$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft File: rLcCUesVt11CKaohMePZqHwpRcA.mft (raw, json) Hash identifier: zPH8kgY6eTi4bEZ6zYzPrPqEg2mmm8gpW0X75wwq0L0= Subject key identifier: E1:78:B5:2F:39:E9:B1:27:6C:48:0B:38:E6:F1:1A:6F:9A:85:65:94 Authority key identifier: AC:B7:02:51:EB:15:B7:5D:42:29:AA:21:31:E3:D9:A8:7C:29:45:C0 Certificate issuer: /CN=A91EFC94/serialNumber=ACB70251EB15B75D4229AA2131E3D9A87C2945C0 Certificate serial: 9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft Manifest number: 9B Signing time: Sat 23 Aug 2025 06:35:21 +0000 Manifest this update: Sat 23 Aug 2025 06:35:21 +0000 Manifest next update: Sat 30 Aug 2025 06:35:21 +0000 Files and hashes: 1: rLcCUesVt11CKaohMePZqHwpRcA.crl (hash: JQUEmLWAY4pXjB7R/Pu3kVPfaRbd/h/AuEI2oKvrpv4=) 2: 9ABFC32C94F811EF92676015C4F9AE02.roa (hash: gWk0VsOcbG73/lmCIcmaJtgvf1O8GLTJ+JuzqZmFgTQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.crl rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:35:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFC94, serialNumber=ACB70251EB15B75D4229AA2131E3D9A87C2945C0 Validity Not Before: Aug 23 06:35:21 2025 GMT Not After : Aug 30 06:35:21 2025 GMT Subject: CN=68a96129-df7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7a:7d:36:91:9f:b5:e2:f3:e2:07:fe:df:96: ea:68:c1:af:bb:30:f8:ab:c6:3f:1e:6a:49:7c:41: f3:b7:34:d7:06:08:62:29:8e:a9:20:1c:e6:e6:9b: c5:b2:1e:65:93:05:ad:a2:13:23:6d:92:04:e0:d1: 52:f0:d8:3d:b8:63:90:80:05:1d:0e:b2:45:ef:8f: ec:1e:fb:f7:98:7b:a7:25:8a:67:47:cb:16:3f:d9: a8:13:bd:dc:22:71:dc:a5:bb:d5:de:40:c8:85:98: 1d:76:a0:a0:bc:f2:d9:c7:5f:51:9d:bd:5c:69:08: cb:2d:2d:c2:ae:84:51:58:fc:57:5b:62:ad:0a:96: fe:29:e9:69:da:9c:b4:b8:54:41:7b:46:4a:6e:71: 82:d7:06:64:cc:5c:67:81:99:b5:90:c9:e7:33:84: ae:22:76:1a:c7:a6:89:97:b6:f1:ad:3e:f7:07:a0: fc:89:0a:80:f4:9d:47:88:a9:d0:ab:19:eb:f7:88: b2:4c:9d:de:3c:9a:75:9d:9e:16:77:db:3e:ee:d1: dc:f5:88:44:62:10:f7:28:c8:8c:51:35:c3:0d:24: 88:25:cf:73:32:d2:78:f6:97:e0:c7:95:4d:d2:fe: 08:31:68:e5:a8:6b:92:95:12:72:7b:f7:6d:cb:d5: 9d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:78:B5:2F:39:E9:B1:27:6C:48:0B:38:E6:F1:1A:6F:9A:85:65:94 X509v3 Authority Key Identifier: keyid:AC:B7:02:51:EB:15:B7:5D:42:29:AA:21:31:E3:D9:A8:7C:29:45:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:dd:d0:e6:2c:be:e7:fc:66:4d:31:cc:16:4a:eb:ef:a3:7e: 