$ rpki-client -vvf rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft File: asd5dN_kUIBzXNuQZqfiRpYEkrc.mft (raw, json) Hash identifier: mY9dLiqufUdGHZKRrQv5+b8iaA8Ou6V9REaeH1NNIXc= Subject key identifier: 1E:20:04:C1:2F:D6:B9:F0:9A:BA:11:3A:BF:4D:A1:8B:56:07:96:8C Authority key identifier: 6A:C7:79:74:DF:E4:50:80:73:5C:DB:90:66:A7:E2:46:96:04:92:B7 Certificate issuer: /CN=A91F31A7/serialNumber=6AC77974DFE45080735CDB9066A7E246960492B7 Certificate serial: 107E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asd5dN_kUIBzXNuQZqfiRpYEkrc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft Manifest number: 1076 Signing time: Fri 22 Aug 2025 17:29:37 +0000 Manifest this update: Fri 22 Aug 2025 17:29:37 +0000 Manifest next update: Fri 29 Aug 2025 17:29:37 +0000 Files and hashes: 1: asd5dN_kUIBzXNuQZqfiRpYEkrc.crl (hash: AwL9+h5ENnGbnhjOLViaZBKhobHLZoFr/BjqkBZKqL4=) 2: DDEC8C2A39AA11E9B0166376C4F9AE02.roa (hash: P8zT0PniKGyPQKuaO/6cEK/Iz5vptBwIg6UXjylLbdY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.crl rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asd5dN_kUIBzXNuQZqfiRpYEkrc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:29:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4222 (0x107e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F31A7, serialNumber=6AC77974DFE45080735CDB9066A7E246960492B7 Validity Not Before: Aug 22 17:29:37 2025 GMT Not After : Aug 29 17:29:37 2025 GMT Subject: CN=68a8a901-71ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:82:f9:0c:81:a5:7d:58:54:fd:46:a0:97:87: 35:47:1a:61:3b:fa:48:c8:9e:9d:58:75:4c:75:fb: 76:94:3d:b5:98:89:82:f2:4d:b4:55:97:59:a6:6e: 0d:1e:61:5d:4b:44:94:e5:53:70:1a:cf:96:13:1d: 62:49:75:58:1e:ba:d3:6d:b0:38:ef:fb:15:16:7a: d1:cb:69:06:0f:8d:15:f1:90:3e:35:79:b5:00:57: 6d:2c:1a:7d:e0:d0:0f:d7:fc:40:76:9a:8d:f0:0a: c5:f8:e9:1e:64:42:a8:f2:8b:ef:96:e8:15:65:95: 29:f8:e4:e8:ef:45:1e:2b:88:bf:5f:89:99:2a:d9: fe:e8:aa:35:08:13:3d:cc:0f:72:68:c9:89:66:3f: d7:e9:f5:7a:2a:a3:b0:68:82:b8:52:fd:55:c4:1c: ef:10:db:f5:de:f1:9e:8e:4f:85:3f:43:67:7a:2b: e1:a1:f6:a2:f8:04:08:65:14:57:48:eb:18:6c:be: 28:25:2f:90:a9:04:17:2c:a1:a6:ed:a6:0e:52:08: 5f:87:06:de:78:7c:bc:c6:d0:d4:a5:28:14:21:63: 30:f1:4d:bc:84:69:c1:66:6b:be:c0:1b:3e:e3:bb: 3d:f5:2f:9e:56:1e:ab:0a:6b:2e:e7:4c:da:75:6c: 03:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:20:04:C1:2F:D6:B9:F0:9A:BA:11:3A:BF:4D:A1:8B:56:07:96:8C X509v3 Authority Key Identifier: keyid:6A:C7:79:74:DF:E4:50:80:73:5C:DB:90:66:A7:E2:46:96:04:92:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asd5dN_kUIBzXNuQZqfiRpYEkrc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:0e:e5:34:7b:85:92:0b:81:98:0c:84:af:fb:7c:99:65:92: ef:60:65:e5:a3:f6:3e:e2:d9:ab:cf:21:0f:1f:3e:1f:2e:5a: 33:cc:b7:02:ed:c0:b3:76:14:5b:ed:8b:d6:dd:a3:66:04:c1: 06:41:2e:d4:c4:b8:8e:7d:a3:bf:db:b5:88:14:63:c2:19:97: 65:17:25:47:ef:12:75:41:e6:43:d7:86:3f:41:a4:70:f7:0c: c7:45:9d:c4:02:f8:42:6b:ab:35:41:4d:fd:9c:1c:72:7b:75: 4a:ee:df:fc:93:27:02:3c:98:99:7b:5b:10:8a:da:f5:56:7e: c9:cf:87:2a:a2:4a:19:6e:34:e0:0a:10:d1:95:ae:4b:69:54: f2:4c:60:8c:e1:3a:be:66:10:da:28:90:3f:c7:b9:3f:86:c7: 67:a1:72:ba:22:fc:66:10:5a:ed:6e:d3:be:5e:74:5a:db:80: e8:ef:ee:da:f5:a3:76:d3:8a:af:82:41:31:81:75:0f:c1:d5: 63:ff:38:bc:fc:2a:48:c3:08:28:9d:d6:ad:e6:63:fb:21:d4: 02:34:72:59:59:43:2b:57:07:b3:2b:20:fa:69:16:71:f1:1f: be:1a:61:fe:e1:bc:96:48:99:89:50:55:9a:ae:8e:c8:77:21: 6f:df:f8:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMxQTcxMTAvBgNVBAUTKDZBQzc3OTc0REZFNDUwODA3MzVDREI5MDY2QTdFMjQ2 OTYwNDkyQjcwHhcNMjUwODIyMTcyOTM3WhcNMjUwODI5MTcyOTM3WjAYMRYwFAYD VQQDEw02OGE4YTkwMS03MWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6YL5DIGlfVhU/Uagl4c1RxphO/pIyJ6dWHVMdft2lD21mImC8k20VZdZpm4N HmFdS0SU5VNwGs+WEx1iSXVYHrrTbbA47/sVFnrRy2kGD40V8ZA+NXm1AFdtLBp9 4NAP1/xAdpqN8ArF+OkeZEKo8ovvlugVZZUp+OTo70UeK4i/X4mZKtn+6Ko1CBM9 zA9yaMmJZj/X6fV6KqOwaIK4Uv1VxBzvENv13vGejk+FP0Nneivhofai+AQIZRRX SOsYbL4oJS+QqQQXLKGm7aYOUghfhwbeeHy8xtDUpSgUIWMw8U28hGnBZmu+wBs+ 47s99S+eVh6rCmsu50zadWwDEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB4gBMEv 1rnwmroROr9NoYtWB5aMMB8GA1UdIwQYMBaAFGrHeXTf5FCAc1zbkGan4kaWBJK3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzFBNy83QjBCNjc4NDM5 QUExMUU5OEE4RTUyNzZDNEY5QUUwMi9hc2Q1ZE5fa1VJQnpYTnVRWnFmaVJwWUVr cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FzZDVkTl9rVUlCelhOdVFacWZpUnBZRWtyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzFBNy83QjBCNjc4NDM5QUExMUU5OEE4RTUyNzZDNEY5QUUwMi9hc2Q1ZE5fa1VJ QnpYTnVRWnFmaVJwWUVrcmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0DuU0e4WSC4GYDISv+3yZZZLvYGXlo/Y+4tmrzyEPHz4fLlozzLcC 7cCzdhRb7YvW3aNmBMEGQS7UxLiOfaO/27WIFGPCGZdlFyVH7xJ1QeZD14Y/QaRw 9wzHRZ3EAvhCa6s1QU39nBxye3VK7t/8kycCPJiZe1sQitr1Vn7Jz4cqokoZbjTg ChDRla5LaVTyTGCM4Tq+ZhDaKJA/x7k/hsdnoXK6IvxmEFrtbtO+XnRa24Do7+7a 9aN204qvgkExgXUPwdVj/zi8/CpIwwgondat5mP7IdQCNHJZWUMrVwezKyD6aRZx 8R++GmH+4byWSJmJUFWaro7IdyFv3/h7 -----END CERTIFICATE-----Generated at Sun Aug 24 00:50:00 2025 by rpki-client