$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.mft File: rroZtvzB0hrnExdw57HaPhR17JA.mft (raw, json) Hash identifier: 1u5mXJNNuBUZdQS0WtUSiM41rk2giqg4env95by6gtA= Subject key identifier: 76:29:B9:72:15:90:72:F0:03:06:1B:5A:3E:13:32:A1:DF:D0:16:00 Authority key identifier: AE:BA:19:B6:FC:C1:D2:1A:E7:13:17:70:E7:B1:DA:3E:14:75:EC:90 Certificate issuer: /CN=A91FE7DB/serialNumber=AEBA19B6FCC1D21AE7131770E7B1DA3E1475EC90 Certificate serial: 0B4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rroZtvzB0hrnExdw57HaPhR17JA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.mft Manifest number: 0B48 Signing time: Fri 22 Aug 2025 19:16:57 +0000 Manifest this update: Fri 22 Aug 2025 19:16:57 +0000 Manifest next update: Fri 29 Aug 2025 19:16:57 +0000 Files and hashes: 1: rroZtvzB0hrnExdw57HaPhR17JA.crl (hash: fy9XRFb9Jwnf4NDcnkjgEAVKK70WCKQfL4pyBhEAafg=) 2: 078AE946642A11EAA019224CC4F9AE02.roa (hash: mTWsYywMPiMfrhBIpNOsBljvGA4XjVbx+hSty7byGCw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.crl rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rroZtvzB0hrnExdw57HaPhR17JA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:16:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2895 (0xb4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE7DB, serialNumber=AEBA19B6FCC1D21AE7131770E7B1DA3E1475EC90 Validity Not Before: Aug 22 19:16:57 2025 GMT Not After : Aug 29 19:16:57 2025 GMT Subject: CN=68a8c229-53f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:71:58:48:31:09:e3:55:16:a5:df:bd:4a:77: 9a:da:c0:90:ea:26:43:1c:a2:31:30:c9:7c:7f:d6: b9:73:b0:8f:bb:bd:34:d2:ab:c1:a2:bb:6d:85:0b: f6:41:49:10:dc:09:2d:18:56:f0:96:19:e1:1a:83: 4a:80:a1:8c:d2:09:be:d2:32:88:f4:c0:c9:87:50: f3:21:88:53:c6:64:f0:0c:cd:5f:11:19:ef:d1:14: d1:6c:64:e4:73:ae:c4:23:e5:ff:96:50:96:af:fd: 96:44:14:3a:d2:81:e1:01:8c:6a:6b:2e:bf:40:ca: 88:96:e2:5d:95:32:b1:ed:32:29:cf:e6:ea:d1:16: ca:7d:f5:42:c1:77:49:68:bd:48:16:cc:aa:06:8f: ee:87:e1:35:76:ee:8d:7f:24:5e:44:fb:a3:74:42: 0b:59:37:1a:bf:be:1c:df:ac:bb:6d:56:7f:a6:ef: 46:fb:b5:8d:b8:dc:ea:86:c0:58:46:62:be:a4:5a: 13:fd:b2:b0:4a:24:68:98:07:87:36:48:cb:a7:bf: e3:77:de:4d:eb:a5:5f:e9:ab:8d:38:89:42:ea:03: 24:48:43:29:80:89:dd:b4:f7:1c:e2:6a:f4:bb:6f: 56:ff:b5:84:f5:8c:91:72:8c:bf:6e:51:bc:42:ea: ed:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:29:B9:72:15:90:72:F0:03:06:1B:5A:3E:13:32:A1:DF:D0:16:00 X509v3 Authority Key Identifier: