$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft File: 0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft (raw, json) Hash identifier: ux4EIMQ5Vr/mbUb7Bi2/O4UlJy8Pu9/Q3J2NFXucJVI= Subject key identifier: 0E:36:F7:4A:D1:E1:EE:19:37:EE:AF:56:C6:D9:E9:E2:2A:7F:A2:78 Authority key identifier: D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0 Certificate issuer: /CN=A91C8F27/serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0 Certificate serial: 0972 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft Manifest number: 092D Signing time: Tue 22 Jul 2025 20:37:13 +0000 Manifest this update: Tue 22 Jul 2025 20:37:13 +0000 Manifest next update: Tue 29 Jul 2025 20:37:13 +0000 Files and hashes: 1: 0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl (hash: YdT+i4dX2AJvtZxpv0vPjFrxX3L9a14EzPMTVAVoKvk=) 2: BDB203466B5D11EF84E04577C4F9AE02.roa (hash: BOBDyoF9n7xbx3TtkofAs1yOLOgU9o92r9+fjg3ExtE=) 3: A02B90EA479311F0BBFADC27C4F9AE02.roa (hash: FSGba/ksTfUcD5c5nTx4WizNyHeIp3OO4bcFqqjagGE=) 4: 2857F2E4111A11EF86332415C4F9AE02.roa (hash: yNiSqyUgGq7X2OqvzLvfoSJUstp1wz+ZN5+bLrhI6IQ=) 5: 51B031C80E8D11EE89A0B128C4F9AE02.roa (hash: 4OgZKWzHSPDUQ7eYlV4agiNuq4N/lgNw19COSO6Bfk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 20:37:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2418 (0x972) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8F27, serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0 Validity Not Before: Jul 22 20:37:13 2025 GMT Not After : Jul 29 20:37:13 2025 GMT Subject: CN=687ff679-8ef2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d7:06:ac:b6:47:dc:db:f4:9b:3a:23:40:d4: ca:0e:07:90:a7:96:46:9a:ad:ed:d6:97:35:c4:ea: 86:66:f6:1f:2b:f2:c4:21:b3:00:8d:c4:8a:c0:0b: e1:08:c6:e4:cc:3c:95:c6:01:56:8a:bb:27:09:e5: 34:06:c3:c5:ef:61:05:14:31:fc:a1:09:9c:8e:5d: 0b:56:fd:3c:c4:5f:0a:d9:2a:d6:95:7a:3d:35:94: 4e:e2:40:f6:4f:46:50:4f:10:70:7c:93:06:3c:bd: 44:12:81:a9:08:3e:31:d1:7f:50:13:6e:19:7c:4d: a4:26:37:35:91:12:c6:ec:52:1f:e8:c4:5f:37:b7: d7:fe:b4:38:69:99:98:69:a1:8b:98:47:c3:e4:47: eb:a9:58:9c:47:59:1a:61:13:ef:fa:96:2c:8b:39: 83:7f:41:a5:0b:45:4e:03:bb:a6:56:27:44:ff:26: 94:a3:b4:8f:4d:8c:e9:0b:f6:05:10:bd:8e:49:00: d2:2e:81:20:40:74:43:58:fa:86:12:39:d9:86:31: 21:e8:8c:3f:52:79:12:95:bd:a7:8d:dd:a2:31:b7: ec:f5:05:a4:72:ae:73:24:fd:d3:75:c4:69:37:6d: 80:95:90:0c:65:8e:1b:c1:19:07:30:14:36:65:6f: aa:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:36:F7:4A:D1:E1:EE:19:37:EE:AF:56:C6:D9:E9:E2:2A:7F:A2:78 