$ rpki-client -vvf rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.mft File: s40rj01btqU-m0GSYQSBpdiBZUY.mft (raw, json) Hash identifier: E9p10gg6EMEq/8dSU6VdrR/3px+ZVs8Ag3YJbqyFLVE= Subject key identifier: D5:CF:3F:67:70:88:52:A0:95:F6:14:45:52:F9:FE:C6:E0:96:43:31 Authority key identifier: B3:8D:2B:8F:4D:5B:B6:A5:3E:9B:41:92:61:04:81:A5:D8:81:65:46 Certificate issuer: /CN=A91E12AD/serialNumber=B38D2B8F4D5BB6A53E9B4192610481A5D8816546 Certificate serial: 0B0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s40rj01btqU-m0GSYQSBpdiBZUY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.mft Manifest number: 0B05 Signing time: Fri 22 Aug 2025 19:28:45 +0000 Manifest this update: Fri 22 Aug 2025 19:28:45 +0000 Manifest next update: Fri 29 Aug 2025 19:28:45 +0000 Files and hashes: 1: s40rj01btqU-m0GSYQSBpdiBZUY.crl (hash: fKi0lNC9qcTDy5DeAkh/BiFShF3rPlyhQP76fdmcHfU=) 2: 1E1E9122565411EBA14ED510C4F9AE02.roa (hash: 7dou7EZJS0k+10u39gMW4DiImFVNtTINLLrPstsJeHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.crl rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s40rj01btqU-m0GSYQSBpdiBZUY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:28:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2829 (0xb0d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E12AD, serialNumber=B38D2B8F4D5BB6A53E9B4192610481A5D8816546 Validity Not Before: Aug 22 19:28:45 2025 GMT Not After : Aug 29 19:28:45 2025 GMT Subject: CN=68a8c4ed-2ad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:10:c1:78:b7:4b:3f:05:48:f8:c1:39:f0:c7: ae:cf:cb:0e:03:5e:65:43:c9:5b:56:75:c1:17:06: 37:13:3f:d0:51:db:e3:dd:ad:e2:3e:04:af:cd:4e: bc:d9:84:02:82:52:a5:88:bc:1f:50:3e:95:0c:a3: 38:1f:cb:f9:26:8d:48:83:14:c8:f9:49:a5:b5:64: f6:80:a5:0b:b3:94:09:8a:cc:c6:23:28:31:07:f4: 48:44:cf:f2:8f:39:cf:7b:e7:16:64:28:82:58:0d: 0d:46:81:b7:b6:3f:43:27:69:c2:46:bc:49:5b:9d: 9f:b4:9f:05:28:3e:40:23:f4:30:0a:f4:b6:ab:9c: bc:e0:61:bf:61:69:a1:41:a0:f4:8c:83:50:da:08: 73:0b:f4:e6:d1:b6:66:e0:00:a8:40:c2:88:9c:9a: 01:f7:80:3f:a7:29:be:d4:59:b3:05:62:b4:59:be: e6:d2:75:b9:12:36:99:2f:63:1a:79:f0:32:3c:50: 10:8d:55:a7:b1:41:c6:38:b7:a7:b7:1b:11:0f:5a: 68:2c:2d:61:36:2e:5d:4e:f0:15:32:57:90:c1:23: 12:03:7c:cd:53:dd:6c:53:9d:1e:08:29:a2:92:9f: d6:16:7a:f8:c4:23:f5:8d:4e:27:48:a1:62:45:3f: 4a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:CF:3F:67:70:88:52:A0:95:F6:14:45:52:F9:FE:C6:E0:96:43:31 X509v3 Authority Key Identifier: keyid:B3:8D:2B:8F:4D:5B:B6:A5:3E:9B:41:92:61:04:81:A5:D8:81:65:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s40rj01btqU-m0GSYQSBpdiBZUY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:19:7d:02:52:ae:6b:3d:26:f1:ec:1c:be:de:14:21:9c:f3: 0b:9b:4e:bc:60:81:43:e9:b5:2c:4c:0a:75:36:e2:7d:3c:33: fd:cb:7b:a3:1d:26:16:2e:0c:94:71:9f:a6:be:26:22:a6:16: d5:8e:8f:e5:1a:52:3a:5f:1c:5b:92:44:2e:55:41:9a:56:af: 17:57:24:7f:8f:27:c1:c5:ff:ac:34:08:4a:d5:2d:e8:03:e5: 37:63:b8:8f:01:dc:10:0b:8b:e9:bc:af:ef:d9:3f:e1:7b:e5: 44:5d:db:9a:bc:23:c9:10:19:15:d0:5a:ef:87:aa:bb:40:34: c4:83:2f:f1:58:6f:7e:de:88:88:98:9b:7f:07:b8:33:62:64: 44:26:d6:32:98:d2:1e:d1:23:1f:71:11:de:6c:7f:3c:52:cb: b9:15:f8:a0:78:5a:a8:9b:85:82:87:a8:ea:2c:9d:87:76:66: ec:26:3f:99:df:1a:54:27:53:21:56:91:81:ea:fe:ed:a8:ee: 46:98:c4:9a:17:2e:44:45:4f:10:f6:bd:ae:41:5c:11:50:8e: 82:70:ce:c7:cb:f2:f7:0f:95:b1:fe:0d:60:40:c8:d0:8f:b3: 1e:a3:c0:95:5a:0b:30:3d:07:c1:78:43:20:f1:cc:e6:3d:fe: 56:1d:d4:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCw0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTEyQUQxMTAvBgNVBAUTKEIzOEQyQjhGNEQ1QkI2QTUzRTlCNDE5MjYxMDQ4MUE1 RDg4MTY1NDYwHhcNMjUwODIyMTkyODQ1WhcNMjUwODI5MTkyODQ1WjAYMRYwFAYD VQQDEw02OGE4YzRlZC0yYWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArRDBeLdLPwVI+ME58Meuz8sOA15lQ8lbVnXBFwY3Ez/QUdvj3a3iPgSvzU68 2YQCglKliLwfUD6VDKM4H8v5Jo1IgxTI+UmltWT2gKULs5QJiszGIygxB/RIRM/y jznPe+cWZCiCWA0NRoG3tj9DJ2nCRrxJW52ftJ8FKD5AI/QwCvS2q5y84GG/YWmh QaD0jINQ2ghzC/Tm0bZm4ACoQMKInJoB94A/pym+1FmzBWK0Wb7m0nW5EjaZL2Ma efAyPFAQjVWnsUHGOLentxsRD1poLC1hNi5dTvAVMleQwSMSA3zNU91sU50eCCmi kp/WFnr4xCP1jU4nSKFiRT9KDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNXPP2dw iFKglfYURVL5/sbglkMxMB8GA1UdIwQYMBaAFLONK49NW7alPptBkmEEgaXYgWVG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTJBRC8zOERBQTA2QzRC MjExMUVBQjdBMDA1NThDNEY5QUUwMi9zNDByajAxYnRxVS1tMEdTWVFTQnBkaUJa VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M0MHJqMDFidHFVLW0wR1NZUVNCcGRpQlpVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTJBRC8zOERBQTA2QzRCMjExMUVBQjdBMDA1NThDNEY5QUUwMi9zNDByajAxYnRx VS1tMEdTWVFTQnBkaUJaVVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0GX0CUq5rPSbx7By+3hQhnPMLm068YIFD6bUsTAp1NuJ9PDP9y3uj HSYWLgyUcZ+mviYiphbVjo/lGlI6XxxbkkQuVUGaVq8XVyR/jyfBxf+sNAhK1S3o A+U3Y7iPAdwQC4vpvK/v2T/he+VEXduavCPJEBkV0Frvh6q7QDTEgy/xWG9+3oiI mJt/B7gzYmREJtYymNIe0SMfcRHebH88Usu5FfigeFqom4WCh6jqLJ2HdmbsJj+Z 3xpUJ1MhVpGB6v7tqO5GmMSaFy5ERU8Q9r2uQVwRUI6CcM7Hy/L3D5Wx/g1gQMjQ j7Meo8CVWgswPQfBeEMg8czmPf5WHdT7 -----END CERTIFICATE-----Generated at Sat Aug 23 17:21:06 2025 by rpki-client