$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB179/2CCCAB9865D411EBA5B3DF82C4F9AE02/Dj0eI6dk5iI7d3wXHk_eEjxlfv4.mft File: Dj0eI6dk5iI7d3wXHk_eEjxlfv4.mft (raw, json) Hash identifier: 0gwG5wX/yjlXsU4045hpBwm/2qsaJ7WJoaIsUK7lapI= Subject key identifier: 7C:4A:5E:4B:76:BB:FD:02:14:3A:A9:BD:0D:41:87:51:88:D8:9E:0D Authority key identifier: 0E:3D:1E:23:A7:64:E6:22:3B:77:7C:17:1E:4F:DE:12:3C:65:7E:FE Certificate issuer: /CN=A91FB179/serialNumber=0E3D1E23A764E6223B777C171E4FDE123C657EFE Certificate serial: 06D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dj0eI6dk5iI7d3wXHk_eEjxlfv4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB179/2CCCAB9865D411EBA5B3DF82C4F9AE02/Dj0eI6dk5iI7d3wXHk_eEjxlfv4.mft Manifest number: 06D3 Signing time: Fri 22 Aug 2025 22:12:21 +0000 Manifest this update: Fri 22 Aug 2025 22:12:21 +0000 Manifest next update: Fri 29 Aug 2025 22:12:21 +0000 Files and hashes: 1: Dj0eI6dk5iI7d3wXHk_eEjxlfv4.crl (hash: 85eI8Tx7NrafnVtiMUH5iYUW0VCjGqCidgUOA4KsHz8=) 2: 6C4046C665EE11EB9ADB5F40C4F9AE02.roa (hash: 2Mo86XnCI5KeTWF6zAmVrthl3kfcd93BXOE5Y90BE8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB179/2CCCAB9865D411EBA5B3DF82C4F9AE02/Dj0eI6dk5iI7d3wXHk_eEjxlfv4.crl rsync://rpki.apnic.net/member_repository/A91FB179/2CCCAB9865D411EBA5B3DF82C4F9AE02/Dj0eI6dk5iI7d3wXHk_eEjxlfv4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dj0eI6dk5iI7d3wXHk_eEjxlfv4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:12:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1752 (0x6d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB179, serialNumber=0E3D1E23A764E6223B777C171E4FDE123C657EFE Validity Not Before: Aug 22 22:12:21 2025 GMT Not After : Aug 29 22:12:21 2025 GMT Subject: CN=68a8eb45-2ecb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c2:f6:14:cd:01:a1:cb:82:44:89:3d:d2:0e: 64:a7:8b:05:da:ae:83:df:4e:23:92:0a:e3:bd:23: 8e:d9:b6:e1:97:2d:49:8e:4e:aa:1d:c3:3a:7f:e2: 25:54:83:a2:c7:c8:ca:0c:a1:2d:c2:25:8a:9d:0d: 65:94:78:82:d4:32:02:d3:5d:1e:18:5c:5a:c6:79: 70:a1:82:c4:cc:0a:2b:42:0f:da:3e:ad:32:23:a8: 58:08:fe:33:7e:46:d5:93:b4:10:70:e6:08:05:55: f9:30:bd:db:57:29:39:0c:be:ca:68:ea:43:37:66: 6e:96:ed:02:65:01:6f:66:b9:8a:2f:a0:cb:93:c9: d3:94:90:3f:28:6b:8d:9d:4e:a4:ec:8d:1a:59:c0: ed:ba:dc:f4:a9:79:14:4c:f0:bd:91:d9:e1:52:a7: cd:b3:03:8a:a4:0e:be:59:39:de:e0:d6:32:71:e8: 0c:54:f4:a1:23:85:cb:65:7f:22:3c:14:2a:cc:78: 99:6e:9a:18:bb:de:05:ef:1e:73:12:47:fd:d0:f0: 92:38:0b:7f:df:0f:52:d4:ec:8c:90:eb:68:06:39: 8f:6d:3f:f0:29:77:94:4d:f0:34:0b:73:d6:71:a4: 94:58:e3:52:4a:a6:c7:67:44:5b:c1:37:9a:c5:58: cb:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:4A:5E:4B:76:BB:FD:02:14:3A:A9:BD:0D:41:87:51:88:D8:9E:0D X509v3 Authority Key Identifier: keyid:0E:3D:1E:23:A7:64:E6:22:3B:77:7C:17:1E:4F:DE:12:3C:65:7E:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB179/2CCCAB9865D411EBA5B3DF82C4F9AE02/Dj0eI6dk5iI7d3wXHk_eEjxlfv4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dj0eI6dk5iI7d3wXHk_eEjxlfv4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB179/2CCCAB9865D411EBA5B3DF82C4F9AE02/Dj0eI6dk5iI7d3wXHk_eEjxlfv4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:0f:ae:8a:e3:48:2a:f4:c4:bd:a5:7d:d5:eb:f7:32:6a:61: b2:61:cd:7e:5d:8f:7d:80:8c:87:df:e7:f4:1e:92:b6:94:78: b7:66:cb:57:b8:c8:81:bc:07:01:ac:8b:d2:0f:4c:78:1c:91: 9e:2e:b1:4c:48:ee:c8:2e:5a:dd:05:5d:65:c6:75:b1:3e:a2: 6c:ad:72:79:43:8d:41:4b:a8:2d:cf:56:7b:79:c6:40:57:88: 98:83:bc:90:7c:f3:e1:57:00:8c:60:41:8a:5a:4d:ea:52:c9: dc:d6:43:35:ad:4c:b6:f7:15:10:57:46:d3:71:d1:b2:7b:42: 8b:ea:38:62:fa:b7:37:4d:64:1f:63:f8:4b:24:e0:55:eb:40: be:28:ba:16:68:c5:de:c7:26:6c:6b:da:7b:d6:87:14:5e:f6: cf:10:f3:a1:69:3d:8c:bf:a6:12:8e:04:25:e5:68:59:8f:4e: 00:42:df:52:e0:26:a5:80:5a:81:95:b3:c0:ea:7f:11:7f:ea: 86:95:80:eb:57:fd:6d:4b:9b:b1:b9:10:0a:5f:7f:39:e9:7c: 9d:b3:df:51:40:8a:7b:cb:ea:bc:d6:6c:83:55:34:94:d1:d4: f7:51:7e:c8:66:9c:7b:58:e4:3a:99:1c:87:26:1d:4c:fa:a2: aa:56:12:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkIxNzkxMTAvBgNVBAUTKDBFM0QxRTIzQTc2NEU2MjIzQjc3N0MxNzFFNEZERTEy M0M2NTdFRkUwHhcNMjUwODIyMjIxMjIxWhcNMjUwODI5MjIxMjIxWjAYMRYwFAYD VQQDEw02OGE4ZWI0NS0yZWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAucL2FM0BocuCRIk90g5kp4sF2q6D304jkgrjvSOO2bbhly1Jjk6qHcM6f+Il VIOix8jKDKEtwiWKnQ1llHiC1DIC010eGFxaxnlwoYLEzAorQg/aPq0yI6hYCP4z fkbVk7QQcOYIBVX5ML3bVyk5DL7KaOpDN2Zulu0CZQFvZrmKL6DLk8nTlJA/KGuN nU6k7I0aWcDtutz0qXkUTPC9kdnhUqfNswOKpA6+WTne4NYycegMVPShI4XLZX8i PBQqzHiZbpoYu94F7x5zEkf90PCSOAt/3w9S1OyMkOtoBjmPbT/wKXeUTfA0C3PW caSUWONSSqbHZ0RbwTeaxVjLjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHxKXkt2 u/0CFDqpvQ1Bh1GI2J4NMB8GA1UdIwQYMBaAFA49HiOnZOYiO3d8Fx5P3hI8ZX7+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjE3OS8yQ0NDQUI5ODY1 RDQxMUVCQTVCM0RGODJDNEY5QUUwMi9EajBlSTZkazVpSTdkM3dYSGtfZUVqeGxm djQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RqMGVJNmRrNWlJN2Qzd1hIa19lRWp4bGZ2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjE3OS8yQ0NDQUI5ODY1RDQxMUVCQTVCM0RGODJDNEY5QUUwMi9EajBlSTZkazVp STdkM3dYSGtfZUVqeGxmdjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJD66K40gq9MS9pX3V6/cyamGyYc1+XY99gIyH3+f0HpK2lHi3ZstX uMiBvAcBrIvSD0x4HJGeLrFMSO7ILlrdBV1lxnWxPqJsrXJ5Q41BS6gtz1Z7ecZA V4iYg7yQfPPhVwCMYEGKWk3qUsnc1kM1rUy29xUQV0bTcdGye0KL6jhi+rc3TWQf Y/hLJOBV60C+KLoWaMXexyZsa9p71ocUXvbPEPOhaT2Mv6YSjgQl5WhZj04AQt9S 4CalgFqBlbPA6n8Rf+qGlYDrV/1tS5uxuRAKX3856Xyds99RQIp7y+q81myDVTSU 0dT3UX7IZpx7WOQ6mRyHJh1M+qKqVhIy -----END CERTIFICATE-----Generated at Sat Aug 23 16:38:05 2025 by rpki-client