$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD75B/64A1DA4801DC11ED9EFE2A56C4F9AE02/64E_WXYcfGsa4oxHgWfiBhq1ys8.mft File: 64E_WXYcfGsa4oxHgWfiBhq1ys8.mft (raw, json) Hash identifier: HIIiuvmLzO8aUmOiQZ4Ih3r5htbvm08wWEmNpYLd/9g= Subject key identifier: A6:77:37:77:30:C7:8C:A7:FA:28:8B:72:3C:15:70:BD:BC:3E:F3:8C Authority key identifier: EB:81:3F:59:76:1C:7C:6B:1A:E2:8C:47:81:67:E2:06:1A:B5:CA:CF Certificate issuer: /CN=A91DD75B/serialNumber=EB813F59761C7C6B1AE28C478167E2061AB5CACF Certificate serial: 02C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64E_WXYcfGsa4oxHgWfiBhq1ys8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD75B/64A1DA4801DC11ED9EFE2A56C4F9AE02/64E_WXYcfGsa4oxHgWfiBhq1ys8.mft Manifest number: 02C1 Signing time: Sat 23 Aug 2025 01:39:43 +0000 Manifest this update: Sat 23 Aug 2025 01:39:43 +0000 Manifest next update: Sat 30 Aug 2025 01:39:43 +0000 Files and hashes: 1: 64E_WXYcfGsa4oxHgWfiBhq1ys8.crl (hash: G4kb+HIhvetldAsNVzoUKEv1B1eCIvMJ0Ipc2PbUH7A=) 2: D6A658CE01DE11ED8236F073C4F9AE02.roa (hash: kmjWEDePak7RaIzaM2s6P+tZd0JsQcs5f1UxF22C33k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD75B/64A1DA4801DC11ED9EFE2A56C4F9AE02/64E_WXYcfGsa4oxHgWfiBhq1ys8.crl rsync://rpki.apnic.net/member_repository/A91DD75B/64A1DA4801DC11ED9EFE2A56C4F9AE02/64E_WXYcfGsa4oxHgWfiBhq1ys8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64E_WXYcfGsa4oxHgWfiBhq1ys8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:39:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 709 (0x2c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD75B, serialNumber=EB813F59761C7C6B1AE28C478167E2061AB5CACF Validity Not Before: Aug 23 01:39:43 2025 GMT Not After : Aug 30 01:39:43 2025 GMT Subject: CN=68a91bdf-1d45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:30:1d:3d:38:ed:2a:6e:a0:d0:02:49:5b:a1: 92:fa:a4:35:e5:58:5a:96:c1:84:fb:05:10:f8:a1: 91:0b:34:91:a3:12:33:f6:6b:b3:39:84:96:e8:a5: 61:eb:6c:69:5d:a5:81:f9:f5:f1:63:1c:02:8e:2e: 58:84:e8:a5:e5:61:62:b9:58:16:15:8e:0f:03:7e: f7:66:ed:6d:58:9e:85:45:93:1f:8d:e2:36:27:ed: 1b:d5:f9:d3:de:e6:4d:20:e7:c5:a6:28:93:45:e8: 87:29:25:43:27:f9:fd:b9:1f:a9:dc:ae:28:97:2e: c2:39:04:f1:60:18:70:13:4d:88:b8:c8:69:50:3f: 96:24:9f:11:8c:5b:3c:1b:23:6b:2c:c2:c2:36:ee: 8a:3b:8a:dc:0a:f4:df:a0:20:62:50:00:98:25:8c: 82:1f:9f:66:21:16:7e:4d:34:18:40:03:f3:99:45: 27:12:d8:fd:33:33:24:51:6d:b7:3f:83:1e:73:33: 69:be:ec:fc:2e:8f:95:e4:59:c8:81:e7:87:35:ba: f5:6c:3d:86:c8:a8:12:57:b7:68:c8:d7:82:5d:14: 24:a1:68:44:66:d7:8d:fd:ee:cd:15:f3:77:92:cb: 00:12:82:f8:3e:2d:4c:e1:22:c9:89:2a:42:04:c6: af:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:77:37:77:30:C7:8C:A7:FA:28:8B:72:3C:15:70:BD:BC:3E:F3:8C X509v3 Authority Key Identifier: keyid:EB:81:3F:59:76:1C:7C:6B:1A:E2:8C:47:81:67:E2:06:1A:B5:CA:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD75B/64A1DA4801DC11ED9EFE2A56C4F9AE02/64E_WXYcfGsa4oxHgWfiBhq1ys8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64E_WXYcfGsa4oxHgWfiBhq1ys8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD75B/64A1DA4801DC11ED9EFE2A56C4F9AE02/64E_WXYcfGsa4oxHgWfiBhq1ys8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:13:79:1a:f5:42:b3:94:0a:a3:e7:11:dd:30:fc:f6:d7:44: ba:18:1d:58:06:90:a5:bb:86:5b:22:00:44:22:7a:fe:4e:1c: c8:34:44:34:51:8c:fd:f0:8c:04:66:67:42:9e:1d:a4:17:81: a7:a3:fe:fc:78:0d:84:24:59:07:08:d4:da:6f:b3:d7:f8:91: 14:73:2a:af:e9:48:aa:6b:d4:5f:0e:48:6e:b4:e6:2d:3d:46: 79:08:40:5c:cb:62:69:bd:87:38:9d:04:b1:d6:83:17:40:85: 2e:bf:33:85:eb:e8:9a:4a:f1:6b:cf:ef:49:3b:23:10:f6:33: e7:00:88:40:53:82:e5:9a:50:a6:7a:00:d9:f7:7a:70:8f:0c: b9:c1:44:09:92:dc:0f:b8:95:cd:db:e8:7e:b1:b5:10:c7:5c: 68:35:1e:0e:34:1c:d7:f9:d4:f4:5b:ef:5d:26:fd:7d:63:fc: 31:bc:ce:3e:66:cc:1c:45:14:30:38:c8:31:1a:82:df:f7:1d: 43:43:aa:ee:38:fe:4a:30:b6:fe:50:e4:40:4f:13:25:d4:89: a7:ec:36:86:d0:6a:47:e4:26:03:da:3f:55:4c:ed:27:4c:1e: 40:13:dd:c8:ef:39:70:4e:a0:0b:4c:44:85:6b:d3:8b:2b:32: b8:44:0c:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ3NUIxMTAvBgNVBAUTKEVCODEzRjU5NzYxQzdDNkIxQUUyOEM0NzgxNjdFMjA2 MUFCNUNBQ0YwHhcNMjUwODIzMDEzOTQzWhcNMjUwODMwMDEzOTQzWjAYMRYwFAYD VQQDEw02OGE5MWJkZi0xZDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAojAdPTjtKm6g0AJJW6GS+qQ15VhalsGE+wUQ+KGRCzSRoxIz9muzOYSW6KVh 62xpXaWB+fXxYxwCji5YhOil5WFiuVgWFY4PA373Zu1tWJ6FRZMfjeI2J+0b1fnT 3uZNIOfFpiiTReiHKSVDJ/n9uR+p3K4oly7COQTxYBhwE02IuMhpUD+WJJ8RjFs8 GyNrLMLCNu6KO4rcCvTfoCBiUACYJYyCH59mIRZ+TTQYQAPzmUUnEtj9MzMkUW23 P4MeczNpvuz8Lo+V5FnIgeeHNbr1bD2GyKgSV7doyNeCXRQkoWhEZteN/e7NFfN3 kssAEoL4Pi1M4SLJiSpCBMavvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKZ3N3cw x4yn+iiLcjwVcL28PvOMMB8GA1UdIwQYMBaAFOuBP1l2HHxrGuKMR4Fn4gYatcrP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDc1Qi82NEExREE0ODAx REMxMUVEOUVGRTJBNTZDNEY5QUUwMi82NEVfV1hZY2ZHc2E0b3hIZ1dmaUJocTF5 czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY0RV9XWFljZkdzYTRveEhnV2ZpQmhxMXlzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDc1Qi82NEExREE0ODAxREMxMUVEOUVGRTJBNTZDNEY5QUUwMi82NEVfV1hZY2ZH c2E0b3hIZ1dmaUJocTF5czgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgE3ka9UKzlAqj5xHdMPz210S6GB1YBpClu4ZbIgBEInr+ThzINEQ0 UYz98IwEZmdCnh2kF4Gno/78eA2EJFkHCNTab7PX+JEUcyqv6Uiqa9RfDkhutOYt PUZ5CEBcy2JpvYc4nQSx1oMXQIUuvzOF6+iaSvFrz+9JOyMQ9jPnAIhAU4LlmlCm egDZ93pwjwy5wUQJktwPuJXN2+h+sbUQx1xoNR4ONBzX+dT0W+9dJv19Y/wxvM4+ ZswcRRQwOMgxGoLf9x1DQ6ruOP5KMLb+UORATxMl1Imn7DaG0GpH5CYD2j9VTO0n TB5AE93I7zlwTqALTESFa9OLKzK4RAy6 -----END CERTIFICATE-----Generated at Sat Aug 23 16:39:05 2025 by rpki-client