$ rpki-client -vvf rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.mft File: 0va3pYZYVsPyxEYWNgMfsFtgYGo.mft (raw, json) Hash identifier: 14JMtcyofSjC0DNEO0luy4Iog1oUFx626eEct4EOKgY= Subject key identifier: AE:97:A9:69:22:D2:99:81:1B:34:91:D0:6C:E8:0C:8D:A3:8A:C7:BE Authority key identifier: D2:F6:B7:A5:86:58:56:C3:F2:C4:46:16:36:03:1F:B0:5B:60:60:6A Certificate issuer: /CN=A91149C8/serialNumber=D2F6B7A5865856C3F2C4461636031FB05B60606A Certificate serial: 0C9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0va3pYZYVsPyxEYWNgMfsFtgYGo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.mft Manifest number: 0C90 Signing time: Sun 24 Aug 2025 18:11:39 +0000 Manifest this update: Sun 24 Aug 2025 18:11:39 +0000 Manifest next update: Sun 31 Aug 2025 18:11:39 +0000 Files and hashes: 1: 0va3pYZYVsPyxEYWNgMfsFtgYGo.crl (hash: g2+v826t3KqlVqYTilWYuhUQ7eZv4PnNG6++ZQwMLcs=) 2: A2A7584ACA7F11EAB343722AC4F9AE02.roa (hash: mvYo+h5Nn35EgX86xIvICgq41pXxREG1bc5pyoPj450=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.crl rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0va3pYZYVsPyxEYWNgMfsFtgYGo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 18:11:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3226 (0xc9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91149C8, serialNumber=D2F6B7A5865856C3F2C4461636031FB05B60606A Validity Not Before: Aug 24 18:11:39 2025 GMT Not After : Aug 31 18:11:39 2025 GMT Subject: CN=68ab55db-256b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:65:a3:5a:3b:30:58:5b:60:e7:35:b9:59:20: 59:cf:5a:ef:dd:cf:a1:fb:a0:0f:e2:69:27:2d:51: 04:c1:9c:84:c0:87:9e:d8:94:17:1a:01:1a:04:36: 4d:ec:d2:73:d8:73:57:a2:6e:d3:82:cb:f1:0e:07: 35:25:77:1d:83:d1:85:28:ef:6a:dd:8a:e5:f8:9d: 07:a6:7d:73:40:4d:22:08:d2:2d:ad:b1:3e:43:b7: fe:b8:21:02:cf:fa:74:4a:62:56:fb:87:c5:f1:75: 78:42:aa:7e:1c:20:80:0a:6e:d8:3d:5e:82:7e:4d: 8f:bc:27:2a:06:2e:82:c3:e8:24:2e:b5:da:54:4a: a0:e5:92:1c:9b:ca:75:19:04:75:e9:d5:be:b7:50: dd:71:86:54:55:a0:67:9f:a3:f4:e3:dd:9c:74:b7: 4a:c8:96:96:cd:9d:cd:f1:ea:36:a6:91:58:b0:f1: 62:bc:46:ef:a7:e4:04:5c:39:ce:03:c3:33:28:fb: 02:9f:ed:b7:56:3d:23:26:3b:05:fa:ca:d1:c7:9d: 29:60:f2:32:fc:46:2c:05:4c:92:33:3a:cd:5f:e7: 71:a3:4e:85:d4:f0:bf:9a:e9:78:d9:fb:24:74:c7: 7a:56:c4:b5:ef:ba:f6:73:76:91:06:74:27:e2:4b: 5e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:97:A9:69:22:D2:99:81:1B:34:91:D0:6C:E8:0C:8D:A3:8A:C7:BE X509v3 Authority Key Identifier: