$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft File: mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft (raw, json) Hash identifier: eCZ65HvfQBNx13JL/qbf6gdhWG9hlIYg05N2V/MJc4c= Subject key identifier: D6:3E:5D:C5:E2:8A:3A:03:B9:75:41:EF:5B:BD:73:40:17:F7:E6:03 Authority key identifier: 99:BE:08:5D:1C:69:6C:BC:21:B6:78:F9:18:8E:CC:E5:DB:CD:D4:CA Certificate issuer: /CN=A91FD378/serialNumber=99BE085D1C696CBC21B678F9188ECCE5DBCDD4CA Certificate serial: 0AF2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft Manifest number: 0AE7 Signing time: Fri 22 Aug 2025 19:32:24 +0000 Manifest this update: Fri 22 Aug 2025 19:32:23 +0000 Manifest next update: Fri 29 Aug 2025 19:32:23 +0000 Files and hashes: 1: mb4IXRxpbLwhtnj5GI7M5dvN1Mo.crl (hash: fiW1tqq3XGNQ1+XTnytk+I8TIp1FaFN0B9Pk8M2G0OE=) 2: EF44A44E51EB11EABC11800DC4F9AE02.roa (hash: wVjOHBRTAFBzywxmlgqw2C8A1H3crVXb96hs+TBB5RU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.crl rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:32:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2802 (0xaf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD378, serialNumber=99BE085D1C696CBC21B678F9188ECCE5DBCDD4CA Validity Not Before: Aug 22 19:32:23 2025 GMT Not After : Aug 29 19:32:23 2025 GMT Subject: CN=68a8c5c7-6a39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:09:b8:b3:d4:58:4f:38:9f:a8:77:2c:3f:05: b9:58:af:99:9f:bd:f0:d9:b7:9b:06:49:46:67:3e: e5:ff:66:42:87:33:f6:31:2e:a8:e1:83:c1:e6:95: 1a:05:7e:1a:4b:53:41:5c:ef:5c:5e:d3:f0:94:1b: f6:42:c1:14:19:8b:38:74:38:ac:fb:03:41:6d:71: 68:82:e7:21:7b:f5:1e:3e:b1:dd:0c:46:00:d3:d5: e4:36:4a:d0:31:1f:f9:d0:e4:0d:b8:56:bc:d5:e0: 74:38:42:ba:4d:a8:ab:fa:b4:f4:c1:fb:21:88:0a: e1:4a:95:ff:12:2b:0d:e1:18:ef:29:79:29:53:9f: e4:ce:13:b5:4a:c3:ff:f3:99:49:45:69:cc:30:ee: ba:48:3c:92:d6:05:9e:b5:61:5c:11:9b:8a:74:e1: 1d:80:30:0f:c2:c7:a4:bf:46:a3:89:75:f3:da:de: d1:e1:00:6f:67:5c:af:4f:24:0b:23:8b:78:ea:01: a2:3d:b8:1c:df:ae:18:8c:87:d6:7c:e8:6f:52:b8: f4:86:67:ca:b0:84:98:d9:b7:d6:5f:62:2a:dc:1d: 5f:70:5a:06:6f:78:3f:54:67:88:df:ca:93:48:33: aa:c5:45:7e:07:92:d4:0f:0f:af:c0:67:75:aa:6c: de:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:3E:5D:C5:E2:8A:3A:03:B9:75:41:EF:5B:BD:73:40:17:F7:E6:03 X509v3 Authority Key Identifier: keyid:99:BE:08:5D:1C:69:6C:BC:21:B6:78:F9:18:8E:CC:E5:DB:CD:D4:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:5e:f4:00:1e:31:c5:ac:f8:3e:1f:d1:37:6b:ee:90:27:80: 