$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft File: cL0eSV4lCyLieYKWlpeFotd9c38.mft (raw, json) Hash identifier: MrMBSAN81ZsU5rfGmRPQ+i/eHL62b8PgqdKT9CUBCnQ= Subject key identifier: E0:B9:11:28:F4:F5:C9:83:28:C0:42:2B:66:43:A8:BE:F7:12:5A:46 Authority key identifier: 70:BD:1E:49:5E:25:0B:22:E2:79:82:96:96:97:85:A2:D7:7D:73:7F Certificate issuer: /CN=A91EE1C4/serialNumber=70BD1E495E250B22E2798296969785A2D77D737F Certificate serial: 0774 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft Manifest number: 0762 Signing time: Fri 22 Aug 2025 21:47:08 +0000 Manifest this update: Fri 22 Aug 2025 21:47:07 +0000 Manifest next update: Fri 29 Aug 2025 21:47:07 +0000 Files and hashes: 1: cL0eSV4lCyLieYKWlpeFotd9c38.crl (hash: giS1hR79WDpvnFxbggc3SmaYHtDuRB5/i7h+QvLyhlc=) 2: AEFB1B262FB111EB89A04D37C4F9AE02.roa (hash: C9YBNy3SJzx+k9ZBQHZtbIXi++eZ8FDncm2ByZsrMrw=) 3: D992CDCE2FBC11EB8E017F5CC4F9AE02.roa (hash: ms/taZmD2/o24c1Khq9ZB9VElH0aqAVMPoZoMLJ7l7o=) 4: D8EA255C2FBC11EB8E017F5CC4F9AE02.roa (hash: QcINMhPugXakfHhYWsf4t0lmoNzm+ZXfVIXhNA2VxIA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.crl rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:47:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1908 (0x774) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE1C4, serialNumber=70BD1E495E250B22E2798296969785A2D77D737F Validity Not Before: Aug 22 21:47:07 2025 GMT Not After : Aug 29 21:47:07 2025 GMT Subject: CN=68a8e55b-c858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2c:72:85:30:b7:71:62:f7:01:03:a1:2e:45: a9:bb:7b:8b:de:bd:af:07:1c:37:b2:ea:eb:84:9d: a8:99:05:a5:58:47:99:73:57:4a:68:ea:75:12:2a: d1:a5:55:d1:dd:a3:fb:71:71:1c:74:0d:57:34:14: c7:69:f3:b6:2f:0e:ec:84:d7:01:46:37:10:f6:1d: 32:00:23:0b:48:3c:35:14:4c:3c:8e:e2:29:4a:98: 8e:8c:62:78:ce:7d:b8:5b:f4:17:a6:11:4b:4c:46: 46:83:3c:e5:08:53:b8:2e:a6:8d:e4:72:02:04:88: 26:fb:7b:1f:cd:bf:da:66:ad:66:71:e0:55:48:3a: 71:3d:54:40:3c:c5:6e:00:1c:4c:1a:85:e6:a2:9e: 52:da:82:83:cd:77:a7:bb:b8:e9:a4:83:d3:a2:d9: 06:09:dd:e5:e7:72:38:dc:79:07:4a:8c:57:fe:fe: ea:c1:33:5d:75:45:f3:60:91:ed:1f:d4:7a:72:f1: 4b:6d:4a:f0:d3:39:65:b2:3f:fa:35:a4:b6:39:b2: ec:e6:92:7f:58:8e:6e:d3:29:86:47:a3:e3:71:b9: cc:c1:3e:49:4b:11:57:c7:96:68:3f:ff:ab:89:04: 1b:50:b2:4e:c5:63:c8:ca:26:3d:79:ff:d0:bc:e1: c0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:B9:11:28:F4:F5:C9:83:28:C0:42:2B:66:43:A8:BE:F7:12:5A:46 X509v3 Authority Key Identifier: keyid:70:BD:1E:49:5E:25:0B:22:E2:79:82:96:96:97:85:A2:D7:7D:73:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:36:f6:dc:d0:a1:8b:26:7b:3d:da:d1:74:42:09:08:07:e1: f5:b8:fe:bf:59:99:cc:7a:1e:b3:4f:05:a1:f5:55:19:e1:db: 41:bb:6d:f1:c7:3a:ff:d3:0a:52:c4:99:8a:ef:b3:42:17:a3: 08:7c:cb:b4:64:c6:54:56:f2:db:66:93:f2:4a:42:00:60:4c: 6c:3f:87:3a:15:4e:09:10:38:8c:b7:d3:28:c6:70:72:74:27: 3b:03:3f:4c:e7:58:2c:51:0c:ad:11:38:6b:1d:d1:1a:80:7b: 05:7b:86:25:0e:06:78:ad:62:51:a4:a9:af:92:19:2a:4e:8f: e6:dc:90:ab:f2:ab:c2:e0:d2:6c:9a:93:4c:bf:3c:bd:b3:2a: 6c:d9:7c:f3:2f:02:f7:a1:b7:be:27:6b:bd:e1:be:53:ee:62: 28:43:51:70:0f:cb:ed:b3:b6:fe:29:c3:99:26:76:ad:03:24: 21:93:15:8f:f4:88:22:bf:57:e1:70:58:63:97:e2:43:79:80: 33:77:12:65:c5:40:d7:c3:d4:1e:67:45:b9:1b:66:7e:8a:ba: b8:11:8b:9a:f1:fd:03:0f:a3:b5:c9:ea:9d:f3:7b:51:50:ac: c8:fc:54:c4:35:10:bc:e8:2a:27:6a:16:c2:b8:b3:38:a2:77: 1e:f9:c5:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUxQzQxMTAvBgNVBAUTKDcwQkQxRTQ5NUUyNTBCMjJFMjc5ODI5Njk2OTc4NUEy RDc3RDczN0YwHhcNMjUwODIyMjE0NzA3WhcNMjUwODI5MjE0NzA3WjAYMRYwFAYD VQQDEw02OGE4ZTU1Yi1jODU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxSxyhTC3cWL3AQOhLkWpu3uL3r2vBxw3surrhJ2omQWlWEeZc1dKaOp1EirR pVXR3aP7cXEcdA1XNBTHafO2Lw7shNcBRjcQ9h0yACMLSDw1FEw8juIpSpiOjGJ4 zn24W/QXphFLTEZGgzzlCFO4LqaN5HICBIgm+3sfzb/aZq1mceBVSDpxPVRAPMVu ABxMGoXmop5S2oKDzXenu7jppIPTotkGCd3l53I43HkHSoxX/v7qwTNddUXzYJHt H9R6cvFLbUrw0zllsj/6NaS2ObLs5pJ/WI5u0ymGR6PjcbnMwT5JSxFXx5ZoP/+r iQQbULJOxWPIyiY9ef/QvOHAUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOC5ESj0 9cmDKMBCK2ZDqL73ElpGMB8GA1UdIwQYMBaAFHC9HkleJQsi4nmClpaXhaLXfXN/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTFDNC9GQzY3MkI3MjJG QUYxMUVCOTQxNTVGMzNDNEY5QUUwMi9jTDBlU1Y0bEN5TGllWUtXbHBlRm90ZDlj MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NMMGVTVjRsQ3lMaWVZS1dscGVGb3RkOWMzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTFDNC9GQzY3MkI3MjJGQUYxMUVCOTQxNTVGMzNDNEY5QUUwMi9jTDBlU1Y0bEN5 TGllWUtXbHBlRm90ZDljMzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0Nvbc0KGLJns92tF0QgkIB+H1uP6/WZnMeh6zTwWh9VUZ4dtBu23x xzr/0wpSxJmK77NCF6MIfMu0ZMZUVvLbZpPySkIAYExsP4c6FU4JEDiMt9MoxnBy dCc7Az9M51gsUQytEThrHdEagHsFe4YlDgZ4rWJRpKmvkhkqTo/m3JCr8qvC4NJs mpNMvzy9syps2XzzLwL3obe+J2u94b5T7mIoQ1FwD8vts7b+KcOZJnatAyQhkxWP 9Igiv1fhcFhjl+JDeYAzdxJlxUDXw9QeZ0W5G2Z+irq4EYua8f0DD6O1yeqd83tR UKzI/FTENRC86ConahbCuLM4once+cWL -----END CERTIFICATE-----Generated at Sat Aug 23 12:22:32 2025 by rpki-client