$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft File: D59xWNvf-ipXrgJIfJgga3g4BJY.mft (raw, json) Hash identifier: rEoh4NXimTreKy2vSxpT/Wp7TTTAE11uQ7D2rKIN79Y= Subject key identifier: 9A:29:46:46:7C:02:F9:0E:A7:87:4C:85:77:BF:44:D7:21:E9:D0:AE Authority key identifier: 0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96 Certificate issuer: /CN=A91FE9DC/serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496 Certificate serial: 0117 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft Manifest number: 010B Signing time: Sat 23 Aug 2025 05:12:20 +0000 Manifest this update: Sat 23 Aug 2025 05:12:20 +0000 Manifest next update: Sat 30 Aug 2025 05:12:20 +0000 Files and hashes: 1: D59xWNvf-ipXrgJIfJgga3g4BJY.crl (hash: XGmHO/J6tc/WVP5y6LtrrSYSDZyyhVhl7eggwtXVayw=) 2: CAF5E0EA6BDA11EF942AB06BC4F9AE02.roa (hash: G/0ezw6yoaaHjsn46sx4sKQROwS7T0PMQPxdtMKah+o=) 3: 1132F3026BD811EF90DBC631C4F9AE02.roa (hash: E9ObZNoyKAzjoiJfjRSwt1+kDOZ+xsFeoybdq6vQ22E=) 4: 507476EE6BD811EFBDD72932C4F9AE02.roa (hash: pdzJ5okYmWLfXDpKnMd4R/Lx/tQtmRyHcTZA/k863ZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:12:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 279 (0x117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE9DC, serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496 Validity Not Before: Aug 23 05:12:20 2025 GMT Not After : Aug 30 05:12:20 2025 GMT Subject: CN=68a94db4-bd1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:47:26:35:e4:aa:66:39:b1:57:0c:18:73:cc: 22:b4:1f:73:7a:9f:fe:87:fb:b8:17:34:c8:d2:e4: f7:45:2c:ce:ab:b0:72:70:2c:d3:98:61:3c:bc:30: cf:81:78:3b:be:b4:9c:fc:77:86:d9:27:15:53:15: aa:77:92:24:1e:24:09:9a:43:93:2e:df:2b:c6:19: 63:cd:d3:7d:78:a3:ce:6a:b5:f1:e3:7c:8b:69:52: 25:19:e1:ea:53:85:b4:67:e0:a7:39:69:0d:e3:e1: 7c:3a:f4:cb:d0:76:a1:ea:58:c4:6c:ac:0a:49:a7: 5e:df:0a:68:50:a0:6e:df:cb:8f:f8:3f:c8:49:62: f9:3e:01:c1:5c:66:8f:9e:99:8d:61:06:c0:76:f2: 09:44:0e:67:4f:33:86:1c:90:19:f0:ba:c9:d5:1b: 63:3a:f7:c0:20:d4:0b:66:fe:63:67:2a:9c:d8:48: 32:18:ab:b6:0a:b6:ff:62:f9:c4:d1:5f:61:ed:c5: 7e:20:06:ee:31:bc:6f:ad:35:2f:25:3a:c8:9a:0c: 1d:1c:21:04:0a:63:0b:36:30:24:fc:2a:7b:32:04: 04:67:d8:dd:ea:ab:8f:91:68:68:a3:92:98:07:d4: 0e:25:4f:55:8b:e9:4d:e0:08:53:59:b5:03:fc:43: b3:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:29:46:46:7C:02:F9:0E:A7:87:4C:85:77:BF:44:D7:21:E9:D0:AE X509v3 Authority Key Identifier: