$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.mft File: 62gLfeTEobRDq9eZuvUkndSw6pA.mft (raw, json) Hash identifier: S7UQ/WNRm95ILXbCAod/4gXgzZsQ5sYeeyyRY/PMtao= Subject key identifier: 34:84:47:A9:AA:17:27:EA:A6:6E:BD:B3:97:45:08:64:D5:0E:DB:5E Authority key identifier: EB:68:0B:7D:E4:C4:A1:B4:43:AB:D7:99:BA:F5:24:9D:D4:B0:EA:90 Certificate issuer: /CN=A91DC866/serialNumber=EB680B7DE4C4A1B443ABD799BAF5249DD4B0EA90 Certificate serial: 34D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62gLfeTEobRDq9eZuvUkndSw6pA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.mft Manifest number: 34C4 Signing time: Fri 22 Aug 2025 14:51:33 +0000 Manifest this update: Fri 22 Aug 2025 14:51:33 +0000 Manifest next update: Fri 29 Aug 2025 14:51:33 +0000 Files and hashes: 1: 62gLfeTEobRDq9eZuvUkndSw6pA.crl (hash: 5mMSZALLANeM40TGu4ZenS4zKGirfTQNBbBkiGydzwE=) 2: D55D2990561F11E7B9B5FB2CC4F9AE02.roa (hash: 6l+okkOVayeN3r7Oa8ISbsZRxypv5sX/p1C5qPHUzI4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.crl rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62gLfeTEobRDq9eZuvUkndSw6pA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:51:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13526 (0x34d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC866, serialNumber=EB680B7DE4C4A1B443ABD799BAF5249DD4B0EA90 Validity Not Before: Aug 22 14:51:33 2025 GMT Not After : Aug 29 14:51:33 2025 GMT Subject: CN=68a883f5-a178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:9b:f5:da:24:e3:8a:8b:29:cb:a7:8f:fd:79: 42:31:68:d1:2e:c5:a3:ab:44:59:42:ee:f9:f0:6c: 7b:0a:ae:c4:31:09:eb:72:42:ce:2b:4b:bd:df:5a: ed:eb:e9:74:45:de:dd:ce:a3:49:fb:51:da:0f:ba: 68:e6:79:c5:2c:47:5d:18:1b:f6:22:20:8b:d6:ed: 7e:99:a1:d9:a6:88:e2:5c:f4:78:14:52:ad:d2:44: df:c0:49:aa:d8:4c:40:67:c3:5d:02:8e:95:b9:0e: 65:2a:32:a1:45:e9:43:bf:56:7a:c1:78:39:44:cf: 96:f6:11:37:70:b2:11:6f:41:5f:17:60:c6:0d:f1: d5:a6:20:42:43:32:38:3e:a5:b0:1d:aa:94:f8:76: 1c:ac:b1:69:74:d3:b3:29:d4:83:61:cb:7c:3e:21: 36:f8:bd:de:31:77:cc:a4:7d:b0:20:d8:49:65:19: f0:60:4e:3a:77:ad:14:3e:66:bf:ef:33:89:30:93: fd:e5:db:d5:9a:0b:41:6c:ae:b3:19:47:1d:e6:36: 56:21:a6:fa:d3:65:d8:41:a1:d0:28:87:b9:9d:bf: c0:db:27:f7:0c:8d:61:af:ca:44:d3:c7:33:d3:ea: 8a:1d:f4:d8:34:4c:20:e4:d2:80:f2:1f:da:c1:39: b9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:84:47:A9:AA:17:27:EA:A6:6E:BD:B3:97:45:08:64:D5:0E:DB:5E X509v3 Authority Key Identifier: keyid:EB:68:0B:7D:E4:C4:A1:B4:43:AB:D7:99:BA:F5:24:9D:D4:B0:EA:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62gLfeTEobRDq9eZuvUkndSw6pA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:c3:c8:12:19:a0:1e:da:2d:51:ae:0d:4d:cc:99:70:6b:c5: 4f:c6:bf:44:e3:ed:ec:da:02:30:be:4a:9c:5c:dd:ad:b5:00: a5:18:04:e8:34:23:f0:05:df:ec:ad:a3:66:d6:67:fe:40:65: 87:17:92:24:55:15:a4:c9:1e:f7:6f:5d:84:73:c5:e5:9f:93: ca:fc:9e:22:ac:d4:e7:7a:18:76:be:f6:fe:25:a2:45:e7:7f: 26:73:13:af:37:94:0f:86:32:79:88:99:1e:d3:b2:bc:21:80: 5b:19:de:57:a8:a1:d7:cb:38:28:bf:78:72:2f:0e:53:43:bb: 03:f8:07:b2:a5:7d:7a:b8:1a:04:df:69:05:3d:8b:cf:e5:b9: 7b:c8:5d:47:22:d6:10:1a:f0:a5:36:ee:b9:d4:67:03:77:ba: 3a:b8:2a:fe:05:38:97:d1:0a:13:38:ad:b5:05:12:ce:86:1d: 8e:09:70:f2:c0:5d:74:2b:83:9c:13:69:30:e4:05:17:10:f3: 48:ab:2d:e3:16:9c:a3:66:de:74:be:2d:01:2a:37:6b:48:6f: 4d:f3:a4:00:79:08:10:30:99:07:54:db:04:01:79:37:04:ca: 29:fa:0b:85:38:ea:89:7d:75:93:f2:8f:32:6b:bb:2e:1c:3e: 17:18:28:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM4NjYxMTAvBgNVBAUTKEVCNjgwQjdERTRDNEExQjQ0M0FCRDc5OUJBRjUyNDlE RDRCMEVBOTAwHhcNMjUwODIyMTQ1MTMzWhcNMjUwODI5MTQ1MTMzWjAYMRYwFAYD VQQDEw02OGE4ODNmNS1hMTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlpv12iTjiospy6eP/XlCMWjRLsWjq0RZQu758Gx7Cq7EMQnrckLOK0u931rt 6+l0Rd7dzqNJ+1HaD7po5nnFLEddGBv2IiCL1u1+maHZpojiXPR4FFKt0kTfwEmq 2ExAZ8NdAo6VuQ5lKjKhRelDv1Z6wXg5RM+W9hE3cLIRb0FfF2DGDfHVpiBCQzI4 PqWwHaqU+HYcrLFpdNOzKdSDYct8PiE2+L3eMXfMpH2wINhJZRnwYE46d60UPma/ 7zOJMJP95dvVmgtBbK6zGUcd5jZWIab602XYQaHQKIe5nb/A2yf3DI1hr8pE08cz 0+qKHfTYNEwg5NKA8h/awTm54QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDSER6mq Fyfqpm69s5dFCGTVDtteMB8GA1UdIwQYMBaAFOtoC33kxKG0Q6vXmbr1JJ3UsOqQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzg2Ni82QTBERjlCQTFE OTYxMUUyQjdCNTA1N0YwOEIwMkNEMi82MmdMZmVURW9iUkRxOWVadXZVa25kU3c2 cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzYyZ0xmZVRFb2JSRHE5ZVp1dlVrbmRTdzZwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Qzg2Ni82QTBERjlCQTFEOTYxMUUyQjdCNTA1N0YwOEIwMkNEMi82MmdMZmVURW9i UkRxOWVadXZVa25kU3c2cEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqw8gSGaAe2i1Rrg1NzJlwa8VPxr9E4+3s2gIwvkqcXN2ttQClGATo NCPwBd/sraNm1mf+QGWHF5IkVRWkyR73b12Ec8Xln5PK/J4irNTnehh2vvb+JaJF 538mcxOvN5QPhjJ5iJke07K8IYBbGd5XqKHXyzgov3hyLw5TQ7sD+AeypX16uBoE 32kFPYvP5bl7yF1HItYQGvClNu651GcDd7o6uCr+BTiX0QoTOK21BRLOhh2OCXDy wF10K4OcE2kw5AUXEPNIqy3jFpyjZt50vi0BKjdrSG9N86QAeQgQMJkHVNsEAXk3 BMop+guFOOqJfXWT8o8ya7suHD4XGCii -----END CERTIFICATE-----Generated at Sun Aug 24 05:41:17 2025 by rpki-client