$ rpki-client -vvf rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft File: 92dQUVu3YtGADFrmxsLbJP6VLQI.mft (raw, json) Hash identifier: mNIRoDldHFGKta381VNY5XswM6lUC/xfHU9JVNpWNiA= Subject key identifier: 6B:80:60:24:6D:F9:46:4B:82:B9:4D:22:3D:CD:5B:32:94:49:82:1E Authority key identifier: F7:67:50:51:5B:B7:62:D1:80:0C:5A:E6:C6:C2:DB:24:FE:95:2D:02 Certificate issuer: /CN=A91C83EA/serialNumber=F76750515BB762D1800C5AE6C6C2DB24FE952D02 Certificate serial: 2AA5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92dQUVu3YtGADFrmxsLbJP6VLQI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft Manifest number: 2A8F Signing time: Fri 18 Jul 2025 15:38:22 +0000 Manifest this update: Fri 18 Jul 2025 15:38:21 +0000 Manifest next update: Fri 25 Jul 2025 15:38:21 +0000 Files and hashes: 1: 92dQUVu3YtGADFrmxsLbJP6VLQI.crl (hash: G4Zd248mpX0zJ2t9kojdqdgFz1yMDPsBJIj+7gDoDbg=) 2: 2ED1150C561D11E7B003DF26C4F9AE02.roa (hash: VWQv/IH7NsqTcNchTqEWHo8sER9hJVbk+Ml69dI7l0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.crl rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92dQUVu3YtGADFrmxsLbJP6VLQI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 15:38:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10917 (0x2aa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C83EA, serialNumber=F76750515BB762D1800C5AE6C6C2DB24FE952D02 Validity Not Before: Jul 18 15:38:21 2025 GMT Not After : Jul 25 15:38:21 2025 GMT Subject: CN=687a6a6e-a78e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ea:0d:fd:29:d1:6f:e7:dd:45:53:0f:e0:6d: 7b:c5:d6:60:21:9e:c4:45:62:41:6f:c6:6f:1a:f8: 9b:dc:c8:0e:c8:76:2d:cf:26:91:90:18:e1:ac:74: ed:32:81:78:7a:a1:f5:83:40:f6:5f:9c:e6:fc:5e: b4:aa:f6:cd:22:a1:96:7e:54:9e:1d:68:31:39:28: 8f:2c:f4:c1:a6:82:30:4c:f8:a5:48:30:d3:d5:67: 94:0d:ba:2a:c9:87:80:50:56:7b:79:7f:fa:3b:2a: b7:36:b2:8f:d5:29:b7:28:a5:09:3b:c5:6b:1b:d8: f3:9f:e0:4a:13:39:19:b5:2f:f2:ff:56:fa:13:03: cd:d5:c3:47:73:07:7b:ff:58:fc:1a:3b:a7:cc:35: 46:bc:01:64:61:90:25:86:be:b6:48:14:48:9a:f4: a6:68:23:d7:f5:ec:5b:50:60:52:8d:cc:cd:df:e6: 12:d8:52:b2:6f:c7:69:68:5f:c1:1f:ed:e5:a6:e5: e4:cc:a1:fb:19:c4:f0:c9:9d:33:1a:3c:42:45:9e: 27:f2:09:82:52:df:50:5b:57:e0:5d:c0:cd:af:ee: 7b:b8:a0:48:d0:0c:0d:6e:de:40:0a:df:22:44:4b: e2:47:24:60:18:09:7d:26:cb:fd:0f:f3:14:9b:39: 54:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:80:60:24:6D:F9:46:4B:82:B9:4D:22:3D:CD:5B:32:94:49:82:1E X509v3 Authority Key Identifier: keyid:F7:67:50:51:5B:B7:62:D1:80:0C:5A:E6:C6:C2:DB:24:FE:95:2D:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92dQUVu3YtGADFrmxsLbJP6VLQI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:a3:6d:21:c7:c5:7d:41:84:d0:8d:08:86:a3:8e:85:80:30: df:25:45:4e:58:f7:34:51:ff:f8:e1:49:f6:d2:6b:a9:d1:6b: a5:4b:f2:c2:67:f8:01:78:1c:7a:ea:ad:59:83:06:3a:32:93: a1:dd:db:d5:37:82:7c:e8:41:0a:f1:cc:7a:12:c0:a5:b4:05: c5:a5:60:27:d7:eb:8f:03:02:0b:aa:a1:15:44:59:f6:7c:2c: 80:05:c7:b8:6d:43:e7:d3:d4:db:3b:6b:ee:4b:ab:45:dc:99: 53:d1:63:26:c9:7c:5d:03:9d:bd:14:41:83:96:7d:8c:4f:57: 56:e0:58:25:b3:f0:26:5e:81:a0:96:bc:b0:1d:21:38:f7:4f: ec:85:d5:ff:b4:40:6f:3d:41:77:87:91:04:10:8b:85:d8:5b: 7a:16:a6:07:97:0f:c2:11:8c:5f:e1:97:f2:b6:28:c4:0b:37: b2:02:10:e3:1d:9f:58:93:ec:17:d5:d9:db:36:44:e6:52:62: 38:f5:82:ba:88:1a:b9:93:b8:7b:fc:51:eb:d0:8c:4f:2c:ff: ef:5b:4d:29:74:69:0c:33:f0:36:11:f9:b3:47:06:29:bf:e9: 74:9b:6d:64:75:54:ac:ee:22:f8:79:12:80:1e:72:ef:7d:b0: 29:17:97:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgzRUExMTAvBgNVBAUTKEY3Njc1MDUxNUJCNzYyRDE4MDBDNUFFNkM2QzJEQjI0 RkU5NTJEMDIwHhcNMjUwNzE4MTUzODIxWhcNMjUwNzI1MTUzODIxWjAYMRYwFAYD VQQDEw02ODdhNmE2ZS1hNzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAreoN/SnRb+fdRVMP4G17xdZgIZ7ERWJBb8ZvGvib3MgOyHYtzyaRkBjhrHTt MoF4eqH1g0D2X5zm/F60qvbNIqGWflSeHWgxOSiPLPTBpoIwTPilSDDT1WeUDboq yYeAUFZ7eX/6Oyq3NrKP1Sm3KKUJO8VrG9jzn+BKEzkZtS/y/1b6EwPN1cNHcwd7 /1j8GjunzDVGvAFkYZAlhr62SBRImvSmaCPX9exbUGBSjczN3+YS2FKyb8dpaF/B H+3lpuXkzKH7GcTwyZ0zGjxCRZ4n8gmCUt9QW1fgXcDNr+57uKBI0AwNbt5ACt8i REviRyRgGAl9Jsv9D/MUmzlUFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGuAYCRt +UZLgrlNIj3NWzKUSYIeMB8GA1UdIwQYMBaAFPdnUFFbt2LRgAxa5sbC2yT+lS0C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODNFQS9EODJDNjFFODFD NDUxMUU0OTRBNzZGMUJDNEY5QUUwMi85MmRRVVZ1M1l0R0FERnJteHNMYkpQNlZM UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkyZFFVVnUzWXRHQURGcm14c0xiSlA2VkxRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODNFQS9EODJDNjFFODFDNDUxMUU0OTRBNzZGMUJDNEY5QUUwMi85MmRRVVZ1M1l0 R0FERnJteHNMYkpQNlZMUUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYo20hx8V9QYTQjQiGo46FgDDfJUVOWPc0Uf/44Un20mup0WulS/LC Z/gBeBx66q1ZgwY6MpOh3dvVN4J86EEK8cx6EsCltAXFpWAn1+uPAwILqqEVRFn2 fCyABce4bUPn09TbO2vuS6tF3JlT0WMmyXxdA529FEGDln2MT1dW4Fgls/AmXoGg lrywHSE490/shdX/tEBvPUF3h5EEEIuF2Ft6FqYHlw/CEYxf4ZfytijECzeyAhDj HZ9Yk+wX1dnbNkTmUmI49YK6iBq5k7h7/FHr0IxPLP/vW00pdGkMM/A2EfmzRwYp v+l0m21kdVSs7iL4eRKAHnLvfbApF5en -----END CERTIFICATE-----Generated at Sun Jul 20 11:31:45 2025 by rpki-client