$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.mft File: a81u0JpBbl_k7lre97FQ8syr6To.mft (raw, json) Hash identifier: 5hb6vBBnhWcR6WeYO4gv0h+GP5vF+s+U6bOjfA/cLVM= Subject key identifier: F4:77:92:49:2C:27:04:54:59:3D:45:46:E1:F8:B9:AA:84:E1:4A:DA Authority key identifier: 6B:CD:6E:D0:9A:41:6E:5F:E4:EE:5A:DE:F7:B1:50:F2:CC:AB:E9:3A Certificate issuer: /CN=A91ADF12/serialNumber=6BCD6ED09A416E5FE4EE5ADEF7B150F2CCABE93A Certificate serial: 0BB8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a81u0JpBbl_k7lre97FQ8syr6To.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.mft Manifest number: 0BAA Signing time: Sun 20 Jul 2025 19:03:14 +0000 Manifest this update: Sun 20 Jul 2025 19:03:13 +0000 Manifest next update: Sun 27 Jul 2025 19:03:13 +0000 Files and hashes: 1: a81u0JpBbl_k7lre97FQ8syr6To.crl (hash: TGLgrtwqtxlNvCdfTpfWcSI69XBennYGnVPSWsAWBRE=) 2: 84B6E12A312911EEBE440C7FC4F9AE02.roa (hash: i5Nf027GIvkDTNfygplCNBH1Tfi56MOYYL7UyT8iFDw=) 3: 777A546212E511EFB071A31CC4F9AE02.roa (hash: yxZWVQX9GhcgWV+yYaDkt3bP+W4v1/S4wiH9fdwmAXw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.crl rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a81u0JpBbl_k7lre97FQ8syr6To.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 19:03:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3000 (0xbb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADF12, serialNumber=6BCD6ED09A416E5FE4EE5ADEF7B150F2CCABE93A Validity Not Before: Jul 20 19:03:13 2025 GMT Not After : Jul 27 19:03:13 2025 GMT Subject: CN=687d3d71-60d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a2:ce:72:65:ef:f1:79:da:69:ea:a8:c4:95: 95:94:3d:3d:11:7e:df:0d:e6:86:c8:88:9e:ef:61: a2:36:b8:65:9d:99:db:2a:08:84:39:38:eb:0f:f4: d0:82:58:f3:c9:91:61:5d:1a:e3:12:bd:5b:82:28: 3d:8c:a8:6a:be:21:a4:72:f4:43:85:6b:a0:05:b6: 92:f9:69:a8:d2:9c:e9:99:6a:aa:23:5c:65:46:fa: 10:6c:95:5a:6c:60:6a:d1:57:86:7d:6d:2c:d5:7c: 9c:af:61:35:ae:16:1f:0b:dc:03:38:ac:49:87:7c: 04:38:d7:57:00:34:c2:3c:81:1f:2a:6a:82:47:bd: d0:43:5e:de:b2:51:7c:f7:7a:2d:7c:0a:52:cb:f8: 8d:c6:af:d6:68:5e:ae:ad:c3:04:be:ff:af:0c:4a: bc:61:a4:15:07:a9:87:15:d3:ed:71:bf:86:d1:74: 9b:1a:a7:c7:07:5c:99:b5:4c:82:3b:65:b7:2e:50: 35:0e:e5:f1:15:f8:bd:bf:b3:d3:e8:61:c3:e4:34: 7f:19:7b:fa:d5:a3:c1:74:66:d9:ed:48:cb:16:6c: 21:31:e3:86:b8:e7:5e:75:83:21:e5:77:73:61:a6: a3:07:0a:7f:f0:85:97:be:e7:dc:3b:d9:16:1f:7e: fd:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:77:92:49:2C:27:04:54:59:3D:45:46:E1:F8:B9:AA:84:E1:4A:DA X509v3 Authority Key Identifier: keyid:6B:CD:6E:D0:9A:41:6E:5F:E4:EE:5A:DE:F7:B1:50:F2:CC:AB:E9:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a81u0JpBbl_k7lre97FQ8syr6To.