$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft File: 1383l1I1q95fSYn78_6TjVJ8GUg.mft (raw, json) Hash identifier: FW5cr0nprdsmHuzHVP8ms/aBTBWo5rpoq0+2w/PbC1w= Subject key identifier: 6E:3C:B1:44:EB:7A:FA:10:BD:42:B0:0B:60:B5:01:DA:98:42:B4:21 Authority key identifier: D7:7F:37:97:52:35:AB:DE:5F:49:89:FB:F3:FE:93:8D:52:7C:19:48 Certificate issuer: /CN=A91F8336/serialNumber=D77F37975235ABDE5F4989FBF3FE938D527C1948 Certificate serial: 11E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1383l1I1q95fSYn78_6TjVJ8GUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft Manifest number: 11C6 Signing time: Fri 22 Aug 2025 17:19:20 +0000 Manifest this update: Fri 22 Aug 2025 17:19:19 +0000 Manifest next update: Fri 29 Aug 2025 17:19:19 +0000 Files and hashes: 1: 1383l1I1q95fSYn78_6TjVJ8GUg.crl (hash: dvDVYLHthGBithb4/CKJnBWuVo96wRGBoZJJx/xdY48=) 2: 4AE6CFF8B25211EBA977EE09C4F9AE02.roa (hash: ZdFF8YkXhtC1AoahmW58AQqkSN0T37GBdkW2/eDce6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.crl rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1383l1I1q95fSYn78_6TjVJ8GUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:19:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4576 (0x11e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8336, serialNumber=D77F37975235ABDE5F4989FBF3FE938D527C1948 Validity Not Before: Aug 22 17:19:19 2025 GMT Not After : Aug 29 17:19:19 2025 GMT Subject: CN=68a8a698-a5cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:21:ca:2d:69:95:fe:14:fd:48:96:2a:43:a7: d1:34:c0:d3:87:72:a9:50:24:21:bb:3e:4b:0d:d5: 93:cf:c8:ee:26:e9:da:b9:6a:99:51:24:ca:1b:1f: 2f:c7:ec:21:48:51:d7:d6:22:4b:5a:db:e2:2e:36: 37:8d:62:74:31:45:a7:03:a0:d2:1e:d5:d9:b4:2c: 3c:ec:c0:ce:0b:9a:02:57:ac:71:30:99:5b:d1:e2: 57:37:1d:75:ba:8c:95:61:9d:a3:f5:f4:87:92:f4: 4e:74:7e:b2:74:3a:4f:9a:18:fd:9b:ae:2c:16:1a: 0a:05:47:bb:be:0f:97:01:f3:d7:24:46:27:bb:b4: c0:1d:28:35:86:19:eb:c0:79:f7:74:92:73:65:93: 6a:74:d4:67:87:eb:39:52:98:b4:5f:d9:72:4a:b7: 07:70:0a:4f:b9:c6:e5:1e:db:f2:ff:d3:fc:9a:b0: be:c5:4c:30:f8:0b:21:45:19:89:67:71:29:fc:69: 79:98:c2:94:d8:c3:f5:a7:6a:21:f9:19:b1:3b:30: 0b:7b:8f:92:b0:a5:1b:63:94:2c:32:69:e6:8c:48: 8e:2d:0c:2c:b5:78:49:38:f0:89:83:88:7d:73:27: d2:7b:c4:d4:4f:1f:2c:4c:b8:d1:c8:b4:e3:a5:70: f0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:3C:B1:44:EB:7A:FA:10:BD:42:B0:0B:60:B5:01:DA:98:42:B4:21 X509v3 Authority Key Identifier: keyid:D7:7F:37:97:52:35:AB:DE:5F:49:89:FB:F3:FE:93:8D:52:7C:19:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1383l1I1q95fSYn78_6TjVJ8GUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:45:ca:54:97:b5:93:4b:1a:5a:a9:d4:e7:53:30:fc:83:ce: 8a:e2:a6:87:ce:db:67:ff:36:b6:7e:26:da:5f:49:3c:cc:5c: 6c:e9:68:4c:45:c8:13:92:33:95:ab:e3:78:f0:be:c8:c2:3e: 7e:67:62:21:e6:a0:8f:a1:58:53:75:76:17:ed:ab:04:10:a4: 43:45:dd:8c:ca:4c:a2:41:20:b0:6b:0e:4b:94:67:de:24:b1: ad:48:14:05:59:9d:f3:33:12:d9:a7:ed:72:b4:5f:a8:3f:95: 05:c8:f3:15:f2:bd:34:0b:50:fc:6b:3b:c9:79:c5:ed:1d:37: da:b8:95:76:95:b9:1f:c1:d0:0d:1d:e4:d7:07:36:9e:75:73: 5b:e2:69:30:46:8d:4d:8a:18:1a:7e:99:2e:45:ab:99:95:82: a7:65:16:a6:bb:47:98:03:8b:da:05:15:98:b8:bb:09:ef:9d: 76:d9:c4:49:5b:d5:98:d9:3b:51:de:0b:01:48:23:34:0c:0f: 61:b5:75:5f:bd:ab:e1:da:1a:30:bd:05:6a:26:5e:b6:ef:3b: 23:d5:25:b1:95:fc:27:be:63:ae:db:18:d2:99:a5:95:1d:24: e1:b7:9c:67:33:6e:c9:10:11:ea:71:f9:82:04:d1:07:7a:15: cd:fd:d1:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgzMzYxMTAvBgNVBAUTKEQ3N0YzNzk3NTIzNUFCREU1RjQ5ODlGQkYzRkU5MzhE NTI3QzE5NDgwHhcNMjUwODIyMTcxOTE5WhcNMjUwODI5MTcxOTE5WjAYMRYwFAYD VQQDEw02OGE4YTY5OC1hNWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxyHKLWmV/hT9SJYqQ6fRNMDTh3KpUCQhuz5LDdWTz8juJunauWqZUSTKGx8v x+whSFHX1iJLWtviLjY3jWJ0MUWnA6DSHtXZtCw87MDOC5oCV6xxMJlb0eJXNx11 uoyVYZ2j9fSHkvROdH6ydDpPmhj9m64sFhoKBUe7vg+XAfPXJEYnu7TAHSg1hhnr wHn3dJJzZZNqdNRnh+s5Upi0X9lySrcHcApPucblHtvy/9P8mrC+xUww+AshRRmJ Z3Ep/Gl5mMKU2MP1p2oh+RmxOzALe4+SsKUbY5QsMmnmjEiOLQwstXhJOPCJg4h9 cyfSe8TUTx8sTLjRyLTjpXDwoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG48sUTr evoQvUKwC2C1AdqYQrQhMB8GA1UdIwQYMBaAFNd/N5dSNaveX0mJ+/P+k41SfBlI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODMzNi8zN0UxNjczRUZE MUQxMUU4QjNFMzZFNTdDNEY5QUUwMi8xMzgzbDFJMXE5NWZTWW43OF82VGpWSjhH VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzEzODNsMUkxcTk1ZlNZbjc4XzZUalZKOEdVZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODMzNi8zN0UxNjczRUZEMUQxMUU4QjNFMzZFNTdDNEY5QUUwMi8xMzgzbDFJMXE5 NWZTWW43OF82VGpWSjhHVWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJRcpUl7WTSxpaqdTnUzD8g86K4qaHzttn/za2fibaX0k8zFxs6WhM RcgTkjOVq+N48L7Iwj5+Z2Ih5qCPoVhTdXYX7asEEKRDRd2MykyiQSCwaw5LlGfe JLGtSBQFWZ3zMxLZp+1ytF+oP5UFyPMV8r00C1D8azvJecXtHTfauJV2lbkfwdAN HeTXBzaedXNb4mkwRo1NihgafpkuRauZlYKnZRamu0eYA4vaBRWYuLsJ75122cRJ W9WY2TtR3gsBSCM0DA9htXVfvavh2howvQVqJl627zsj1SWxlfwnvmOu2xjSmaWV HSTht5xnM27JEBHqcfmCBNEHehXN/dGp -----END CERTIFICATE-----Generated at Sat Aug 23 19:39:31 2025 by rpki-client