb:01:cb:09:a7:83:9c:14:db:ef: c2:92:40:ff:c1:ed:63:27:44:f1:3a:ac:d4:1b:04:6f:9d:24: 6b:75:21:34:cc:e8:49:56:74:7f:69:17:bb:ac:25:d8:22:c6: a5:97:39:35:d2:d3:9f:80:d0:fc:24:b6:b2:62:b7:2c:52:ee: 68:58:70:af:c1:60:c2:e2:8c:68:88:75:e1:31:31:05:5b:85: eb:a5:99:f3:c2:cc:ce:2a:0d:85:ef:da:b5:49:47:ca:1a:cf: 94:b2:d6:b9:73:ee:65:0e:8b:6d:85:69:24:3b:21:1b:d9:8e: a3:73:e9:52:7f:98:aa:db:29:e6:f3:06:1e:29:06:da:f4:c5: a9:52:ed:08:e1:50:c3:c6:31:7c:df:52:6f:36:da:0e:2d:60: d7:6b:c0:a4:65:0e:ac:14:b3:72:e6:54:7c:f6:8b:07:03:f7: c2:5b:14:f0:a1:ac:9d:3a:da:25:b4:c7:91:c2:a0:21:a3:95: 37:29:f5:a2:06:d5:cb:b5:bf:9c:6b:85:ab:06:d8:a0:58:fe: e9:c9:1b:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI3RTkxMTAvBgNVBAUTKERGNTE0NzBCMTVFOEMxNDFBRjJGQTg0NkEyOEMwM0Iz ODU5MUJBQjQwHhcNMjUwODIzMDQxMjQwWhcNMjUwODMwMDQxMjQwWjAYMRYwFAYD VQQDEw02OGE5M2ZiOC00MDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt61Xtik0dFGnbUf1Bffb9Y6/a9KX9l7swZZmS+4oiw2wjdb8tcQ5ONSyjzxm vjPWAXyeHx6PrVz0tYA7zH4hiZlztQ9nQHmpI7HJQ8e2BiaXvYNp/CpUttLFOd88 0ReuFBpOLiRUijQCXXiR79u6zii9u3ySe+kJ7MwzOzxuMr1A2dd8cvKlKUKEZIIt AGHlRU2VIAnrSf7bl2a1bxRf6RHBV+gtOisBmHOy/apcE7Da/DKUeRi6bcxuiXy1 WSsRfILp/8/MW465qfKkSigFlzVZuwu2ZxFk+387yWjG5y/pDKHoeg1R8SGpMveW lDbo59K4aC0/DPyes+uUUR9wcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFlWpae6 zALIyEiz4hpQNxjrXT3eMB8GA1UdIwQYMBaAFN9RRwsV6MFBry+oRqKMA7OFkbq0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjdFOS9FOTlFN0Y1MjZF MkUxMUVFODVEOTJEMzJDNEY5QUUwMi8zMUZIQ3hYb3dVR3ZMNmhHb293RHM0V1J1 clEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMxRkhDeFhvd1VHdkw2aEdvb3dEczRXUnVyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjdFOS9FOTlFN0Y1MjZFMkUxMUVFODVEOTJEMzJDNEY5QUUwMi8zMUZIQ3hYb3dV R3ZMNmhHb293RHM0V1J1clEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxIohTSajlKqORoUak+tcZyeWHONqctT9u+7KS0/6H7PjrM+VmTDgC XnufissBywmng5wU2+/CkkD/we1jJ0TxOqzUGwRvnSRrdSE0zOhJVnR/aRe7rCXY Isallzk10tOfgND8JLayYrcsUu5oWHCvwWDC4oxoiHXhMTEFW4XrpZnzwszOKg2F 79q1SUfKGs+Usta5c+5lDotthWkkOyEb2Y6jc+lSf5iq2ynm8wYeKQba9MWpUu0I 4VDDxjF831JvNtoOLWDXa8CkZQ6sFLNy5lR89osHA/fCWxTwoaydOtoltMeRwqAh o5U3KfWiBtXLtb+ca4WrBtigWP7pyRtl -----END CERTIFICATE-----Generated at Sat Aug 23 13:40:10 2025 by rpki-client