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:18:1a:a4:8c:6e:08:dd:92:dc:36:3e:4b:2f:44:b5:7d:a6: ba:80:cd:34:19:02:4f:bb:ff:92:93:96:41:9e:eb:12:3a:26: 2d:ba:55:0f:d6:8f:b5:0b:7f:af:08:08:37:ee:f7:89:93:fe: 8b:3c:4e:5c:22:d5:64:6d:af:45:6d:22:80:9d:cf:4c:36:5d: 32:f3:75:4a:98:9f:74:9b:fa:88:58:21:c7:68:6c:62:3e:ee: cb:97:cb:a3:7a:8c:27:a1:36:e9:9f:55:8a:84:47:3a:08:9b: 3e:a0:ce:5e:56:13:bc:e2:67:e5:75:e8:00:75:f9:82:64:c8: 68:80:53:e9:4d:b9:9b:d2:c6:27:f0:ac:57:ea:a4:8c:8b:94: 18:03:3f:15:1b:41:8d:33:c7:a9:a4:32:2e:3d:5c:b5:cb:4e: ac:79:ae:41:7b:3c:d4:d6:34:1c:6c:f9:26:b9:d4:bc:dd:28: b5:5a:dc:31:92:dd:b3:72:ab:b0:71:4c:fa:5a:ee:3f:bc:5f: e3:a2:9a:9f:cf:ea:cf:29:a8:b5:2f:3c:69:cf:7f:01:7d:0b: bb:b6:46:c1:37:c6:7d:8d:ac:bb:2b:45:cd:92:40:d4:91:ea: cc:ea:e5:c4:b6:32:a8:71:c8:10:c7:88:7f:6a:b1:22:80:00: 03:c4:8b:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURGMTIxMTAvBgNVBAUTKDZCQ0Q2RUQwOUE0MTZFNUZFNEVFNUFERUY3QjE1MEYy Q0NBQkU5M0EwHhcNMjUwNzIwMTkwMzEzWhcNMjUwNzI3MTkwMzEzWjAYMRYwFAYD VQQDEw02ODdkM2Q3MS02MGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4qLOcmXv8XnaaeqoxJWVlD09EX7fDeaGyIie72GiNrhlnZnbKgiEOTjrD/TQ gljzyZFhXRrjEr1bgig9jKhqviGkcvRDhWugBbaS+Wmo0pzpmWqqI1xlRvoQbJVa bGBq0VeGfW0s1Xycr2E1rhYfC9wDOKxJh3wEONdXADTCPIEfKmqCR73QQ17eslF8 93otfApSy/iNxq/WaF6urcMEvv+vDEq8YaQVB6mHFdPtcb+G0XSbGqfHB1yZtUyC O2W3LlA1DuXxFfi9v7PT6GHD5DR/GXv61aPBdGbZ7UjLFmwhMeOGuOdedYMh5Xdz YaajBwp/8IWXvufcO9kWH3790QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPR3kkks JwRUWT1FRuH4uaqE4UraMB8GA1UdIwQYMBaAFGvNbtCaQW5f5O5a3vexUPLMq+k6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREYxMi9DRkE1MjU5QTI4 QzAxMUVBQUFFMjRFNDhDNEY5QUUwMi9hODF1MEpwQmJsX2s3bHJlOTdGUThzeXI2 VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E4MXUwSnBCYmxfazdscmU5N0ZROHN5cjZUby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REYxMi9DRkE1MjU5QTI4QzAxMUVBQUFFMjRFNDhDNEY5QUUwMi9hODF1MEpwQmJs X2s3bHJlOTdGUThzeXI2VG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAGBqkjG4I3ZLcNj5LL0S1faa6gM00GQJPu/+Sk5ZBnusSOiYtulUP 1o+1C3+vCAg37veJk/6LPE5cItVkba9FbSKAnc9MNl0y83VKmJ90m/qIWCHHaGxi Pu7Ll8ujeownoTbpn1WKhEc6CJs+oM5eVhO84mfldegAdfmCZMhogFPpTbmb0sYn 8KxX6qSMi5QYAz8VG0GNM8eppDIuPVy1y06sea5BezzU1jQcbPkmudS83Si1Wtwx kt2zcquwcUz6Wu4/vF/jopqfz+rPKai1Lzxpz38BfQu7tkbBN8Z9jay7K0XNkkDU kerM6uXEtjKoccgQx4h/arEigAADxIvh -----END CERTIFICATE-----Generated at Mon Jul 21 02:44:34 2025 by rpki-client