$ rpki-client -vvf rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.mft File: 99bebnsqx71FDHcVhj6XmVU4Pk4.mft (raw, json) Hash identifier: fZMGekQbTkJu9fsRettoWF04rU7aQyog/5m9KpuoKNM= Subject key identifier: 09:04:5E:56:7D:88:0B:C3:C6:F3:07:D8:83:AD:EC:DD:70:05:03:E0 Authority key identifier: F7:D6:DE:6E:7B:2A:C7:BD:45:0C:77:15:86:3E:97:99:55:38:3E:4E Certificate issuer: /CN=A91E33AA/serialNumber=F7D6DE6E7B2AC7BD450C7715863E979955383E4E Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99bebnsqx71FDHcVhj6XmVU4Pk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.mft Manifest number: 1C Signing time: Sat 23 Aug 2025 08:09:16 +0000 Manifest this update: Sat 23 Aug 2025 08:09:15 +0000 Manifest next update: Sat 30 Aug 2025 08:09:15 +0000 Files and hashes: 1: 99bebnsqx71FDHcVhj6XmVU4Pk4.crl (hash: leqw40Lcd/B65FwNxRFtmohW/KoHO5xNp4YQ+CpmHNI=) 2: E68B45D6596711F094054D6BC4F9AE02.roa (hash: KsrzFIQg6uK84oBVBjzffm7U9gXX448ArNBcSCFz+n0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.crl rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99bebnsqx71FDHcVhj6XmVU4Pk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:09:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E33AA, serialNumber=F7D6DE6E7B2AC7BD450C7715863E979955383E4E Validity Not Before: Aug 23 08:09:15 2025 GMT Not After : Aug 30 08:09:15 2025 GMT Subject: CN=68a9772c-3cc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:10:0a:b3:95:28:1d:d9:85:1c:7f:b0:de:4d: 5f:57:a2:71:c9:63:36:4c:4a:b5:a6:e2:02:64:4c: e4:3c:d3:c2:29:5f:ba:27:54:51:41:b9:d6:c8:02: 01:76:76:38:10:03:17:cb:3c:06:a3:f7:77:6c:df: 18:14:48:4b:0c:a6:8e:91:48:56:47:e0:2c:e1:85: 8d:64:92:1b:cc:fd:50:44:c6:1d:66:f4:8e:59:4a: ec:0d:1b:d9:b0:13:25:0f:6a:59:a2:e7:e2:3b:e8: 87:a5:d7:c4:ee:62:15:dc:a3:c5:4f:db:7c:f2:92: d6:76:a8:58:5a:68:7e:9a:5d:52:fc:36:48:51:57: 59:97:f6:59:a3:a5:fb:bb:11:bc:fc:90:be:57:9e: 69:0b:96:ba:6a:ac:fe:a1:2d:92:ea:86:cd:ac:56: a4:0a:9e:19:db:45:cd:fb:37:49:cc:ac:50:fb:e4: 14:6b:88:5d:7e:55:41:c9:07:6f:50:24:fb:ca:22: be:e0:b7:a5:36:dc:06:50:14:99:b0:ac:ff:ae:92: b0:c1:85:95:7a:d3:c7:4c:52:c7:b0:88:f3:4e:31: 0a:57:cf:ff:5a:f4:e0:31:78:27:da:21:96:c4:04: 8a:95:c3:95:fe:69:17:b7:b9:2f:a1:cb:1a:cb:15: 9c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:04:5E:56:7D:88:0B:C3:C6:F3:07:D8:83:AD:EC:DD:70:05:03:E0 X509v3 Authority Key Identifier: