$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft File: 75XL1Zg1JkDUKwqsYABBBltNxEI.mft (raw, json) Hash identifier: ixU/UQzICxMbXiI3acnYY5Aaqvn7EDXtkRrOkXCNKyM= Subject key identifier: 0A:C3:CB:88:61:87:14:C7:08:64:BF:1A:A9:1F:81:48:27:76:0D:B1 Authority key identifier: EF:95:CB:D5:98:35:26:40:D4:2B:0A:AC:60:00:41:06:5B:4D:C4:42 Certificate issuer: /CN=A91DE8C5/serialNumber=EF95CBD598352640D42B0AAC600041065B4DC442 Certificate serial: 0C8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75XL1Zg1JkDUKwqsYABBBltNxEI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft Manifest number: 0C81 Signing time: Fri 22 Aug 2025 18:24:35 +0000 Manifest this update: Fri 22 Aug 2025 18:24:34 +0000 Manifest next update: Fri 29 Aug 2025 18:24:34 +0000 Files and hashes: 1: 75XL1Zg1JkDUKwqsYABBBltNxEI.crl (hash: y0WqkV6awWDSAfAOFMqRNA1d8AzJDIy8ymj9ORhyNO8=) 2: 44B3B572011611EA972FFC57C4F9AE02.roa (hash: piFKgRXnTnbtckt4LeKFN1ZClSmPRiBrS7xYW+uNn8I=) 3: 452DDFB4011611EA972FFC57C4F9AE02.roa (hash: rZ1tio+6QezB4AheRQ3p4ioAeh5nGSWbvjYyZdr2msE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.crl rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75XL1Zg1JkDUKwqsYABBBltNxEI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:24:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3214 (0xc8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE8C5, serialNumber=EF95CBD598352640D42B0AAC600041065B4DC442 Validity Not Before: Aug 22 18:24:34 2025 GMT Not After : Aug 29 18:24:34 2025 GMT Subject: CN=68a8b5e3-0ff7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:eb:fb:1a:07:a1:1c:93:df:94:79:f1:26:70: aa:9c:cd:94:b8:c8:31:2f:0e:eb:ff:92:2f:68:23: df:a4:a9:5c:dd:ab:f2:c3:58:db:d2:c7:39:df:89: 5b:2d:d4:26:cd:ed:4e:7a:a6:31:77:37:bc:d6:b4: 86:a5:d3:65:eb:1a:8c:02:8e:0b:e5:d4:4a:5e:71: 7a:c7:6d:c1:b0:35:cc:35:b0:4d:08:cc:ce:c3:8c: 78:73:95:0d:6a:5a:29:80:36:3c:9e:f2:e1:b5:ba: 91:7c:d4:8b:9a:23:13:7d:4a:a9:3b:1f:a7:f0:f7: c8:d6:ae:ce:58:f9:4f:51:a0:25:76:ca:ed:60:11: b2:63:05:c8:4b:a8:9b:0f:b1:1b:d1:07:c3:ec:f1: c7:af:a3:fe:d5:07:b1:c9:bc:7b:c2:03:7f:b9:99: 99:23:6f:51:ae:10:ed:8e:93:7a:72:75:96:bc:73: 7f:59:2b:f0:cb:dc:31:e7:1d:f2:53:16:ee:7d:06: 86:20:f4:78:5d:bf:64:35:d4:f1:50:94:5d:7f:e6: a3:4f:40:8f:ec:d8:4a:78:6e:8e:18:a5:e5:cc:c3: 96:b4:1c:b7:10:ab:e8:c6:1c:d4:c7:da:9c:54:a5: 5c:4f:81:61:01:99:c5:46:28:c5:e8:2c:11:88:3a: 76:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:C3:CB:88:61:87:14:C7:08:64:BF:1A:A9:1F:81:48:27:76:0D:B1 X509v3 Authority Key Identifier: