$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft File: 0wuATUKrfQIMXx9287PdHykthmo.mft (raw, json) Hash identifier: ULDpS6aW21wwxTOjVGxMZ354pWN9Qk8/JRH9Mn+gn8o= Subject key identifier: 25:58:A0:07:6B:EE:3F:4F:2E:95:53:BA:44:48:66:7A:1F:E4:F6:B0 Authority key identifier: D3:0B:80:4D:42:AB:7D:02:0C:5F:1F:76:F3:B3:DD:1F:29:2D:86:6A Certificate issuer: /CN=A91EDEC8/serialNumber=D30B804D42AB7D020C5F1F76F3B3DD1F292D866A Certificate serial: 0701 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wuATUKrfQIMXx9287PdHykthmo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft Manifest number: 06FB Signing time: Fri 22 Aug 2025 22:05:29 +0000 Manifest this update: Fri 22 Aug 2025 22:05:29 +0000 Manifest next update: Fri 29 Aug 2025 22:05:29 +0000 Files and hashes: 1: 0wuATUKrfQIMXx9287PdHykthmo.crl (hash: Irit3PN5/M/7s1njD2ckODZ1KlLJxb7MX3hdzVFahEk=) 2: D693E0B656E211EB83D9EA74C4F9AE02.roa (hash: ShBRwbTuBxj9yKQsDtx+jaY1y+xIJPIpBM97g/zTojo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.crl rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wuATUKrfQIMXx9287PdHykthmo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:05:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1793 (0x701) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDEC8, serialNumber=D30B804D42AB7D020C5F1F76F3B3DD1F292D866A Validity Not Before: Aug 22 22:05:29 2025 GMT Not After : Aug 29 22:05:29 2025 GMT Subject: CN=68a8e9a9-f114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:33:a4:1a:e6:78:6c:f4:e8:6c:4d:6c:49:72: bd:2b:eb:0f:ab:fc:cf:91:79:75:2f:4e:76:e8:10: 32:b7:ba:f0:52:fc:3e:bd:7f:9f:41:3f:c8:05:b1: bb:ec:57:7e:f7:fd:cf:8b:d5:7e:68:46:15:0b:21: cd:8f:78:35:ed:56:73:a0:d6:38:95:80:f4:05:41: 77:f7:6e:b5:36:34:18:0b:c0:5e:12:60:61:c5:b9: c8:d0:21:dc:d4:0a:a8:29:6a:44:ac:58:7b:10:5e: bf:d1:a8:4e:42:9e:c3:a9:8f:ca:73:22:57:b6:2d: d7:14:1c:e0:f8:ed:44:88:f7:2c:6c:86:be:09:61: b1:7f:b3:f4:ca:a4:6a:2b:18:6f:91:e1:af:85:c3: b6:e9:4e:23:ce:7c:69:2b:5b:b0:d6:8f:c9:2e:ae: 14:12:e7:82:bf:10:82:0a:59:5c:4a:df:c5:b4:a1: be:cc:ab:ad:f3:7d:6f:d1:9a:2f:77:ae:b0:e5:ad: 55:68:6d:23:6d:19:99:4c:5f:9f:65:07:d5:52:ed: c3:b6:dd:4b:c1:7d:0d:fa:3d:42:18:0c:91:e4:6c: 30:ca:1e:f6:39:84:fd:e9:e7:ba:57:51:bc:4c:5c: 65:b6:67:90:fe:64:67:58:99:be:5f:d1:75:f8:01: 9c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:58:A0:07:6B:EE:3F:4F:2E:95:53:BA:44:48:66:7A:1F:E4:F6:B0 X509v3 Authority Key Identifier: keyid:D3:0B:80:4D:42:AB:7D:02:0C:5F:1F:76:F3:B3:DD:1F:29:2D:86:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wuATUKrfQIMXx9287PdHykthmo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:55:4a:60:ec:ff:16:df:c4:5d:73:73:9a:97:d7:72:89:a6: b7:dc:9c:a9:e7:db:b6:ff:fb:bf:d8:da:dd:a7:2d:0e:e6:d0: f7:90:be:e6:61:cb:24:20:34:be:c6:28:e5:f2:4d:6a:fb:78: 84:72:6a:04:84:81:cc:fe:2e:d2:e9:e0:e4:f6:9f:66:ac:00: 2f:d0:fe:26:04:62:66:24:f4:35:d0:8b:ee:72:14:a5:3a:56: 92:27:7c:9c:4b:9d:1e:23:3e:d0:14:fc:df:18:30:74:c0:5a: 08:69:ed:94:ee:3a:1a:a5:c4:b8:79:9f:30:3e:cd:77:24:84: d1:6d:53:17:59:0a:2d:94:2d:dd:7d:e6:56:21:0a:4a:02:7a: 27:b1:28:b9:16:3f:d3:55:6a:02:6d:ea:53:4e:61:62:1a:40: 9d:e3:8c:89:de:e1:28:ac:7b:cf:2a:15:30:55:8c:1b:fd:f6: 40:a1:d5:71:08:12:8e:74:d4:9a:50:4e:ef:6b:8a:a9:aa:c8: 4e:8b:0a:e1:3e:aa:14:64:d9:f4:4d:18:3e:7d:8a:b9:d1:43: fc:37:7f:30:32:57:c5:46:df:19:9e:0d:50:db:12:8f:8f:e0: 84:d9:35:4d:a3:bc:ee:d8:17:47:30:ae:2f:50:a9:18:f4:b1: 2c:0f:d3:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURFQzgxMTAvBgNVBAUTKEQzMEI4MDRENDJBQjdEMDIwQzVGMUY3NkYzQjNERDFG MjkyRDg2NkEwHhcNMjUwODIyMjIwNTI5WhcNMjUwODI5MjIwNTI5WjAYMRYwFAYD VQQDEw02OGE4ZTlhOS1mMTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0DOkGuZ4bPTobE1sSXK9K+sPq/zPkXl1L0526BAyt7rwUvw+vX+fQT/IBbG7 7Fd+9/3Pi9V+aEYVCyHNj3g17VZzoNY4lYD0BUF39261NjQYC8BeEmBhxbnI0CHc 1AqoKWpErFh7EF6/0ahOQp7DqY/KcyJXti3XFBzg+O1EiPcsbIa+CWGxf7P0yqRq KxhvkeGvhcO26U4jznxpK1uw1o/JLq4UEueCvxCCCllcSt/FtKG+zKut831v0Zov d66w5a1VaG0jbRmZTF+fZQfVUu3Dtt1LwX0N+j1CGAyR5Gwwyh72OYT96ee6V1G8 TFxltmeQ/mRnWJm+X9F1+AGcvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCVYoAdr 7j9PLpVTukRIZnof5PawMB8GA1UdIwQYMBaAFNMLgE1Cq30CDF8fdvOz3R8pLYZq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREVDOC84QTA1MDk4ODU2 RTExMUVCQUFDQkVFNzNDNEY5QUUwMi8wd3VBVFVLcmZRSU1YeDkyODdQZEh5a3Ro bW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB3dUFUVUtyZlFJTVh4OTI4N1BkSHlrdGhtby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF REVDOC84QTA1MDk4ODU2RTExMUVCQUFDQkVFNzNDNEY5QUUwMi8wd3VBVFVLcmZR SU1YeDkyODdQZEh5a3RobW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/VUpg7P8W38Rdc3Oal9dyiaa33Jyp59u2//u/2Nrdpy0O5tD3kL7m YcskIDS+xijl8k1q+3iEcmoEhIHM/i7S6eDk9p9mrAAv0P4mBGJmJPQ10IvuchSl OlaSJ3ycS50eIz7QFPzfGDB0wFoIae2U7joapcS4eZ8wPs13JITRbVMXWQotlC3d feZWIQpKAnonsSi5Fj/TVWoCbepTTmFiGkCd44yJ3uEorHvPKhUwVYwb/fZAodVx CBKOdNSaUE7va4qpqshOiwrhPqoUZNn0TRg+fYq50UP8N38wMlfFRt8Zng1Q2xKP j+CE2TVNo7zu2BdHMK4vUKkY9LEsD9Pj -----END CERTIFICATE-----Generated at Sat Aug 23 18:55:09 2025 by rpki-client