$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/CUoNzYAqBb91c_96buCnqXIFUNE.mft File: CUoNzYAqBb91c_96buCnqXIFUNE.mft (raw, json) Hash identifier: 9ZRE8ccCjnDX8hfntjpBdg5ZI/yX/+Ve8fcmAf3vASE= Subject key identifier: 16:01:4E:20:F8:49:43:C0:AC:C6:99:DF:94:2D:2A:A7:AC:8C:4B:56 Authority key identifier: 09:4A:0D:CD:80:2A:05:BF:75:73:FF:7A:6E:E0:A7:A9:72:05:50:D1 Certificate issuer: /CN=A91EC93F/serialNumber=094A0DCD802A05BF7573FF7A6EE0A7A9720550D1 Certificate serial: 01BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUoNzYAqBb91c_96buCnqXIFUNE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/CUoNzYAqBb91c_96buCnqXIFUNE.mft Manifest number: 01B7 Signing time: Sat 23 Aug 2025 03:11:47 +0000 Manifest this update: Sat 23 Aug 2025 03:11:46 +0000 Manifest next update: Sat 30 Aug 2025 03:11:46 +0000 Files and hashes: 1: CUoNzYAqBb91c_96buCnqXIFUNE.crl (hash: k5C+be25hk2ovnMsXQVxz1OosaJWfewWaAYFmxLutcQ=) 2: 5BA557A6DEB011EDB7B0C04EC4F9AE02.roa (hash: SAjkukJRb4ZF5aM/fUJAbMY1lnAEeXzzgnRTsvAlM7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/CUoNzYAqBb91c_96buCnqXIFUNE.crl rsync://rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/CUoNzYAqBb91c_96buCnqXIFUNE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUoNzYAqBb91c_96buCnqXIFUNE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:11:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 442 (0x1ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC93F, serialNumber=094A0DCD802A05BF7573FF7A6EE0A7A9720550D1 Validity Not Before: Aug 23 03:11:46 2025 GMT Not After : Aug 30 03:11:46 2025 GMT Subject: CN=68a93173-bc41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:02:0f:df:17:9b:89:fc:ea:67:df:22:97:31: e9:03:88:96:93:7a:62:5e:93:56:dc:33:28:48:4b: 0b:60:42:83:06:ac:43:91:a0:17:7a:49:f4:4e:ec: 88:b5:a7:33:5a:53:67:91:20:94:c4:cd:1a:c9:73: 6f:95:82:11:9c:91:8a:8a:b6:4d:87:51:51:03:9a: c2:bb:9e:8a:a6:47:87:d3:c6:75:31:4b:3e:58:95: 9b:24:b2:c5:c3:ca:f5:35:0f:25:6c:e8:9f:b4:d5: 66:2f:90:39:48:eb:4f:02:fc:d5:c2:98:d0:00:ff: c2:15:bd:57:bf:3e:c6:76:a5:f6:7b:22:2c:a7:3b: 8e:3e:fb:ca:2d:8b:7f:17:21:2e:8b:99:ba:57:28: 9e:6c:8a:24:52:ae:b7:f1:bd:cb:79:e0:24:e3:58: 18:65:6c:68:3f:c7:99:f9:0e:d0:98:f5:27:01:43: ac:7c:56:39:b3:14:ce:f5:03:05:12:a4:03:0e:1b: cf:dc:cc:35:1a:bc:2f:1f:57:54:26:18:25:2d:49: 34:9d:17:69:e4:cf:86:9d:4d:c0:16:22:9b:e1:c2: 8f:7b:27:95:cf:d7:3f:2b:a4:e6:38:b6:46:52:4f: 8b:5f:91:9f:a7:16:22:6e:28:ea:fc:6a:36:5c:65: cd:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:01:4E:20:F8:49:43:C0:AC:C6:99:DF:94:2D:2A:A7:AC:8C:4B:56 X509v3 Authority Key Identifier: