$ rpki-client -vvf rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft File: CcNrxl3nKgQUf51yIL26jVJdFWQ.mft (raw, json) Hash identifier: EvNOTWyyehDQoOe1T0xgyZWyyWeg5ehCVD8IZkV0Fkc= Subject key identifier: 6C:F8:AB:D1:31:5D:3A:2F:93:52:71:2B:D2:6B:2C:DE:7A:56:B8:80 Authority key identifier: 09:C3:6B:C6:5D:E7:2A:04:14:7F:9D:72:20:BD:BA:8D:52:5D:15:64 Certificate issuer: /CN=A91F83DC/serialNumber=09C36BC65DE72A04147F9D7220BDBA8D525D1564 Certificate serial: E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcNrxl3nKgQUf51yIL26jVJdFWQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft Manifest number: E4 Signing time: Sat 23 Aug 2025 05:35:58 +0000 Manifest this update: Sat 23 Aug 2025 05:35:57 +0000 Manifest next update: Sat 30 Aug 2025 05:35:57 +0000 Files and hashes: 1: CcNrxl3nKgQUf51yIL26jVJdFWQ.crl (hash: vHKImrf7cukFI5GhL8TY64vWMdrx0obfnibcVHwwJpo=) 2: 24AB7D08271F11EF81086430C4F9AE02.roa (hash: 2wSZlJkEVODTCB+anJmD5JlJEQTA220xHKcLvDnH+18=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.crl rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcNrxl3nKgQUf51yIL26jVJdFWQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:35:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 231 (0xe7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F83DC, serialNumber=09C36BC65DE72A04147F9D7220BDBA8D525D1564 Validity Not Before: Aug 23 05:35:57 2025 GMT Not After : Aug 30 05:35:57 2025 GMT Subject: CN=68a9533d-552c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a5:67:22:9a:dd:ee:ac:f5:87:82:69:fa:cf: e2:18:43:20:22:8c:ad:ae:e7:7b:bc:e9:e6:f9:8c: 22:93:06:fc:73:22:d2:cc:63:66:b2:e6:b2:f9:89: 34:16:a2:5f:9c:c5:f7:db:e1:f4:3d:63:d3:44:bc: 94:02:49:b4:d5:db:46:2d:b2:c4:6a:91:c1:f2:f1: 64:19:39:2f:27:4a:dd:1d:47:52:77:11:15:0d:b6: b9:07:4e:81:cf:55:90:6f:bb:5e:82:c6:ef:06:02: a6:1c:61:e2:e0:34:60:ea:ed:eb:37:11:ad:25:9f: fc:83:4e:1c:f0:ef:1c:8a:40:94:77:e1:6e:60:11: cf:c6:62:93:27:14:96:6e:f9:eb:95:3c:f7:a1:80: 1c:e4:67:8d:2e:f6:78:f7:46:3f:6b:a2:cb:32:60: ae:01:26:25:fb:5b:d3:66:0a:a8:ed:39:2a:8b:fe: b7:65:03:43:84:03:ab:69:84:3e:40:a5:53:87:de: 1b:cf:12:eb:c8:a2:c5:cd:72:44:7d:a6:96:09:28: b5:40:35:a6:0d:0f:bb:77:47:c2:9e:68:6b:1f:dd: a8:d5:2f:db:fe:4a:e2:93:16:df:d7:79:ca:d3:47: 2d:fa:2c:95:e5:ea:86:b1:ab:e4:1c:48:a8:c3:a6: 9e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:F8:AB:D1:31:5D:3A:2F:93:52:71:2B:D2:6B:2C:DE:7A:56:B8:80 X509v3 Authority Key Identifier: