$ rpki-client -vvf rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft File: 7unhDCkeVsgtdwcgELDlgAg_5yk.mft (raw, json) Hash identifier: I1IkiMrNZ4ooij3qOvzq5Wq2wCzX0eeXoPwCUIM6agk= Subject key identifier: A0:42:46:C4:DC:F9:D8:41:00:ED:D9:5E:EA:E2:37:D7:EC:1C:06:1D Authority key identifier: EE:E9:E1:0C:29:1E:56:C8:2D:77:07:20:10:B0:E5:80:08:3F:E7:29 Certificate issuer: /CN=A91E82F0/serialNumber=EEE9E10C291E56C82D77072010B0E580083FE729 Certificate serial: 014B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7unhDCkeVsgtdwcgELDlgAg_5yk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft Manifest number: 014B Signing time: Sat 23 Aug 2025 04:20:49 +0000 Manifest this update: Sat 23 Aug 2025 04:20:49 +0000 Manifest next update: Sat 30 Aug 2025 04:20:49 +0000 Files and hashes: 1: 7unhDCkeVsgtdwcgELDlgAg_5yk.crl (hash: xQ015a6HfCvjV7LR3h7XhcGlG1CjR6ePcT7SDazttfs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.crl rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7unhDCkeVsgtdwcgELDlgAg_5yk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:20:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 331 (0x14b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E82F0, serialNumber=EEE9E10C291E56C82D77072010B0E580083FE729 Validity Not Before: Aug 23 04:20:49 2025 GMT Not After : Aug 30 04:20:49 2025 GMT Subject: CN=68a941a1-3a0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7d:09:f9:fb:4a:d8:fd:3a:e0:36:73:1c:c9: f0:e6:88:a6:53:4b:20:f1:0a:a5:4f:b7:6a:8c:b1: 33:6a:81:fa:ed:c1:f2:7e:93:0c:ad:c9:20:90:d7: 1e:13:e9:c2:38:6b:aa:a2:08:94:b8:36:70:a4:18: b6:e9:8e:ba:29:94:3b:a3:8a:4a:9a:87:2e:ca:74: 2c:ed:4d:ce:01:de:fd:f0:18:dc:a3:44:0e:0f:a1: 37:e5:5b:50:c6:c9:c5:7c:28:8c:8f:96:1a:3c:d8: 26:20:b2:7d:3e:71:3c:15:aa:d5:cc:21:72:36:49: 50:a8:ca:8d:dd:f3:91:c2:e9:1b:75:71:3d:06:98: 8a:35:5d:fa:06:cc:32:fa:5e:4f:21:31:92:ea:be: 3e:5a:8e:c9:10:21:44:bd:13:a6:f5:29:18:ec:bb: a9:f9:d9:a6:ce:97:82:7a:4e:94:5a:01:ff:2e:73: fe:bd:7d:74:c8:8d:32:fa:e1:54:64:16:a3:b6:92: a6:80:d7:b4:55:2e:99:47:c6:90:50:92:22:32:9b: f6:7f:a7:e9:fc:41:95:a2:c6:8a:a9:a8:8e:38:9e: ec:8c:23:fd:d0:c0:bc:fa:5b:ac:4d:c2:cd:ae:c2: 5e:14:3c:c0:81:f5:86:ab:a9:92:18:47:e4:54:05: a6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:42:46:C4:DC:F9:D8:41:00:ED:D9:5E:EA:E2:37:D7:EC:1C:06:1D X509v3 Authority Key Identifier: keyid:EE:E9:E1:0C:29:1E:56:C8:2D:77:07:20:10:B0:E5:80:08:3F:E7:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7unhDCkeVsgtdwcgELDlgAg_5yk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:bb:f0:eb:e0:cb:b4:90:71:27:8e:41:ab:55:ad:71:43:79: f5:2b:0a:d5:a4:76:5b:fb:ed:d8:ad:9d:b3:c8:35:2e:36:49: db:c9:22:7d:1e:0a:09:af:9f:8b:37:55:5c:82:4a:e8:a4:2d: d8:02:2b:44:45:32:30:8e:6a:a4:77:b8:99:d3:35:c5:13:6a: 63:56:af:0d:7f:70:92:7a:34:97:30:1b:3e:f1:b5:16:92:ff: 07:b9:74:54:cc:5d:84:f4:82:e7:2c:c0:a8:6d:2a:f4:df:c6: da:5c:c8:4e:16:1b:2e:fb:3a:54:18:84:f7:3f:f5:cc:3a:fe: ac:86:03:bd:4f:95:4b:66:ab:49:93:dc:a9:65:88:9b:77:6d: 47:47:d3:4e:63:2c:f4:fe:10:8a:38:44:9c:dd:42:24:ea:70: 2d:37:36:37:6c:88:7c:16:93:d2:a9:7f:69:fd:9e:50:09:6c: bd:8c:32:ef:3c:c8:d0:cf:44:b0:09:85:a4:45:ef:5b:2d:62: 53:51:3c:7b:b8:c7:fa:db:d3:6b:83:62:77:5c:13:65:6d:64: 4d:57:54:d8:11:9a:92:58:fa:d1:c7:c8:b5:70:97:42:74:9f: 6f:a7:ea:ef:8e:bb:57:89:0b:d5:53:ba:66:73:87:33:1c:cf: 9c:62:d7:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgyRjAxMTAvBgNVBAUTKEVFRTlFMTBDMjkxRTU2QzgyRDc3MDcyMDEwQjBFNTgw MDgzRkU3MjkwHhcNMjUwODIzMDQyMDQ5WhcNMjUwODMwMDQyMDQ5WjAYMRYwFAYD VQQDEw02OGE5NDFhMS0zYTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw30J+ftK2P064DZzHMnw5oimU0sg8QqlT7dqjLEzaoH67cHyfpMMrckgkNce E+nCOGuqogiUuDZwpBi26Y66KZQ7o4pKmocuynQs7U3OAd798Bjco0QOD6E35VtQ xsnFfCiMj5YaPNgmILJ9PnE8FarVzCFyNklQqMqN3fORwukbdXE9BpiKNV36Bswy +l5PITGS6r4+Wo7JECFEvROm9SkY7Lup+dmmzpeCek6UWgH/LnP+vX10yI0y+uFU ZBajtpKmgNe0VS6ZR8aQUJIiMpv2f6fp/EGVosaKqaiOOJ7sjCP90MC8+lusTcLN rsJeFDzAgfWGq6mSGEfkVAWmUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKBCRsTc +dhBAO3ZXuriN9fsHAYdMB8GA1UdIwQYMBaAFO7p4QwpHlbILXcHIBCw5YAIP+cp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODJGMC81QzU3RTVDMDgy ODMxMUVFOTBDODgxNkFDNEY5QUUwMi83dW5oRENrZVZzZ3Rkd2NnRUxEbGdBZ181 eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd1bmhEQ2tlVnNndGR3Y2dFTERsZ0FnXzV5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODJGMC81QzU3RTVDMDgyODMxMUVFOTBDODgxNkFDNEY5QUUwMi83dW5oRENrZVZz Z3Rkd2NnRUxEbGdBZ181eWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCu/Dr4Mu0kHEnjkGrVa1xQ3n1KwrVpHZb++3YrZ2zyDUuNknbySJ9 HgoJr5+LN1VcgkropC3YAitERTIwjmqkd7iZ0zXFE2pjVq8Nf3CSejSXMBs+8bUW kv8HuXRUzF2E9ILnLMCobSr038baXMhOFhsu+zpUGIT3P/XMOv6shgO9T5VLZqtJ k9ypZYibd21HR9NOYyz0/hCKOESc3UIk6nAtNzY3bIh8FpPSqX9p/Z5QCWy9jDLv PMjQz0SwCYWkRe9bLWJTUTx7uMf629Nrg2J3XBNlbWRNV1TYEZqSWPrRx8i1cJdC dJ9vp+rvjrtXiQvVU7pmc4czHM+cYtfC -----END CERTIFICATE-----Generated at Sat Aug 23 21:30:03 2025 by rpki-client