$ rpki-client -vvf rpki.apnic.net/member_repository/A91E754F/B452BF8C841D11EBA087BF31C4F9AE02/DB8k6eYChXae9hTPqBPuUayemP4.mft File: DB8k6eYChXae9hTPqBPuUayemP4.mft (raw, json) Hash identifier: kF+EfoMG6gyKiaZHv3H6dvZJrrAmKDdcekQiK6/PQ5o= Subject key identifier: 60:33:9B:CA:BB:97:96:FB:5D:C3:BF:9D:60:72:03:C4:43:20:F6:5C Authority key identifier: 0C:1F:24:E9:E6:02:85:76:9E:F6:14:CF:A8:13:EE:51:AC:9E:98:FE Certificate issuer: /CN=A91E754F/serialNumber=0C1F24E9E60285769EF614CFA813EE51AC9E98FE Certificate serial: 068D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DB8k6eYChXae9hTPqBPuUayemP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E754F/B452BF8C841D11EBA087BF31C4F9AE02/DB8k6eYChXae9hTPqBPuUayemP4.mft Manifest number: 0686 Signing time: Fri 22 Aug 2025 22:30:15 +0000 Manifest this update: Fri 22 Aug 2025 22:30:14 +0000 Manifest next update: Fri 29 Aug 2025 22:30:14 +0000 Files and hashes: 1: DB8k6eYChXae9hTPqBPuUayemP4.crl (hash: +pLGFI8mcGmul12Yi5Z33sSbQzU2TAzvQpRa4fdCN7M=) 2: 26F67E0A842011EB8A4C635AC4F9AE02.roa (hash: /0E6jZ4+7bqUYrWrcsn+EsmkQL/Ndn9BT+YgQs7TIDw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E754F/B452BF8C841D11EBA087BF31C4F9AE02/DB8k6eYChXae9hTPqBPuUayemP4.crl rsync://rpki.apnic.net/member_repository/A91E754F/B452BF8C841D11EBA087BF31C4F9AE02/DB8k6eYChXae9hTPqBPuUayemP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DB8k6eYChXae9hTPqBPuUayemP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:30:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1677 (0x68d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E754F, serialNumber=0C1F24E9E60285769EF614CFA813EE51AC9E98FE Validity Not Before: Aug 22 22:30:14 2025 GMT Not After : Aug 29 22:30:14 2025 GMT Subject: CN=68a8ef76-8ba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:a9:d3:18:33:a0:61:81:d9:46:ec:00:59:3e: 1d:ee:ec:2b:91:71:17:bf:ea:8f:4c:03:e6:93:02: 46:59:30:8c:bb:a3:58:8d:2d:06:b1:d8:e0:d1:c0: 37:c9:b6:45:04:e3:92:05:83:e3:37:74:52:40:a0: 86:19:7d:a8:b4:1e:f1:03:11:4e:7b:7e:af:1a:ba: ab:f0:d5:8c:6d:ca:ef:98:f4:77:68:1b:8f:05:a6: 74:b4:20:38:4b:5a:22:02:d1:76:99:fa:0e:4a:5c: 46:87:c9:ca:7d:c7:3c:05:f0:72:7a:5b:5f:c2:a0: 58:a1:df:f1:43:b0:a5:96:fb:ee:6a:05:08:3b:1e: bd:f2:fc:15:12:7a:d1:43:a1:8e:fc:7b:b5:57:6c: 8c:15:26:46:aa:13:b3:c1:fe:59:2e:04:21:0e:b7: 11:2a:5e:22:f1:b2:5f:64:32:08:aa:62:91:94:62: 26:f8:f4:54:40:1d:36:93:d6:00:46:15:5b:0a:80: 11:62:fc:6b:1c:16:b0:e2:06:25:eb:c8:88:45:ec: 20:31:79:62:16:c5:d4:ea:74:ab:aa:de:68:62:a7: 11:ee:e7:f8:81:af:8e:b4:d7:1b:d8:90:3e:c6:aa: f9:dd:f4:31:28:1c:ec:06:58:57:28:61:90:36:71: bb:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:33:9B:CA:BB:97:96:FB:5D:C3:BF:9D:60:72:03:C4:43:20:F6:5C X509v3 Authority Key Identifier: keyid:0C:1F:24:E9:E6:02:85:76:9E:F6:14:CF:A8:13:EE:51:AC:9E:98:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E754F/B452BF8C841D11EBA087BF31C4F9AE02/DB8k6eYChXae9hTPqBPuUayemP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DB8k6eYChXae9hTPqBPuUayemP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E754F/B452BF8C841D11EBA087BF31C4F9AE02/DB8k6eYChXae9hTPqBPuUayemP4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:8f:20:5d:6c:de:c0:11:b6:69:f0:a2:d4:dc:9b:44:eb:f0: 0a:61:fd:c0:6c:c2:a2:2c:69:0b:bb:b1:84:83:ed:ba:5d:3e: 59:c0:19:f5:60:56:08:d4:dc:f1:cd:93:78:43:e1:53:e0:92: 83:74:58:99:ab:9a:3e:0e:68:b5:68:9f:af:34:53:fa:53:6e: 43:5d:00:b9:7d:33:8b:28:a1:4f:8c:e3:29:2b:8a:d0:d6:f6: 79:bc:1d:80:6a:03:de:7b:96:9b:00:29:f7:ba:bd:87:7c:75: 32:15:a8:aa:64:99:74:10:94:9b:f3:c7:98:a7:b2:50:eb:c7: 1d:b1:15:e4:c3:84:22:45:94:14:20:7a:2a:e9:78:ad:a8:c8: e0:a3:17:4f:bf:9b:a7:1c:33:2e:6d:7d:f7:52:7a:d2:05:73: b2:46:d7:cf:f3:33:15:87:58:5f:4c:be:bd:1a:fd:0d:40:f3: 7b:67:cb:f5:f8:2f:c8:7f:10:38:9d:6d:bc:dd:73:93:50:b4: 16:ed:29:0b:ad:49:78:8b:44:a8:20:95:af:ba:e1:6c:c8:b3: 51:60:17:0c:41:94:95:62:60:af:18:cf:fc:04:e5:68:af:ad: 0f:42:08:cd:4a:43:20:9e:0d:88:d0:8b:df:80:fb:00:3a:75: 44:0d:ab:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc1NEYxMTAvBgNVBAUTKDBDMUYyNEU5RTYwMjg1NzY5RUY2MTRDRkE4MTNFRTUx QUM5RTk4RkUwHhcNMjUwODIyMjIzMDE0WhcNMjUwODI5MjIzMDE0WjAYMRYwFAYD VQQDEw02OGE4ZWY3Ni04YmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA66nTGDOgYYHZRuwAWT4d7uwrkXEXv+qPTAPmkwJGWTCMu6NYjS0Gsdjg0cA3 ybZFBOOSBYPjN3RSQKCGGX2otB7xAxFOe36vGrqr8NWMbcrvmPR3aBuPBaZ0tCA4 S1oiAtF2mfoOSlxGh8nKfcc8BfByeltfwqBYod/xQ7CllvvuagUIOx698vwVEnrR Q6GO/Hu1V2yMFSZGqhOzwf5ZLgQhDrcRKl4i8bJfZDIIqmKRlGIm+PRUQB02k9YA RhVbCoARYvxrHBaw4gYl68iIRewgMXliFsXU6nSrqt5oYqcR7uf4ga+OtNcb2JA+ xqr53fQxKBzsBlhXKGGQNnG7sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGAzm8q7 l5b7XcO/nWByA8RDIPZcMB8GA1UdIwQYMBaAFAwfJOnmAoV2nvYUz6gT7lGsnpj+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzU0Ri9CNDUyQkY4Qzg0 MUQxMUVCQTA4N0JGMzFDNEY5QUUwMi9EQjhrNmVZQ2hYYWU5aFRQcUJQdVVheWVt UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RCOGs2ZVlDaFhhZTloVFBxQlB1VWF5ZW1QNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzU0Ri9CNDUyQkY4Qzg0MUQxMUVCQTA4N0JGMzFDNEY5QUUwMi9EQjhrNmVZQ2hY YWU5aFRQcUJQdVVheWVtUDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXjyBdbN7AEbZp8KLU3JtE6/AKYf3AbMKiLGkLu7GEg+26XT5ZwBn1 YFYI1NzxzZN4Q+FT4JKDdFiZq5o+Dmi1aJ+vNFP6U25DXQC5fTOLKKFPjOMpK4rQ 1vZ5vB2AagPee5abACn3ur2HfHUyFaiqZJl0EJSb88eYp7JQ68cdsRXkw4QiRZQU IHoq6XitqMjgoxdPv5unHDMubX33UnrSBXOyRtfP8zMVh1hfTL69Gv0NQPN7Z8v1 +C/IfxA4nW283XOTULQW7SkLrUl4i0SoIJWvuuFsyLNRYBcMQZSVYmCvGM/8BOVo r60PQgjNSkMgng2I0IvfgPsAOnVEDasl -----END CERTIFICATE-----Generated at Sat Aug 23 18:40:42 2025 by rpki-client