96:98:99:29:f3:46:97:a5:3c:79:8d:65:92:45:8c:cf:dd:4a: 68:8a:cd:12:53:d0:eb:1a:ba:1d:68:3d:be:0c:34:fb:b8:f6: b2:8d:17:c1:12:b1:45:51:cb:4d:21:4b:42:e1:15:31:ff:a9: e7:9f:c6:d3:19:a5:de:19:64:d2:3b:a2:2b:5c:19:2b:0f:7e: a9:63:8a:18:36:ad:93:ab:98:a7:24:de:e1:09:5f:24:c6:b4: 9e:7c:8f:86:4d:67:1e:8b:ad:c5:a6:a5:3c:e3:a3:5a:db:82: 62:53:a5:a1:95:79:2f:eb:97:06:00:ae:a0:52:ba:47:9d:a3: c0:84:21:b3:7f:4b:ba:fb:42:a6:eb:59:6e:fe:eb:3c:43:73: 2b:3a:c8:de:0f:e2:d2:be:7f:b6:93:cf:7e:95:02:7a:80:10: c9:8d:60:92:52:f7:0a:44:01:a8:75:4d:9d:9e:09:6d:44:cd: d3:ca:5f:80:24:fb:24:b7:62:37:c1:5d:dc:41:d7:5f:64:a0: 09:67:d5:ea:c8:b3:96:5b:13:99:81:06:8b:90:d8:aa:1f:c8: 26:54:1e:64:ae:e8:59:e1:61:e1:ca:c6:43:4b:c8:38:ed:3c: b5:28:93:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQzNzgxMTAvBgNVBAUTKDk5QkUwODVEMUM2OTZDQkMyMUI2NzhGOTE4OEVDQ0U1 REJDREQ0Q0EwHhcNMjUwODIyMTkzMjIzWhcNMjUwODI5MTkzMjIzWjAYMRYwFAYD VQQDEw02OGE4YzVjNy02YTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlQm4s9RYTzifqHcsPwW5WK+Zn73w2bebBklGZz7l/2ZChzP2MS6o4YPB5pUa BX4aS1NBXO9cXtPwlBv2QsEUGYs4dDis+wNBbXFoguche/UePrHdDEYA09XkNkrQ MR/50OQNuFa81eB0OEK6Tair+rT0wfshiArhSpX/EisN4RjvKXkpU5/kzhO1SsP/ 85lJRWnMMO66SDyS1gWetWFcEZuKdOEdgDAPwsekv0ajiXXz2t7R4QBvZ1yvTyQL I4t46gGiPbgc364YjIfWfOhvUrj0hmfKsISY2bfWX2Iq3B1fcFoGb3g/VGeI38qT SDOqxUV+B5LUDw+vwGd1qmzeGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNY+XcXi ijoDuXVB71u9c0AX9+YDMB8GA1UdIwQYMBaAFJm+CF0caWy8IbZ4+RiOzOXbzdTK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDM3OC82MzJGQThDRTUx RUExMUVBQjZBNUNEODZDNEY5QUUwMi9tYjRJWFJ4cGJMd2h0bmo1R0k3TTVkdk4x TW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21iNElYUnhwYkx3aHRuajVHSTdNNWR2TjFNby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDM3OC82MzJGQThDRTUxRUExMUVBQjZBNUNEODZDNEY5QUUwMi9tYjRJWFJ4cGJM d2h0bmo1R0k3TTVkdk4xTW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDPXvQAHjHFrPg+H9E3a+6QJ4CWmJkp80aXpTx5jWWSRYzP3Upois0S U9DrGrodaD2+DDT7uPayjRfBErFFUctNIUtC4RUx/6nnn8bTGaXeGWTSO6IrXBkr D36pY4oYNq2Tq5inJN7hCV8kxrSefI+GTWcei63FpqU846Na24JiU6WhlXkv65cG AK6gUrpHnaPAhCGzf0u6+0Km61lu/us8Q3MrOsjeD+LSvn+2k89+lQJ6gBDJjWCS UvcKRAGodU2dngltRM3Tyl+AJPskt2I3wV3cQddfZKAJZ9XqyLOWWxOZgQaLkNiq H8gmVB5kruhZ4WHhysZDS8g47Ty1KJN5 -----END CERTIFICATE-----Generated at Sat Aug 23 18:26:11 2025 by rpki-client