keyid:0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:f0:e4:9f:e8:43:d8:0d:57:9d:3f:35:1b:16:ae:73:94:21: c2:e9:66:96:da:ab:23:38:49:d9:ff:44:14:95:4b:61:e8:8f: a0:3c:9d:b7:f2:e2:a7:8e:be:c2:5a:c4:eb:0f:65:21:94:7a: 93:9d:6c:0d:8a:6d:f0:72:18:c3:2e:fc:6d:c5:9a:9c:08:11: d1:86:51:e9:31:97:6e:f8:ed:bd:93:c8:50:74:9f:c4:7d:1e: d5:46:c7:14:1e:74:c6:90:4d:74:1d:8b:88:2f:df:4a:33:31: 1e:9b:8c:0f:43:8c:30:ea:59:88:48:5f:87:c4:64:61:7e:64: 26:5a:fe:a3:f9:48:68:11:9e:c5:10:aa:b1:2e:be:95:52:d8: 6c:71:e1:be:5f:90:77:d6:ac:f3:62:15:b4:5d:78:b4:ce:53: 76:72:86:92:9f:98:a6:c5:2e:94:ea:a5:ca:2d:76:be:4c:59: 3b:ab:92:6e:40:89:84:59:ed:62:8c:45:46:03:a1:5d:68:48: 59:56:69:bd:bd:1a:63:89:78:b6:5c:fd:6f:7a:34:8e:a9:d3: a6:b0:44:0e:64:bb:43:2d:73:95:1e:cb:6b:98:b4:8c:97:fe: b2:71:06:2c:b1:b7:f2:13:b8:64:81:a4:c3:4c:3c:26:15:24: 2a:98:51:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU5REMxMTAvBgNVBAUTKDBGOUY3MTU4REJERkZBMkE1N0FFMDI0ODdDOTgyMDZC NzgzODA0OTYwHhcNMjUwODIzMDUxMjIwWhcNMjUwODMwMDUxMjIwWjAYMRYwFAYD VQQDEw02OGE5NGRiNC1iZDFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqEcmNeSqZjmxVwwYc8witB9zep/+h/u4FzTI0uT3RSzOq7BycCzTmGE8vDDP gXg7vrSc/HeG2ScVUxWqd5IkHiQJmkOTLt8rxhljzdN9eKPOarXx43yLaVIlGeHq U4W0Z+CnOWkN4+F8OvTL0Hah6ljEbKwKSade3wpoUKBu38uP+D/ISWL5PgHBXGaP npmNYQbAdvIJRA5nTzOGHJAZ8LrJ1RtjOvfAINQLZv5jZyqc2EgyGKu2Crb/YvnE 0V9h7cV+IAbuMbxvrTUvJTrImgwdHCEECmMLNjAk/Cp7MgQEZ9jd6quPkWhoo5KY B9QOJU9Vi+lN4AhTWbUD/EOzvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJopRkZ8 AvkOp4dMhXe/RNch6dCuMB8GA1UdIwQYMBaAFA+fcVjb3/oqV64CSHyYIGt4OASW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTlEQy82RUVDMUY1Q0VG RkQxMUVFOTAyODhBNzJDNEY5QUUwMi9ENTl4V052Zi1pcFhyZ0pJZkpnZ2EzZzRC SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q1OXhXTnZmLWlwWHJnSklmSmdnYTNnNEJKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTlEQy82RUVDMUY1Q0VGRkQxMUVFOTAyODhBNzJDNEY5QUUwMi9ENTl4V052Zi1p cFhyZ0pJZkpnZ2EzZzRCSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBE8OSf6EPYDVedPzUbFq5zlCHC6WaW2qsjOEnZ/0QUlUth6I+gPJ23 8uKnjr7CWsTrD2UhlHqTnWwNim3wchjDLvxtxZqcCBHRhlHpMZdu+O29k8hQdJ/E fR7VRscUHnTGkE10HYuIL99KMzEem4wPQ4ww6lmISF+HxGRhfmQmWv6j+UhoEZ7F EKqxLr6VUthsceG+X5B31qzzYhW0XXi0zlN2coaSn5imxS6U6qXKLXa+TFk7q5Ju QImEWe1ijEVGA6FdaEhZVmm9vRpjiXi2XP1vejSOqdOmsEQOZLtDLXOVHstrmLSM l/6ycQYssbfyE7hkgaTDTDwmFSQqmFF9 -----END CERTIFICATE-----Generated at Sat Aug 23 19:40:50 2025 by rpki-client