$ rpki-client -vvf rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft File: loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft (raw, json) Hash identifier: BJBUvYwxvQz5WotOFb0lUn3NcbU+74VNb3d2dzGtbvg= Subject key identifier: C2:AA:91:88:F4:39:ED:B8:38:65:7F:C7:27:92:6E:16:F9:AC:4A:3E Authority key identifier: 96:80:05:73:01:8C:7C:2F:B5:A0:08:1E:63:C6:3F:4D:A4:40:3C:B6 Certificate issuer: /CN=A91534B8/serialNumber=96800573018C7C2FB5A0081E63C63F4DA4403CB6 Certificate serial: 02C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loAFcwGMfC-1oAgeY8Y_TaRAPLY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft Manifest number: 02BC Signing time: Thu 21 Aug 2025 01:41:23 +0000 Manifest this update: Thu 21 Aug 2025 01:41:23 +0000 Manifest next update: Thu 28 Aug 2025 01:41:23 +0000 Files and hashes: 1: loAFcwGMfC-1oAgeY8Y_TaRAPLY.crl (hash: vQW3RkXaG0U7x5XWbuSm5tkQWV9zRWfuCDq87jNpqww=) 2: E52CB968094711EDA5B20C0AC4F9AE02.roa (hash: +DAM4u0XWzGXzujdBmpBOJBuyDMu2NVi0XXcoENn480=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.crl rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loAFcwGMfC-1oAgeY8Y_TaRAPLY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 01:41:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 704 (0x2c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91534B8, serialNumber=96800573018C7C2FB5A0081E63C63F4DA4403CB6 Validity Not Before: Aug 21 01:41:23 2025 GMT Not After : Aug 28 01:41:23 2025 GMT Subject: CN=68a67943-b9b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ff:23:ad:2e:99:e9:67:f4:f5:ac:62:c8:6b: df:51:cc:fd:f6:14:53:f0:1a:5d:15:c8:89:4d:30: 0d:73:f7:36:eb:dd:74:e6:a2:69:58:eb:74:8d:96: 96:fd:e7:f4:ca:79:67:d0:13:03:a6:cd:a1:1d:46: f8:8a:89:75:c5:b5:95:32:80:59:a1:6b:01:56:c5: cc:16:cb:29:c6:09:7c:68:43:6c:99:fd:4f:77:9d: 96:ca:65:1d:fd:8c:34:59:13:ba:eb:b6:97:df:a9: a8:a7:76:48:c8:bc:1a:e9:3b:bd:3e:10:cb:97:ae: 2b:26:9c:4c:12:02:90:10:fc:07:3a:4b:b7:94:b6: 7a:68:36:0b:5f:91:d6:93:2e:a5:07:41:ed:fb:fc: 8f:c1:48:41:e5:7b:b0:be:e4:7e:3b:bf:00:4d:13: c4:c3:96:66:b0:b7:e3:0a:51:ba:e2:16:88:b7:c8: 07:53:dd:ab:58:7c:0c:29:fc:62:83:90:0a:8c:b5: 4b:c9:bf:35:d9:f1:f1:52:f1:44:97:4f:4a:1b:5f: 28:35:29:20:e2:ce:37:4b:96:96:56:67:5e:c3:bb: d3:db:f4:6c:bc:6a:f4:b3:71:15:cb:e9:f1:1d:f6: d2:71:2b:d0:a4:f4:50:09:2b:12:1d:72:b2:53:1a: d8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:AA:91:88:F4:39:ED:B8:38:65:7F:C7:27:92:6E:16:F9:AC:4A:3E X509v3 Authority Key Identifier: keyid:96:80:05:73:01:8C:7C:2F:B5:A0:08:1E:63:C6:3F:4D:A4:40:3C:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loAFcwGMfC-1oAgeY8Y_TaRAPLY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:01:e9:ed:84:ac:5c:72:90:34:d1:d4:17:5c:2f:35:65:97: 3d:6f:b5:e9:9b:5e:16:a9:8b:bf:fa:b8:2d:d8:e5:7d:db:78: 86:e9:bb:76:e0:6c:1e:58:8d:76:01:d7:87:98:13:e6:b7:83: 05:ef:d2:ca:f5:2a:80:68:94:e5:31:45:32:08:79:af:cf:9b: ba:5c:cd:d9:27:50:ea:8f:80:89:1c:00:4f:e6:07:e1:b4:37: 68:08:fb:cf:ca:88:bd:7f:b0:c4:55:11:66:3d:ac:23:04:e8: 0f:82:9f:5c:b9:a0:ed:34:91:fa:c5:6e:63:5b:4c:24:09:71: a3:48:1d:b5:d0:5d:5f:df:26:d8:c3:b2:44:69:cb:0f:21:96: 86:5b:4c:f2:d5:f6:8a:3b:2d:49:8e:82:5e:cf:b3:28:e5:9c: 92:54:8c:8d:ea:92:bc:6c:f0:83:97:72:8c:a2:fb:7b:98:58: 66:b0:e6:48:be:07:03:d9:24:39:54:fb:ed:71:36:30:c2:1d: 81:bc:04:5f:ad:0b:79:30:8b:4c:81:27:ef:d7:8a:8c:4a:aa: fa:70:a1:4b:8a:f1:c4:7c:9b:5a:5e:98:88:80:7c:52:49:65: a6:fd:e2:64:5b:12:ad:95:40:b5:5e:3f:56:d4:49:91:b6:82: 80:bc:b5:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM0QjgxMTAvBgNVBAUTKDk2ODAwNTczMDE4QzdDMkZCNUEwMDgxRTYzQzYzRjRE QTQ0MDNDQjYwHhcNMjUwODIxMDE0MTIzWhcNMjUwODI4MDE0MTIzWjAYMRYwFAYD VQQDEw02OGE2Nzk0My1iOWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArv8jrS6Z6Wf09axiyGvfUcz99hRT8BpdFciJTTANc/c269105qJpWOt0jZaW /ef0ynln0BMDps2hHUb4iol1xbWVMoBZoWsBVsXMFsspxgl8aENsmf1Pd52WymUd /Yw0WRO667aX36mop3ZIyLwa6Tu9PhDLl64rJpxMEgKQEPwHOku3lLZ6aDYLX5HW ky6lB0Ht+/yPwUhB5XuwvuR+O78ATRPEw5ZmsLfjClG64haIt8gHU92rWHwMKfxi g5AKjLVLyb812fHxUvFEl09KG18oNSkg4s43S5aWVmdew7vT2/RsvGr0s3EVy+nx HfbScSvQpPRQCSsSHXKyUxrYewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMKqkYj0 Oe24OGV/xyeSbhb5rEo+MB8GA1UdIwQYMBaAFJaABXMBjHwvtaAIHmPGP02kQDy2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzRCOC9BODZCMzc1QTA5 NDQxMUVEOEREMTA5NzFDNEY5QUUwMi9sb0FGY3dHTWZDLTFvQWdlWThZX1RhUkFQ TFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xvQUZjd0dNZkMtMW9BZ2VZOFlfVGFSQVBMWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzRCOC9BODZCMzc1QTA5NDQxMUVEOEREMTA5NzFDNEY5QUUwMi9sb0FGY3dHTWZD LTFvQWdlWThZX1RhUkFQTFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApAenthKxccpA00dQXXC81ZZc9b7Xpm14WqYu/+rgt2OV923iG6bt2 4GweWI12AdeHmBPmt4MF79LK9SqAaJTlMUUyCHmvz5u6XM3ZJ1Dqj4CJHABP5gfh tDdoCPvPyoi9f7DEVRFmPawjBOgPgp9cuaDtNJH6xW5jW0wkCXGjSB210F1f3ybY w7JEacsPIZaGW0zy1faKOy1JjoJez7Mo5ZySVIyN6pK8bPCDl3KMovt7mFhmsOZI vgcD2SQ5VPvtcTYwwh2BvARfrQt5MItMgSfv14qMSqr6cKFLivHEfJtaXpiIgHxS SWWm/eJkWxKtlUC1Xj9W1EmRtoKAvLWx -----END CERTIFICATE-----Generated at Fri Aug 22 16:27:42 2025 by rpki-client