$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft File: CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft (raw, json) Hash identifier: eSaJUOMjKJbmpwbTfcYNWNVZWyx+p6kAoXGPAxcWBzI= Subject key identifier: 0B:5A:6C:D9:AF:8F:00:5A:4D:82:15:CE:2F:18:23:35:4F:F7:9A:28 Authority key identifier: 08:D9:F4:83:E4:54:21:58:F6:2C:BE:70:58:69:EB:ED:77:FB:92:7F Certificate issuer: /CN=A91FF7FC/serialNumber=08D9F483E4542158F62CBE705869EBED77FB927F Certificate serial: 04EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft Manifest number: 04E6 Signing time: Fri 22 Aug 2025 23:55:22 +0000 Manifest this update: Fri 22 Aug 2025 23:55:22 +0000 Manifest next update: Fri 29 Aug 2025 23:55:22 +0000 Files and hashes: 1: CNn0g-RUIVj2LL5wWGnr7Xf7kn8.crl (hash: IbkHW4GPckZOedYyM6tuEZA28jmZ3SJejKiEg67QPLQ=) 2: 5CA72CF82A6911EC94518740C4F9AE02.roa (hash: DNv6RERe4SqIzEBmNx3Q6xCWL7cpJvtrVCrMm/mBf0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.crl rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:55:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1259 (0x4eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF7FC, serialNumber=08D9F483E4542158F62CBE705869EBED77FB927F Validity Not Before: Aug 22 23:55:22 2025 GMT Not After : Aug 29 23:55:22 2025 GMT Subject: CN=68a9036a-2062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d0:c7:a4:f4:f0:75:5b:32:7c:7e:12:7e:8c: b1:36:3f:ab:da:cc:45:8d:25:4c:1e:62:34:f6:35: 76:1e:66:96:5e:0a:11:24:fb:af:75:76:d1:dc:a9: 97:ff:11:f7:7b:02:f3:d3:73:20:4b:5d:89:ad:ea: a3:e0:0b:b8:33:e1:2d:d8:1b:25:4f:b2:c5:7d:7c: 50:81:62:07:cd:40:5b:a2:6f:21:73:5d:4d:a7:15: b8:60:d9:dc:f6:a2:2e:86:79:7e:5a:5b:e4:96:d1: 0e:82:ac:fc:b0:08:76:ee:e7:b5:9e:9d:61:04:4f: ef:cb:12:c0:7d:d6:66:61:a0:0f:8d:05:8a:85:3c: 5c:1e:01:ba:41:77:b2:76:45:87:2e:d0:e0:11:9d: d1:a4:57:45:42:62:65:04:f9:14:9e:91:7d:9f:0d: 79:a5:52:3b:b0:ee:13:95:88:a9:9d:68:e8:ea:96: e5:e6:99:5c:a2:df:ed:f1:0b:51:cb:07:cd:01:c7: 0b:2e:bd:af:8d:22:68:7a:24:38:2a:1c:43:5d:ed: 4f:72:47:9b:d2:4c:ff:c5:63:9a:77:f9:1e:07:e9: 88:40:be:01:70:c2:dc:0c:d3:ec:46:7b:f1:1d:70: 58:20:8a:c4:5c:4d:bc:90:4b:fe:cb:d9:9d:c3:49: d0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:5A:6C:D9:AF:8F:00:5A:4D:82:15:CE:2F:18:23:35:4F:F7:9A:28 X509v3 Authority Key Identifier: keyid:08:D9:F4:83:E4:54:21:58:F6:2C:BE:70:58:69:EB:ED:77:FB:92:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:75:3d:bc:70:59:f9:77:c7:37:c4:c6:ec:2f:2c:bf:a0:22: 