$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft File: RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft (raw, json) Hash identifier: 9cxWRuaC7s3iOUK6FNIL6AUMiyMt+65ExvgiYUk90WA= Subject key identifier: 9B:17:88:43:18:11:CF:79:06:D3:94:AB:03:55:DD:F8:8D:FB:F5:FC Authority key identifier: 46:00:C1:8D:62:C6:F7:24:D5:C9:55:06:F4:1B:8C:95:FC:39:0D:C0 Certificate issuer: /CN=A91DF31D/serialNumber=4600C18D62C6F724D5C95506F41B8C95FC390DC0 Certificate serial: 0168 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RgDBjWLG9yTVyVUG9BuMlfw5DcA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft Manifest number: 015D Signing time: Sat 23 Aug 2025 04:19:47 +0000 Manifest this update: Sat 23 Aug 2025 04:19:46 +0000 Manifest next update: Sat 30 Aug 2025 04:19:46 +0000 Files and hashes: 1: RgDBjWLG9yTVyVUG9BuMlfw5DcA.crl (hash: aYRe3SFkcZ4ka9sHG+Qow7atZ63JCqdu7NTgxFxW7C8=) 2: FA272BC67EBE11EEABD00B4DC4F9AE02.roa (hash: Is2ym6G52Gd8iJAmBag68kzO/t9tRYX/H4mMynU8bi4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.crl rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RgDBjWLG9yTVyVUG9BuMlfw5DcA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:19:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 360 (0x168) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF31D, serialNumber=4600C18D62C6F724D5C95506F41B8C95FC390DC0 Validity Not Before: Aug 23 04:19:46 2025 GMT Not After : Aug 30 04:19:46 2025 GMT Subject: CN=68a94162-54fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:99:92:9b:c8:c5:c5:ab:e2:c0:64:18:71:85: a4:b8:85:bd:1d:ac:fc:43:b4:02:ec:8e:88:4c:a5: e6:89:49:a3:38:eb:3c:c5:68:57:14:e2:4f:e8:1d: 69:c0:ca:f1:fb:4d:13:9c:69:70:ae:f7:d0:38:49: 30:89:0b:3e:7d:28:e9:5e:44:35:67:b4:75:b5:42: 7f:64:65:bd:d6:42:dc:6d:67:de:68:79:7e:b9:ee: 80:25:ab:d0:cd:50:56:01:e6:92:68:30:cb:b8:44: 8a:9a:95:0d:83:58:38:98:8d:a3:f4:de:88:27:65: ca:fe:03:e1:cc:07:b8:68:25:86:71:d6:17:f6:68: 08:40:64:3e:25:5b:67:a5:43:0e:ba:49:ad:58:a6: b7:f3:79:e0:aa:34:b5:23:61:21:3f:5e:87:aa:a6: 4b:b1:e9:6a:96:6a:82:73:a3:bf:d8:3a:a7:6c:58: 71:95:65:d9:fe:da:72:a4:37:d8:bc:39:f8:10:82: f3:c7:aa:bc:8b:9c:a4:00:d1:d1:6e:23:da:fa:31: 48:3c:2a:1d:d2:83:81:d7:94:29:8a:39:97:4b:a1: a6:78:6b:42:22:f1:8d:36:2c:07:dc:21:42:cb:3c: c7:33:06:f7:ed:28:51:77:a4:11:ad:00:e7:33:f4: bf:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:17:88:43:18:11:CF:79:06:D3:94:AB:03:55:DD:F8:8D:FB:F5:FC X509v3 Authority Key Identifier: