$ rpki-client -vvf rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.mft File: fKdQzAmQd9S0MpCnYoOre_C2Smg.mft (raw, json) Hash identifier: dnJaR73E5Fx9Vs6NGK3YHiSTPIZ0sAGLQ5RqBEc9Yrw= Subject key identifier: 7C:DB:9A:7C:C6:73:AE:27:EB:BD:8D:C0:27:E9:2C:68:55:35:32:5D Authority key identifier: 7C:A7:50:CC:09:90:77:D4:B4:32:90:A7:62:83:AB:7B:F0:B6:4A:68 Certificate issuer: /CN=A91300ED/serialNumber=7CA750CC099077D4B43290A76283AB7BF0B64A68 Certificate serial: 06E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fKdQzAmQd9S0MpCnYoOre_C2Smg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.mft Manifest number: 06E2 Signing time: Fri 22 Aug 2025 22:10:49 +0000 Manifest this update: Fri 22 Aug 2025 22:10:49 +0000 Manifest next update: Fri 29 Aug 2025 22:10:49 +0000 Files and hashes: 1: fKdQzAmQd9S0MpCnYoOre_C2Smg.crl (hash: JzfIjz+8R6IJpuXi0sAY41ion9/c8ja999M1TiXFNlQ=) 2: 74897CC0622A11EBA8BA0B7EC4F9AE02.roa (hash: jMHgt7FvNkUCkLd7vYheLEj/MpewQSbVwisjvUIDov4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.crl rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fKdQzAmQd9S0MpCnYoOre_C2Smg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1768 (0x6e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91300ED, serialNumber=7CA750CC099077D4B43290A76283AB7BF0B64A68 Validity Not Before: Aug 22 22:10:49 2025 GMT Not After : Aug 29 22:10:49 2025 GMT Subject: CN=68a8eae9-35c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5f:90:a2:ac:2f:85:36:4b:68:43:db:63:ea: 6b:17:0f:4f:87:31:b7:1c:8b:26:7b:74:37:8a:b9: 4e:2e:3f:c7:7c:2c:93:2d:ae:d8:f2:01:dc:8c:e6: be:38:29:f3:ea:fc:ef:7c:b5:ed:f7:5c:76:c0:2c: 4f:a4:49:5b:c2:fb:05:d8:f4:cd:76:f1:ea:44:1f: 7f:8c:51:92:92:8e:64:6c:7d:30:bd:e3:4c:96:f6: ed:99:a8:ac:d6:02:31:bb:d1:dc:6f:6e:8c:26:88: 5a:fe:e1:61:4a:65:87:5b:f3:78:c8:ed:c1:f7:6e: 19:2a:23:04:e1:7a:a1:06:74:91:10:3c:5f:96:e0: 2c:c5:4a:82:48:f9:41:c8:61:2a:e9:65:8f:a8:07: 18:31:72:8f:a7:e7:f7:af:39:10:5b:b6:33:2b:4c: 8c:88:fe:b1:0a:63:bc:0c:e1:f7:30:50:7a:ae:b9: df:5f:65:3d:26:4a:e3:df:06:a0:21:fe:c8:d7:dd: 15:91:0a:ec:bc:e6:f9:e6:bf:27:7f:de:a3:c0:76: 0a:6f:65:bd:82:41:e1:1a:10:a1:8b:a2:55:75:d3: c5:10:10:24:26:fe:89:58:ce:83:49:84:48:3f:89: c4:22:68:2b:d0:4d:5a:93:5a:d9:02:08:1a:7e:f6: 06:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:DB:9A:7C:C6:73:AE:27:EB:BD:8D:C0:27:E9:2C:68:55:35:32:5D X509v3 Authority Key Identifier: