$ rpki-client -vvf rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft File: AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft (raw, json) Hash identifier: 0pBocP5goRq5/ZviZwxaG5kDnuGkHh3zQnpMMrAZ6A4= Subject key identifier: 2C:FD:75:CB:B0:1C:A7:DC:94:D8:D3:23:9A:3F:9C:E4:23:65:70:81 Authority key identifier: 01:F1:ED:08:CD:E2:71:36:F3:97:D0:73:4A:F2:A3:5E:5D:52:7D:D4 Certificate issuer: /CN=A91788FF/serialNumber=01F1ED08CDE27136F397D0734AF2A35E5D527DD4 Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfHtCM3icTbzl9BzSvKjXl1SfdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft Manifest number: D1 Signing time: Sat 23 Aug 2025 05:52:29 +0000 Manifest this update: Sat 23 Aug 2025 05:52:29 +0000 Manifest next update: Sat 30 Aug 2025 05:52:29 +0000 Files and hashes: 1: AfHtCM3icTbzl9BzSvKjXl1SfdQ.crl (hash: PNRdi0rJVHrAMFjlP+Bskq81C+P1uCJSg82q0vYTcyg=) 2: 726BD5E645CF11EF854E2262C4F9AE02.roa (hash: NhOdHEmUoQd5YvUf9TabAJ2MpFyvN1YFKpx5g77iQO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.crl rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfHtCM3icTbzl9BzSvKjXl1SfdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:52:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91788FF, serialNumber=01F1ED08CDE27136F397D0734AF2A35E5D527DD4 Validity Not Before: Aug 23 05:52:29 2025 GMT Not After : Aug 30 05:52:29 2025 GMT Subject: CN=68a9571d-2c9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:87:df:76:42:58:cd:9b:37:88:9d:eb:b0:61: a4:c2:56:80:e6:4d:b4:26:db:f2:6f:7c:ac:fc:03: 87:74:88:da:f3:80:ab:bb:33:ef:1d:62:2d:ef:27: b7:5b:8d:ca:ee:75:55:e8:cf:be:a3:7b:eb:90:48: 1a:95:3e:0b:6f:7b:20:ba:ef:2f:ef:be:56:23:cf: b2:03:fa:e0:6a:c4:09:df:b0:bd:b5:38:9f:d2:02: a9:c1:00:5a:21:bb:76:e7:22:da:f9:58:ea:72:6a: 0d:11:25:92:4e:e2:4c:d8:c4:ec:e1:5f:23:81:1b: 83:57:35:95:dd:ce:7c:1c:51:bf:e0:38:68:0c:50: 3b:06:cc:88:09:22:85:4a:f4:96:32:58:72:5d:aa: 62:d5:8e:2e:00:61:eb:1c:f1:bc:9f:df:ce:16:fe: ec:5e:0e:0a:6f:0f:8a:67:88:19:66:2a:6c:a1:6c: 95:01:8e:79:b2:5d:08:ec:66:27:ff:3a:09:3e:e5: d6:97:19:b9:a2:93:4d:d9:c0:c3:b9:f9:c8:21:0d: c0:0c:ff:da:0e:0a:f9:93:c4:54:44:12:dd:4b:ca: 24:76:7f:1e:73:c3:63:02:c7:ed:56:89:d8:0a:6d: 3b:a2:83:74:21:38:21:cc:18:00:c3:78:82:5a:38: 33:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:FD:75:CB:B0:1C:A7:DC:94:D8:D3:23:9A:3F:9C:E4:23:65:70:81 X509v3 Authority Key Identifier: keyid:01:F1:ED:08:CD:E2:71:36:F3:97:D0:73:4A:F2:A3:5E:5D:52:7D:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfHtCM3icTbzl9BzSvKjXl1SfdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:6b:1b:fd:cb:9a:41:f0:7e:13:8e:15:60:d1:a2:25:32:fa: f7:83:e3:d2:fc:79:7c:1f:2b:0e:6b:0c:82:a5:76:8c:83:8a: ff:4d:e8:9e:86:ab:d5:88:19:14:4d:9a:fd:31:64:eb:e6:ae: e9:e7:d0:13:71:a1:e7:17:d4:7b:e9:a3:42:d5:55:2e:0f:83: 75:8f:56:02:fc:0a:b0:c9:f1:a1:01:e5:00:42:ae:65:b7:d3: e9:d7:81:74:5b:5c:1a:a4:95:a5:49:52:b8:09:3f:1e:0f:54: 3b:92:b0:d1:c6:d4:71:1c:50:dc:61:a8:e4:29:99:9a:16:a1: 9d:e1:43:4d:d1:6c:ba:eb:91:eb:08:bc:32:80:7f:b7:74:00: 8c:45:5d:86:ae:d3:12:c4:13:a6:e2:cc:dd:0f:d4:1d:cb:77: bc:4a:eb:b1:35:6c:a0:dd:f7:dc:7f:7a:3f:eb:a0:e8:fd:64: f4:40:73:5a:b6:ab:2a:74:73:36:4f:1d:6f:79:85:17:20:d1: 4e:14:fb:b5:de:3b:25:59:d5:27:fa:02:78:69:61:11:36:26: 86:f0:bb:f8:9e:e9:8b:3c:0b:55:01:1e:d8:ed:4f:d8:8b:78: de:92:2b:91:6a:d7:40:c0:43:f7:64:cf:7f:fd:4c:f2:74:83: 58:99:6a:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzg4RkYxMTAvBgNVBAUTKDAxRjFFRDA4Q0RFMjcxMzZGMzk3RDA3MzRBRjJBMzVF NUQ1MjdERDQwHhcNMjUwODIzMDU1MjI5WhcNMjUwODMwMDU1MjI5WjAYMRYwFAYD VQQDEw02OGE5NTcxZC0yYzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxoffdkJYzZs3iJ3rsGGkwlaA5k20Jtvyb3ys/AOHdIja84CruzPvHWIt7ye3 W43K7nVV6M++o3vrkEgalT4Lb3sguu8v775WI8+yA/rgasQJ37C9tTif0gKpwQBa Ibt25yLa+VjqcmoNESWSTuJM2MTs4V8jgRuDVzWV3c58HFG/4DhoDFA7BsyICSKF SvSWMlhyXapi1Y4uAGHrHPG8n9/OFv7sXg4Kbw+KZ4gZZipsoWyVAY55sl0I7GYn /zoJPuXWlxm5opNN2cDDufnIIQ3ADP/aDgr5k8RURBLdS8okdn8ec8NjAsftVonY Cm07ooN0ITghzBgAw3iCWjgzMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCz9dcuw HKfclNjTI5o/nOQjZXCBMB8GA1UdIwQYMBaAFAHx7QjN4nE285fQc0ryo15dUn3U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODhGRi9CREVCMjk3NDQ1 Q0QxMUVGOEU4MjY0NEVDNEY5QUUwMi9BZkh0Q00zaWNUYnpsOUJ6U3ZLalhsMVNm ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FmSHRDTTNpY1Riemw5QnpTdktqWGwxU2ZkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODhGRi9CREVCMjk3NDQ1Q0QxMUVGOEU4MjY0NEVDNEY5QUUwMi9BZkh0Q00zaWNU YnpsOUJ6U3ZLalhsMVNmZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0axv9y5pB8H4TjhVg0aIlMvr3g+PS/Hl8HysOawyCpXaMg4r/Teie hqvViBkUTZr9MWTr5q7p59ATcaHnF9R76aNC1VUuD4N1j1YC/AqwyfGhAeUAQq5l t9Pp14F0W1wapJWlSVK4CT8eD1Q7krDRxtRxHFDcYajkKZmaFqGd4UNN0Wy665Hr CLwygH+3dACMRV2GrtMSxBOm4szdD9Qdy3e8SuuxNWyg3ffcf3o/66Do/WT0QHNa tqsqdHM2Tx1veYUXINFOFPu13jslWdUn+gJ4aWERNiaG8Lv4numLPAtVAR7Y7U/Y i3jekiuRatdAwEP3ZM9//UzydINYmWo5 -----END CERTIFICATE-----Generated at Sun Aug 24 22:20:52 2025 by rpki-client