$ rpki-client -vvf rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/0KCTtlEHkzVIStC6HXZhX1w2aIo.mft File: 0KCTtlEHkzVIStC6HXZhX1w2aIo.mft (raw, json) Hash identifier: yw37WOoUIPEdanxi9Eb/OY4eJ7Y1fqNlg9emHUR1Oxs= Subject key identifier: 3C:AC:C0:D2:61:11:71:E4:BC:6B:D4:C9:47:38:0E:10:67:AB:9C:51 Authority key identifier: D0:A0:93:B6:51:07:93:35:48:4A:D0:BA:1D:76:61:5F:5C:36:68:8A Certificate issuer: /CN=A91E275B/serialNumber=D0A093B651079335484AD0BA1D76615F5C36688A Certificate serial: 3344 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KCTtlEHkzVIStC6HXZhX1w2aIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/0KCTtlEHkzVIStC6HXZhX1w2aIo.mft Manifest number: 9AA2 Signing time: Fri 22 Aug 2025 15:18:23 +0000 Manifest this update: Fri 22 Aug 2025 15:18:23 +0000 Manifest next update: Fri 29 Aug 2025 15:18:23 +0000 Files and hashes: 1: 0KCTtlEHkzVIStC6HXZhX1w2aIo.crl (hash: 2+6VgxF/blk5oJhkvz5zcENs7WRxPXGVwLBJ0AW/N6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/0KCTtlEHkzVIStC6HXZhX1w2aIo.crl rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/0KCTtlEHkzVIStC6HXZhX1w2aIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KCTtlEHkzVIStC6HXZhX1w2aIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:18:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13124 (0x3344) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E275B, serialNumber=D0A093B651079335484AD0BA1D76615F5C36688A Validity Not Before: Aug 22 15:18:23 2025 GMT Not After : Aug 29 15:18:23 2025 GMT Subject: CN=68a88a3f-67b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:62:4e:92:d9:16:50:fd:24:df:dd:8d:17:6f: 4d:39:0d:af:3f:f8:bd:d2:ac:03:85:77:a9:d3:e0: ce:3b:58:ad:e6:c3:44:02:0f:6a:10:6a:71:df:50: e0:eb:36:a1:ac:a1:db:a3:79:7b:19:81:e4:a8:0f: 00:03:28:7d:6e:65:fb:2a:d5:1e:f4:3d:f3:cd:1a: 15:1a:76:42:0f:bd:e4:9d:ce:33:54:07:cb:a1:71: 86:f7:93:d3:da:7a:36:9c:c5:96:dd:0c:4e:88:37: c1:71:3f:ce:25:42:41:a6:57:52:e5:58:cd:3e:e0: a4:85:b6:43:7e:ff:ea:6a:8a:f5:fe:7b:d8:fc:15: 9e:e0:bf:82:98:a2:4e:a8:ea:ba:30:83:10:81:48: 41:21:20:cb:b5:18:91:b2:8e:80:38:d1:30:75:39: 90:ef:f0:14:9b:f5:28:b1:47:0c:8f:0e:37:04:23: 7e:60:01:36:7f:00:21:6a:3e:d9:0a:f3:59:c5:38: b6:97:ce:7b:c4:7a:fe:2a:81:3d:9d:1d:19:25:90: 7f:6f:c6:92:75:fb:c3:f0:53:44:6a:7d:eb:19:12: d4:0c:62:19:78:6e:21:17:7d:35:d4:15:3c:6c:2c: 25:f6:fc:f6:a2:f6:34:c5:9b:d1:ca:33:c5:50:d3: ab:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:AC:C0:D2:61:11:71:E4:BC:6B:D4:C9:47:38:0E:10:67:AB:9C:51 X509v3 Authority Key Identifier: keyid:D0:A0:93:B6:51:07:93:35:48:4A:D0:BA:1D:76:61:5F:5C:36:68:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/0KCTtlEHkzVIStC6HXZhX1w2aIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KCTtlEHkzVIStC6HXZhX1w2aIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/0KCTtlEHkzVIStC6HXZhX1w2aIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:44:d3:3b:92:34:0f:db:86:99:a0:50:37:8c:65:a4:b1:a1: 50:ee:1b:ba:95:4f:a5:c8:55:cb:9f:14:bc:fe:67:9d:f4:a9: a0:ca:a0:3d:eb:73:6d:88:2f:d3:6a:3d:a7:62:c8:02:9c:67: 7d:07:cd:9d:a8:6b:e3:f2:8f:0e:8e:4e:b2:d1:66:58:c6:bc: 9a:77:e8:3f:c0:c1:82:20:0d:89:c2:08:75:18:3b:35:5b:10: c0:50:ae:cb:8e:c6:43:4d:5c:37:c7:bb:9d:91:21:56:83:96: d7:91:42:72:f3:1a:25:4c:f7:0e:c1:a5:4c:12:a4:f7:fb:8d: f3:30:f9:65:41:21:4d:d4:c4:19:06:57:eb:57:a3:82:75:00: 03:e3:f0:c6:17:52:19:43:e6:d4:ac:89:b4:57:e6:5d:7a:67: d4:cd:8c:c4:95:de:ba:46:0e:04:08:90:c1:ab:5e:c0:d2:f6: e1:ce:88:3d:51:72:c2:68:96:19:34:2a:b8:78:6f:8e:1b:e9: 3d:9c:f0:cc:da:36:a9:ce:70:7b:36:a9:83:95:92:1e:02:bd: 6a:fa:f3:9e:59:ee:0e:b8:9a:65:2f:27:de:23:81:3c:69:7f: 67:ea:c7:c9:54:90:bc:6a:00:c3:22:72:f9:4a:d4:82:5b:88: 07:01:6b:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM0QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI3NUIxMTAvBgNVBAUTKEQwQTA5M0I2NTEwNzkzMzU0ODRBRDBCQTFENzY2MTVG NUMzNjY4OEEwHhcNMjUwODIyMTUxODIzWhcNMjUwODI5MTUxODIzWjAYMRYwFAYD VQQDEw02OGE4OGEzZi02N2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuWJOktkWUP0k392NF29NOQ2vP/i90qwDhXep0+DOO1it5sNEAg9qEGpx31Dg 6zahrKHbo3l7GYHkqA8AAyh9bmX7KtUe9D3zzRoVGnZCD73knc4zVAfLoXGG95PT 2no2nMWW3QxOiDfBcT/OJUJBpldS5VjNPuCkhbZDfv/qaor1/nvY/BWe4L+CmKJO qOq6MIMQgUhBISDLtRiRso6AONEwdTmQ7/AUm/UosUcMjw43BCN+YAE2fwAhaj7Z CvNZxTi2l857xHr+KoE9nR0ZJZB/b8aSdfvD8FNEan3rGRLUDGIZeG4hF3011BU8 bCwl9vz2ovY0xZvRyjPFUNOrqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDyswNJh EXHkvGvUyUc4DhBnq5xRMB8GA1UdIwQYMBaAFNCgk7ZRB5M1SErQuh12YV9cNmiK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjc1Qi9BQjIwMjIzMDFE QTkxMUUyQjA5NUM0QTQwOEIwMkNEMi8wS0NUdGxFSGt6VklTdEM2SFhaaFgxdzJh SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBLQ1R0bEVIa3pWSVN0QzZIWFpoWDF3MmFJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Mjc1Qi9BQjIwMjIzMDFEQTkxMUUyQjA5NUM0QTQwOEIwMkNEMi8wS0NUdGxFSGt6 VklTdEM2SFhaaFgxdzJhSW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLRNM7kjQP24aZoFA3jGWksaFQ7hu6lU+lyFXLnxS8/med9KmgyqA9 63NtiC/Taj2nYsgCnGd9B82dqGvj8o8Ojk6y0WZYxryad+g/wMGCIA2Jwgh1GDs1 WxDAUK7LjsZDTVw3x7udkSFWg5bXkUJy8xolTPcOwaVMEqT3+43zMPllQSFN1MQZ BlfrV6OCdQAD4/DGF1IZQ+bUrIm0V+ZdemfUzYzEld66Rg4ECJDBq17A0vbhzog9 UXLCaJYZNCq4eG+OG+k9nPDM2japznB7NqmDlZIeAr1q+vOeWe4OuJplLyfeI4E8 aX9n6sfJVJC8agDDInL5StSCW4gHAWtH -----END CERTIFICATE-----Generated at Sat Aug 23 13:44:44 2025 by rpki-client