X509v3 Authority Key Identifier: keyid:D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:6d:09:d2:ae:4e:ea:f3:e4:d3:80:cb:e0:fa:7d:dd:31:66: 58:ec:72:63:66:d8:d0:1a:02:6a:7a:c6:c2:6f:e6:e6:98:36: eb:a5:6f:45:ee:83:fd:30:90:3c:86:de:40:3b:5a:3f:3d:df: a6:bf:e6:d2:88:98:ac:9d:05:2d:1e:cb:11:cf:8a:43:dd:2e: 2e:25:98:9c:0b:0e:d3:9a:e0:0c:89:c2:96:5a:59:e8:80:73: 7a:82:cf:8a:da:66:6e:ea:6a:71:bc:fa:30:21:bf:79:29:d6: 8f:9f:87:91:08:1f:74:f8:12:0b:a1:90:1f:19:d7:93:40:b5: 3a:4d:3c:91:e5:6e:15:05:ec:ca:a6:f8:eb:52:80:c7:2a:2d: ea:a9:a2:91:a9:b5:29:23:c0:40:46:eb:50:d8:7d:9e:7e:4c: fb:82:f6:7b:43:16:80:61:f2:cd:eb:21:4a:ef:29:9f:a4:6d: bf:2d:f4:16:71:b7:bd:b5:1a:e5:58:d0:20:60:92:45:70:b9: 7f:7b:f3:96:dc:cc:57:98:31:7d:2a:22:6b:b2:71:91:6f:45: 16:7b:69:b8:cc:b2:10:8c:f5:3f:d4:d6:f0:77:eb:cf:e9:bb: 63:07:3f:89:11:fc:73:cc:f4:48:81:2f:92:3b:e7:a1:e8:cb: 20:59:af:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhGMjcxMTAvBgNVBAUTKEQxQTM2Q0Q4RUQyMzU1MDgyNzYxQTNEQjEzRUREMzBE RkRBMkNGRDAwHhcNMjUwNzIyMjAzNzEzWhcNMjUwNzI5MjAzNzEzWjAYMRYwFAYD VQQDEw02ODdmZjY3OS04ZWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo9cGrLZH3Nv0mzojQNTKDgeQp5ZGmq3t1pc1xOqGZvYfK/LEIbMAjcSKwAvh CMbkzDyVxgFWirsnCeU0BsPF72EFFDH8oQmcjl0LVv08xF8K2SrWlXo9NZRO4kD2 T0ZQTxBwfJMGPL1EEoGpCD4x0X9QE24ZfE2kJjc1kRLG7FIf6MRfN7fX/rQ4aZmY aaGLmEfD5EfrqVicR1kaYRPv+pYsizmDf0GlC0VOA7umVidE/yaUo7SPTYzpC/YF EL2OSQDSLoEgQHRDWPqGEjnZhjEh6Iw/UnkSlb2njd2iMbfs9QWkcq5zJP3TdcRp N22AlZAMZY4bwRkHMBQ2ZW+quQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA4290rR 4e4ZN+6vVsbZ6eIqf6J4MB8GA1UdIwQYMBaAFNGjbNjtI1UIJ2Gj2xPt0w39os/Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEYyNy83RjUyMjlBOEIw OTIxMUVBQjVEQkVDNThDNEY5QUUwMi8wYU5zMk8walZRZ25ZYVBiRS0zVERmMml6 OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBhTnMyTzBqVlFnbllhUGJFLTNURGYyaXo5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEYyNy83RjUyMjlBOEIwOTIxMUVBQjVEQkVDNThDNEY5QUUwMi8wYU5zMk8walZR Z25ZYVBiRS0zVERmMml6OUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQbQnSrk7q8+TTgMvg+n3dMWZY7HJjZtjQGgJqesbCb+bmmDbrpW9F 7oP9MJA8ht5AO1o/Pd+mv+bSiJisnQUtHssRz4pD3S4uJZicCw7TmuAMicKWWlno gHN6gs+K2mZu6mpxvPowIb95KdaPn4eRCB90+BILoZAfGdeTQLU6TTyR5W4VBezK pvjrUoDHKi3qqaKRqbUpI8BARutQ2H2efkz7gvZ7QxaAYfLN6yFK7ymfpG2/LfQW cbe9tRrlWNAgYJJFcLl/e/OW3MxXmDF9KiJrsnGRb0UWe2m4zLIQjPU/1Nbwd+vP 6btjBz+JEfxzzPRIgS+SO+eh6MsgWa9A -----END CERTIFICATE-----Generated at Wed Jul 23 12:47:36 2025 by rpki-client