keyid:AE:BA:19:B6:FC:C1:D2:1A:E7:13:17:70:E7:B1:DA:3E:14:75:EC:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rroZtvzB0hrnExdw57HaPhR17JA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:cc:a9:e8:33:a3:c1:0a:73:02:bf:b8:7a:6f:c8:23:a3:90: 3d:ed:e5:6c:58:8e:96:80:7a:8c:69:8a:7d:d3:72:c5:65:7d: 57:dd:71:b6:17:20:d3:7c:3f:eb:e0:51:73:54:05:b1:d1:79: 52:1b:25:85:79:c2:1c:6b:b2:45:1e:92:15:dc:91:0f:4d:f8: ac:05:9e:ce:90:82:ab:b1:44:5e:5b:76:e3:fe:66:f8:fd:9a: f6:2a:2a:95:69:af:d7:d5:1b:62:62:54:7e:f9:34:ab:8b:97: b0:65:1b:0e:2f:1e:48:54:52:36:57:20:bd:c8:67:05:25:2b: c6:ac:64:8d:af:b9:cd:a4:c3:73:7c:2d:83:f3:10:b7:01:2c: 97:b8:a3:90:55:5b:58:95:c1:af:e0:d6:15:b8:68:8b:fe:72: f8:94:30:66:bf:6b:78:0f:06:0b:70:0c:2c:cb:c1:c8:03:11: 49:a0:6d:17:98:e2:d6:02:ee:5c:c8:7b:91:6f:19:f8:ba:14: 6c:d1:74:0e:2e:80:2f:6f:1a:fd:7d:87:d9:d3:c8:fc:d9:56: ad:3d:10:1a:15:1b:e1:da:ba:51:46:90:44:62:1e:ff:85:f7: a2:00:fe:61:fb:f0:64:4b:36:94:2d:3c:d1:da:30:67:1e:0f: b9:14:1d:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC08wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU3REIxMTAvBgNVBAUTKEFFQkExOUI2RkNDMUQyMUFFNzEzMTc3MEU3QjFEQTNF MTQ3NUVDOTAwHhcNMjUwODIyMTkxNjU3WhcNMjUwODI5MTkxNjU3WjAYMRYwFAYD VQQDEw02OGE4YzIyOS01M2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs3FYSDEJ41UWpd+9Snea2sCQ6iZDHKIxMMl8f9a5c7CPu7000qvBortthQv2 QUkQ3AktGFbwlhnhGoNKgKGM0gm+0jKI9MDJh1DzIYhTxmTwDM1fERnv0RTRbGTk c67EI+X/llCWr/2WRBQ60oHhAYxqay6/QMqIluJdlTKx7TIpz+bq0RbKffVCwXdJ aL1IFsyqBo/uh+E1du6NfyReRPujdEILWTcav74c36y7bVZ/pu9G+7WNuNzqhsBY RmK+pFoT/bKwSiRomAeHNkjLp7/jd95N66Vf6auNOIlC6gMkSEMpgIndtPcc4mr0 u29W/7WE9YyRcoy/blG8QurtswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHYpuXIV kHLwAwYbWj4TMqHf0BYAMB8GA1UdIwQYMBaAFK66Gbb8wdIa5xMXcOex2j4UdeyQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTdEQi9COTUxRTI4QzNE Q0ExMUVBODFCOUQzNTJDNEY5QUUwMi9ycm9adHZ6QjBocm5FeGR3NTdIYVBoUjE3 SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Jyb1p0dnpCMGhybkV4ZHc1N0hhUGhSMTdKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTdEQi9COTUxRTI4QzNEQ0ExMUVBODFCOUQzNTJDNEY5QUUwMi9ycm9adHZ6QjBo cm5FeGR3NTdIYVBoUjE3SkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSzKnoM6PBCnMCv7h6b8gjo5A97eVsWI6WgHqMaYp903LFZX1X3XG2 FyDTfD/r4FFzVAWx0XlSGyWFecIca7JFHpIV3JEPTfisBZ7OkIKrsUReW3bj/mb4 /Zr2KiqVaa/X1RtiYlR++TSri5ewZRsOLx5IVFI2VyC9yGcFJSvGrGSNr7nNpMNz fC2D8xC3ASyXuKOQVVtYlcGv4NYVuGiL/nL4lDBmv2t4DwYLcAwsy8HIAxFJoG0X mOLWAu5cyHuRbxn4uhRs0XQOLoAvbxr9fYfZ08j82VatPRAaFRvh2rpRRpBEYh7/ hfeiAP5h+/BkSzaULTzR2jBnHg+5FB3n -----END CERTIFICATE-----Generated at Sun Aug 24 05:12:50 2025 by rpki-client