$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft File: dxIwqC7bwncWqz3GqC_FrsRe72c.mft (raw, json) Hash identifier: 3dyBfw+wGscFIBwTXpIXhD9+FUXTNNLpPILP+B9Jzk8= Subject key identifier: 65:93:A3:63:32:3C:D1:A4:B6:F5:D1:D5:BA:17:75:89:0C:0F:4A:BC Authority key identifier: 77:12:30:A8:2E:DB:C2:77:16:AB:3D:C6:A8:2F:C5:AE:C4:5E:EF:67 Certificate issuer: /CN=A91E4463/serialNumber=771230A82EDBC27716AB3DC6A82FC5AEC45EEF67 Certificate serial: 0C7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft Manifest number: 0C4E Signing time: Fri 22 Aug 2025 18:48:05 +0000 Manifest this update: Fri 22 Aug 2025 18:48:03 +0000 Manifest next update: Fri 29 Aug 2025 18:48:03 +0000 Files and hashes: 1: dxIwqC7bwncWqz3GqC_FrsRe72c.crl (hash: t6MZgPuoamiGfGXMUSMvRbajDlapag85AUCSZee7Sk0=) 2: 6EBD0E788EAA11EFA6C1D33AC4F9AE02.roa (hash: 2e+RyL+pYo7TPuAf13kfBjO78vN1YXd9Y/Om8d7N4Uc=) 3: AF625B0680FA11EC96280855C4F9AE02.roa (hash: z4WcPtmsy3sGBTXhyRrnZ77SzocIV0s6o5lPO+EbUAY=) 4: CC3A648A63DC11F091FF8475C4F9AE02.roa (hash: N8pXBxU77s5OeTisROwOwBMr1yrLhMb3EuCrxnXHEDw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.crl rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:48:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3196 (0xc7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4463, serialNumber=771230A82EDBC27716AB3DC6A82FC5AEC45EEF67 Validity Not Before: Aug 22 18:48:03 2025 GMT Not After : Aug 29 18:48:03 2025 GMT Subject: CN=68a8bb64-984e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:24:b6:eb:d8:24:00:83:81:23:18:0c:7f:b9: 53:bf:ff:bb:04:f9:ce:58:4a:b1:a1:b6:ab:1e:87: f1:18:92:04:35:9c:71:cf:10:3e:49:da:33:6a:1d: 9f:21:67:95:02:28:e2:8f:f3:af:a3:f9:d1:8b:da: 0b:d0:10:f8:38:9e:e2:d9:78:b8:6c:c6:87:de:d1: 32:f9:f1:01:58:34:3c:b4:35:d9:31:88:5d:08:c0: 6c:00:f6:6e:ed:e2:51:da:99:74:c2:36:05:a4:9c: 75:0f:41:90:bf:b2:fb:54:76:ce:63:23:32:e1:7e: d5:4c:8d:23:63:c4:cd:60:a4:bf:65:b9:4d:eb:fa: c5:6b:c5:9a:81:d6:2a:c6:39:c8:aa:4a:54:70:bd: 47:bb:21:5e:a0:ae:16:be:e2:8c:56:4e:88:c8:a8: de:4f:d6:95:0e:c4:5c:b1:8e:c4:b7:f8:22:69:42: 6a:ee:93:67:97:3c:ae:15:eb:d6:b3:ec:31:43:71: bb:a0:ce:e8:f7:1c:fa:95:5e:19:6e:2f:56:c0:d7: fe:70:3c:05:2b:6e:95:0b:85:12:cb:ef:49:8a:4b: ce:18:1d:6e:7d:21:14:32:d5:a5:0d:55:fb:a2:75: 22:6f:62:8c:12:13:d6:b3:f7:61:1e:07:0b:37:f7: a1:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:93:A3:63:32:3C:D1:A4:B6:F5:D1:D5:BA:17:75:89:0C:0F:4A:BC X509v3 Authority Key Identifier: keyid:77:12:30:A8:2E:DB:C2:77:16:AB:3D:C6:A8:2F:C5:AE:C4:5E:EF:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:09:6d:c1:c0:4e:ed:7c:2b:ad:38:e5:24:81:9b:63:86:1f: c6:f1:71:20:05:a3:f5:e2:e9:c4:bf:e9:9e:76:ef:95:3e:89: 7e:e5:25:03:85:4f:d0:ca:f9:2c:27:82:4f:09:96:2c:18:8c: 9c:e2:85:56:4c:30:0e:16:60:70:14:6a:c9:8f:7c:26:d1:a4: 9d:3d:b5:92:2a:ea:ad:8d:86:59:db:aa:cb:3a:47:ab:ae:61: 7b:7e:8f:9c:c5:07:63:9c:d5:1f:fd:2e:84:80:e5:74:ee:5e: 93:6e:4f:c0:94:8d:a6:20:eb:bf:c7:24:75:4c:4f:74:e1:9a: 25:ba:95:51:c8:84:66:7e:e6:18:24:5c:4c:6d:a9:74:d0:f6: 25:cf:27:64:fe:0b:42:9c:0d:f9:2b:48:ff:55:f9:ec:d3:f9: c4:95:e7:92:0a:67:94:63:8e:a6:53:eb:be:38:36:bc:e0:d2: c5:17:57:03:17:98:a2:d2:3a:3b:5c:69:2f:ec:c4:d6:1a:2b: 77:c2:b1:1e:4d:bf:ab:da:2e:63:1d:22:85:a5:fc:94:ef:8c: df:a2:47:02:e3:71:18:00:cd:23:89:82:35:c9:54:b2:19:59: 66:b1:c7:bc:1f:e1:75:40:17:ab:10:4b:46:3f:9a:7c:59:17: 54:d9:bb:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ0NjMxMTAvBgNVBAUTKDc3MTIzMEE4MkVEQkMyNzcxNkFCM0RDNkE4MkZDNUFF QzQ1RUVGNjcwHhcNMjUwODIyMTg0ODAzWhcNMjUwODI5MTg0ODAzWjAYMRYwFAYD VQQDEw02OGE4YmI2NC05ODRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvSS269gkAIOBIxgMf7lTv/+7BPnOWEqxobarHofxGJIENZxxzxA+Sdozah2f IWeVAijij/Ovo/nRi9oL0BD4OJ7i2Xi4bMaH3tEy+fEBWDQ8tDXZMYhdCMBsAPZu 7eJR2pl0wjYFpJx1D0GQv7L7VHbOYyMy4X7VTI0jY8TNYKS/ZblN6/rFa8WagdYq xjnIqkpUcL1HuyFeoK4WvuKMVk6IyKjeT9aVDsRcsY7Et/giaUJq7pNnlzyuFevW s+wxQ3G7oM7o9xz6lV4Zbi9WwNf+cDwFK26VC4USy+9JikvOGB1ufSEUMtWlDVX7 onUib2KMEhPWs/dhHgcLN/ehLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGWTo2My PNGktvXR1boXdYkMD0q8MB8GA1UdIwQYMBaAFHcSMKgu28J3Fqs9xqgvxa7EXu9n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDQ2My9BNEQ0NDAwQzEz OUYxMUVBQTY1ODI4NjBDNEY5QUUwMi9keEl3cUM3YnduY1dxejNHcUNfRnJzUmU3 MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R4SXdxQzdid25jV3F6M0dxQ19GcnNSZTcyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDQ2My9BNEQ0NDAwQzEzOUYxMUVBQTY1ODI4NjBDNEY5QUUwMi9keEl3cUM3Yndu Y1dxejNHcUNfRnJzUmU3MmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmCW3BwE7tfCutOOUkgZtjhh/G8XEgBaP14unEv+medu+VPol+5SUD hU/QyvksJ4JPCZYsGIyc4oVWTDAOFmBwFGrJj3wm0aSdPbWSKuqtjYZZ26rLOker rmF7fo+cxQdjnNUf/S6EgOV07l6Tbk/AlI2mIOu/xyR1TE904ZolupVRyIRmfuYY JFxMbal00PYlzydk/gtCnA35K0j/Vfns0/nEleeSCmeUY46mU+u+ODa84NLFF1cD F5ii0jo7XGkv7MTWGit3wrEeTb+r2i5jHSKFpfyU74zfokcC43EYAM0jiYI1yVSy GVlmsce8H+F1QBerEEtGP5p8WRdU2buw -----END CERTIFICATE-----Generated at Sat Aug 23 14:33:39 2025 by rpki-client