$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.mft File: pIqTm2fbIrr3fgB7Id87dFtig5A.mft (raw, json) Hash identifier: 7kK7TLkHJiMoULOxBh5S/tLBMRNuZ6QK1oqcdbLXbK8= Subject key identifier: CE:7A:1A:D8:15:AC:61:15:22:9A:00:78:C4:72:5C:DD:4D:A5:46:87 Authority key identifier: A4:8A:93:9B:67:DB:22:BA:F7:7E:00:7B:21:DF:3B:74:5B:62:83:90 Certificate issuer: /CN=A91E1ED2/serialNumber=A48A939B67DB22BAF77E007B21DF3B745B628390 Certificate serial: 0691 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIqTm2fbIrr3fgB7Id87dFtig5A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.mft Manifest number: 068B Signing time: Fri 22 Aug 2025 22:29:10 +0000 Manifest this update: Fri 22 Aug 2025 22:29:10 +0000 Manifest next update: Fri 29 Aug 2025 22:29:10 +0000 Files and hashes: 1: pIqTm2fbIrr3fgB7Id87dFtig5A.crl (hash: SfOZ1ZRFSvBlQakSscK3yANb+dEr5AGAlr7FpYZsjrI=) 2: A3AA461082BE11EB93A19A35C4F9AE02.roa (hash: pKScxQMxg1WdvXI6uB4aKpZXfYDWDJw+VDC0QK45Pf4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.crl rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIqTm2fbIrr3fgB7Id87dFtig5A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:29:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1681 (0x691) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1ED2, serialNumber=A48A939B67DB22BAF77E007B21DF3B745B628390 Validity Not Before: Aug 22 22:29:10 2025 GMT Not After : Aug 29 22:29:10 2025 GMT Subject: CN=68a8ef36-84f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fd:57:f3:23:35:3e:07:4f:34:f7:c7:80:35: 28:a1:cf:13:08:e0:dd:ee:e4:8f:84:0d:39:f3:c1: 6b:cb:d8:26:bb:5a:15:16:44:28:5e:b7:6d:3d:60: c5:1a:e4:1d:df:ee:6b:a6:50:b4:28:92:c6:31:f6: 17:39:c5:69:d0:67:ef:b9:73:bd:2a:ad:06:36:fd: b9:bf:7f:de:7d:e1:9c:f5:44:71:c4:ad:6a:6c:88: 68:28:35:3b:94:f1:b9:e5:a4:b2:33:55:53:98:fc: 82:65:3f:a0:43:c7:00:b3:9f:58:ef:f8:b9:f5:57: c2:be:ed:5b:9d:fc:87:b9:43:6a:a7:05:39:33:d8: f0:ba:a0:05:9d:60:15:d9:bf:a7:a1:02:02:28:8d: 82:b8:c9:93:3d:27:b7:b0:06:a8:04:ba:f0:e1:49: 5c:7c:1b:8c:fa:98:5d:05:bb:a4:05:42:aa:de:47: 82:6a:c4:76:a7:ab:c6:f4:9d:44:13:86:74:e0:ea: e9:f2:ef:01:24:f7:ce:7f:25:a0:d8:4d:fb:c7:e7: ab:48:b5:75:e6:73:79:6b:9a:b5:ca:f6:17:97:21: fa:5a:50:96:59:ee:9e:25:b1:3e:78:80:73:a7:69: b9:b3:12:21:a7:cb:1f:4b:1d:1b:1e:b5:ca:b9:d7: 0b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:7A:1A:D8:15:AC:61:15:22:9A:00:78:C4:72:5C:DD:4D:A5:46:87 X509v3 Authority Key Identifier: keyid:A4:8A:93:9B:67:DB:22:BA:F7:7E:00:7B:21:DF:3B:74:5B:62:83:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIqTm2fbIrr3fgB7Id87dFtig5A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:e9:56:62:76:2f:68:5d:ea:a1:7c:61:3c:03:ce:82:00:b5: d8:16:30:9f:df:4f:0c:f9:cc:a2:24:64:84:43:28:6e:b3:68: 6e:96:b4:f8:65:5d:a6:5b:c3:70:5e:47:53:cd:18:d3:bd:db: ed:7b:8c:77:5b:31:37:3e:3e:60:c2:9f:ec:d3:8f:f1:0f:59: e6:fa:48:89:df:e9:ae:01:b8:4c:0e:ce:7b:20:76:34:da:64: a1:62:70:0c:8f:98:82:67:95:c5:75:a6:d4:6a:47:b6:e7:d3: 60:06:00:79:f7:3b:96:20:3a:6a:aa:2b:65:68:aa:47:b7:b1: bf:c7:bf:50:6c:d1:72:d8:0c:3e:cc:f3:49:02:bc:e3:d0:9c: d4:ff:ba:04:14:bb:c4:ee:d4:84:b1:50:e3:f2:f8:aa:d6:08: 9d:c1:6c:af:98:34:af:71:6f:10:a5:7b:56:14:60:68:96:47: 75:27:4c:de:10:c6:ff:ef:8c:33:29:35:9b:cf:02:0c:17:ba: 91:44:47:ee:e3:99:c7:c0:cd:26:0e:09:55:b6:09:0a:7c:5e: cd:2d:5e:ec:40:a2:22:e4:0d:b2:e2:31:3a:6e:08:af:b9:a8: 56:a5:da:52:8e:ea:a7:00:e6:df:fa:23:d6:a2:67:32:37:7c: 6e:5a:aa:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFFRDIxMTAvBgNVBAUTKEE0OEE5MzlCNjdEQjIyQkFGNzdFMDA3QjIxREYzQjc0 NUI2MjgzOTAwHhcNMjUwODIyMjIyOTEwWhcNMjUwODI5MjIyOTEwWjAYMRYwFAYD VQQDEw02OGE4ZWYzNi04NGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzv1X8yM1PgdPNPfHgDUooc8TCODd7uSPhA0588Fry9gmu1oVFkQoXrdtPWDF GuQd3+5rplC0KJLGMfYXOcVp0GfvuXO9Kq0GNv25v3/efeGc9URxxK1qbIhoKDU7 lPG55aSyM1VTmPyCZT+gQ8cAs59Y7/i59VfCvu1bnfyHuUNqpwU5M9jwuqAFnWAV 2b+noQICKI2CuMmTPSe3sAaoBLrw4UlcfBuM+phdBbukBUKq3keCasR2p6vG9J1E E4Z04Orp8u8BJPfOfyWg2E37x+erSLV15nN5a5q1yvYXlyH6WlCWWe6eJbE+eIBz p2m5sxIhp8sfSx0bHrXKudcLIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM56GtgV rGEVIpoAeMRyXN1NpUaHMB8GA1UdIwQYMBaAFKSKk5tn2yK6934AeyHfO3RbYoOQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUVEMi8zRkU4REU2Qzgy QkQxMUVCOUJDNUQzMzRDNEY5QUUwMi9wSXFUbTJmYklycjNmZ0I3SWQ4N2RGdGln NUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BJcVRtMmZiSXJyM2ZnQjdJZDg3ZEZ0aWc1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUVEMi8zRkU4REU2QzgyQkQxMUVCOUJDNUQzMzRDNEY5QUUwMi9wSXFUbTJmYkly cjNmZ0I3SWQ4N2RGdGlnNUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDE6VZidi9oXeqhfGE8A86CALXYFjCf308M+cyiJGSEQyhus2hulrT4 ZV2mW8NwXkdTzRjTvdvte4x3WzE3Pj5gwp/s04/xD1nm+kiJ3+muAbhMDs57IHY0 2mShYnAMj5iCZ5XFdabUake259NgBgB59zuWIDpqqitlaKpHt7G/x79QbNFy2Aw+ zPNJArzj0JzU/7oEFLvE7tSEsVDj8viq1gidwWyvmDSvcW8QpXtWFGBolkd1J0ze EMb/74wzKTWbzwIMF7qRREfu45nHwM0mDglVtgkKfF7NLV7sQKIi5A2y4jE6bgiv uahWpdpSjuqnAObf+iPWomcyN3xuWqqF -----END CERTIFICATE-----Generated at Sat Aug 23 20:57:47 2025 by rpki-client