$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1498/B3C8A97CDFB511EEB7AD8F2EC4F9AE02/rc1aTbWZxxrtk9CWqxTK-ggV5hc.mft File: rc1aTbWZxxrtk9CWqxTK-ggV5hc.mft (raw, json) Hash identifier: uFP/J2uGXRb2uZyfhOrvMp0HXzOyqNepAw/F++HISms= Subject key identifier: 0B:D1:1C:7F:38:A7:71:9E:FF:F3:23:82:7F:8A:30:EF:A5:5B:8B:DD Authority key identifier: AD:CD:5A:4D:B5:99:C7:1A:ED:93:D0:96:AB:14:CA:FA:08:15:E6:17 Certificate issuer: /CN=A91E1498/serialNumber=ADCD5A4DB599C71AED93D096AB14CAFA0815E617 Certificate serial: 011D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rc1aTbWZxxrtk9CWqxTK-ggV5hc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1498/B3C8A97CDFB511EEB7AD8F2EC4F9AE02/rc1aTbWZxxrtk9CWqxTK-ggV5hc.mft Manifest number: 0118 Signing time: Sat 23 Aug 2025 05:04:07 +0000 Manifest this update: Sat 23 Aug 2025 05:04:07 +0000 Manifest next update: Sat 30 Aug 2025 05:04:07 +0000 Files and hashes: 1: rc1aTbWZxxrtk9CWqxTK-ggV5hc.crl (hash: f5pA1bZ7t9UjqdlxJer26WjoOvqvznnXY01RYQiPQDo=) 2: 6C523164E03F11EE87838439C4F9AE02.roa (hash: SK6ZvVianDlVw+18irRafax8Eg6g34dqTzqJORJNKeQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1498/B3C8A97CDFB511EEB7AD8F2EC4F9AE02/rc1aTbWZxxrtk9CWqxTK-ggV5hc.crl rsync://rpki.apnic.net/member_repository/A91E1498/B3C8A97CDFB511EEB7AD8F2EC4F9AE02/rc1aTbWZxxrtk9CWqxTK-ggV5hc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rc1aTbWZxxrtk9CWqxTK-ggV5hc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:04:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1498, serialNumber=ADCD5A4DB599C71AED93D096AB14CAFA0815E617 Validity Not Before: Aug 23 05:04:07 2025 GMT Not After : Aug 30 05:04:07 2025 GMT Subject: CN=68a94bc7-8d60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:53:2b:46:0e:54:73:db:32:1a:63:e9:3d:c8: aa:88:65:21:67:2e:80:8d:c7:11:66:ea:5b:88:d7: c7:c6:1c:20:a3:80:6a:58:73:cf:2b:8b:b6:7d:39: 65:a5:f4:12:7e:c4:54:24:fa:22:84:00:8e:1c:e5: 4b:eb:eb:21:ca:36:9f:d6:12:3b:bc:ce:c4:f0:15: df:15:03:53:a2:0a:56:7f:82:9b:88:b7:45:e6:82: 59:8f:09:2c:31:d2:93:25:b3:a2:b6:e9:47:25:7e: f4:36:7d:f3:06:f8:f9:b0:df:75:2e:f0:4f:a0:1e: 93:43:73:b6:16:74:14:9b:35:d1:bc:db:a5:3a:65: e5:4a:d1:da:7b:43:1b:12:06:6d:a1:40:9a:bc:4e: 5d:7e:71:1b:ae:2e:76:aa:cf:a9:2d:7e:ff:7e:7f: f0:1b:bf:2a:aa:82:06:d1:6f:f9:65:3a:2a:e9:b9: 06:ac:a2:08:f0:6c:6b:46:97:f2:5e:81:c8:3a:81: 77:45:1b:7e:42:06:43:bf:32:65:84:f3:b6:37:bf: 1f:49:93:ac:01:4e:2f:e5:f0:ea:f1:5a:2a:2d:5f: 86:39:73:91:3f:cd:18:d5:8a:6e:9f:74:e9:4f:b0: 6b:03:fa:ce:3d:46:d0:fd:a7:41:7f:b3:ca:04:b5: e9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:D1:1C:7F:38:A7:71:9E:FF:F3:23:82:7F:8A:30:EF:A5:5B:8B:DD X509v3 Authority Key Identifier: keyid:AD:CD:5A:4D:B5:99:C7:1A:ED:93:D0:96:AB:14:CA:FA:08:15:E6:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1498/B3C8A97CDFB511EEB7AD8F2EC4F9AE02/rc1aTbWZxxrtk9CWqxTK-ggV5hc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rc1aTbWZxxrtk9CWqxTK-ggV5hc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1498/B3C8A97CDFB511EEB7AD8F2EC4F9AE02/rc1aTbWZxxrtk9CWqxTK-ggV5hc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:8b:a6:0e:61:70:ae:25:36:0a:8c:1b:b2:4d:f0:48:5d:b2: c5:ad:4d:56:01:20:c5:83:c7:ad:79:d6:a0:33:69:cd:be:c8: 59:6c:68:24:9e:ae:d9:a8:45:ed:c2:c1:2c:b5:d4:ca:aa:de: 34:eb:5b:57:61:d0:48:84:fc:cb:42:20:fe:40:f7:96:9c:1a: 68:b8:65:ab:35:98:99:e9:c0:29:63:0a:75:58:17:ff:48:db: 8b:d4:2c:3d:dc:c5:4d:6d:9f:78:9f:ff:38:a7:7e:45:6f:97: 18:24:35:50:a0:1a:97:c4:de:fc:a7:16:22:75:70:17:ba:04: b1:87:40:bf:dd:a9:ff:bb:6c:9e:7e:5f:2a:c5:1b:73:bc:7a: dc:aa:2b:a4:a8:d3:9c:90:f7:e4:a2:d3:4c:40:17:f2:b7:dd: 5f:bd:7c:32:88:9a:c7:50:15:1d:24:2e:06:1b:96:c2:f6:2d: 10:55:95:a7:30:e0:12:58:3d:0b:0c:d7:87:e6:b5:18:5c:fc: ae:1f:ac:0d:61:33:43:84:d2:92:be:c4:f0:1e:fb:a1:fe:58: bc:14:ee:7c:07:b8:bd:4b:70:e5:63:7a:af:56:47:09:b5:cd: ca:68:58:bf:92:e9:a9:29:0f:58:25:e3:58:7b:2e:a4:36:d4: a2:60:07:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE0OTgxMTAvBgNVBAUTKEFEQ0Q1QTREQjU5OUM3MUFFRDkzRDA5NkFCMTRDQUZB MDgxNUU2MTcwHhcNMjUwODIzMDUwNDA3WhcNMjUwODMwMDUwNDA3WjAYMRYwFAYD VQQDEw02OGE5NGJjNy04ZDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAulMrRg5Uc9syGmPpPciqiGUhZy6AjccRZupbiNfHxhwgo4BqWHPPK4u2fTll pfQSfsRUJPoihACOHOVL6+shyjaf1hI7vM7E8BXfFQNTogpWf4KbiLdF5oJZjwks MdKTJbOitulHJX70Nn3zBvj5sN91LvBPoB6TQ3O2FnQUmzXRvNulOmXlStHae0Mb EgZtoUCavE5dfnEbri52qs+pLX7/fn/wG78qqoIG0W/5ZToq6bkGrKII8GxrRpfy XoHIOoF3RRt+QgZDvzJlhPO2N78fSZOsAU4v5fDq8VoqLV+GOXORP80Y1Ypun3Tp T7BrA/rOPUbQ/adBf7PKBLXp9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAvRHH84 p3Ge//Mjgn+KMO+lW4vdMB8GA1UdIwQYMBaAFK3NWk21mcca7ZPQlqsUyvoIFeYX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTQ5OC9CM0M4QTk3Q0RG QjUxMUVFQjdBRDhGMkVDNEY5QUUwMi9yYzFhVGJXWnh4cnRrOUNXcXhUSy1nZ1Y1 aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JjMWFUYldaeHhydGs5Q1dxeFRLLWdnVjVoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTQ5OC9CM0M4QTk3Q0RGQjUxMUVFQjdBRDhGMkVDNEY5QUUwMi9yYzFhVGJXWnh4 cnRrOUNXcXhUSy1nZ1Y1aGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKi6YOYXCuJTYKjBuyTfBIXbLFrU1WASDFg8etedagM2nNvshZbGgk nq7ZqEXtwsEstdTKqt4061tXYdBIhPzLQiD+QPeWnBpouGWrNZiZ6cApYwp1WBf/ SNuL1Cw93MVNbZ94n/84p35Fb5cYJDVQoBqXxN78pxYidXAXugSxh0C/3an/u2ye fl8qxRtzvHrcqiukqNOckPfkotNMQBfyt91fvXwyiJrHUBUdJC4GG5bC9i0QVZWn MOASWD0LDNeH5rUYXPyuH6wNYTNDhNKSvsTwHvuh/li8FO58B7i9S3DlY3qvVkcJ tc3KaFi/kumpKQ9YJeNYey6kNtSiYAfw -----END CERTIFICATE-----Generated at Sat Aug 23 17:37:03 2025 by rpki-client