$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft File: h88dAWBFUehsJECeSB2vnGZZS_Q.mft (raw, json) Hash identifier: jG10B2uy33Ef2Zx6f6LmUXT6pS8nE3yDOnI2oiuvkPc= Subject key identifier: C1:84:C9:90:64:C3:32:99:7B:BE:9C:8D:FA:C6:98:1C:16:82:3E:E4 Authority key identifier: 87:CF:1D:01:60:45:51:E8:6C:24:40:9E:48:1D:AF:9C:66:59:4B:F4 Certificate issuer: /CN=A91E2042/serialNumber=87CF1D01604551E86C24409E481DAF9C66594BF4 Certificate serial: 0169 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h88dAWBFUehsJECeSB2vnGZZS_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft Manifest number: 0165 Signing time: Sat 23 Aug 2025 04:07:49 +0000 Manifest this update: Sat 23 Aug 2025 04:07:49 +0000 Manifest next update: Sat 30 Aug 2025 04:07:49 +0000 Files and hashes: 1: h88dAWBFUehsJECeSB2vnGZZS_Q.crl (hash: CXpUjNG+J1DnKRzUpZuUU1rSx1j69YkCrFVkZkPn47U=) 2: A4E0754863B411EEAADB3A7CC4F9AE02.roa (hash: Lj0YroS2X8LOR4hY25qUmswSSH1A4SRoLTfz7csDQJc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.crl rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h88dAWBFUehsJECeSB2vnGZZS_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:07:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 361 (0x169) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2042, serialNumber=87CF1D01604551E86C24409E481DAF9C66594BF4 Validity Not Before: Aug 23 04:07:49 2025 GMT Not After : Aug 30 04:07:49 2025 GMT Subject: CN=68a93e95-7c2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fc:e2:01:94:b5:a6:ae:fb:a7:3c:67:9d:36: 9a:93:c6:a4:65:e5:83:22:d8:85:ff:ea:6a:96:f3: 8a:24:28:bc:5d:c5:d3:72:b5:e3:04:f3:5c:3f:aa: 2c:70:e9:23:55:b0:85:f0:7d:a2:c6:94:f9:6a:9d: 0a:31:cd:32:88:9b:28:a1:bf:48:32:12:5e:93:7e: 5b:74:d6:a3:92:73:5c:b3:db:ae:93:a3:c2:7a:b2: d1:75:8e:1a:29:cf:71:9f:a0:26:c4:f7:8b:c0:0b: 12:2e:4f:19:cb:c0:eb:5f:f9:18:7e:96:f9:c5:fe: 52:24:a4:aa:7b:db:48:8f:b2:ff:8e:a2:83:f7:74: 85:b6:60:be:e2:70:22:4c:37:9d:3b:ee:e9:20:00: e7:a8:b0:62:c5:19:2e:9a:aa:30:5c:53:74:6e:2b: f8:1f:43:f3:54:05:c8:9b:7b:2b:1a:b3:93:8e:75: d5:87:07:de:3e:2c:6b:d4:09:7b:02:6d:03:96:30: 9d:b8:7d:13:78:70:f7:44:b0:59:db:2d:3c:03:46: df:76:c3:c3:07:49:77:e8:47:a9:67:36:fc:7d:c6: ce:48:b6:54:c0:e5:85:42:95:c9:6b:7e:f7:ef:d1: 24:5d:79:2a:3e:93:15:e2:b8:b3:4b:05:34:d1:00: ef:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:84:C9:90:64:C3:32:99:7B:BE:9C:8D:FA:C6:98:1C:16:82:3E:E4 X509v3 Authority Key Identifier: keyid:87:CF:1D:01:60:45:51:E8:6C:24:40:9E:48:1D:AF:9C:66:59:4B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h88dAWBFUehsJECeSB2vnGZZS_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:f6:93:32:30:fe:b1:e9:b1:30:8d:82:90:94:8a:2e:36:a9: 32:63:6a:7a:8f:4a:9e:76:5d:30:1e:cb:1c:a8:c3:8c:9d:ec: 7e:d2:96:12:22:df:2a:6f:49:71:e6:af:09:b7:40:a8:f0:89: dd:0d:d8:3e:3f:b9:61:6a:ce:a9:68:0a:02:0f:df:d8:44:4c: 06:c3:04:dd:da:3c:11:1a:3a:e6:4b:a0:19:34:ef:1e:9a:9f: 4f:12:55:c6:f6:b7:5a:3b:c4:14:8d:3c:06:85:2f:dd:09:d5: 1a:b4:fa:05:09:55:94:f7:b0:bc:d8:5a:17:40:f9:b2:89:fb: 90:39:38:a7:9b:1d:26:a3:73:95:e2:77:01:1b:3b:65:f4:77: b6:4d:1c:70:fa:ae:e1:03:8c:24:ef:15:86:33:f8:07:cd:bc: 75:04:0c:99:43:ca:54:8b:e7:a3:bc:2b:17:81:34:a9:72:2f: 88:75:88:b8:3f:c0:05:75:fb:b0:33:2e:f3:b8:a5:34:ff:58: 5c:1e:0e:2c:34:14:bc:06:7e:0e:83:c4:ba:8c:2b:7a:28:9c: 9c:ea:a2:03:7a:51:b4:6b:39:9d:6a:da:4d:ec:d7:d0:46:a0: 3e:f7:54:69:ef:9c:9a:f0:a4:1c:19:79:85:4a:92:2d:ab:ca: 98:68:e1:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIwNDIxMTAvBgNVBAUTKDg3Q0YxRDAxNjA0NTUxRTg2QzI0NDA5RTQ4MURBRjlD NjY1OTRCRjQwHhcNMjUwODIzMDQwNzQ5WhcNMjUwODMwMDQwNzQ5WjAYMRYwFAYD VQQDEw02OGE5M2U5NS03YzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0/ziAZS1pq77pzxnnTaak8akZeWDItiF/+pqlvOKJCi8XcXTcrXjBPNcP6os cOkjVbCF8H2ixpT5ap0KMc0yiJsoob9IMhJek35bdNajknNcs9uuk6PCerLRdY4a Kc9xn6AmxPeLwAsSLk8Zy8DrX/kYfpb5xf5SJKSqe9tIj7L/jqKD93SFtmC+4nAi TDedO+7pIADnqLBixRkumqowXFN0biv4H0PzVAXIm3srGrOTjnXVhwfePixr1Al7 Am0DljCduH0TeHD3RLBZ2y08A0bfdsPDB0l36EepZzb8fcbOSLZUwOWFQpXJa373 79EkXXkqPpMV4rizSwU00QDv7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMGEyZBk wzKZe76cjfrGmBwWgj7kMB8GA1UdIwQYMBaAFIfPHQFgRVHobCRAnkgdr5xmWUv0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjA0Mi8wQUVDMUQwQzYz QjQxMUVFQjY1RDJCN0JDNEY5QUUwMi9oODhkQVdCRlVlaHNKRUNlU0Iydm5HWlpT X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g4OGRBV0JGVWVoc0pFQ2VTQjJ2bkdaWlNfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjA0Mi8wQUVDMUQwQzYzQjQxMUVFQjY1RDJCN0JDNEY5QUUwMi9oODhkQVdCRlVl aHNKRUNlU0Iydm5HWlpTX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAH9pMyMP6x6bEwjYKQlIouNqkyY2p6j0qedl0wHsscqMOMnex+0pYS It8qb0lx5q8Jt0Co8IndDdg+P7lhas6paAoCD9/YREwGwwTd2jwRGjrmS6AZNO8e mp9PElXG9rdaO8QUjTwGhS/dCdUatPoFCVWU97C82FoXQPmyifuQOTinmx0mo3OV 4ncBGztl9He2TRxw+q7hA4wk7xWGM/gHzbx1BAyZQ8pUi+ejvCsXgTSpci+IdYi4 P8AFdfuwMy7zuKU0/1hcHg4sNBS8Bn4Og8S6jCt6KJyc6qIDelG0azmdatpN7NfQ RqA+91Rp75ya8KQcGXmFSpItq8qYaOG4 -----END CERTIFICATE-----Generated at Sat Aug 23 19:12:23 2025 by rpki-client