$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBF27/F1D3E326ABE711EBB85D5147C4F9AE02/0DacIB93rzjycCn7IkbEOF0njKI.mft File: 0DacIB93rzjycCn7IkbEOF0njKI.mft (raw, json) Hash identifier: pFvaEVRz4eDPsYm44msHeL3zqQwGxyqb4Y/0B0rk4ew= Subject key identifier: 7D:67:7C:BD:D8:B4:CA:76:84:00:41:76:5B:2C:CE:C5:DD:B8:1E:0C Authority key identifier: D0:36:9C:20:1F:77:AF:38:F2:70:29:FB:22:46:C4:38:5D:27:8C:A2 Certificate issuer: /CN=A91EBF27/serialNumber=D0369C201F77AF38F27029FB2246C4385D278CA2 Certificate serial: 061D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DacIB93rzjycCn7IkbEOF0njKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBF27/F1D3E326ABE711EBB85D5147C4F9AE02/0DacIB93rzjycCn7IkbEOF0njKI.mft Manifest number: 061D Signing time: Fri 22 Aug 2025 22:56:28 +0000 Manifest this update: Fri 22 Aug 2025 22:56:28 +0000 Manifest next update: Fri 29 Aug 2025 22:56:28 +0000 Files and hashes: 1: 0DacIB93rzjycCn7IkbEOF0njKI.crl (hash: QSC4RvZkOdK10qMQLX7aEEQ5QhaOirdgaFV6jl1q0bE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBF27/F1D3E326ABE711EBB85D5147C4F9AE02/0DacIB93rzjycCn7IkbEOF0njKI.crl rsync://rpki.apnic.net/member_repository/A91EBF27/F1D3E326ABE711EBB85D5147C4F9AE02/0DacIB93rzjycCn7IkbEOF0njKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DacIB93rzjycCn7IkbEOF0njKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1565 (0x61d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBF27, serialNumber=D0369C201F77AF38F27029FB2246C4385D278CA2 Validity Not Before: Aug 22 22:56:28 2025 GMT Not After : Aug 29 22:56:28 2025 GMT Subject: CN=68a8f59c-41a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:26:66:6f:02:25:f0:fe:04:49:e1:b2:98:ed: 76:a2:a1:28:ee:87:6c:77:75:3d:bd:df:8b:75:cd: 19:60:23:c3:9d:90:0c:4c:b6:9d:55:3f:1b:86:41: c4:4d:20:d0:00:ec:57:92:4a:12:13:71:72:69:84: b5:4e:d9:24:c7:b2:5c:29:fc:4a:c3:cc:81:14:bc: 14:97:65:c8:1b:92:df:94:f1:d6:e1:10:a3:85:68: a4:26:98:e8:f6:7d:26:a0:6e:c1:b6:52:b0:ee:fa: 55:ee:13:f1:6c:9c:b9:24:5c:79:e9:40:88:61:f2: 25:70:03:34:1d:62:c9:72:12:49:7f:3a:be:22:1c: 15:16:1a:b7:f1:09:8e:92:d4:f6:a6:54:44:e0:ea: 25:d8:39:f8:a3:bf:92:04:5c:cb:47:c4:c9:91:ee: f9:85:4b:2a:b2:80:5c:9f:f1:ac:3c:b5:e2:a1:e4: 71:a8:4b:52:82:9a:68:ef:8c:73:b5:1a:78:3f:7a: cc:67:1f:7a:5a:86:44:34:7b:4f:4f:70:27:70:a6: 94:00:87:1e:5c:96:98:db:b0:9c:1e:8c:f9:96:d7: de:cb:d2:f8:0d:2d:24:14:ce:d6:09:b0:c4:f5:29: e9:90:3a:cd:d0:04:f8:b5:59:4d:31:17:62:ea:b4: 85:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:67:7C:BD:D8:B4:CA:76:84:00:41:76:5B:2C:CE:C5:DD:B8:1E:0C X509v3 Authority Key Identifier: keyid:D0:36:9C:20:1F:77:AF:38:F2:70:29:FB:22:46:C4:38:5D:27:8C:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBF27/F1D3E326ABE711EBB85D5147C4F9AE02/0DacIB93rzjycCn7IkbEOF0njKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DacIB93rzjycCn7IkbEOF0njKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBF27/F1D3E326ABE711EBB85D5147C4F9AE02/0DacIB93rzjycCn7IkbEOF0njKI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:79:82:28:84:18:7c:ea:4d:31:20:78:94:ae:6a:3e:f9:79: 7b:39:63:2e:97:ae:07:38:38:a4:65:00:98:1f:d8:0a:13:d2: 37:49:93:44:2e:62:c4:7a:ea:d8:43:92:e1:7c:3c:4c:d1:60: b6:4b:94:e9:88:b5:8e:90:cb:87:57:29:1f:f3:35:bb:9f:4d: e7:4f:77:70:1c:a8:84:eb:7a:3c:41:b9:0f:cf:da:f5:6d:ae: 7a:6c:bf:48:83:08:c7:82:d4:c5:35:37:04:85:83:28:9e:28: 35:90:02:cb:e3:e8:2f:2d:1d:82:d6:f2:94:31:7e:93:97:c6: 83:bf:6c:78:2a:7a:29:ec:2f:80:58:cd:8a:29:24:34:a5:60: 6e:4a:94:31:1f:c8:07:19:11:dd:62:4f:7d:bc:82:46:db:ad: 13:a8:db:4b:0f:ab:d6:14:2d:00:49:8c:0e:f1:20:37:65:fe: 3d:7e:46:ee:b0:73:f7:1f:bd:a5:db:b5:80:b4:98:79:67:5b: fc:28:bd:52:96:b1:52:72:f0:2d:8b:f0:3e:94:a3:2d:d4:e8: 40:66:3b:07:ef:70:63:db:9c:e6:25:f4:d4:26:a4:d7:84:73: 63:74:77:f0:15:8f:46:ff:eb:5b:dc:39:83:b3:e5:a5:f3:1c: 78:85:fc:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJGMjcxMTAvBgNVBAUTKEQwMzY5QzIwMUY3N0FGMzhGMjcwMjlGQjIyNDZDNDM4 NUQyNzhDQTIwHhcNMjUwODIyMjI1NjI4WhcNMjUwODI5MjI1NjI4WjAYMRYwFAYD VQQDEw02OGE4ZjU5Yy00MWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxiZmbwIl8P4ESeGymO12oqEo7odsd3U9vd+Ldc0ZYCPDnZAMTLadVT8bhkHE TSDQAOxXkkoSE3FyaYS1Ttkkx7JcKfxKw8yBFLwUl2XIG5LflPHW4RCjhWikJpjo 9n0moG7BtlKw7vpV7hPxbJy5JFx56UCIYfIlcAM0HWLJchJJfzq+IhwVFhq38QmO ktT2plRE4Ool2Dn4o7+SBFzLR8TJke75hUsqsoBcn/GsPLXioeRxqEtSgppo74xz tRp4P3rMZx96WoZENHtPT3AncKaUAIceXJaY27CcHoz5ltfey9L4DS0kFM7WCbDE 9SnpkDrN0AT4tVlNMRdi6rSFPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH1nfL3Y tMp2hABBdlsszsXduB4MMB8GA1UdIwQYMBaAFNA2nCAfd6848nAp+yJGxDhdJ4yi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkYyNy9GMUQzRTMyNkFC RTcxMUVCQjg1RDUxNDdDNEY5QUUwMi8wRGFjSUI5M3J6anljQ243SWtiRU9GMG5q S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBEYWNJQjkzcnpqeWNDbjdJa2JFT0YwbmpLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkYyNy9GMUQzRTMyNkFCRTcxMUVCQjg1RDUxNDdDNEY5QUUwMi8wRGFjSUI5M3J6 anljQ243SWtiRU9GMG5qS0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCseYIohBh86k0xIHiUrmo++Xl7OWMul64HODikZQCYH9gKE9I3SZNE LmLEeurYQ5LhfDxM0WC2S5TpiLWOkMuHVykf8zW7n03nT3dwHKiE63o8QbkPz9r1 ba56bL9IgwjHgtTFNTcEhYMonig1kALL4+gvLR2C1vKUMX6Tl8aDv2x4Knop7C+A WM2KKSQ0pWBuSpQxH8gHGRHdYk99vIJG260TqNtLD6vWFC0ASYwO8SA3Zf49fkbu sHP3H72l27WAtJh5Z1v8KL1SlrFScvAti/A+lKMt1OhAZjsH73Bj25zmJfTUJqTX hHNjdHfwFY9G/+tb3DmDs+Wl8xx4hfyL -----END CERTIFICATE-----Generated at Sat Aug 23 19:40:26 2025 by rpki-client