$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft File: rea1d9VLWrCQBc5hO7E2SGUuams.mft (raw, json) Hash identifier: 7av6/Dr6Hr9x9mIsk3FKHh3gUw41CEeiqeKVh9dSJZI= Subject key identifier: 2D:8E:D8:6B:C1:F5:01:6F:FD:1D:51:66:07:60:8F:55:6B:46:4B:16 Authority key identifier: AD:E6:B5:77:D5:4B:5A:B0:90:05:CE:61:3B:B1:36:48:65:2E:6A:6B Certificate issuer: /CN=A91F4553/serialNumber=ADE6B577D54B5AB09005CE613BB13648652E6A6B Certificate serial: 0585 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rea1d9VLWrCQBc5hO7E2SGUuams.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft Manifest number: 0580 Signing time: Fri 22 Aug 2025 23:27:08 +0000 Manifest this update: Fri 22 Aug 2025 23:27:08 +0000 Manifest next update: Fri 29 Aug 2025 23:27:08 +0000 Files and hashes: 1: rea1d9VLWrCQBc5hO7E2SGUuams.crl (hash: LSrbv++KNmEsWYDihxSv8UieD1KylgAIHKaLP6gEGhI=) 2: A1491F7CEB7811EB9134133BC4F9AE02.roa (hash: C9U0iPB8A/9VqWcnQG5AxuP08um0L5X8KsDf++uFfPM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.crl rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rea1d9VLWrCQBc5hO7E2SGUuams.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:27:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1413 (0x585) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4553, serialNumber=ADE6B577D54B5AB09005CE613BB13648652E6A6B Validity Not Before: Aug 22 23:27:08 2025 GMT Not After : Aug 29 23:27:08 2025 GMT Subject: CN=68a8fccc-a6ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d4:e1:66:15:83:42:f6:6a:2b:b0:92:a7:74: de:59:3d:6e:f9:d0:c4:aa:73:be:95:6d:6f:66:75: d6:c7:22:79:79:06:69:82:c1:8e:14:6e:75:6c:50: 7f:de:06:dc:02:2a:11:1b:98:bd:a4:a2:5b:19:48: 34:e5:f7:55:52:a5:23:8c:ef:6c:00:d3:77:d4:19: 0b:74:ce:93:2a:be:40:cd:ad:b3:96:10:fe:4c:68: 20:15:f2:58:d1:f8:f7:00:1a:86:3c:a2:e5:c2:81: 23:eb:49:29:5f:77:5c:d1:9c:c8:36:50:56:4d:be: 71:aa:82:07:5b:7b:36:55:9c:4c:88:49:83:65:26: b8:1e:8a:2f:89:d5:51:83:37:bd:18:dc:5f:46:ec: 1c:49:27:61:c9:a1:51:91:37:fc:e6:e7:4f:1f:96: 60:0d:d7:5f:c3:be:6f:d4:1b:d3:b0:9f:84:4c:91: 7a:9c:a8:52:d6:91:ee:f3:75:d6:28:62:12:ce:d9: 6f:2b:12:23:65:c4:ac:12:f4:80:97:56:c3:63:42: e5:91:b6:8d:25:20:f8:d8:6b:80:5e:72:d9:c2:ab: 74:e6:28:09:b9:72:1b:22:09:41:e9:81:67:7e:9b: a7:99:6f:34:94:e5:69:e5:5a:4a:b8:8b:1d:52:9e: 23:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:8E:D8:6B:C1:F5:01:6F:FD:1D:51:66:07:60:8F:55:6B:46:4B:16 X509v3 Authority Key Identifier: keyid:AD:E6:B5:77:D5:4B:5A:B0:90:05:CE:61:3B:B1:36:48:65:2E:6A:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rea1d9VLWrCQBc5hO7E2SGUuams.