$ rpki-client -vvf rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft File: CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft (raw, json) Hash identifier: 0Qo6/gwQCtcptJqD6WdIOSYjslhRr13xs0zbauGj2r8= Subject key identifier: F6:17:CC:D8:4A:8C:D4:07:05:11:A9:DE:2F:61:57:07:63:78:9E:8E Authority key identifier: 0A:8B:D2:B0:2F:F6:95:17:1D:C0:1E:8C:7E:4A:A2:D9:88:DA:3B:9A Certificate issuer: /CN=A91705D7/serialNumber=0A8BD2B02FF695171DC01E8C7E4AA2D988DA3B9A Certificate serial: FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft Manifest number: FA Signing time: Sun 07 Sep 2025 05:39:20 +0000 Manifest this update: Sun 07 Sep 2025 05:39:19 +0000 Manifest next update: Sun 14 Sep 2025 05:39:19 +0000 Files and hashes: 1: CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl (hash: FtVqX3RnS+CQYuD+mwbLfwPysYAAOTr9IAuPKWuAnP4=) 2: 8C35F65C57F111F0B413224EC4F9AE02.roa (hash: voQWhVz+FM5Oce4JeqUGqkpzwLHV4T3Do9szQnC3FmQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 05:39:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 255 (0xff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91705D7, serialNumber=0A8BD2B02FF695171DC01E8C7E4AA2D988DA3B9A Validity Not Before: Sep 7 05:39:19 2025 GMT Not After : Sep 14 05:39:19 2025 GMT Subject: CN=68bd1a87-b23e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e0:35:71:a5:d4:63:e4:3a:00:ee:93:47:e2: 2d:2a:9f:f3:e8:31:02:c6:39:5f:d5:91:15:47:4e: 05:4b:b6:8b:71:36:19:da:73:8d:aa:5a:99:5a:3c: 9c:34:0a:a2:9c:f8:aa:be:9b:bd:db:e4:f9:4b:4e: 5e:5e:17:e0:43:66:5c:9c:ff:b8:ba:63:28:36:a8: 61:56:ed:59:94:bd:be:1d:4a:b2:7c:6d:0f:28:62: d5:cd:99:27:de:1a:41:eb:4b:0a:e3:03:79:9f:76: e3:26:eb:6b:36:9c:54:30:1e:c9:99:4e:c1:17:37: e9:7b:10:4c:3c:4a:29:92:f6:ed:64:26:d4:03:35: 9d:25:cb:62:cd:08:46:8f:2a:4d:c0:dd:11:89:e4: dc:40:54:1a:b1:c8:1e:fe:bc:92:24:b5:1c:99:e7: 2f:ad:71:64:8b:8e:b2:ae:04:78:ce:09:e2:f6:0b: 2b:07:4c:1c:4a:9c:4f:ec:88:40:82:4d:a2:4c:ff: 9b:a0:23:21:8a:f9:a5:88:f7:59:bf:90:43:c4:5a: bb:f3:c5:57:38:26:02:76:95:0e:7c:d7:c2:3a:9e: 8b:46:a1:64:85:1a:6e:6d:f0:d2:04:26:4c:85:85: 8d:1e:9e:64:c6:12:e0:07:b7:da:fc:7c:7a:55:39: 12:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:17:CC:D8:4A:8C:D4:07:05:11:A9:DE:2F:61:57:07:63:78:9E:8E X509v3 Authority Key Identifier: keyid:0A:8B:D2:B0:2F:F6:95:17:1D:C0:1E:8C:7E:4A:A2:D9:88:DA:3B:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:0c:7a:26:33:ad:08:65:bd:56:a7:fd:47:c1:60:5c:95:31: 