$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft File: inP7xm5uPo6rLV_CtomRCR8CHkU.mft (raw, json) Hash identifier: 38nLeYdTU5eKK0rM+w/eTmLEh+qeSCBWx5BMpvgZcr8= Subject key identifier: 2B:BA:E4:08:35:7B:E1:C2:8B:34:98:40:69:9D:37:7B:41:27:20:9D Authority key identifier: 8A:73:FB:C6:6E:6E:3E:8E:AB:2D:5F:C2:B6:89:91:09:1F:02:1E:45 Certificate issuer: /CN=A91DD309/serialNumber=8A73FBC66E6E3E8EAB2D5FC2B68991091F021E45 Certificate serial: 1C29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inP7xm5uPo6rLV_CtomRCR8CHkU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft Manifest number: 1C0F Signing time: Fri 22 Aug 2025 16:18:52 +0000 Manifest this update: Fri 22 Aug 2025 16:18:52 +0000 Manifest next update: Fri 29 Aug 2025 16:18:52 +0000 Files and hashes: 1: inP7xm5uPo6rLV_CtomRCR8CHkU.crl (hash: REF3XOA815Oriw8XeDlRhnhFwonEN35nZvFGjWjYxlw=) 2: 5949B76C00DB11E8A9CA373DC4F9AE02.roa (hash: uYIH2Df820V7sq00NPl6eOckfu5/+u+T1sNhFFho9vo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.crl rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inP7xm5uPo6rLV_CtomRCR8CHkU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:18:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7209 (0x1c29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD309, serialNumber=8A73FBC66E6E3E8EAB2D5FC2B68991091F021E45 Validity Not Before: Aug 22 16:18:52 2025 GMT Not After : Aug 29 16:18:52 2025 GMT Subject: CN=68a8986c-e3d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:06:cc:ba:d2:6e:7d:09:f3:d8:52:72:24:be: 90:ac:f0:55:9a:72:75:48:da:ea:fa:e2:78:8a:6e: 7c:ea:2a:cf:b4:90:5c:5e:e1:d8:7b:17:1c:a0:6c: a8:92:53:3e:5b:bc:6c:65:56:a4:0a:b8:a4:ce:ac: 40:c0:e2:5c:96:a9:9e:d1:c0:5f:c3:65:8c:ad:f3: 86:c6:25:e9:bd:0c:d8:55:c8:ff:d6:84:34:17:c9: 7d:74:ff:0e:78:5c:5a:d5:41:09:dc:8e:42:a1:db: f1:bc:4e:ea:6e:57:3d:65:1e:57:99:39:f3:6a:72: 2a:94:94:71:5c:af:71:28:06:d8:14:43:2e:59:d8: f1:7d:8d:63:4d:4b:7c:d1:3d:d7:92:a3:f3:9f:b4: 92:f5:20:b6:c8:22:c6:7b:ec:0f:f2:b5:26:ca:9e: 42:db:26:09:7d:43:4a:b7:91:7e:f2:ec:b4:2b:eb: e6:5d:4b:fb:07:de:96:2a:8c:00:82:38:f3:27:4e: 1b:73:7c:d9:da:dc:8a:eb:28:f6:ba:56:18:7d:49: f1:e5:78:67:e4:14:35:fd:87:97:0e:ca:c8:0c:a9: f4:15:85:c4:2c:7e:22:79:23:fd:f3:6f:b2:bb:6e: 23:2b:44:59:e7:96:12:6a:61:c1:1e:cc:3e:68:a6: 41:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:BA:E4:08:35:7B:E1:C2:8B:34:98:40:69:9D:37:7B:41:27:20:9D X509v3 Authority Key Identifier: keyid:8A:73:FB:C6:6E:6E:3E:8E:AB:2D:5F:C2:B6:89:91:09:1F:02:1E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inP7xm5uPo6rLV_CtomRCR8CHkU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:7b:f3:84:9b:95:61:f1:22:54:50:0c:6b:f4:7d:f1:45:f2: 3c:48:9a:3d:e6:7f:39:c6:cb:c1:97:e9:aa:73:52:1c:06:fc: 6b:c1:de:8f:69:84:68:df:2b:cc:f9:1b:12:93:23:97:e9:7b: 80:aa:ef:a3:0b:e3:87:25:a2:cd:02:56:7e:04:62:03:d5:b4: 09:4c:f6:ef:d7:4d:f9:a1:9e:4e:10:d6:d9:e6:87:3e:d6:e8: cf:40:17:07:5a:46:cd:6f:1b:46:af:e8:ed:1a:9b:45:48:e2: 56:c4:56:28:c9:e4:a2:6e:f3:02:f8:7e:53:ac:2f:69:62:f0: fb:be:65:3a:c7:64:34:f8:c1:b1:dd:04:79:6c:50:86:f2:07: e7:cc:3b:46:ae:3a:51:3c:07:d4:a6:9d:83:9e:bb:17:10:c2: d6:e3:90:42:ab:2f:5e:2c:da:22:86:2b:65:54:2e:a7:fa:8d: be:3f:da:f1:d2:32:b5:eb:6f:43:df:59:3e:1b:56:03:06:6a: 03:80:98:38:8d:e2:b0:b8:69:68:d2:6f:24:12:03:30:1a:f2: 37:c1:29:cb:63:ae:a9:d7:c9:07:24:72:58:38:db:00:11:e5: 1f:a1:44:31:5a:41:57:df:05:65:fc:e2:b6:0f:19:aa:3c:f3: 9f:ed:6a:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQzMDkxMTAvBgNVBAUTKDhBNzNGQkM2NkU2RTNFOEVBQjJENUZDMkI2ODk5MTA5 MUYwMjFFNDUwHhcNMjUwODIyMTYxODUyWhcNMjUwODI5MTYxODUyWjAYMRYwFAYD VQQDEw02OGE4OTg2Yy1lM2QwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4gbMutJufQnz2FJyJL6QrPBVmnJ1SNrq+uJ4im586irPtJBcXuHYexccoGyo klM+W7xsZVakCrikzqxAwOJclqme0cBfw2WMrfOGxiXpvQzYVcj/1oQ0F8l9dP8O eFxa1UEJ3I5CodvxvE7qblc9ZR5XmTnzanIqlJRxXK9xKAbYFEMuWdjxfY1jTUt8 0T3XkqPzn7SS9SC2yCLGe+wP8rUmyp5C2yYJfUNKt5F+8uy0K+vmXUv7B96WKowA gjjzJ04bc3zZ2tyK6yj2ulYYfUnx5Xhn5BQ1/YeXDsrIDKn0FYXELH4ieSP982+y u24jK0RZ55YSamHBHsw+aKZB/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCu65Ag1 e+HCizSYQGmdN3tBJyCdMB8GA1UdIwQYMBaAFIpz+8Zubj6Oqy1fwraJkQkfAh5F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDMwOS8xRkQ2QTZFRUZB NjkxMUU2OEVDMTIzMzNDNEY5QUUwMi9pblA3eG01dVBvNnJMVl9DdG9tUkNSOENI a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2luUDd4bTV1UG82ckxWX0N0b21SQ1I4Q0hrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDMwOS8xRkQ2QTZFRUZBNjkxMUU2OEVDMTIzMzNDNEY5QUUwMi9pblA3eG01dVBv NnJMVl9DdG9tUkNSOENIa1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYe/OEm5Vh8SJUUAxr9H3xRfI8SJo95n85xsvBl+mqc1IcBvxrwd6P aYRo3yvM+RsSkyOX6XuAqu+jC+OHJaLNAlZ+BGID1bQJTPbv1035oZ5OENbZ5oc+ 1ujPQBcHWkbNbxtGr+jtGptFSOJWxFYoyeSibvMC+H5TrC9pYvD7vmU6x2Q0+MGx 3QR5bFCG8gfnzDtGrjpRPAfUpp2DnrsXEMLW45BCqy9eLNoihitlVC6n+o2+P9rx 0jK1629D31k+G1YDBmoDgJg4jeKwuGlo0m8kEgMwGvI3wSnLY66p18kHJHJYONsA EeUfoUQxWkFX3wVl/OK2DxmqPPOf7Wqv -----END CERTIFICATE-----Generated at Sat Aug 23 17:17:56 2025 by rpki-client