$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.mft File: 755Sv59IZcr4eHrZXObeT2R2hA0.mft (raw, json) Hash identifier: XWk5nmZfn0jIJBx2ksSP/hpNUs1H/zJdEL50fIGbWoU= Subject key identifier: 4F:57:E2:16:70:36:EF:3B:AF:EF:E4:1A:8B:D7:F5:C8:2D:CA:02:BD Authority key identifier: EF:9E:52:BF:9F:48:65:CA:F8:78:7A:D9:5C:E6:DE:4F:64:76:84:0D Certificate issuer: /CN=A91FCA4B/serialNumber=EF9E52BF9F4865CAF8787AD95CE6DE4F6476840D Certificate serial: 0AB4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/755Sv59IZcr4eHrZXObeT2R2hA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.mft Manifest number: 0AAC Signing time: Fri 22 Aug 2025 19:38:57 +0000 Manifest this update: Fri 22 Aug 2025 19:38:57 +0000 Manifest next update: Fri 29 Aug 2025 19:38:57 +0000 Files and hashes: 1: 755Sv59IZcr4eHrZXObeT2R2hA0.crl (hash: hFasp8OfKi84nD7ROX0v/vBoCJF3PszGxHv0SIsrHy8=) 2: 9E1721445CFB11EAA377D527C4F9AE02.roa (hash: DDWfC2SDa6mkLERH2fLjEnqKEWrtJ+AhIE6qZcqqt1o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.crl rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/755Sv59IZcr4eHrZXObeT2R2hA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:38:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2740 (0xab4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCA4B, serialNumber=EF9E52BF9F4865CAF8787AD95CE6DE4F6476840D Validity Not Before: Aug 22 19:38:57 2025 GMT Not After : Aug 29 19:38:57 2025 GMT Subject: CN=68a8c751-f7c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:17:47:55:0e:b0:f0:a7:bd:8c:fd:59:e3:0f: 4e:38:a5:cd:db:25:88:54:e5:e0:4c:3c:41:52:14: 7c:e8:1a:5e:69:b3:ed:b3:b0:9b:b9:2d:1a:5b:a6: af:49:91:5c:95:fe:5b:b4:d3:1a:ee:cd:69:9e:35: f6:d9:f4:74:11:5b:74:51:4e:21:b0:cf:ad:64:c5: 1e:8e:74:e7:3e:d8:17:16:a9:38:7a:5f:28:06:4d: 18:17:cb:34:c1:07:a0:0d:9d:34:46:e8:87:7d:b9: 97:8c:11:aa:8a:46:ea:a4:1a:0e:e9:c6:9b:d6:50: 82:56:3f:40:fc:3c:78:a7:8e:78:c0:86:e0:f6:fa: 55:0c:c9:b1:00:63:ca:78:b3:ae:f3:9a:fd:f4:55: e0:60:69:ee:bf:5b:bb:3d:27:5b:0a:b6:f3:aa:d3: 47:be:df:b2:af:28:c7:39:73:b0:46:da:a8:d0:f5: e7:09:d8:a2:ab:f5:01:a6:44:ad:d9:d0:57:7d:b2: 61:19:39:f0:1f:cc:39:9a:76:3a:48:a6:02:99:d9: e1:2f:3c:1c:45:85:f6:0a:89:31:f1:11:23:3e:55: 4d:21:46:d4:b1:54:9c:d7:9c:96:de:ff:d7:23:36: ce:4c:8a:de:b8:2a:f8:86:6a:e7:72:d2:ba:80:40: 7e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:57:E2:16:70:36:EF:3B:AF:EF:E4:1A:8B:D7:F5:C8:2D:CA:02:BD X509v3 Authority Key Identifier: keyid:EF:9E:52:BF:9F:48:65:CA:F8:78:7A:D9:5C:E6:DE:4F:64:76:84:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/755Sv59IZcr4eHrZXObeT2R2hA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:c8:a5:65:50:90:42:14:6c:23:ed:df:c7:cd:c4:e5:99:27: 4e:64:ff:28:2a:0c:73:00:56:96:f4:ad:1b:65:ff:15:88:83: cd:a7:a9:7b:c0:77:8e:06:cd:05:4b:06:ab:85:39:3f:c3:e4: 0a:8b:c1:0a:fb:8c:98:d8:f5:d0:22:4f:61:f5:7d:d7:5f:02: 98:6b:6e:8b:3d:73:ab:0f:b4:72:6e:a7:3e:8b:41:a1:f1:4f: 99:21:04:37:f3:3d:06:2a:39:b5:ef:3e:e7:52:66:29:61:e3: e2:cb:28:2f:b1:31:81:08:49:69:ad:cb:e8:24:eb:0c:d4:8d: a7:3e:97:dd:46:cd:33:cf:ca:04:fa:66:36:1e:cf:a0:cc:80: 4c:2a:72:86:f2:1f:56:86:4b:c3:69:aa:2b:95:98:e8:82:2c: 2b:e9:78:58:a3:32:78:6c:18:65:ea:27:e7:70:7a:63:8b:39: 9a:ed:21:6b:5d:6d:97:e7:c4:b0:3a:52:31:31:1e:d2:41:70: 64:45:58:d8:c7:0c:c8:da:f1:4a:2c:52:e6:cb:38:c2:99:49: 70:36:6b:a2:b8:7a:f0:01:6a:c1:e6:57:b8:c8:b5:3d:43:57: 86:49:19:ea:88:c4:3b:02:53:55:9b:0d:88:c9:ef:07:d9:d9: c9:d0:42:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNBNEIxMTAvBgNVBAUTKEVGOUU1MkJGOUY0ODY1Q0FGODc4N0FEOTVDRTZERTRG NjQ3Njg0MEQwHhcNMjUwODIyMTkzODU3WhcNMjUwODI5MTkzODU3WjAYMRYwFAYD VQQDEw02OGE4Yzc1MS1mN2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnRdHVQ6w8Ke9jP1Z4w9OOKXN2yWIVOXgTDxBUhR86BpeabPts7CbuS0aW6av SZFclf5btNMa7s1pnjX22fR0EVt0UU4hsM+tZMUejnTnPtgXFqk4el8oBk0YF8s0 wQegDZ00RuiHfbmXjBGqikbqpBoO6cab1lCCVj9A/Dx4p454wIbg9vpVDMmxAGPK eLOu85r99FXgYGnuv1u7PSdbCrbzqtNHvt+yryjHOXOwRtqo0PXnCdiiq/UBpkSt 2dBXfbJhGTnwH8w5mnY6SKYCmdnhLzwcRYX2Cokx8REjPlVNIUbUsVSc15yW3v/X IzbOTIreuCr4hmrnctK6gEB+BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE9X4hZw Nu87r+/kGovX9cgtygK9MB8GA1UdIwQYMBaAFO+eUr+fSGXK+Hh62Vzm3k9kdoQN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0E0Qi82RTY0QzQxMDVD RUMxMUVBQTZCNkU4NzhDNEY5QUUwMi83NTVTdjU5SVpjcjRlSHJaWE9iZVQyUjJo QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc1NVN2NTlJWmNyNGVIclpYT2JlVDJSMmhBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0E0Qi82RTY0QzQxMDVDRUMxMUVBQTZCNkU4NzhDNEY5QUUwMi83NTVTdjU5SVpj cjRlSHJaWE9iZVQyUjJoQTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKyKVlUJBCFGwj7d/HzcTlmSdOZP8oKgxzAFaW9K0bZf8ViIPNp6l7 wHeOBs0FSwarhTk/w+QKi8EK+4yY2PXQIk9h9X3XXwKYa26LPXOrD7Rybqc+i0Gh 8U+ZIQQ38z0GKjm17z7nUmYpYePiyygvsTGBCElprcvoJOsM1I2nPpfdRs0zz8oE +mY2Hs+gzIBMKnKG8h9WhkvDaaorlZjogiwr6XhYozJ4bBhl6ifncHpjizma7SFr XW2X58SwOlIxMR7SQXBkRVjYxwzI2vFKLFLmyzjCmUlwNmuiuHrwAWrB5le4yLU9 Q1eGSRnqiMQ7AlNVmw2Iye8H2dnJ0EKw -----END CERTIFICATE-----Generated at Sun Aug 24 00:04:41 2025 by rpki-client