keyid:EF:95:CB:D5:98:35:26:40:D4:2B:0A:AC:60:00:41:06:5B:4D:C4:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75XL1Zg1JkDUKwqsYABBBltNxEI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:a1:fc:8c:05:bb:1f:8a:60:82:fd:63:95:cc:15:af:1d:d1: 47:3d:cd:e4:aa:9b:5a:9d:89:2a:ee:1a:64:d7:39:b3:62:50: 97:b6:28:bb:36:fe:a6:2f:9a:20:0e:a8:89:57:98:e4:79:25: f6:29:d3:07:c0:6d:3b:c4:2e:54:b1:eb:e5:45:d6:aa:63:32: db:37:1c:e6:15:91:b5:a8:4c:e0:1e:c1:f3:f4:f1:56:7e:32: 3c:1e:bf:f1:a6:f2:13:90:c8:52:05:33:4f:57:a5:bf:ed:56: ce:3f:fd:f7:05:18:39:a6:df:8a:11:19:ed:8d:51:24:a7:7e: 02:e4:85:b7:02:09:14:f9:d0:d7:8b:4b:07:37:a1:3c:0b:6d: 0d:41:e4:19:9a:ab:fe:fa:aa:a6:d0:35:90:4f:0c:a7:44:32: 6d:6e:e1:e0:b3:4d:76:95:64:29:86:36:04:9a:12:35:db:78: 5c:fc:f2:86:d5:9c:0f:97:53:26:b2:d5:d5:7e:c9:66:fd:f2: 8f:16:24:ee:b5:99:70:f0:68:6a:aa:7b:41:41:45:a6:f5:09: 2b:a6:83:6c:1f:55:9b:2c:7a:a4:29:3a:b5:b2:b5:95:a4:aa: f5:e0:00:6c:0a:19:9f:09:d5:56:95:f7:df:a0:53:d8:0b:e4: 8e:31:24:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU4QzUxMTAvBgNVBAUTKEVGOTVDQkQ1OTgzNTI2NDBENDJCMEFBQzYwMDA0MTA2 NUI0REM0NDIwHhcNMjUwODIyMTgyNDM0WhcNMjUwODI5MTgyNDM0WjAYMRYwFAYD VQQDEw02OGE4YjVlMy0wZmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0uv7GgehHJPflHnxJnCqnM2UuMgxLw7r/5IvaCPfpKlc3avyw1jb0sc534lb LdQmze1OeqYxdze81rSGpdNl6xqMAo4L5dRKXnF6x23BsDXMNbBNCMzOw4x4c5UN alopgDY8nvLhtbqRfNSLmiMTfUqpOx+n8PfI1q7OWPlPUaAldsrtYBGyYwXIS6ib D7Eb0QfD7PHHr6P+1Qexybx7wgN/uZmZI29RrhDtjpN6cnWWvHN/WSvwy9wx5x3y UxbufQaGIPR4Xb9kNdTxUJRdf+ajT0CP7NhKeG6OGKXlzMOWtBy3EKvoxhzUx9qc VKVcT4FhAZnFRijF6CwRiDp2oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFArDy4hh hxTHCGS/GqkfgUgndg2xMB8GA1UdIwQYMBaAFO+Vy9WYNSZA1CsKrGAAQQZbTcRC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERThDNS8wNTJDODRGQzAx MTUxMUVBQTk4QTYyNTVDNEY5QUUwMi83NVhMMVpnMUprRFVLd3FzWUFCQkJsdE54 RUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc1WEwxWmcxSmtEVUt3cXNZQUJCQmx0TnhFSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RThDNS8wNTJDODRGQzAxMTUxMUVBQTk4QTYyNTVDNEY5QUUwMi83NVhMMVpnMUpr RFVLd3FzWUFCQkJsdE54RUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClofyMBbsfimCC/WOVzBWvHdFHPc3kqptanYkq7hpk1zmzYlCXtii7 Nv6mL5ogDqiJV5jkeSX2KdMHwG07xC5UsevlRdaqYzLbNxzmFZG1qEzgHsHz9PFW fjI8Hr/xpvITkMhSBTNPV6W/7VbOP/33BRg5pt+KERntjVEkp34C5IW3AgkU+dDX i0sHN6E8C20NQeQZmqv++qqm0DWQTwynRDJtbuHgs012lWQphjYEmhI123hc/PKG 1ZwPl1MmstXVfslm/fKPFiTutZlw8GhqqntBQUWm9QkrpoNsH1WbLHqkKTq1srWV pKr14ABsChmfCdVWlfffoFPYC+SOMSRY -----END CERTIFICATE-----Generated at Sat Aug 23 22:42:07 2025 by rpki-client