$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft File: _g28w89QoeDrA9MSluOfuogMGQU.mft (raw, json) Hash identifier: CCrGEqjLFrcc3TeknbrlE5z8gVwoNT4atucHoPjkDFI= Subject key identifier: 6F:11:52:E0:8D:A8:45:B9:F2:B0:99:88:35:42:91:6E:F1:CF:7C:79 Authority key identifier: FE:0D:BC:C3:CF:50:A1:E0:EB:03:D3:12:96:E3:9F:BA:88:0C:19:05 Certificate issuer: /CN=A91F7FEA/serialNumber=FE0DBCC3CF50A1E0EB03D31296E39FBA880C1905 Certificate serial: 0AB8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_g28w89QoeDrA9MSluOfuogMGQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft Manifest number: 0AAA Signing time: Fri 22 Aug 2025 19:40:52 +0000 Manifest this update: Fri 22 Aug 2025 19:40:51 +0000 Manifest next update: Fri 29 Aug 2025 19:40:51 +0000 Files and hashes: 1: _g28w89QoeDrA9MSluOfuogMGQU.crl (hash: TqHGESM0Bz+WIzgtaCJx/ZSpuPliuUWP8Ym3fE7HjfE=) 2: AF5AC6B69E3F11EEA6B6CB0DC4F9AE02.roa (hash: aO7ZzsxjyqFcAzfGikfamjQffULd11X020Rl4PUmMgc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.crl rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_g28w89QoeDrA9MSluOfuogMGQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:40:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2744 (0xab8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7FEA, serialNumber=FE0DBCC3CF50A1E0EB03D31296E39FBA880C1905 Validity Not Before: Aug 22 19:40:51 2025 GMT Not After : Aug 29 19:40:51 2025 GMT Subject: CN=68a8c7c3-b55f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9a:97:bd:87:51:25:4e:43:23:ca:cb:88:27: c8:e8:37:08:39:f1:3c:e1:01:90:b7:a9:e4:12:9c: df:77:f5:e8:7f:44:0b:b3:81:a2:50:19:02:f9:9c: 3b:59:ca:df:64:84:97:77:95:a6:a8:db:6d:7a:61: 1e:b2:b1:2b:f0:a2:20:cf:91:32:7c:14:fe:c6:59: 22:04:5e:3e:40:c1:ac:95:be:3f:b7:8a:b7:e1:f0: bb:e0:92:15:73:15:ab:e7:d3:48:25:8f:1f:d7:c9: 7b:1c:ca:3a:e0:ba:77:81:62:93:d3:45:9f:2d:a0: 09:e1:7a:65:d8:2f:f3:ed:88:15:77:ff:a2:c1:86: 1f:6a:f5:fe:f9:52:50:d0:8c:51:6a:a5:98:a1:e6: c8:4f:9d:53:f3:5e:cc:ba:7e:4e:47:79:8d:0e:7f: 84:d0:25:10:84:6f:ed:83:9d:0f:7c:0a:25:d1:5c: 64:25:79:26:1e:09:25:13:86:0e:05:cd:be:d4:aa: 6b:59:de:3f:09:a6:bb:90:e7:1b:b1:ca:5f:05:7b: ef:6d:0d:a8:03:34:3b:fc:d8:8e:e0:e9:28:2d:42: f2:d9:f2:cf:89:1b:cd:cd:bf:fd:c2:c7:56:4c:d9: 4a:f5:f0:de:ac:da:ae:a8:56:e9:46:8c:95:19:4b: 2e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:11:52:E0:8D:A8:45:B9:F2:B0:99:88:35:42:91:6E:F1:CF:7C:79 X509v3 Authority Key Identifier: keyid:FE:0D:BC:C3:CF:50:A1:E0:EB:03:D3:12:96:E3:9F:BA:88:0C:19:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_g28w89QoeDrA9MSluOfuogMGQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:97:a4:06:24:68:7f:f0:75:6e:71:d3:ea:b5:56:75:30:da: b1:4f:85:64:06:2c:72:c8:00:88:74:e0:2e:02:d5:2b:c5:c8: cd:74:56:14:c0:7d:e3:50:09:48:2b:15:1f:86:b6:af:3c:71: 15:22:00:ab:ad:e1:49:07:1e:48:7e:84:6c:3f:c6:0a:a0:f5: 38:66:36:80:a7:94:ae:75:70:39:d2:9d:34:88:e2:1b:8d:c9: 56:0b:df:39:b2:06:a4:c1:48:2a:03:da:dc:26:de:f5:a9:87: 46:a2:30:b4:ce:01:ee:87:e5:94:80:be:0b:2a:61:58:e1:a2: 8d:f2:0b:e6:87:ab:d0:7f:92:6a:9f:18:e2:83:ed:17:c8:3b: c1:20:a2:15:80:71:ce:25:45:9c:78:12:6e:43:b5:27:5f:1c: 58:2a:41:8b:c8:81:35:b6:b0:10:09:90:7e:fa:d0:5a:44:33: 38:71:f5:ae:0b:0c:a4:49:1f:c0:ba:38:3d:e5:40:ce:aa:3c: c0:6c:12:98:93:b2:1f:2d:46:a2:2c:87:bc:ec:98:db:ed:b6: c9:eb:98:4b:57:01:87:2c:02:43:c9:f0:69:3f:25:bf:9b:2d: 67:1a:c5:56:b4:f2:1c:3b:e3:3a:0a:8f:cb:20:4f:de:e8:cc: 8a:75:d1:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdGRUExMTAvBgNVBAUTKEZFMERCQ0MzQ0Y1MEExRTBFQjAzRDMxMjk2RTM5RkJB ODgwQzE5MDUwHhcNMjUwODIyMTk0MDUxWhcNMjUwODI5MTk0MDUxWjAYMRYwFAYD VQQDEw02OGE4YzdjMy1iNTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvpqXvYdRJU5DI8rLiCfI6DcIOfE84QGQt6nkEpzfd/Xof0QLs4GiUBkC+Zw7 WcrfZISXd5WmqNttemEesrEr8KIgz5EyfBT+xlkiBF4+QMGslb4/t4q34fC74JIV cxWr59NIJY8f18l7HMo64Lp3gWKT00WfLaAJ4Xpl2C/z7YgVd/+iwYYfavX++VJQ 0IxRaqWYoebIT51T817Mun5OR3mNDn+E0CUQhG/tg50PfAol0VxkJXkmHgklE4YO Bc2+1KprWd4/Caa7kOcbscpfBXvvbQ2oAzQ7/NiO4OkoLULy2fLPiRvNzb/9wsdW TNlK9fDerNquqFbpRoyVGUsuGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG8RUuCN qEW58rCZiDVCkW7xz3x5MB8GA1UdIwQYMBaAFP4NvMPPUKHg6wPTEpbjn7qIDBkF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0ZFQS8xRUUzQUVFQzYw NDgxMUVBOEM2OTBCMzhDNEY5QUUwMi9fZzI4dzg5UW9lRHJBOU1TbHVPZnVvZ01H UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19nMjh3ODlRb2VEckE5TVNsdU9mdW9nTUdRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0ZFQS8xRUUzQUVFQzYwNDgxMUVBOEM2OTBCMzhDNEY5QUUwMi9fZzI4dzg5UW9l RHJBOU1TbHVPZnVvZ01HUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5l6QGJGh/8HVucdPqtVZ1MNqxT4VkBixyyACIdOAuAtUrxcjNdFYU wH3jUAlIKxUfhravPHEVIgCrreFJBx5IfoRsP8YKoPU4ZjaAp5SudXA50p00iOIb jclWC985sgakwUgqA9rcJt71qYdGojC0zgHuh+WUgL4LKmFY4aKN8gvmh6vQf5Jq nxjig+0XyDvBIKIVgHHOJUWceBJuQ7UnXxxYKkGLyIE1trAQCZB++tBaRDM4cfWu CwykSR/Aujg95UDOqjzAbBKYk7IfLUaiLIe87Jjb7bbJ65hLVwGHLAJDyfBpPyW/ my1nGsVWtPIcO+M6Co/LIE/e6MyKddGE -----END CERTIFICATE-----Generated at Sat Aug 23 19:35:46 2025 by rpki-client