$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.mft File: r-73ovgxqXVbE7N-tum5HYHoqeg.mft (raw, json) Hash identifier: bx/uBqaZLgGglpcwWxuCgHW/m6N/N9bz2aFqaxdkJFU= Subject key identifier: 85:9A:85:FF:B0:1A:D5:8F:3B:45:69:5C:3F:91:84:34:C1:E6:F6:42 Authority key identifier: AF:EE:F7:A2:F8:31:A9:75:5B:13:B3:7E:B6:E9:B9:1D:81:E8:A9:E8 Certificate issuer: /CN=A91A6F2D/serialNumber=AFEEF7A2F831A9755B13B37EB6E9B91D81E8A9E8 Certificate serial: 060A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-73ovgxqXVbE7N-tum5HYHoqeg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.mft Manifest number: 0605 Signing time: Sat 06 Sep 2025 23:11:49 +0000 Manifest this update: Sat 06 Sep 2025 23:11:49 +0000 Manifest next update: Sat 13 Sep 2025 23:11:49 +0000 Files and hashes: 1: r-73ovgxqXVbE7N-tum5HYHoqeg.crl (hash: Mklj5ZQS7Y3lD4tfd4h/OfCcAoZsVHHahzK8Mo2lSKw=) 2: C17E1DDCBC7111EBB1423E5FC4F9AE02.roa (hash: LpIzyfQvDqArXC9hZJ5ZqGifDCSL9ldak3ZwH8S2NRY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.crl rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-73ovgxqXVbE7N-tum5HYHoqeg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 23:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1546 (0x60a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6F2D, serialNumber=AFEEF7A2F831A9755B13B37EB6E9B91D81E8A9E8 Validity Not Before: Sep 6 23:11:49 2025 GMT Not After : Sep 13 23:11:49 2025 GMT Subject: CN=68bcbfb5-742a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:85:13:2b:f9:1d:86:8f:f6:b8:c6:be:54:2d: df:59:2e:1c:06:35:aa:d3:ee:02:51:14:31:41:6f: c1:6f:af:be:a0:6d:10:85:6d:9b:81:61:43:d7:8d: 15:cb:f3:3c:b5:c8:42:7f:ed:2b:31:b8:7a:d1:e0: 7a:b2:20:bc:a8:e9:68:1f:d4:1d:19:03:d5:50:e8: 55:f6:06:05:c9:8b:5a:b0:b5:c6:77:75:af:c7:23: 45:b9:73:ae:c9:42:83:c3:94:75:de:5b:c9:2b:60: 2f:c4:a7:b2:95:38:0d:09:c2:13:47:94:0f:f9:d7: c0:ca:17:0d:00:74:a2:c1:04:da:e2:d8:d3:93:ca: 1d:1d:6d:60:7c:0f:12:72:e6:ea:34:89:3f:55:9e: 0e:02:f7:99:a2:4c:da:78:9e:5b:97:8e:b4:ef:e8: d9:3f:90:1a:3c:89:4c:4e:6b:48:bb:3f:81:4c:d6: c8:33:c6:59:5d:c4:49:6e:85:28:14:ab:e8:c6:19: 7f:8e:11:4f:30:85:7c:23:e7:0e:c2:74:a6:63:dd: fb:8a:f3:9a:00:4d:a7:fe:c2:7a:62:a0:43:8e:f5: d2:0f:d2:32:d9:51:d0:7d:62:e9:11:dd:3f:1d:16: 48:b5:18:eb:0a:00:cb:02:c7:d9:82:ef:04:58:54: 10:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:9A:85:FF:B0:1A:D5:8F:3B:45:69:5C:3F:91:84:34:C1:E6:F6:42 X509v3 Authority Key Identifier: keyid:AF:EE:F7:A2:F8:31:A9:75:5B:13:B3:7E:B6:E9:B9:1D:81:E8:A9:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-73ovgxqXVbE7N-tum5HYHoqeg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:99:bd:22:f3:0f:5e:61:6f:13:be:5b:c7:97:3f:05:d6:aa: dd:b5:2a:99:2e:af:cf:9f:8a:cd:9e:00:39:58:40:39:9b:13: 1f:81:cc:6a:6d:7a:bb:e8:fa:47:2a:c8:77:33:07:e8:27:06: 18:0d:5e:ad:bb:4c:22:7b:4f:7b:42:67:50:f7:b6:f1:c6:5f: af:fa:f0:19:0a:7e:95:dd:e3:38:4e:f9:6b:93:90:25:d7:d5: 8c:a6:a1:e5:19:21:09:89:94:06:51:41:fa:34:77:97:66:35: 99:bc:13:7f:61:ef:88:4b:88:c1:58:98:58:73:7c:fe:51:c4: 09:92:f1:a8:47:22:a7:24:9a:28:47:7e:69:d8:3c:09:1d:cf: 6a:d4:b1:f9:b2:ed:41:54:c0:25:f9:8d:49:58:6b:d8:f8:ff: bc:db:f0:71:7f:00:07:e5:91:57:47:14:ce:51:88:c3:e7:bd: 33:d1:28:8a:2e:60:cd:08:fd:45:5b:63:40:59:06:0c:4d:5e: f5:02:2f:29:5f:de:df:36:2f:72:f1:e8:b2:2a:0d:db:90:72: 78:96:30:c2:94:cb:11:f5:36:18:93:3c:5a:01:9c:0b:10:26: 57:fe:dd:c2:61:f1:36:d5:ea:a9:38:e9:c0:d6:dc:7d:0d:36: e2:db:1a:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZGMkQxMTAvBgNVBAUTKEFGRUVGN0EyRjgzMUE5NzU1QjEzQjM3RUI2RTlCOTFE ODFFOEE5RTgwHhcNMjUwOTA2MjMxMTQ5WhcNMjUwOTEzMjMxMTQ5WjAYMRYwFAYD VQQDEw02OGJjYmZiNS03NDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz4UTK/kdho/2uMa+VC3fWS4cBjWq0+4CURQxQW/Bb6++oG0QhW2bgWFD140V y/M8tchCf+0rMbh60eB6siC8qOloH9QdGQPVUOhV9gYFyYtasLXGd3WvxyNFuXOu yUKDw5R13lvJK2AvxKeylTgNCcITR5QP+dfAyhcNAHSiwQTa4tjTk8odHW1gfA8S cubqNIk/VZ4OAveZokzaeJ5bl4607+jZP5AaPIlMTmtIuz+BTNbIM8ZZXcRJboUo FKvoxhl/jhFPMIV8I+cOwnSmY937ivOaAE2n/sJ6YqBDjvXSD9Iy2VHQfWLpEd0/ HRZItRjrCgDLAsfZgu8EWFQQkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIWahf+w GtWPO0VpXD+RhDTB5vZCMB8GA1UdIwQYMBaAFK/u96L4Mal1WxOzfrbpuR2B6Kno MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkYyRC9GRDg2MEY2OEJD NkUxMUVCQjhDNjQ4NTRDNEY5QUUwMi9yLTczb3ZneHFYVmJFN04tdHVtNUhZSG9x ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ItNzNvdmd4cVhWYkU3Ti10dW01SFlIb3FlZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkYyRC9GRDg2MEY2OEJDNkUxMUVCQjhDNjQ4NTRDNEY5QUUwMi9yLTczb3ZneHFY VmJFN04tdHVtNUhZSG9xZWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGmb0i8w9eYW8TvlvHlz8F1qrdtSqZLq/Pn4rNngA5WEA5mxMfgcxq bXq76PpHKsh3MwfoJwYYDV6tu0wie097QmdQ97bxxl+v+vAZCn6V3eM4Tvlrk5Al 19WMpqHlGSEJiZQGUUH6NHeXZjWZvBN/Ye+IS4jBWJhYc3z+UcQJkvGoRyKnJJoo R35p2DwJHc9q1LH5su1BVMAl+Y1JWGvY+P+82/BxfwAH5ZFXRxTOUYjD570z0SiK LmDNCP1FW2NAWQYMTV71Ai8pX97fNi9y8eiyKg3bkHJ4ljDClMsR9TYYkzxaAZwL ECZX/t3CYfE21eqpOOnA1tx9DTbi2xpR -----END CERTIFICATE-----Generated at Mon Sep 8 14:23:20 2025 by rpki-client