$ rpki-client -vvf rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.mft File: i29QUS89IfFe7mdUeBjiY79cXRQ.mft (raw, json) Hash identifier: woOKckWgidVh6PtpfKq3nk/dRs0kOxRNU+mQrQrZn/4= Subject key identifier: B9:C8:61:0B:80:AB:85:80:0D:A6:3E:79:D9:7C:CF:F4:53:B9:57:4B Authority key identifier: 8B:6F:50:51:2F:3D:21:F1:5E:EE:67:54:78:18:E2:63:BF:5C:5D:14 Certificate issuer: /CN=A91E431E/serialNumber=8B6F50512F3D21F15EEE67547818E263BF5C5D14 Certificate serial: 0677 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i29QUS89IfFe7mdUeBjiY79cXRQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.mft Manifest number: 0672 Signing time: Fri 22 Aug 2025 22:35:37 +0000 Manifest this update: Fri 22 Aug 2025 22:35:37 +0000 Manifest next update: Fri 29 Aug 2025 22:35:37 +0000 Files and hashes: 1: i29QUS89IfFe7mdUeBjiY79cXRQ.crl (hash: t17MWXJ3Qtqjn1yLtKDhhYpvkvK5UYPA0a5ZDVCL0NM=) 2: 51CBE4868C6711EB98B7B279C4F9AE02.roa (hash: am0gLM47UswkhQ7d8ve9CDz5IVO8+0wgLFBI3jyuYpA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.crl rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i29QUS89IfFe7mdUeBjiY79cXRQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:35:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1655 (0x677) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E431E, serialNumber=8B6F50512F3D21F15EEE67547818E263BF5C5D14 Validity Not Before: Aug 22 22:35:37 2025 GMT Not After : Aug 29 22:35:37 2025 GMT Subject: CN=68a8f0b9-b49b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:60:d9:7f:fb:48:0f:f7:f6:57:6d:46:ac:9d: 0c:af:30:d3:47:3f:22:8d:54:dc:2f:1a:d3:5c:94: 32:03:89:e1:05:cb:59:b4:c0:d9:6d:1f:57:57:41: 4f:b5:06:78:fa:82:5d:62:67:6a:a1:57:fc:a8:38: 78:15:d7:78:6b:3e:6e:99:f2:31:78:a0:93:7f:d6: 06:4e:9d:18:74:e3:c1:bb:71:03:39:5a:4d:79:0f: fe:13:93:f6:2e:4d:a1:8f:8c:ab:53:a4:4c:a4:25: 14:73:b8:7c:96:b2:db:e6:6b:c4:c6:83:1a:6d:5f: 49:19:84:72:96:03:13:e1:5d:d8:63:f8:7d:62:46: 3e:a2:1e:c2:eb:8d:aa:47:72:2f:0f:1c:86:72:9e: de:87:d0:8f:29:1e:78:33:93:86:b8:b4:8d:aa:cb: 3e:2e:38:b3:c9:de:36:cd:f2:cd:40:83:6f:58:b4: fa:6c:83:db:12:e8:2d:4c:fc:c5:ea:ca:a4:d6:00: ba:65:a1:50:f7:2e:6a:1a:3b:89:6c:bf:26:2e:24: 7c:42:bf:6b:62:ed:15:db:2a:b3:86:bc:00:70:7c: f1:e0:0b:c2:a4:d0:2a:40:d3:2d:8e:c9:f0:87:c8: 06:1a:52:a0:70:86:20:82:93:85:97:35:9d:76:13: fc:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:C8:61:0B:80:AB:85:80:0D:A6:3E:79:D9:7C:CF:F4:53:B9:57:4B X509v3 Authority Key Identifier: keyid:8B:6F:50:51:2F:3D:21:F1:5E:EE:67:54:78:18:E2:63:BF:5C:5D:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i29QUS89IfFe7mdUeBjiY79cXRQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:21:cb:a2:2b:52:5c:b8:04:14:9c:01:b4:9c:37:60:96:ee: 4d:24:33:12:75:9f:b2:ab:fc:49:89:be:89:8d:a1:f7:ad:ed: 70:c9:30:9a:05:3a:ef:1b:8a:96:2f:dc:fe:df:16:29:75:6b: 98:b8:3d:96:47:a9:c8:55:25:d5:a8:bf:d9:c5:9b:73:74:44: 28:55:d3:4a:28:36:39:9e:c0:2b:a3:76:38:b0:a9:58:ca:0f: ff:28:24:0a:6e:3a:84:95:8a:f7:3b:20:d9:24:94:13:e3:3a: 4c:0b:cc:5d:54:58:3d:52:1e:ae:71:5a:bf:ef:98:ee:00:7d: 9a:9a:ce:17:34:ad:67:07:ad:3f:7f:b8:9c:c8:6c:30:e4:c1: 26:cb:d6:f9:8e:96:db:35:71:8d:92:b8:1e:ef:33:21:64:76: ff:4d:33:dc:36:74:9c:48:54:08:d3:52:56:03:d2:63:6b:77: 8a:bf:df:0c:e7:9e:2b:f3:e4:68:50:18:a4:9d:26:71:f2:8c: 4b:a2:87:6c:c3:76:69:54:bf:fc:d5:e5:7b:90:a5:41:da:e0: bb:ed:1a:51:c1:7a:6b:c7:1e:c1:e3:aa:fd:d0:c7:de:e8:c7: 51:2e:ab:23:0b:ef:75:b6:0c:39:c2:a3:15:c9:d7:e4:57:01: 8e:c3:8a:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQzMUUxMTAvBgNVBAUTKDhCNkY1MDUxMkYzRDIxRjE1RUVFNjc1NDc4MThFMjYz QkY1QzVEMTQwHhcNMjUwODIyMjIzNTM3WhcNMjUwODI5MjIzNTM3WjAYMRYwFAYD VQQDEw02OGE4ZjBiOS1iNDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr2DZf/tID/f2V21GrJ0MrzDTRz8ijVTcLxrTXJQyA4nhBctZtMDZbR9XV0FP tQZ4+oJdYmdqoVf8qDh4Fdd4az5umfIxeKCTf9YGTp0YdOPBu3EDOVpNeQ/+E5P2 Lk2hj4yrU6RMpCUUc7h8lrLb5mvExoMabV9JGYRylgMT4V3YY/h9YkY+oh7C642q R3IvDxyGcp7eh9CPKR54M5OGuLSNqss+Ljizyd42zfLNQINvWLT6bIPbEugtTPzF 6sqk1gC6ZaFQ9y5qGjuJbL8mLiR8Qr9rYu0V2yqzhrwAcHzx4AvCpNAqQNMtjsnw h8gGGlKgcIYggpOFlzWddhP8GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLnIYQuA q4WADaY+edl8z/RTuVdLMB8GA1UdIwQYMBaAFItvUFEvPSHxXu5nVHgY4mO/XF0U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDMxRS83QTg0ODE5NjhD NjUxMUVCQUFGODAzNzZDNEY5QUUwMi9pMjlRVVM4OUlmRmU3bWRVZUJqaVk3OWNY UlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2kyOVFVUzg5SWZGZTdtZFVlQmppWTc5Y1hSUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDMxRS83QTg0ODE5NjhDNjUxMUVCQUFGODAzNzZDNEY5QUUwMi9pMjlRVVM4OUlm RmU3bWRVZUJqaVk3OWNYUlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzIcuiK1JcuAQUnAG0nDdglu5NJDMSdZ+yq/xJib6JjaH3re1wyTCa BTrvG4qWL9z+3xYpdWuYuD2WR6nIVSXVqL/ZxZtzdEQoVdNKKDY5nsAro3Y4sKlY yg//KCQKbjqElYr3OyDZJJQT4zpMC8xdVFg9Uh6ucVq/75juAH2ams4XNK1nB60/ f7icyGww5MEmy9b5jpbbNXGNkrge7zMhZHb/TTPcNnScSFQI01JWA9Jja3eKv98M 554r8+RoUBiknSZx8oxLoodsw3ZpVL/81eV7kKVB2uC77RpRwXprxx7B46r90Mfe 6MdRLqsjC+91tgw5wqMVydfkVwGOw4ry -----END CERTIFICATE-----Generated at Sat Aug 23 16:24:59 2025 by rpki-client