$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.mft File: rRapGbMt65RQ0upjx51QMV2RgVU.mft (raw, json) Hash identifier: raB9M526pLvz42EoSR0nXXR/Mc7ZZ7A3ggxtRfTbHVk= Subject key identifier: 2D:E3:00:F1:78:CC:C8:64:D3:16:7E:57:C8:36:CD:2C:11:EE:81:76 Authority key identifier: AD:16:A9:19:B3:2D:EB:94:50:D2:EA:63:C7:9D:50:31:5D:91:81:55 Certificate issuer: /CN=A91DBA0F/serialNumber=AD16A919B32DEB9450D2EA63C79D50315D918155 Certificate serial: 0B0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRapGbMt65RQ0upjx51QMV2RgVU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.mft Manifest number: 0B04 Signing time: Fri 22 Aug 2025 19:29:25 +0000 Manifest this update: Fri 22 Aug 2025 19:29:24 +0000 Manifest next update: Fri 29 Aug 2025 19:29:24 +0000 Files and hashes: 1: rRapGbMt65RQ0upjx51QMV2RgVU.crl (hash: RId6NZ34aU5HuWf0VWimKgRCBYGlb/QCy0gRfkoT9O0=) 2: D54C8E6C4DBD11EAAF427F1AC4F9AE02.roa (hash: TavcsNbKSaSDXkcGP72u+jTcP48G3Su8SEY/uwppPwI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.crl rsync://rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRapGbMt65RQ0upjx51QMV2RgVU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:29:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2831 (0xb0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBA0F, serialNumber=AD16A919B32DEB9450D2EA63C79D50315D918155 Validity Not Before: Aug 22 19:29:24 2025 GMT Not After : Aug 29 19:29:24 2025 GMT Subject: CN=68a8c514-265d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fa:a7:f2:ca:48:e6:b0:f9:e2:19:0e:e3:99: cf:ac:8b:40:89:2f:80:c5:bd:44:5c:dd:9e:c5:3b: 6f:fe:40:96:ed:7f:d8:38:b6:c3:e6:9e:49:4d:ac: 2f:0c:6c:0f:6f:9c:c5:1d:c6:fc:a3:0a:5a:63:99: fe:92:fe:45:f3:e4:db:a4:99:31:f5:d1:5f:8e:ac: 2d:2b:11:5c:59:bb:20:32:ce:6d:15:64:3f:4f:5a: 0f:52:08:db:43:db:dd:1d:fe:00:0a:8b:3c:be:56: ea:d4:d6:09:9f:d0:4a:aa:7b:7f:2a:f6:90:4a:1a: 52:6d:fb:c9:52:98:0a:1a:d1:12:b8:4f:92:c5:99: 5b:d0:c9:0e:34:f3:a3:03:94:9f:58:56:f5:83:87: 98:04:4c:05:33:9c:79:b2:54:97:f5:9b:07:aa:ec: 38:79:09:26:ae:d6:b8:db:b8:67:98:1a:7c:43:4f: c2:53:5e:54:eb:19:4d:cb:03:e4:ed:e9:0d:c6:23: 48:29:c6:da:77:85:3a:c6:e7:46:08:8f:a7:85:13: 46:c0:0d:b0:d6:ca:b8:2b:f4:df:4f:b8:01:e8:f6: 4f:f6:67:b4:bc:64:0c:0f:84:1c:1f:8a:24:04:75: a0:0d:58:c8:a2:20:6c:24:3c:6d:38:9e:3b:d4:00: 40:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:E3:00:F1:78:CC:C8:64:D3:16:7E:57:C8:36:CD:2C:11:EE:81:76 X509v3 Authority Key Identifier: keyid:AD:16:A9:19:B3:2D:EB:94:50:D2:EA:63:C7:9D:50:31:5D:91:81:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRapGbMt65RQ0upjx51QMV2RgVU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:6a:74:67:83:96:26:53:e7:7a:f9:d1:1c:89:7f:78:33:17: 3b:db:a7:84:67:f4:7b:9e:44:7e:f1:93:8f:85:80:d0:f0:8e: ad:09:66:f8:54:3a:f2:25:ad:a9:d3:13:15:43:91:3d:a6:5b: 1b:8d:72:3c:91:31:ba:cd:11:98:a0:9e:2b:d2:a6:d8:82:a8: 12:ed:0f:54:8c:83:24:aa:fb:0f:3b:1b:b1:8f:08:81:da:b4: 31:a7:eb:f7:1d:1d:90:2d:1d:38:51:8b:96:a3:6d:d3:5f:d7: e3:42:e5:10:0a:cd:5c:53:04:28:af:4b:fa:a7:2e:f1:88:f8: 2d:df:63:26:c4:e9:92:41:93:75:73:75:a6:67:13:8e:23:b9: e9:ba:dd:4a:a5:52:9c:f9:37:14:6b:38:30:30:e3:71:20:9d: cb:74:2e:7c:6f:04:0a:65:5c:18:de:f4:98:b3:8c:cc:cf:17: 62:f3:45:5c:6f:ab:57:6f:f8:51:7b:7d:6b:e9:f2:da:66:be: 91:a0:ed:e1:9e:ab:1b:a2:33:ee:52:23:03:3a:5f:ec:9f:8c: 25:04:2b:c3:9c:b0:29:c3:c7:3e:7c:88:68:e6:18:73:06:bc: 38:87:de:98:cb:db:84:24:f1:33:72:a2:cc:fb:7a:dc:5d:73: 04:d1:88:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCw8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJBMEYxMTAvBgNVBAUTKEFEMTZBOTE5QjMyREVCOTQ1MEQyRUE2M0M3OUQ1MDMx NUQ5MTgxNTUwHhcNMjUwODIyMTkyOTI0WhcNMjUwODI5MTkyOTI0WjAYMRYwFAYD VQQDEw02OGE4YzUxNC0yNjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq/qn8spI5rD54hkO45nPrItAiS+Axb1EXN2exTtv/kCW7X/YOLbD5p5JTawv DGwPb5zFHcb8owpaY5n+kv5F8+TbpJkx9dFfjqwtKxFcWbsgMs5tFWQ/T1oPUgjb Q9vdHf4ACos8vlbq1NYJn9BKqnt/KvaQShpSbfvJUpgKGtESuE+SxZlb0MkONPOj A5SfWFb1g4eYBEwFM5x5slSX9ZsHquw4eQkmrta427hnmBp8Q0/CU15U6xlNywPk 7ekNxiNIKcbad4U6xudGCI+nhRNGwA2w1sq4K/TfT7gB6PZP9me0vGQMD4QcH4ok BHWgDVjIoiBsJDxtOJ471ABAoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC3jAPF4 zMhk0xZ+V8g2zSwR7oF2MB8GA1UdIwQYMBaAFK0WqRmzLeuUUNLqY8edUDFdkYFV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkEwRi9EOTAwNjdGRTRD RDcxMUVBQjQ1NTU4NDVDNEY5QUUwMi9yUmFwR2JNdDY1UlEwdXBqeDUxUU1WMlJn VlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JSYXBHYk10NjVSUTB1cGp4NTFRTVYyUmdWVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkEwRi9EOTAwNjdGRTRDRDcxMUVBQjQ1NTU4NDVDNEY5QUUwMi9yUmFwR2JNdDY1 UlEwdXBqeDUxUU1WMlJnVlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWanRng5YmU+d6+dEciX94Mxc726eEZ/R7nkR+8ZOPhYDQ8I6tCWb4 VDryJa2p0xMVQ5E9plsbjXI8kTG6zRGYoJ4r0qbYgqgS7Q9UjIMkqvsPOxuxjwiB 2rQxp+v3HR2QLR04UYuWo23TX9fjQuUQCs1cUwQor0v6py7xiPgt32MmxOmSQZN1 c3WmZxOOI7nput1KpVKc+TcUazgwMONxIJ3LdC58bwQKZVwY3vSYs4zMzxdi80Vc b6tXb/hRe31r6fLaZr6RoO3hnqsbojPuUiMDOl/sn4wlBCvDnLApw8c+fIho5hhz Brw4h96Yy9uEJPEzcqLM+3rcXXME0Yg3 -----END CERTIFICATE-----Generated at Sun Aug 24 09:15:24 2025 by rpki-client