keyid:46:00:C1:8D:62:C6:F7:24:D5:C9:55:06:F4:1B:8C:95:FC:39:0D:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RgDBjWLG9yTVyVUG9BuMlfw5DcA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:61:10:cb:b9:61:b5:86:29:35:6b:67:45:c9:1d:94:ce:a2: 22:a7:d0:1d:ad:70:b4:1d:a4:28:20:69:38:eb:c6:64:07:52: 18:78:ce:d8:a2:83:51:c1:f5:12:fb:2e:20:3f:24:86:62:38: 3c:87:cb:df:06:ec:36:a5:e4:6e:5e:8f:a3:d6:4a:37:7e:59: 1b:93:92:3a:9a:50:74:b0:18:78:58:66:3d:07:81:75:50:74: 7e:85:93:6f:ea:41:9e:b3:3a:f4:b4:08:d2:34:b1:87:91:ea: 51:52:32:0d:6a:ab:89:a7:1d:d2:2d:1a:8c:2b:4c:b3:09:65: a0:76:3b:6a:56:af:96:87:c5:16:e7:ea:9d:76:2b:e4:00:4a: 0a:50:b6:89:1f:31:6c:89:b4:52:45:cd:c6:3b:d1:be:b0:ed: 8c:ad:a0:a4:78:47:97:98:53:20:95:ab:d4:e0:48:c7:24:3f: 4d:3f:f2:ac:93:24:0c:d2:d3:b4:52:1d:be:77:3e:02:1d:e6: 51:89:af:68:26:de:7d:13:8a:8a:ae:b6:c2:bd:97:b4:73:a9: 4d:d6:ae:35:52:53:00:31:88:a2:08:91:0a:ea:af:ec:6c:cd: 64:72:c2:78:a0:38:ca:d0:37:43:7c:a5:b3:eb:4d:60:c8:38: b4:2b:24:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYzMUQxMTAvBgNVBAUTKDQ2MDBDMThENjJDNkY3MjRENUM5NTUwNkY0MUI4Qzk1 RkMzOTBEQzAwHhcNMjUwODIzMDQxOTQ2WhcNMjUwODMwMDQxOTQ2WjAYMRYwFAYD VQQDEw02OGE5NDE2Mi01NGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1JmSm8jFxaviwGQYcYWkuIW9Haz8Q7QC7I6ITKXmiUmjOOs8xWhXFOJP6B1p wMrx+00TnGlwrvfQOEkwiQs+fSjpXkQ1Z7R1tUJ/ZGW91kLcbWfeaHl+ue6AJavQ zVBWAeaSaDDLuESKmpUNg1g4mI2j9N6IJ2XK/gPhzAe4aCWGcdYX9mgIQGQ+JVtn pUMOukmtWKa383ngqjS1I2EhP16HqqZLselqlmqCc6O/2DqnbFhxlWXZ/tpypDfY vDn4EILzx6q8i5ykANHRbiPa+jFIPCod0oOB15QpijmXS6GmeGtCIvGNNiwH3CFC yzzHMwb37ShRd6QRrQDnM/S/XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJsXiEMY Ec95BtOUqwNV3fiN+/X8MB8GA1UdIwQYMBaAFEYAwY1ixvck1clVBvQbjJX8OQ3A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjMxRC8wNTVBQjU0NDdE RjcxMUVFODdCN0Q0MzBDNEY5QUUwMi9SZ0RCaldMRzl5VFZ5VlVHOUJ1TWxmdzVE Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JnREJqV0xHOXlUVnlWVUc5QnVNbGZ3NURjQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjMxRC8wNTVBQjU0NDdERjcxMUVFODdCN0Q0MzBDNEY5QUUwMi9SZ0RCaldMRzl5 VFZ5VlVHOUJ1TWxmdzVEY0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkYRDLuWG1hik1a2dFyR2UzqIip9AdrXC0HaQoIGk468ZkB1IYeM7Y ooNRwfUS+y4gPySGYjg8h8vfBuw2peRuXo+j1ko3flkbk5I6mlB0sBh4WGY9B4F1 UHR+hZNv6kGeszr0tAjSNLGHkepRUjINaquJpx3SLRqMK0yzCWWgdjtqVq+Wh8UW 5+qddivkAEoKULaJHzFsibRSRc3GO9G+sO2MraCkeEeXmFMglavU4EjHJD9NP/Ks kyQM0tO0Uh2+dz4CHeZRia9oJt59E4qKrrbCvZe0c6lN1q41UlMAMYiiCJEK6q/s bM1kcsJ4oDjK0DdDfKWz601gyDi0KyRo -----END CERTIFICATE-----Generated at Sat Aug 23 18:22:21 2025 by rpki-client