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:8a:ec:c4:cb:73:00:d2:a2:d5:04:c2:55:7d:ae:ca:63:c8: 06:9b:a1:b2:7f:cf:cc:e6:e4:f7:c5:93:00:05:b6:7a:96:7c: af:94:68:9e:03:7e:e6:79:04:55:16:bb:29:e3:8f:30:8d:f4: 31:c1:af:97:cc:36:2b:17:15:71:79:0c:b4:ac:83:03:18:a6: 6c:98:9d:78:80:dc:30:2b:73:14:eb:3f:6c:3c:c8:27:0e:2b: ac:67:e3:b0:c9:d4:45:2e:27:b5:c6:ab:e5:85:e8:cc:6e:8c: ac:07:bb:4c:10:8b:23:f3:ec:fe:77:db:cb:52:cb:aa:41:bd: 7f:f2:f9:bb:2f:19:37:2b:b1:35:ef:c4:83:62:8f:0a:a1:34: ec:5c:c3:6e:22:ac:4e:39:0c:41:0b:22:97:38:1b:01:28:fd: 44:d0:1b:2f:dc:84:07:59:8e:93:b9:9a:34:57:7c:20:83:68: 44:46:6c:bc:eb:df:dd:b8:ad:e9:1e:e9:a4:34:d4:18:d3:40: a2:96:51:bd:2e:6c:d8:d7:a6:3f:51:79:d4:04:62:44:6e:5b: 73:83:f1:41:9c:01:d9:e0:7c:92:7e:d5:c2:06:e8:95:f0:ff: c6:7f:c5:e6:04:dc:0a:7d:bc:55:b9:8a:2e:6a:f2:f1:d4:2f: 73:48:d7:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ1NTMxMTAvBgNVBAUTKEFERTZCNTc3RDU0QjVBQjA5MDA1Q0U2MTNCQjEzNjQ4 NjUyRTZBNkIwHhcNMjUwODIyMjMyNzA4WhcNMjUwODI5MjMyNzA4WjAYMRYwFAYD VQQDEw02OGE4ZmNjYy1hNmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo9ThZhWDQvZqK7CSp3TeWT1u+dDEqnO+lW1vZnXWxyJ5eQZpgsGOFG51bFB/ 3gbcAioRG5i9pKJbGUg05fdVUqUjjO9sANN31BkLdM6TKr5Aza2zlhD+TGggFfJY 0fj3ABqGPKLlwoEj60kpX3dc0ZzINlBWTb5xqoIHW3s2VZxMiEmDZSa4HoovidVR gze9GNxfRuwcSSdhyaFRkTf85udPH5ZgDddfw75v1BvTsJ+ETJF6nKhS1pHu83XW KGISztlvKxIjZcSsEvSAl1bDY0LlkbaNJSD42GuAXnLZwqt05igJuXIbIglB6YFn fpunmW80lOVp5VpKuIsdUp4jMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC2O2GvB 9QFv/R1RZgdgj1VrRksWMB8GA1UdIwQYMBaAFK3mtXfVS1qwkAXOYTuxNkhlLmpr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDU1My80RDIzQkIwRUVC NzQxMUVCQUZCNDc2MzFDNEY5QUUwMi9yZWExZDlWTFdyQ1FCYzVoTzdFMlNHVXVh bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JlYTFkOVZMV3JDUUJjNWhPN0UyU0dVdWFtcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDU1My80RDIzQkIwRUVCNzQxMUVCQUZCNDc2MzFDNEY5QUUwMi9yZWExZDlWTFdy Q1FCYzVoTzdFMlNHVXVhbXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALiuzEy3MA0qLVBMJVfa7KY8gGm6Gyf8/M5uT3xZMABbZ6lnyvlGie A37meQRVFrsp448wjfQxwa+XzDYrFxVxeQy0rIMDGKZsmJ14gNwwK3MU6z9sPMgn DiusZ+OwydRFLie1xqvlhejMboysB7tMEIsj8+z+d9vLUsuqQb1/8vm7Lxk3K7E1 78SDYo8KoTTsXMNuIqxOOQxBCyKXOBsBKP1E0Bsv3IQHWY6TuZo0V3wgg2hERmy8 69/duK3pHumkNNQY00CillG9LmzY16Y/UXnUBGJEbltzg/FBnAHZ4HySftXCBuiV 8P/Gf8XmBNwKfbxVuYouavLx1C9zSNdx -----END CERTIFICATE-----Generated at Sat Aug 23 14:20:10 2025 by rpki-client