34:e4:fb:42:6b:66:e0:8c:22:76:b9:bd:6a:27:a8:09:f7:39: c8:8f:7e:fe:02:bb:ec:ca:74:35:64:08:c2:c8:98:68:30:4d: b8:0b:1f:2a:38:ef:5e:ac:e7:2c:db:46:b5:82:ee:e4:bb:22: 7b:95:b1:07:a4:e5:4d:32:f0:d9:5c:80:8d:ae:03:3f:6e:54: 3b:07:d5:84:23:e4:c5:d6:40:3d:d6:7f:d3:2d:36:97:41:d7: 2b:94:60:ba:78:0a:08:59:6c:80:54:cb:cb:ec:3e:73:7e:59: b9:6b:44:75:e4:9a:31:65:1f:c0:68:03:0d:fd:46:d1:2a:e0: cc:c7:04:17:98:7f:42:78:c1:d3:18:cd:4c:9b:f2:0e:29:34: 8f:a7:a7:7a:4b:3a:59:a5:d7:ad:ca:73:b3:83:c4:73:87:88: 02:f1:be:91:05:ee:7d:1d:fa:7a:11:c1:86:27:45:c3:29:c7: ac:81:f3:fd:d2:9a:b0:87:d7:e4:94:1a:c9:07:f8:48:e9:1e: 23:0b:1e:68:17:60:e2:99:f8:f4:3c:77:3d:90:e9:74:f7:36: 81:f8:f1:44:f5:4d:4a:9e:0a:1c:73:f3:4a:48:7d:cf:d5:d3: 80:71:5a:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZDOTQxMTAvBgNVBAUTKEFDQjcwMjUxRUIxNUI3NUQ0MjI5QUEyMTMxRTNEOUE4 N0MyOTQ1QzAwHhcNMjUwODIzMDYzNTIxWhcNMjUwODMwMDYzNTIxWjAYMRYwFAYD VQQDEw02OGE5NjEyOS1kZjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw3p9NpGfteLz4gf+35bqaMGvuzD4q8Y/HmpJfEHztzTXBghiKY6pIBzm5pvF sh5lkwWtohMjbZIE4NFS8Ng9uGOQgAUdDrJF74/sHvv3mHunJYpnR8sWP9moE73c InHcpbvV3kDIhZgddqCgvPLZx19Rnb1caQjLLS3CroRRWPxXW2KtCpb+Kelp2py0 uFRBe0ZKbnGC1wZkzFxngZm1kMnnM4SuInYax6aJl7bxrT73B6D8iQqA9J1HiKnQ qxnr94iyTJ3ePJp1nZ4Wd9s+7tHc9YhEYhD3KMiMUTXDDSSIJc9zMtJ49pfgx5VN 0v4IMWjlqGuSlRJye/dty9Wd8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOF4tS85 6bEnbEgLOObxGm+ahWWUMB8GA1UdIwQYMBaAFKy3AlHrFbddQimqITHj2ah8KUXA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkM5NC9CMTQ0OUM0RTk0 REExMUVGODkwODZEMjFDNEY5QUUwMi9yTGNDVWVzVnQxMUNLYW9oTWVQWnFId3BS Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JMY0NVZXNWdDExQ0thb2hNZVBacUh3cFJjQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkM5NC9CMTQ0OUM0RTk0REExMUVGODkwODZEMjFDNEY5QUUwMi9yTGNDVWVzVnQx MUNLYW9oTWVQWnFId3BSY0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCt3dDmLL7n/GZNMcwWSuvvo3405PtCa2bgjCJ2ub1qJ6gJ9znIj37+ ArvsynQ1ZAjCyJhoME24Cx8qOO9erOcs20a1gu7kuyJ7lbEHpOVNMvDZXICNrgM/ blQ7B9WEI+TF1kA91n/TLTaXQdcrlGC6eAoIWWyAVMvL7D5zflm5a0R15JoxZR/A aAMN/UbRKuDMxwQXmH9CeMHTGM1Mm/IOKTSPp6d6SzpZpdetynOzg8Rzh4gC8b6R Be59Hfp6EcGGJ0XDKcesgfP90pqwh9fklBrJB/hI6R4jCx5oF2Dimfj0PHc9kOl0 9zaB+PFE9U1Kngocc/NKSH3P1dOAcVp0 -----END CERTIFICATE-----Generated at Sat Aug 23 19:12:57 2025 by rpki-client