$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft File: 1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft (raw, json) Hash identifier: QKz92mw8xWzv0HBFi5rNPV+mV4rVKKoyGzy45+hS9lg= Subject key identifier: 23:3A:E9:43:0F:EC:C2:E3:A9:18:C7:B6:7E:78:43:27:11:B3:A3:8C Authority key identifier: D6:F2:BA:AE:7A:52:0F:AA:46:82:CA:DC:36:93:66:0B:9E:1F:F1:04 Certificate issuer: /CN=A91FC8B6/serialNumber=D6F2BAAE7A520FAA4682CADC3693660B9E1FF104 Certificate serial: 01AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vK6rnpSD6pGgsrcNpNmC54f8QQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft Manifest number: 01AA Signing time: Sat 23 Aug 2025 03:19:43 +0000 Manifest this update: Sat 23 Aug 2025 03:19:43 +0000 Manifest next update: Sat 30 Aug 2025 03:19:43 +0000 Files and hashes: 1: 1vK6rnpSD6pGgsrcNpNmC54f8QQ.crl (hash: TNZzWf52pk9XD8hJBUhZQrXlEvihLTxAq/kWzHgKllQ=) 2: 37B81F7AF64511ED8C736D76C4F9AE02.roa (hash: /U2wldHiHrPFBo2wVFsGuIVi0YglDoRZcVdncnVvj2U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.crl rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vK6rnpSD6pGgsrcNpNmC54f8QQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:19:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 430 (0x1ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC8B6, serialNumber=D6F2BAAE7A520FAA4682CADC3693660B9E1FF104 Validity Not Before: Aug 23 03:19:43 2025 GMT Not After : Aug 30 03:19:43 2025 GMT Subject: CN=68a9334f-1570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:72:7f:02:c8:80:ef:a2:90:e0:f5:0b:62:10: 23:ed:e7:55:d6:e2:63:3e:dc:bc:1b:cb:de:fd:0e: 4b:7f:72:b4:ab:e2:d1:b9:40:d9:10:3a:3d:17:81: 10:65:f4:a7:bf:02:66:29:d9:1c:5f:bf:49:f6:e8: 7e:9b:09:30:db:a3:e7:03:2a:f3:4b:17:90:1d:a6: e9:eb:1b:61:0e:61:e4:84:6a:de:5d:16:0f:7c:e8: c1:d6:ef:c0:fe:53:a8:50:49:b8:b3:02:73:89:84: f3:ec:71:45:52:f9:e0:a5:b0:c4:f0:82:ce:9b:a3: 21:2f:84:47:58:0d:f0:ee:eb:47:cc:44:c8:d1:a3: 71:c4:b3:d3:59:df:e5:7c:7b:b9:b6:4a:75:72:fc: 0f:54:7f:30:c3:c0:3f:2d:3a:b1:b6:f5:10:cf:06: fa:ef:da:d3:3b:1c:ac:f7:a8:cd:ae:e9:fe:3b:53: 8b:8a:0e:c2:55:62:5d:7f:92:25:b8:84:ad:e0:19: ff:a8:eb:58:b5:ad:4a:c0:c6:5f:42:73:97:f3:19: dc:4b:af:46:19:85:86:7c:a6:6f:b9:f0:10:a3:de: cf:99:6c:83:ab:34:fb:0e:d3:3f:0c:d6:15:31:65: 21:7c:f9:fe:da:6f:0d:86:cf:8b:06:f5:1d:76:f5: e1:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:3A:E9:43:0F:EC:C2:E3:A9:18:C7:B6:7E:78:43:27:11:B3:A3:8C X509v3 Authority Key Identifier: keyid:D6:F2:BA:AE:7A:52:0F:AA:46:82:CA:DC:36:93:66:0B:9E:1F:F1:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vK6rnpSD6pGgsrcNpNmC54f8QQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:57:4e:0b:1a:d0:0d:a6:2c:d2:5c:d9:f7:f1:11:2b:01:a6: 29:b1:d8:df:bf:77:28:54:8b:f7:dd:fe:4c:de:63:66:c1:88: 16:3e:2a:3d:22:d8:94:be:95:8b:bc:f2:a0:0d:5d:82:75:ca: 5c:e7:2c:d5:8f:62:20:2c:c3:26:7f:1d:b3:9d:aa:71:e0:53: a4:1a:93:0a:ca:44:a4:e7:c8:f4:8c:23:6b:c8:56:1a:b9:10: b0:7f:ec:9a:e1:4e:5a:f4:c6:b4:33:56:dd:a2:eb:12:3d:24: d0:94:e6:59:87:48:01:57:87:cf:f1:8e:4b:b2:fd:f7:d0:fb: 11:9c:a6:99:27:ae:6a:f6:d4:c3:bf:a9:3e:76:f6:71:1c:16: 61:43:f9:95:17:a4:4a:85:90:64:b0:2b:ec:3f:25:c2:6c:e4: c9:20:b9:45:c3:90:85:b0:32:4f:87:33:aa:65:b6:cf:d8:57: ae:f4:a2:62:19:eb:24:71:30:19:3d:43:cf:5c:fd:5a:34:26: 07:46:22:2b:a2:db:da:b5:65:7e:f4:21:1d:9f:73:67:b2:42: 8a:ef:62:7f:a4:98:5e:cc:c3:04:7c:d7:11:d9:af:34:72:1e: 56:0b:d4:61:9e:25:2b:be:97:fe:ad:c8:dd:31:36:bb:f5:05: 1c:11:d0:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM4QjYxMTAvBgNVBAUTKEQ2RjJCQUFFN0E1MjBGQUE0NjgyQ0FEQzM2OTM2NjBC OUUxRkYxMDQwHhcNMjUwODIzMDMxOTQzWhcNMjUwODMwMDMxOTQzWjAYMRYwFAYD VQQDEw02OGE5MzM0Zi0xNTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwnJ/AsiA76KQ4PULYhAj7edV1uJjPty8G8ve/Q5Lf3K0q+LRuUDZEDo9F4EQ ZfSnvwJmKdkcX79J9uh+mwkw26PnAyrzSxeQHabp6xthDmHkhGreXRYPfOjB1u/A /lOoUEm4swJziYTz7HFFUvngpbDE8ILOm6MhL4RHWA3w7utHzETI0aNxxLPTWd/l fHu5tkp1cvwPVH8ww8A/LTqxtvUQzwb679rTOxys96jNrun+O1OLig7CVWJdf5Il uISt4Bn/qOtYta1KwMZfQnOX8xncS69GGYWGfKZvufAQo97PmWyDqzT7DtM/DNYV MWUhfPn+2m8Nhs+LBvUddvXhOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCM66UMP 7MLjqRjHtn54QycRs6OMMB8GA1UdIwQYMBaAFNbyuq56Ug+qRoLK3DaTZgueH/EE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzhCNi9FQzYyMkIwNkY2 M0YxMUVEOTc4ODJDNzJDNEY5QUUwMi8xdks2cm5wU0Q2cEdnc3JjTnBObUM1NGY4 UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF2SzZybnBTRDZwR2dzcmNOcE5tQzU0ZjhRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzhCNi9FQzYyMkIwNkY2M0YxMUVEOTc4ODJDNzJDNEY5QUUwMi8xdks2cm5wU0Q2 cEdnc3JjTnBObUM1NGY4UVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRV04LGtANpizSXNn38RErAaYpsdjfv3coVIv33f5M3mNmwYgWPio9 ItiUvpWLvPKgDV2Cdcpc5yzVj2IgLMMmfx2znapx4FOkGpMKykSk58j0jCNryFYa uRCwf+ya4U5a9Ma0M1bdousSPSTQlOZZh0gBV4fP8Y5Lsv330PsRnKaZJ65q9tTD v6k+dvZxHBZhQ/mVF6RKhZBksCvsPyXCbOTJILlFw5CFsDJPhzOqZbbP2Feu9KJi GeskcTAZPUPPXP1aNCYHRiIrotvatWV+9CEdn3NnskKK72J/pJhezMMEfNcR2a80 ch5WC9RhniUrvpf+rcjdMTa79QUcEdAE -----END CERTIFICATE-----Generated at Sat Aug 23 15:28:25 2025 by rpki-client