91:65:fa:eb:29:57:72:a7:02:b1:84:3b:e2:15:1f:d4:3e:e8: 83:43:0c:7d:d2:54:19:b4:9c:45:8c:47:b4:d9:1a:82:b5:c4: 05:f8:86:10:d8:71:db:0b:80:89:85:c8:a7:4d:51:c5:77:9b: 55:41:f9:6b:ee:91:58:79:49:55:2e:99:2a:e7:2e:d4:95:54: f0:d7:ad:6c:53:ee:39:6b:5a:1e:9b:6a:31:09:79:0d:a7:06: 36:3b:b6:e2:32:16:c6:1b:43:68:c2:92:7c:89:8e:b3:79:97: e6:15:40:37:41:5d:78:84:31:f3:5c:0f:62:a5:22:90:ff:b2: a1:63:93:83:33:ab:95:0d:6c:45:41:0c:de:fa:64:db:ad:14: c3:f0:c3:69:d9:4a:bd:d3:6f:ea:a8:28:e4:d2:90:ea:58:78: 0e:a4:62:e8:84:fc:7c:26:a8:b5:b4:cc:fa:89:b0:61:f1:be: 9c:11:b0:7e:9b:f6:b4:05:ff:92:dc:ca:d4:cd:e6:4e:b2:76: 08:6d:51:dc:b8:14:5b:c7:03:2d:bc:f8:23:a0:7a:78:6d:33: 70:04:34:98:79:4b:d5:8a:de:bd:88:09:0e:2b:f2:35:0c:34: ed:ba:e2:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA1RDcxMTAvBgNVBAUTKDBBOEJEMkIwMkZGNjk1MTcxREMwMUU4QzdFNEFBMkQ5 ODhEQTNCOUEwHhcNMjUwOTA3MDUzOTE5WhcNMjUwOTE0MDUzOTE5WjAYMRYwFAYD VQQDEw02OGJkMWE4Ny1iMjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuuA1caXUY+Q6AO6TR+ItKp/z6DECxjlf1ZEVR04FS7aLcTYZ2nONqlqZWjyc NAqinPiqvpu92+T5S05eXhfgQ2ZcnP+4umMoNqhhVu1ZlL2+HUqyfG0PKGLVzZkn 3hpB60sK4wN5n3bjJutrNpxUMB7JmU7BFzfpexBMPEopkvbtZCbUAzWdJctizQhG jypNwN0RieTcQFQascge/rySJLUcmecvrXFki46yrgR4zgni9gsrB0wcSpxP7IhA gk2iTP+boCMhivmliPdZv5BDxFq788VXOCYCdpUOfNfCOp6LRqFkhRpubfDSBCZM hYWNHp5kxhLgB7fa/Hx6VTkSNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPYXzNhK jNQHBRGp3i9hVwdjeJ6OMB8GA1UdIwQYMBaAFAqL0rAv9pUXHcAejH5KotmI2jua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDVENy9BMDgxNkVEMDE2 RDgxMUVGQkY5MDFFNUZDNEY5QUUwMi9Db3ZTc0NfMmxSY2R3QjZNZmtxaTJZamFP NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NvdlNzQ18ybFJjZHdCNk1ma3FpMllqYU81by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDVENy9BMDgxNkVEMDE2RDgxMUVGQkY5MDFFNUZDNEY5QUUwMi9Db3ZTc0NfMmxS Y2R3QjZNZmtxaTJZamFPNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqDHomM60IZb1Wp/1HwWBclTGRZfrrKVdypwKxhDviFR/UPuiDQwx9 0lQZtJxFjEe02RqCtcQF+IYQ2HHbC4CJhcinTVHFd5tVQflr7pFYeUlVLpkq5y7U lVTw161sU+45a1oem2oxCXkNpwY2O7biMhbGG0NowpJ8iY6zeZfmFUA3QV14hDHz XA9ipSKQ/7KhY5ODM6uVDWxFQQze+mTbrRTD8MNp2Uq902/qqCjk0pDqWHgOpGLo hPx8Jqi1tMz6ibBh8b6cEbB+m/a0Bf+S3MrUzeZOsnYIbVHcuBRbxwMtvPgjoHp4 bTNwBDSYeUvVit69iAkOK/I1DDTtuuL4 -----END CERTIFICATE-----Generated at Mon Sep 8 04:44:47 2025 by rpki-client