$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.mft File: d4O93Owt-bn8-48Qm3PU95Shc4Y.mft (raw, json) Hash identifier: dJ9kdB+cm8wCDX21/uZI3hqvL8gLsxvUBFesdyDlCuY= Subject key identifier: 09:AD:E5:78:0E:A9:8D:57:75:D0:72:8E:20:12:1E:9F:B3:96:80:51 Authority key identifier: 77:83:BD:DC:EC:2D:F9:B9:FC:FB:8F:10:9B:73:D4:F7:94:A1:73:86 Certificate issuer: /CN=A91EAD63/serialNumber=7783BDDCEC2DF9B9FCFB8F109B73D4F794A17386 Certificate serial: 0243 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4O93Owt-bn8-48Qm3PU95Shc4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.mft Manifest number: 023F Signing time: Sat 23 Aug 2025 02:05:45 +0000 Manifest this update: Sat 23 Aug 2025 02:05:45 +0000 Manifest next update: Sat 30 Aug 2025 02:05:45 +0000 Files and hashes: 1: d4O93Owt-bn8-48Qm3PU95Shc4Y.crl (hash: tD0xknn0K4HLAFu/pb91SziF3CM98ebu/T/185K1kZc=) 2: 9BA13212344C11ED8F22CB70C4F9AE02.roa (hash: dSvt8WCJ5sX7UlCP0MxYFfwdeu8sA3Ot5FCk8B7masI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.crl rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4O93Owt-bn8-48Qm3PU95Shc4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:05:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 579 (0x243) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAD63, serialNumber=7783BDDCEC2DF9B9FCFB8F109B73D4F794A17386 Validity Not Before: Aug 23 02:05:45 2025 GMT Not After : Aug 30 02:05:45 2025 GMT Subject: CN=68a921f9-b2ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3c:f7:7d:44:fc:0d:e0:0a:a0:70:06:71:34: 94:d9:17:51:11:13:09:b6:38:0c:4f:1b:c5:52:b2: 9a:91:47:91:76:5e:5f:bf:b3:92:4c:44:80:da:db: 53:f8:ac:a8:a3:32:2e:77:51:f5:5f:10:af:08:fe: 51:de:f5:0b:b8:4b:3b:6e:a5:2b:8d:6c:37:18:82: d4:ec:59:4f:23:09:d7:a7:9e:09:10:50:c0:0c:f0: 23:55:11:d9:7b:82:e3:df:45:5e:40:01:02:54:13: 11:65:55:8a:12:d8:b3:7d:23:45:f3:f5:96:6d:3e: e0:af:08:19:2e:f7:91:92:ab:39:56:0f:49:6e:e8: b7:01:5d:0d:27:49:c0:87:7f:8e:4c:53:4b:80:d3: a5:2b:54:0e:e3:7a:4e:59:24:5e:cd:f0:67:c8:2e: 0e:01:47:dd:8c:75:11:36:57:3f:2d:97:f3:83:73: 29:9e:17:bc:32:5e:03:08:9d:bf:37:61:bb:f6:84: b8:7c:76:9a:ec:cb:32:9a:6d:69:3c:ee:fc:b4:4c: fb:b7:9e:56:94:ed:3a:bb:71:29:b8:18:9f:62:f9: c6:20:fb:51:37:2f:1d:0e:d5:5f:54:9c:fa:a1:07: 3f:49:93:ef:fa:ec:9a:1b:58:46:40:34:ad:75:f4: 79:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:AD:E5:78:0E:A9:8D:57:75:D0:72:8E:20:12:1E:9F:B3:96:80:51 X509v3 Authority Key Identifier: keyid:77:83:BD:DC:EC:2D:F9:B9:FC:FB:8F:10:9B:73:D4:F7:94:A1:73:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4O93Owt-bn8-48Qm3PU95Shc4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:3a:9e:db:67:7a:1b:2e:83:87:7b:79:d7:73:92:dc:d7:ea: 28:db:6c:da:48:ef:0b:4a:66:01:ca:77:f9:59:d5:58:2b:f6: fb:e9:97:99:3a:b3:a5:84:a8:74:1e:ca:e7:6f:25:db:d9:f7: b9:df:97:3a:2c:21:9b:ac:25:fd:da:0e:9a:05:9f:e9:1f:4e: 96:df:ab:28:04:b0:05:d9:10:9d:2b:9b:50:ff:d8:ea:f9:43: 07:eb:fe:ae:55:ac:60:4e:a0:d4:f0:41:70:13:67:77:b7:f6: 63:ff:d6:f6:40:d1:e9:bf:3a:20:0e:73:e8:fb:98:e4:44:3d: 1b:ba:16:cd:3d:1f:f8:40:b7:85:d9:5e:71:84:9e:86:db:51: 99:3b:94:e5:28:23:d9:1c:65:ca:ae:61:90:ff:a2:88:12:c0: 42:c1:f9:23:a0:5c:f2:a9:49:35:ef:45:38:16:b2:05:f1:3b: 69:d4:89:c3:01:69:27:c0:78:d3:dd:f7:ac:91:60:ec:b8:49: 3d:28:0f:ec:ff:d3:14:50:b3:f7:6f:e4:96:29:5a:93:03:25: 91:2b:24:e8:14:61:1d:dc:29:2e:ae:05:b7:80:74:02:91:ac: d4:93:b7:8e:7d:7a:be:d3:84:08:c2:43:ef:12:39:52:72:d6: 5b:57:19:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFENjMxMTAvBgNVBAUTKDc3ODNCRERDRUMyREY5QjlGQ0ZCOEYxMDlCNzNENEY3 OTRBMTczODYwHhcNMjUwODIzMDIwNTQ1WhcNMjUwODMwMDIwNTQ1WjAYMRYwFAYD VQQDEw02OGE5MjFmOS1iMmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyzz3fUT8DeAKoHAGcTSU2RdRERMJtjgMTxvFUrKakUeRdl5fv7OSTESA2ttT +KyoozIud1H1XxCvCP5R3vULuEs7bqUrjWw3GILU7FlPIwnXp54JEFDADPAjVRHZ e4Lj30VeQAECVBMRZVWKEtizfSNF8/WWbT7grwgZLveRkqs5Vg9Jbui3AV0NJ0nA h3+OTFNLgNOlK1QO43pOWSRezfBnyC4OAUfdjHURNlc/LZfzg3Mpnhe8Ml4DCJ2/ N2G79oS4fHaa7Msymm1pPO78tEz7t55WlO06u3EpuBifYvnGIPtRNy8dDtVfVJz6 oQc/SZPv+uyaG1hGQDStdfR5iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAmt5XgO qY1XddByjiASHp+zloBRMB8GA1UdIwQYMBaAFHeDvdzsLfm5/PuPEJtz1PeUoXOG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUQ2My9ERDM2NDExODM0 NDcxMUVEQjEwREE0M0FDNEY5QUUwMi9kNE85M093dC1ibjgtNDhRbTNQVTk1U2hj NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q0TzkzT3d0LWJuOC00OFFtM1BVOTVTaGM0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUQ2My9ERDM2NDExODM0NDcxMUVEQjEwREE0M0FDNEY5QUUwMi9kNE85M093dC1i bjgtNDhRbTNQVTk1U2hjNFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZOp7bZ3obLoOHe3nXc5Lc1+oo22zaSO8LSmYBynf5WdVYK/b76ZeZ OrOlhKh0HsrnbyXb2fe535c6LCGbrCX92g6aBZ/pH06W36soBLAF2RCdK5tQ/9jq +UMH6/6uVaxgTqDU8EFwE2d3t/Zj/9b2QNHpvzogDnPo+5jkRD0buhbNPR/4QLeF 2V5xhJ6G21GZO5TlKCPZHGXKrmGQ/6KIEsBCwfkjoFzyqUk170U4FrIF8Ttp1InD AWknwHjT3feskWDsuEk9KA/s/9MUULP3b+SWKVqTAyWRKyToFGEd3CkurgW3gHQC kazUk7eOfXq+04QIwkPvEjlSctZbVxkQ -----END CERTIFICATE-----Generated at Sat Aug 23 15:19:21 2025 by rpki-client