47:5d:3c:87:b0:5a:2d:19:2a:6b:d4:03:e7:27:9f:ef:5b:88: 04:fc:ec:97:50:f9:97:20:c3:c8:d4:43:08:c0:48:4f:06:99: ac:04:49:88:b0:b1:ee:5a:c8:52:6a:e8:0e:65:69:c1:6a:6c: e4:3a:8e:62:53:f7:60:ab:44:16:03:09:d9:fb:0e:6a:4b:9d: 80:63:4f:e8:6c:ef:e2:e6:b2:f4:1f:8f:66:92:cd:ff:e8:5c: 93:69:c3:6a:aa:8a:fb:61:d2:50:16:0a:61:21:8f:34:d0:fb: a9:58:b5:e0:64:2d:57:67:a0:5f:f3:95:c9:e5:4c:a4:ea:dd: 70:e0:8b:39:b7:d0:ad:d2:95:94:20:b1:75:f1:b7:a5:ee:88: ba:7a:85:05:0e:c6:e7:50:b0:ac:5c:6c:6a:f8:72:5a:08:6d: 23:58:ea:da:79:18:5f:f9:8c:36:9d:d5:65:90:9f:63:1b:04: 0c:eb:41:45:5f:27:30:92:ed:8f:67:28:84:d2:d4:8b:c8:5a: 12:0b:dd:20:65:c4:e9:c4:ee:7a:17:72:ad:8a:ab:b7:fb:fb: 09:ea:f7:1a:4d:3c:66:c7:88:dd:61:a1:48:82:72:b7:06:47: 5c:48:f5:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY3RkMxMTAvBgNVBAUTKDA4RDlGNDgzRTQ1NDIxNThGNjJDQkU3MDU4NjlFQkVE NzdGQjkyN0YwHhcNMjUwODIyMjM1NTIyWhcNMjUwODI5MjM1NTIyWjAYMRYwFAYD VQQDEw02OGE5MDM2YS0yMDYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxNDHpPTwdVsyfH4SfoyxNj+r2sxFjSVMHmI09jV2HmaWXgoRJPuvdXbR3KmX /xH3ewLz03MgS12Jreqj4Au4M+Et2BslT7LFfXxQgWIHzUBbom8hc11NpxW4YNnc 9qIuhnl+WlvkltEOgqz8sAh27ue1np1hBE/vyxLAfdZmYaAPjQWKhTxcHgG6QXey dkWHLtDgEZ3RpFdFQmJlBPkUnpF9nw15pVI7sO4TlYipnWjo6pbl5plcot/t8QtR ywfNAccLLr2vjSJoeiQ4KhxDXe1Pckeb0kz/xWOad/keB+mIQL4BcMLcDNPsRnvx HXBYIIrEXE28kEv+y9mdw0nQUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAtabNmv jwBaTYIVzi8YIzVP95ooMB8GA1UdIwQYMBaAFAjZ9IPkVCFY9iy+cFhp6+13+5J/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjdGQy80RTIzQjM5QzJB NjIxMUVDQTlBNjdDMzBDNEY5QUUwMi9DTm4wZy1SVUlWajJMTDV3V0ducjdYZjdr bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NObjBnLVJVSVZqMkxMNXdXR25yN1hmN2tuOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjdGQy80RTIzQjM5QzJBNjIxMUVDQTlBNjdDMzBDNEY5QUUwMi9DTm4wZy1SVUlW ajJMTDV3V0ducjdYZjdrbjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJdT28cFn5d8c3xMbsLyy/oCJHXTyHsFotGSpr1APnJ5/vW4gE/OyX UPmXIMPI1EMIwEhPBpmsBEmIsLHuWshSaugOZWnBamzkOo5iU/dgq0QWAwnZ+w5q S52AY0/obO/i5rL0H49mks3/6FyTacNqqor7YdJQFgphIY800PupWLXgZC1XZ6Bf 85XJ5Uyk6t1w4Is5t9Ct0pWUILF18bel7oi6eoUFDsbnULCsXGxq+HJaCG0jWOra eRhf+Yw2ndVlkJ9jGwQM60FFXycwku2PZyiE0tSLyFoSC90gZcTpxO56F3Ktiqu3 +/sJ6vcaTTxmx4jdYaFIgnK3BkdcSPXc -----END CERTIFICATE-----Generated at Sat Aug 23 22:16:48 2025 by rpki-client