keyid:7C:A7:50:CC:09:90:77:D4:B4:32:90:A7:62:83:AB:7B:F0:B6:4A:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fKdQzAmQd9S0MpCnYoOre_C2Smg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:5d:fd:14:91:ef:18:86:59:a0:dc:2e:5e:42:53:44:4e:c2: b3:3d:9d:32:d5:f6:ed:27:85:6d:c2:f5:5d:79:e8:ed:ca:0c: eb:be:6f:54:15:90:b5:17:db:88:f9:39:35:96:f0:5e:5e:7b: 93:cb:fb:bf:a2:81:76:a3:9e:77:65:ef:cd:30:47:dc:39:8c: 10:61:99:f9:54:50:2a:d2:19:c4:bf:be:b0:1f:33:96:e4:7e: 07:e8:a5:f7:ed:a2:aa:35:fd:96:fa:c5:9c:0b:5c:90:57:03: 4d:8b:50:9d:b2:d5:0a:fc:a3:20:2c:d6:70:f5:cd:78:2d:86: 53:6b:08:76:20:21:a1:76:c0:ac:42:aa:0a:60:be:61:82:5d: 0e:34:ea:d6:98:5b:8f:55:94:26:f0:90:74:40:f9:7c:d4:a3: 79:6b:a2:fb:0b:e8:4d:8e:7d:c8:cc:29:a4:e8:d4:11:59:2a: 04:58:85:ab:d5:c1:3b:fb:8c:83:ba:1c:ca:3a:89:a6:e2:bd: c5:f7:8e:61:07:ef:7b:9a:72:c3:00:c7:76:54:00:14:26:62: a3:59:2f:1b:17:95:00:16:c6:3c:ab:72:bc:4b:38:33:f9:76: 03:53:c1:27:0f:02:f1:7f:7e:51:35:5c:ca:c9:9b:1c:fc:f3: f7:57:16:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBugwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAwRUQxMTAvBgNVBAUTKDdDQTc1MENDMDk5MDc3RDRCNDMyOTBBNzYyODNBQjdC RjBCNjRBNjgwHhcNMjUwODIyMjIxMDQ5WhcNMjUwODI5MjIxMDQ5WjAYMRYwFAYD VQQDEw02OGE4ZWFlOS0zNWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyl+QoqwvhTZLaEPbY+prFw9PhzG3HIsme3Q3irlOLj/HfCyTLa7Y8gHcjOa+ OCnz6vzvfLXt91x2wCxPpElbwvsF2PTNdvHqRB9/jFGSko5kbH0wveNMlvbtmais 1gIxu9Hcb26MJoha/uFhSmWHW/N4yO3B924ZKiME4XqhBnSREDxfluAsxUqCSPlB yGEq6WWPqAcYMXKPp+f3rzkQW7YzK0yMiP6xCmO8DOH3MFB6rrnfX2U9Jkrj3wag If7I190VkQrsvOb55r8nf96jwHYKb2W9gkHhGhChi6JVddPFEBAkJv6JWM6DSYRI P4nEImgr0E1ak1rZAggafvYGVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHzbmnzG c64n672NwCfpLGhVNTJdMB8GA1UdIwQYMBaAFHynUMwJkHfUtDKQp2KDq3vwtkpo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDBFRC8wRUM5NEE4ODYy MjkxMUVCOEUxQkMyN0NDNEY5QUUwMi9mS2RRekFtUWQ5UzBNcENuWW9PcmVfQzJT bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZLZFF6QW1RZDlTME1wQ25Zb09yZV9DMlNtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDBFRC8wRUM5NEE4ODYyMjkxMUVCOEUxQkMyN0NDNEY5QUUwMi9mS2RRekFtUWQ5 UzBNcENuWW9PcmVfQzJTbWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzXf0Uke8Yhlmg3C5eQlNETsKzPZ0y1fbtJ4VtwvVdeejtygzrvm9U FZC1F9uI+Tk1lvBeXnuTy/u/ooF2o553Ze/NMEfcOYwQYZn5VFAq0hnEv76wHzOW 5H4H6KX37aKqNf2W+sWcC1yQVwNNi1CdstUK/KMgLNZw9c14LYZTawh2ICGhdsCs QqoKYL5hgl0ONOrWmFuPVZQm8JB0QPl81KN5a6L7C+hNjn3IzCmk6NQRWSoEWIWr 1cE7+4yDuhzKOomm4r3F945hB+97mnLDAMd2VAAUJmKjWS8bF5UAFsY8q3K8Szgz +XYDU8EnDwLxf35RNVzKyZsc/PP3Vxbx -----END CERTIFICATE-----Generated at Sun Aug 24 22:14:29 2025 by rpki-client