$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft File: dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft (raw, json) Hash identifier: StTRNx/P7cQZHODNnDbQ5i+Y1FE0rFqbDmeDXpZqphs= Subject key identifier: 32:52:23:36:B0:FA:04:15:EE:EB:3B:83:21:BC:DA:C7:E4:56:CD:BD Authority key identifier: 74:48:0F:37:C4:B6:57:62:A8:FD:81:BC:7E:DB:EB:DE:6C:81:64:5F Certificate issuer: /CN=A91E01AF/serialNumber=74480F37C4B65762A8FD81BC7EDBEBDE6C81645F Certificate serial: 05FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEgPN8S2V2Ko_YG8ftvr3myBZF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft Manifest number: 05F9 Signing time: Fri 22 Aug 2025 23:05:55 +0000 Manifest this update: Fri 22 Aug 2025 23:05:55 +0000 Manifest next update: Fri 29 Aug 2025 23:05:55 +0000 Files and hashes: 1: dEgPN8S2V2Ko_YG8ftvr3myBZF8.crl (hash: ZIKhE9bue5i2HGoZLi4GIis1UivqI6eENV05WM0Ugsw=) 2: 129AA26CBD2111EBA76A3E11C4F9AE02.roa (hash: YxPwMr4MBHxV8GdUwwcGZ9ThhhxxM846OSPi1905C3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.crl rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEgPN8S2V2Ko_YG8ftvr3myBZF8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:05:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1535 (0x5ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E01AF, serialNumber=74480F37C4B65762A8FD81BC7EDBEBDE6C81645F Validity Not Before: Aug 22 23:05:55 2025 GMT Not After : Aug 29 23:05:55 2025 GMT Subject: CN=68a8f7d3-4144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:79:1d:65:68:73:43:db:9f:5c:0b:ce:68:7f: 83:da:15:08:b9:20:e4:36:c4:c1:7a:98:c1:78:d6: 2e:80:6f:27:d5:c5:bd:a9:7c:b2:0f:42:93:fa:b0: be:a7:eb:2a:19:f8:fb:1f:de:1b:9c:69:ff:66:fc: ff:82:2c:b8:5a:7e:14:c1:c8:fc:f0:4f:08:73:49: 95:08:3f:e9:01:2a:06:db:f8:31:50:22:3b:db:a1: 11:e8:4c:f6:5d:41:18:c3:82:f0:43:08:2e:12:fa: 9b:9d:22:67:2e:54:7e:bd:54:b9:4d:26:34:0f:8b: 6e:c4:da:41:e1:1b:cd:84:e8:60:3a:0d:a7:dc:79: 32:d6:ed:68:56:44:e3:90:ab:b2:88:c4:03:38:b5: 7f:9b:57:1f:18:1f:e9:92:01:09:d2:44:04:66:b7: c0:77:75:b6:b5:e2:22:a6:19:fb:e0:93:6f:cb:7f: b8:01:20:cd:27:e2:0b:06:5e:60:0e:38:51:96:07: 7b:61:35:6f:dd:8e:33:21:bc:93:54:22:ec:4e:93: 29:01:10:05:93:31:e8:39:2c:93:17:ac:10:bb:00: 2b:a6:bc:95:d9:53:80:f4:43:35:b5:45:98:a9:f1: 38:be:b2:9c:fe:8c:39:dc:1b:9e:2f:a5:59:73:c4: b9:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:52:23:36:B0:FA:04:15:EE:EB:3B:83:21:BC:DA:C7:E4:56:CD:BD X509v3 Authority Key Identifier: keyid:74:48:0F:37:C4:B6:57:62:A8:FD:81:BC:7E:DB:EB:DE:6C:81:64:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEgPN8S2V2Ko_YG8ftvr3myBZF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:ff:96:df:cd:bd:eb:d1:02:c7:63:11:5f:b8:2d:fe:d5:b3: 75:11:8b:8e:10:f5:8a:d4:84:a9:f2:d8:47:af:48:9b:d0:62: 65:55:fa:fd:fe:90:e4:e3:4d:6a:28:2f:15:7c:20:1a:65:ca: db:6d:0b:77:6b:bf:1a:9f:36:43:e8:98:01:69:29:d5:84:6a: c8:ec:c4:6e:c4:76:4e:1b:53:8e:14:b6:0f:79:c2:de:42:a8: a8:5f:48:db:b6:6e:58:20:00:c3:d2:59:65:79:44:48:43:7b: 17:dd:a2:e8:05:e0:d8:21:4c:fd:a3:5c:77:aa:b3:3b:d7:43: 12:f2:72:5e:43:0a:eb:49:2c:59:b1:45:cb:ef:9c:8e:34:8a: f4:08:ad:09:77:24:bf:50:6d:d5:ff:c5:54:f4:7e:21:e1:13: 89:c6:7f:da:c7:09:5a:0b:a0:6b:17:f3:e1:3e:11:ab:2c:a6: a0:12:91:d3:33:47:fd:15:8d:54:07:44:36:7f:26:4c:50:e6: 9a:8c:7c:37:2d:a8:80:c4:0c:46:1f:7b:10:07:d7:44:92:a2: 7b:8d:55:bf:c8:73:58:c0:23:62:3f:81:1e:31:5b:ee:9a:d9: b0:d2:a4:cf:8d:c2:eb:b2:52:e6:92:bb:29:e6:2e:21:1c:83: 98:65:71:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAxQUYxMTAvBgNVBAUTKDc0NDgwRjM3QzRCNjU3NjJBOEZEODFCQzdFREJFQkRF NkM4MTY0NUYwHhcNMjUwODIyMjMwNTU1WhcNMjUwODI5MjMwNTU1WjAYMRYwFAYD VQQDEw02OGE4ZjdkMy00MTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA53kdZWhzQ9ufXAvOaH+D2hUIuSDkNsTBepjBeNYugG8n1cW9qXyyD0KT+rC+ p+sqGfj7H94bnGn/Zvz/giy4Wn4Uwcj88E8Ic0mVCD/pASoG2/gxUCI726ER6Ez2 XUEYw4LwQwguEvqbnSJnLlR+vVS5TSY0D4tuxNpB4RvNhOhgOg2n3Hky1u1oVkTj kKuyiMQDOLV/m1cfGB/pkgEJ0kQEZrfAd3W2teIiphn74JNvy3+4ASDNJ+ILBl5g DjhRlgd7YTVv3Y4zIbyTVCLsTpMpARAFkzHoOSyTF6wQuwArpryV2VOA9EM1tUWY qfE4vrKc/ow53BueL6VZc8S5TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDJSIzaw +gQV7us7gyG82sfkVs29MB8GA1UdIwQYMBaAFHRIDzfEtldiqP2BvH7b695sgWRf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDFBRi84Q0I4NTQ1NkJE MUYxMUVCQkFGRDNEMTBDNEY5QUUwMi9kRWdQTjhTMlYyS29fWUc4ZnR2cjNteUJa RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RFZ1BOOFMyVjJLb19ZRzhmdHZyM215QlpGOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDFBRi84Q0I4NTQ1NkJEMUYxMUVCQkFGRDNEMTBDNEY5QUUwMi9kRWdQTjhTMlYy S29fWUc4ZnR2cjNteUJaRjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCx/5bfzb3r0QLHYxFfuC3+1bN1EYuOEPWK1ISp8thHr0ib0GJlVfr9 /pDk401qKC8VfCAaZcrbbQt3a78anzZD6JgBaSnVhGrI7MRuxHZOG1OOFLYPecLe QqioX0jbtm5YIADD0llleURIQ3sX3aLoBeDYIUz9o1x3qrM710MS8nJeQwrrSSxZ sUXL75yONIr0CK0JdyS/UG3V/8VU9H4h4ROJxn/axwlaC6BrF/PhPhGrLKagEpHT M0f9FY1UB0Q2fyZMUOaajHw3LaiAxAxGH3sQB9dEkqJ7jVW/yHNYwCNiP4EeMVvu mtmw0qTPjcLrslLmkrsp5i4hHIOYZXFY -----END CERTIFICATE-----Generated at Sat Aug 23 17:01:13 2025 by rpki-client