$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.mft File: 906Wyp7pNgdFZCkpYPvB-c80hU0.mft (raw, json) Hash identifier: LwxGhALWezaBKODoi++IN3aR9fbXxK/PfU+C4H0YH2w= Subject key identifier: 66:D1:CD:DD:52:2C:C2:50:46:F7:AF:15:0D:88:8A:F6:07:88:6B:46 Authority key identifier: F7:4E:96:CA:9E:E9:36:07:45:64:29:29:60:FB:C1:F9:CF:34:85:4D Certificate issuer: /CN=A91E0329/serialNumber=F74E96CA9EE936074564292960FBC1F9CF34854D Certificate serial: 01CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.mft Manifest number: 01C1 Signing time: Sat 23 Aug 2025 03:08:08 +0000 Manifest this update: Sat 23 Aug 2025 03:08:07 +0000 Manifest next update: Sat 30 Aug 2025 03:08:07 +0000 Files and hashes: 1: 906Wyp7pNgdFZCkpYPvB-c80hU0.crl (hash: RH6VNjdvk1eKzK8wvLbhYQV694mvN64pTLqACt9Wdxo=) 2: F26B14C4EE8B11ED95BCBB13C4F9AE02.roa (hash: gLkgMGp52FpOKp1gigsy7o/szzqT6RmtB38EXx+UWeM=) 3: 1DA961ACEE8911EDBFAE4177C4F9AE02.roa (hash: Osxjf+sQheLzTs1l6e5kACmrRT/9y2CBdjlI5qtBWLI=) 4: 1C99BCBCEE8911EDBFAE4177C4F9AE02.roa (hash: P2QsrILj+XHKTHzfzBj8a8ezg5UMFN7g36qC5yV1Z+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.crl rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:08:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 460 (0x1cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0329, serialNumber=F74E96CA9EE936074564292960FBC1F9CF34854D Validity Not Before: Aug 23 03:08:07 2025 GMT Not After : Aug 30 03:08:07 2025 GMT Subject: CN=68a93097-de6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:b6:b6:5c:b9:05:4b:0c:bb:f7:56:c8:87:d6: 8d:ef:db:65:45:b3:62:e5:30:8d:6e:f2:14:97:61: 66:e8:a5:08:af:bb:f4:f5:d2:76:db:39:41:b4:f7: 28:46:bf:b3:9e:b9:6a:3d:47:d3:de:90:06:b5:38: 0a:74:a0:16:ad:ab:c3:8a:80:6a:9a:e2:a3:56:09: f9:3d:7f:03:9b:dd:75:6e:a4:68:c3:67:b8:cd:bb: b1:f6:de:3b:07:7e:4e:ec:b8:06:a8:91:09:b2:dc: fa:0b:72:b1:c9:3e:44:d5:df:f0:f9:4b:69:99:1e: f6:af:00:89:f9:5e:17:08:bc:e0:cb:33:a3:a6:dc: 46:49:93:9d:50:7c:ea:2e:b0:2a:7a:08:3e:d6:f5: a2:cc:a1:bc:8a:41:1a:78:05:41:09:e0:f3:a7:85: 5f:4a:83:cc:23:c6:c8:b4:fa:2f:74:bf:04:c3:74: 1e:41:a0:1e:20:05:f9:8c:9f:70:16:5f:04:fa:c1: 96:4a:61:3d:90:6a:35:1f:82:c1:7f:7f:71:b4:03: 37:b0:ed:8b:d5:ce:ac:0b:f4:be:38:a3:d2:6a:42: 27:3e:da:5c:be:c2:68:b9:0c:6c:e0:4d:8c:77:32: 6e:7e:57:b5:f8:a6:59:bc:2b:18:b5:f4:99:94:35: 67:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:D1:CD:DD:52:2C:C2:50:46:F7:AF:15:0D:88:8A:F6:07:88:6B:46 X509v3 Authority Key Identifier: keyid:F7:4E:96:CA:9E:E9:36:07:45:64:29:29:60:FB:C1:F9:CF:34:85:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:17:d9:fa:45:44:ef:c4:50:3f:2a:ca:7e:ea:0d:8c:05:2d: c4:6b:e5:ac:c0:b8:6a:6e:88:5a:b2:1a:09:84:05:42:80:82: 29:9b:f9:5b:9e:4f:0e:07:68:99:e7:3d:a8:50:37:2c:86:20: 27:71:d8:68:03:31:cb:ed:cc:84:4e:ec:a0:57:9e:01:04:0f: 70:13:82:8f:d9:c3:c5:ea:6b:ae:77:b6:d5:04:e4:ec:55:69: eb:eb:b8:38:05:81:cb:4d:fe:02:ee:56:8f:af:25:d3:f6:46: 53:a4:58:6b:f2:1b:86:0e:b1:77:b5:ce:73:be:08:d4:b2:9f: 9f:29:5c:41:6b:65:2a:27:c8:ea:e3:5d:65:99:6f:87:8b:23: 6d:9c:5b:4e:58:99:5f:e4:da:e1:af:0c:d0:fd:a1:8b:2d:2b: d5:b3:d9:e9:84:cf:d4:9e:78:f1:f5:1b:69:08:c1:a2:31:82: 6d:68:52:db:c9:75:c7:93:e6:68:f4:c0:c4:d6:e7:ee:c8:33: 68:87:e7:d0:05:f2:91:95:d7:ea:56:ab:4e:bf:44:49:c6:b4: 8e:70:21:5b:3f:1b:bf:cf:50:b1:04:7b:e4:6c:1e:38:85:40: f0:3e:bd:14:a3:ce:48:c6:f3:b0:26:60:78:9f:fc:8d:c9:65: c0:ff:ba:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAzMjkxMTAvBgNVBAUTKEY3NEU5NkNBOUVFOTM2MDc0NTY0MjkyOTYwRkJDMUY5 Q0YzNDg1NEQwHhcNMjUwODIzMDMwODA3WhcNMjUwODMwMDMwODA3WjAYMRYwFAYD VQQDEw02OGE5MzA5Ny1kZTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6La2XLkFSwy791bIh9aN79tlRbNi5TCNbvIUl2Fm6KUIr7v09dJ22zlBtPco Rr+znrlqPUfT3pAGtTgKdKAWravDioBqmuKjVgn5PX8Dm911bqRow2e4zbux9t47 B35O7LgGqJEJstz6C3KxyT5E1d/w+UtpmR72rwCJ+V4XCLzgyzOjptxGSZOdUHzq LrAqegg+1vWizKG8ikEaeAVBCeDzp4VfSoPMI8bItPovdL8Ew3QeQaAeIAX5jJ9w Fl8E+sGWSmE9kGo1H4LBf39xtAM3sO2L1c6sC/S+OKPSakInPtpcvsJouQxs4E2M dzJufle1+KZZvCsYtfSZlDVneQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGbRzd1S LMJQRvevFQ2IivYHiGtGMB8GA1UdIwQYMBaAFPdOlsqe6TYHRWQpKWD7wfnPNIVN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDMyOS80NUQ2RUZGQ0Qz OUQxMUVEQkJDQjI4MEZDNEY5QUUwMi85MDZXeXA3cE5nZEZaQ2twWVB2Qi1jODBo VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkwNld5cDdwTmdkRlpDa3BZUHZCLWM4MGhVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDMyOS80NUQ2RUZGQ0QzOUQxMUVEQkJDQjI4MEZDNEY5QUUwMi85MDZXeXA3cE5n ZEZaQ2twWVB2Qi1jODBoVTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGF9n6RUTvxFA/Ksp+6g2MBS3Ea+WswLhqbohashoJhAVCgIIpm/lb nk8OB2iZ5z2oUDcshiAncdhoAzHL7cyETuygV54BBA9wE4KP2cPF6muud7bVBOTs VWnr67g4BYHLTf4C7laPryXT9kZTpFhr8huGDrF3tc5zvgjUsp+fKVxBa2UqJ8jq 411lmW+HiyNtnFtOWJlf5NrhrwzQ/aGLLSvVs9nphM/Unnjx9RtpCMGiMYJtaFLb yXXHk+Zo9MDE1ufuyDNoh+fQBfKRldfqVqtOv0RJxrSOcCFbPxu/z1CxBHvkbB44 hUDwPr0Uo85IxvOwJmB4n/yNyWXA/7qg -----END CERTIFICATE-----Generated at Sat Aug 23 20:16:29 2025 by rpki-client