keyid:09:4A:0D:CD:80:2A:05:BF:75:73:FF:7A:6E:E0:A7:A9:72:05:50:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/CUoNzYAqBb91c_96buCnqXIFUNE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUoNzYAqBb91c_96buCnqXIFUNE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/CUoNzYAqBb91c_96buCnqXIFUNE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:bc:a4:d2:90:d8:5a:4f:ea:b5:c4:46:82:c3:a0:fe:85:d4: e2:56:42:56:70:8c:ec:40:84:6a:f6:fc:76:71:9c:4d:1c:0b: d7:ac:ec:8a:85:f9:6c:f6:86:06:2f:c2:58:14:09:6f:b5:70: 2c:2a:6e:7a:2f:44:47:e8:74:07:ac:de:db:ee:49:85:e2:fc: 86:92:7d:4f:61:ca:03:3f:22:e1:7a:8f:a2:09:20:e8:b6:ac: ba:09:dc:38:82:bb:c0:97:66:60:ab:8a:07:db:44:16:79:a1: 8a:64:1e:a4:76:a3:d2:b5:f6:43:78:ae:ea:f6:53:c3:ee:03: 26:f9:21:2e:82:1a:8a:07:b7:da:e2:1a:02:68:bd:50:0c:78: d6:cb:bf:5f:4d:48:94:43:14:63:da:4d:8d:20:ef:85:d5:41: e9:c5:3b:77:65:73:28:52:c2:8a:3e:2c:b3:f6:7e:f3:07:bf: f5:a0:8e:1a:4d:25:f0:2a:3b:d6:99:9e:02:73:b1:6b:78:2f: 57:0b:57:ab:86:0b:3a:ac:73:22:e9:89:94:00:fb:b4:3f:15: c8:fa:14:20:a8:e3:61:aa:49:26:fd:88:a9:7b:20:7b:c8:33: bf:52:bd:0c:f8:69:7b:a3:24:d9:71:f9:19:a6:e8:aa:56:74: 32:61:61:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM5M0YxMTAvBgNVBAUTKDA5NEEwRENEODAyQTA1QkY3NTczRkY3QTZFRTBBN0E5 NzIwNTUwRDEwHhcNMjUwODIzMDMxMTQ2WhcNMjUwODMwMDMxMTQ2WjAYMRYwFAYD VQQDEw02OGE5MzE3My1iYzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4wIP3xebifzqZ98ilzHpA4iWk3piXpNW3DMoSEsLYEKDBqxDkaAXekn0TuyI taczWlNnkSCUxM0ayXNvlYIRnJGKirZNh1FRA5rCu56KpkeH08Z1MUs+WJWbJLLF w8r1NQ8lbOiftNVmL5A5SOtPAvzVwpjQAP/CFb1Xvz7GdqX2eyIspzuOPvvKLYt/ FyEui5m6VyiebIokUq638b3LeeAk41gYZWxoP8eZ+Q7QmPUnAUOsfFY5sxTO9QMF EqQDDhvP3Mw1GrwvH1dUJhglLUk0nRdp5M+GnU3AFiKb4cKPeyeVz9c/K6TmOLZG Uk+LX5GfpxYibijq/Go2XGXNUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBYBTiD4 SUPArMaZ35QtKqesjEtWMB8GA1UdIwQYMBaAFAlKDc2AKgW/dXP/em7gp6lyBVDR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzkzRi82MEE4Rjg4Q0RF QUQxMUVEOEE2REYxNERDNEY5QUUwMi9DVW9OellBcUJiOTFjXzk2YnVDbnFYSUZV TkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NVb056WUFxQmI5MWNfOTZidUNucVhJRlVORS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzkzRi82MEE4Rjg4Q0RFQUQxMUVEOEE2REYxNERDNEY5QUUwMi9DVW9OellBcUJi OTFjXzk2YnVDbnFYSUZVTkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRvKTSkNhaT+q1xEaCw6D+hdTiVkJWcIzsQIRq9vx2cZxNHAvXrOyK hfls9oYGL8JYFAlvtXAsKm56L0RH6HQHrN7b7kmF4vyGkn1PYcoDPyLheo+iCSDo tqy6Cdw4grvAl2Zgq4oH20QWeaGKZB6kdqPStfZDeK7q9lPD7gMm+SEughqKB7fa 4hoCaL1QDHjWy79fTUiUQxRj2k2NIO+F1UHpxTt3ZXMoUsKKPiyz9n7zB7/1oI4a TSXwKjvWmZ4Cc7FreC9XC1erhgs6rHMi6YmUAPu0PxXI+hQgqONhqkkm/YipeyB7 yDO/Ur0M+Gl7oyTZcfkZpuiqVnQyYWHO -----END CERTIFICATE-----Generated at Sat Aug 23 17:37:05 2025 by rpki-client