keyid:D2:F6:B7:A5:86:58:56:C3:F2:C4:46:16:36:03:1F:B0:5B:60:60:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0va3pYZYVsPyxEYWNgMfsFtgYGo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:95:36:f4:66:f5:bf:67:01:6d:60:e7:ae:d6:04:a1:fa:94: 5d:95:2f:98:f7:f2:24:91:48:c6:8c:2a:69:1f:7b:ed:99:13: f4:44:52:bd:8c:06:cb:aa:8b:c0:54:c9:c6:53:63:8f:59:71: e6:b6:d3:94:e3:42:f8:8e:8a:ac:24:e3:ca:cc:77:51:30:fb: 58:79:6c:ec:18:3b:64:d9:81:8e:ab:1c:b0:1e:b7:a1:8e:bb: ac:50:60:b6:55:9d:11:d1:bd:dc:fe:f7:6e:55:06:05:9a:f9: ac:01:d5:eb:7c:47:cc:25:25:35:2d:e9:7f:e6:cc:73:95:e6: 7a:48:db:e7:c7:cd:8f:7c:e0:1d:0c:80:82:5e:3f:2d:7b:f2: 10:27:61:03:6e:41:c5:d9:31:d2:35:9c:43:60:4e:b9:66:fc: 94:73:6e:b2:c0:f0:99:ba:04:00:6a:69:8d:cb:5a:92:d2:0c: 7b:de:1c:7e:0b:e3:eb:8f:ed:4b:44:3c:06:ad:ca:64:74:b1: e7:3b:4e:c3:47:87:44:ae:0c:09:d4:53:40:11:ee:18:a1:90: 01:c5:97:14:95:b3:61:a0:24:d4:2f:50:83:ab:02:8c:7b:b2: 03:2c:23:b3:37:3d:3a:bc:49:99:19:e6:7b:c9:a3:36:37:a3: 37:e9:53:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ5QzgxMTAvBgNVBAUTKEQyRjZCN0E1ODY1ODU2QzNGMkM0NDYxNjM2MDMxRkIw NUI2MDYwNkEwHhcNMjUwODI0MTgxMTM5WhcNMjUwODMxMTgxMTM5WjAYMRYwFAYD VQQDEw02OGFiNTVkYi0yNTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArmWjWjswWFtg5zW5WSBZz1rv3c+h+6AP4mknLVEEwZyEwIee2JQXGgEaBDZN 7NJz2HNXom7TgsvxDgc1JXcdg9GFKO9q3Yrl+J0Hpn1zQE0iCNItrbE+Q7f+uCEC z/p0SmJW+4fF8XV4Qqp+HCCACm7YPV6Cfk2PvCcqBi6Cw+gkLrXaVEqg5ZIcm8p1 GQR16dW+t1DdcYZUVaBnn6P0492cdLdKyJaWzZ3N8eo2ppFYsPFivEbvp+QEXDnO A8MzKPsCn+23Vj0jJjsF+srRx50pYPIy/EYsBUySMzrNX+dxo06F1PC/mul42fsk dMd6VsS177r2c3aRBnQn4kteWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK6XqWki 0pmBGzSR0GzoDI2jise+MB8GA1UdIwQYMBaAFNL2t6WGWFbD8sRGFjYDH7BbYGBq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDlDOC8yRkM0NjU5MEZG MkIxMUU5QkYyMEJGMURDNEY5QUUwMi8wdmEzcFlaWVZzUHl4RVlXTmdNZnNGdGdZ R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB2YTNwWVpZVnNQeXhFWVdOZ01mc0Z0Z1lHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDlDOC8yRkM0NjU5MEZGMkIxMUU5QkYyMEJGMURDNEY5QUUwMi8wdmEzcFlaWVZz UHl4RVlXTmdNZnNGdGdZR28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUlTb0ZvW/ZwFtYOeu1gSh+pRdlS+Y9/IkkUjGjCppH3vtmRP0RFK9 jAbLqovAVMnGU2OPWXHmttOU40L4joqsJOPKzHdRMPtYeWzsGDtk2YGOqxywHreh jrusUGC2VZ0R0b3c/vduVQYFmvmsAdXrfEfMJSU1Lel/5sxzleZ6SNvnx82PfOAd DICCXj8te/IQJ2EDbkHF2THSNZxDYE65ZvyUc26ywPCZugQAammNy1qS0gx73hx+ C+Prj+1LRDwGrcpkdLHnO07DR4dErgwJ1FNAEe4YoZABxZcUlbNhoCTUL1CDqwKM e7IDLCOzNz06vEmZGeZ7yaM2N6M36VNk -----END CERTIFICATE-----Generated at Sun Aug 24 21:29:04 2025 by rpki-client