keyid:F7:D6:DE:6E:7B:2A:C7:BD:45:0C:77:15:86:3E:97:99:55:38:3E:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99bebnsqx71FDHcVhj6XmVU4Pk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:b1:d7:30:a5:9f:34:90:cf:6f:b4:cd:91:82:7c:76:96:35: fa:c1:9b:92:7e:f0:6c:f5:6e:d1:0a:2f:96:63:63:22:22:db: 84:b4:59:6d:73:83:57:6a:1a:b6:e4:6f:ff:5e:ad:bf:4b:bb: 1d:0a:79:2c:83:25:96:32:8c:3d:ee:22:a8:7a:01:26:bd:ba: 1d:00:bb:70:bb:85:9d:86:4b:60:d0:aa:d1:3c:20:b7:ab:d3: 78:6e:d8:ba:bc:ef:64:18:c8:f7:64:6f:38:3d:6c:4f:77:e6: 45:02:bc:24:e0:ef:19:12:35:c6:5a:fa:c9:36:cc:bf:83:49: 18:19:0a:d3:4f:8b:86:03:3c:f0:d8:1d:4b:f9:ab:86:02:47: 48:84:36:02:08:fb:7a:ff:c4:e8:6e:98:de:29:88:ab:3d:6f: e8:e1:72:23:8d:04:5c:6e:ac:21:c4:e5:a3:ff:46:31:7b:90: 1b:fb:3a:5b:9e:2c:28:74:35:70:0f:9d:43:d7:cb:4c:2d:fb: a9:f4:dd:70:1a:f8:88:3c:25:d0:a4:7e:88:ea:2d:f1:6f:09: 5f:7a:52:0b:db:d9:2c:5e:9a:fc:78:80:84:99:6f:0f:c1:5b: 3a:c1:75:66:26:ed:f2:4b:a4:56:50:0c:31:fe:64:f7:0a:9f: 13:ac:d2:11 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MzNBQTExMC8GA1UEBRMoRjdENkRFNkU3QjJBQzdCRDQ1MEM3NzE1ODYzRTk3OTk1 NTM4M0U0RTAeFw0yNTA4MjMwODA5MTVaFw0yNTA4MzAwODA5MTVaMBgxFjAUBgNV BAMTDTY4YTk3NzJjLTNjYzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDlEAqzlSgd2YUcf7DeTV9XonHJYzZMSrWm4gJkTOQ808IpX7onVFFBudbIAgF2 djgQAxfLPAaj93ds3xgUSEsMpo6RSFZH4CzhhY1kkhvM/VBExh1m9I5ZSuwNG9mw EyUPalmi5+I76Iel18TuYhXco8VP23zyktZ2qFhaaH6aXVL8NkhRV1mX9lmjpfu7 Ebz8kL5XnmkLlrpqrP6hLZLqhs2sVqQKnhnbRc37N0nMrFD75BRriF1+VUHJB29Q JPvKIr7gt6U23AZQFJmwrP+ukrDBhZV608dMUsewiPNOMQpXz/9a9OAxeCfaIZbE BIqVw5X+aRe3uS+hyxrLFZwtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCQReVn2I C8PG8wfYg63s3XAFA+AwHwYDVR0jBBgwFoAU99bebnsqx71FDHcVhj6XmVU4Pk4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzM0FBLzUyRDlBRDQ2NTk2 NzExRjA4QzQwNzkyQ0M0RjlBRTAyLzk5YmVibnNxeDcxRkRIY1ZoajZYbVZVNFBr NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOTliZWJuc3F4NzFGREhjVmhqNlhtVlU0UGs0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUz M0FBLzUyRDlBRDQ2NTk2NzExRjA4QzQwNzkyQ0M0RjlBRTAyLzk5YmVibnNxeDcx RkRIY1ZoajZYbVZVNFBrNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA2x1zClnzSQz2+0zZGCfHaWNfrBm5J+8Gz1btEKL5ZjYyIi24S0WW1z g1dqGrbkb/9erb9Lux0KeSyDJZYyjD3uIqh6ASa9uh0Au3C7hZ2GS2DQqtE8ILer 03hu2Lq872QYyPdkbzg9bE935kUCvCTg7xkSNcZa+sk2zL+DSRgZCtNPi4YDPPDY HUv5q4YCR0iENgII+3r/xOhumN4piKs9b+jhciONBFxurCHE5aP/RjF7kBv7Olue LCh0NXAPnUPXy0wt+6n03XAa+Ig8JdCkfojqLfFvCV96Ugvb2Sxemvx4gISZbw/B WzrBdWYm7fJLpFZQDDH+ZPcKnxOs0hE= -----END CERTIFICATE-----Generated at Sat Aug 23 21:06:44 2025 by rpki-client