$ rpki-client -vvf rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.mft File: _un91LDoMTGIoIn3qH-30BUyU4g.mft (raw, json) Hash identifier: 5DqlMEOQhlY0PPkH6rK9Rdvy7Pu2uNOaxxksD9WlqtE= Subject key identifier: AF:51:03:87:25:2E:B8:1A:49:91:56:19:A2:7D:E3:1B:44:70:7C:E6 Authority key identifier: FE:E9:FD:D4:B0:E8:31:31:88:A0:89:F7:A8:7F:B7:D0:15:32:53:88 Certificate issuer: /CN=A918C673/serialNumber=FEE9FDD4B0E8313188A089F7A87FB7D015325388 Certificate serial: 0692 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_un91LDoMTGIoIn3qH-30BUyU4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.mft Manifest number: 068C Signing time: Wed 20 Aug 2025 22:23:08 +0000 Manifest this update: Wed 20 Aug 2025 22:23:07 +0000 Manifest next update: Wed 27 Aug 2025 22:23:07 +0000 Files and hashes: 1: _un91LDoMTGIoIn3qH-30BUyU4g.crl (hash: +rEOOjn7jVfgc6oydzifpwCATuL43rbqQqITxxHOdCM=) 2: 5803FE3880CD11EB83E8035FC4F9AE02.roa (hash: NgLitwn58Hzqdz8jFqI6KtHUu7WwdEhFCnvHC3Qm5IU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.crl rsync://rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_un91LDoMTGIoIn3qH-30BUyU4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 22:23:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1682 (0x692) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C673, serialNumber=FEE9FDD4B0E8313188A089F7A87FB7D015325388 Validity Not Before: Aug 20 22:23:07 2025 GMT Not After : Aug 27 22:23:07 2025 GMT Subject: CN=68a64acb-28c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fe:1e:1e:39:c9:d3:c3:a3:a4:a2:8d:d1:6f: 4b:68:c6:b7:bb:12:2e:a5:60:a6:fd:ae:33:c8:5a: 23:86:b0:3b:d5:4a:e9:4f:59:b2:93:55:63:95:99: 3e:3a:86:63:a0:40:27:c7:d4:e4:2b:92:41:e6:00: ae:5c:24:0f:cd:4d:51:10:dc:23:8b:6d:3f:8d:21: 7b:f5:02:c1:7e:eb:39:55:24:84:11:56:a4:ed:e6: cf:da:a1:d5:c1:3e:39:1d:fa:80:fe:64:05:89:60: af:e3:8a:d0:14:ab:5b:78:e9:a2:03:ea:97:ee:ac: b5:b5:37:64:3c:dd:6c:1e:e5:4d:b0:7b:85:1f:61: 05:fe:fb:80:9f:43:4d:92:65:4f:9b:50:a3:fc:4e: 2b:a2:ca:27:88:d5:8d:34:6f:fd:64:2c:f3:61:a2: 3b:ef:5a:57:83:99:f6:8f:6a:cd:d6:db:f3:37:ff: 1b:db:83:51:90:c9:f0:84:8d:f3:5b:49:27:c7:37: d2:44:cd:30:2c:c6:76:f5:8b:42:26:66:60:45:c9: 38:ec:74:b9:91:0d:84:2f:d8:17:7a:90:60:82:f4: 08:ee:1e:4b:f2:55:67:bb:f7:a3:44:3e:6a:54:0e: 80:ac:f1:ab:01:9b:78:de:7c:00:a3:3e:10:cf:da: 51:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:51:03:87:25:2E:B8:1A:49:91:56:19:A2:7D:E3:1B:44:70:7C:E6 X509v3 Authority Key Identifier: keyid:FE:E9:FD:D4:B0:E8:31:31:88:A0:89:F7:A8:7F:B7:D0:15:32:53:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_un91LDoMTGIoIn3qH-30BUyU4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:c0:f6:59:44:76:5f:0a:98:8f:3c:48:b8:08:0a:0f:62:fe: df:d1:5f:9f:ff:ad:33:f7:e5:a3:f8:07:1e:1e:23:fb:53:0c: 97:bf:ca:da:54:fd:8b:ec:95:42:bf:20:21:3a:77:67:8b:ee: 7e:d0:21:4e:a7:37:91:f0:f1:ea:40:16:a9:db:19:3e:a6:c1: 7c:82:06:79:01:bc:0e:65:18:70:ae:a2:d9:b9:6a:4f:09:c1: 79:f0:27:12:31:e7:d9:45:d2:89:8e:d6:c0:07:55:5f:3b:3c: 6b:9a:5e:ec:61:11:51:80:8f:7b:2c:6c:e1:45:46:74:2f:b1: 0e:38:73:7e:2f:a4:0a:ce:e1:96:e8:90:d9:79:0e:49:85:09: 3c:8f:6c:56:1d:d7:0f:9d:ad:44:47:6b:11:b3:d0:fe:55:ff: ca:59:56:4a:fa:32:a3:55:29:1e:33:db:81:1c:da:96:c8:87: 40:d2:57:75:b6:a3:d9:bd:45:64:b1:d9:59:9a:12:59:0e:7e: ba:3b:12:b6:df:ed:ad:f9:74:cb:3f:49:e3:d5:7c:31:af:fd: 13:c1:2b:f2:b8:b5:6e:ed:27:45:b6:e7:68:16:9d:5d:56:af: ea:77:ec:36:90:20:1c:a8:92:37:17:71:1e:28:22:06:5d:1b: de:e0:d1:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM2NzMxMTAvBgNVBAUTKEZFRTlGREQ0QjBFODMxMzE4OEEwODlGN0E4N0ZCN0Qw MTUzMjUzODgwHhcNMjUwODIwMjIyMzA3WhcNMjUwODI3MjIyMzA3WjAYMRYwFAYD VQQDEw02OGE2NGFjYi0yOGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy/4eHjnJ08OjpKKN0W9LaMa3uxIupWCm/a4zyFojhrA71UrpT1myk1VjlZk+ OoZjoEAnx9TkK5JB5gCuXCQPzU1RENwji20/jSF79QLBfus5VSSEEVak7ebP2qHV wT45HfqA/mQFiWCv44rQFKtbeOmiA+qX7qy1tTdkPN1sHuVNsHuFH2EF/vuAn0NN kmVPm1Cj/E4rosoniNWNNG/9ZCzzYaI771pXg5n2j2rN1tvzN/8b24NRkMnwhI3z W0knxzfSRM0wLMZ29YtCJmZgRck47HS5kQ2EL9gXepBggvQI7h5L8lVnu/ejRD5q VA6ArPGrAZt43nwAoz4Qz9pRIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK9RA4cl LrgaSZFWGaJ94xtEcHzmMB8GA1UdIwQYMBaAFP7p/dSw6DExiKCJ96h/t9AVMlOI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzY3My9BRTVGQjEwMjgw Q0IxMUVCQjc3QUI4NURDNEY5QUUwMi9fdW45MUxEb01UR0lvSW4zcUgtMzBCVXlV NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL191bjkxTERvTVRHSW9JbjNxSC0zMEJVeVU0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzY3My9BRTVGQjEwMjgwQ0IxMUVCQjc3QUI4NURDNEY5QUUwMi9fdW45MUxEb01U R0lvSW4zcUgtMzBCVXlVNGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALwPZZRHZfCpiPPEi4CAoPYv7f0V+f/60z9+Wj+AceHiP7UwyXv8ra VP2L7JVCvyAhOndni+5+0CFOpzeR8PHqQBap2xk+psF8ggZ5AbwOZRhwrqLZuWpP CcF58CcSMefZRdKJjtbAB1VfOzxrml7sYRFRgI97LGzhRUZ0L7EOOHN+L6QKzuGW 6JDZeQ5JhQk8j2xWHdcPna1ER2sRs9D+Vf/KWVZK+jKjVSkeM9uBHNqWyIdA0ld1 tqPZvUVksdlZmhJZDn66OxK23+2t+XTLP0nj1Xwxr/0TwSvyuLVu7SdFtudoFp1d Vq/qd+w2kCAcqJI3F3EeKCIGXRve4NFf -----END CERTIFICATE-----Generated at Fri Aug 22 16:24:14 2025 by rpki-client