keyid:09:C3:6B:C6:5D:E7:2A:04:14:7F:9D:72:20:BD:BA:8D:52:5D:15:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcNrxl3nKgQUf51yIL26jVJdFWQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:b1:a1:d0:3a:ff:61:51:7b:5e:2b:d8:7b:3e:1b:ae:83:b4: bd:58:79:49:c1:e8:0e:b8:e7:89:a2:4c:e6:16:a6:75:19:24: 91:d0:ba:a8:36:a6:01:c1:6e:b6:7b:95:3c:a1:76:26:6a:ac: 7d:39:3f:81:42:aa:8e:b8:e5:05:07:e3:17:05:f6:d7:99:84: c9:f6:3e:da:a5:dd:95:71:68:a7:a7:05:24:a6:02:54:81:e8: f4:69:70:fc:e4:29:7f:f1:a9:18:20:54:00:ff:8c:5f:82:00: 16:bd:5d:3e:dc:b6:e3:25:60:d8:7f:70:66:70:b4:bf:be:6b: d8:ad:6c:f5:e0:26:1b:76:89:ec:72:79:9c:5f:80:fc:53:5a: 00:e2:b3:70:b1:25:76:00:b6:7b:a9:4a:e0:da:43:78:38:35: 32:d5:c0:59:95:ea:03:7d:9c:c1:db:0c:a1:a1:b9:e8:65:06: b0:b1:5f:cc:df:9a:52:a3:79:83:dc:b4:5b:11:57:54:36:af: 61:25:79:c5:c6:4a:06:5b:aa:54:94:d9:f7:e0:5e:89:5e:e9: e3:6b:f5:89:fb:3a:15:1a:92:05:e2:07:f3:52:cd:dd:47:ad: e8:8f:d9:47:9f:08:18:8e:70:fa:ee:a9:b6:f3:dc:b1:94:5c: 02:3d:f5:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgzREMxMTAvBgNVBAUTKDA5QzM2QkM2NURFNzJBMDQxNDdGOUQ3MjIwQkRCQThE NTI1RDE1NjQwHhcNMjUwODIzMDUzNTU3WhcNMjUwODMwMDUzNTU3WjAYMRYwFAYD VQQDEw02OGE5NTMzZC01NTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0KVnIprd7qz1h4Jp+s/iGEMgIoytrud7vOnm+Ywikwb8cyLSzGNmsuay+Yk0 FqJfnMX32+H0PWPTRLyUAkm01dtGLbLEapHB8vFkGTkvJ0rdHUdSdxEVDba5B06B z1WQb7tegsbvBgKmHGHi4DRg6u3rNxGtJZ/8g04c8O8cikCUd+FuYBHPxmKTJxSW bvnrlTz3oYAc5GeNLvZ490Y/a6LLMmCuASYl+1vTZgqo7Tkqi/63ZQNDhAOraYQ+ QKVTh94bzxLryKLFzXJEfaaWCSi1QDWmDQ+7d0fCnmhrH92o1S/b/krikxbf13nK 00ct+iyV5eqGsavkHEiow6aetQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGz4q9Ex XTovk1JxK9JrLN56VriAMB8GA1UdIwQYMBaAFAnDa8Zd5yoEFH+dciC9uo1SXRVk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODNEQy9BMzk3QTNFNDI2 RUQxMUVGQjRDOUJBMjhDNEY5QUUwMi9DY05yeGwzbktnUVVmNTF5SUwyNmpWSmRG V1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NjTnJ4bDNuS2dRVWY1MXlJTDI2alZKZEZXUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODNEQy9BMzk3QTNFNDI2RUQxMUVGQjRDOUJBMjhDNEY5QUUwMi9DY05yeGwzbktn UVVmNTF5SUwyNmpWSmRGV1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7saHQOv9hUXteK9h7Phuug7S9WHlJwegOuOeJokzmFqZ1GSSR0Lqo NqYBwW62e5U8oXYmaqx9OT+BQqqOuOUFB+MXBfbXmYTJ9j7apd2VcWinpwUkpgJU gej0aXD85Cl/8akYIFQA/4xfggAWvV0+3LbjJWDYf3BmcLS/vmvYrWz14CYbdons cnmcX4D8U1oA4rNwsSV2ALZ7qUrg2kN4ODUy1cBZleoDfZzB2wyhobnoZQawsV/M 35pSo3mD3LRbEVdUNq9hJXnFxkoGW6pUlNn34F6JXunja/WJ+zoVGpIF4gfzUs3d R63oj9lHnwgYjnD67qm289yxlFwCPfWe -----END CERTIFICATE-----Generated at Sat Aug 23 21:29:21 2025 by rpki-client