$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft File: De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft (raw, json) Hash identifier: 5A17yMT9VzfxazbhscqFpwt92C7ttBq6GmwV4XAEx+g= Subject key identifier: 3E:0A:BC:06:2E:F2:AB:2F:B4:3E:FE:00:32:5F:6E:D1:1B:8E:3E:BF Authority key identifier: 0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61 Certificate issuer: /CN=A91B1FA8/serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561 Certificate serial: 136E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft Manifest number: 1357 Signing time: Thu 04 Sep 2025 17:08:59 +0000 Manifest this update: Thu 04 Sep 2025 17:08:58 +0000 Manifest next update: Thu 11 Sep 2025 17:08:58 +0000 Files and hashes: 1: De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl (hash: TLdNHHhDE5tBn6dS8UG+BMekeEJayjMIoNTdeFg3TA0=) 2: 7677A43AF8C511EBA498E771C4F9AE02.roa (hash: 4U+E+SOSNCeOPAvIwzXbeqTBl70zy1co24nPCsNKCHs=) 3: B8B7B5BA64BE11EBA96DF40DC4F9AE02.roa (hash: R0AZPv6+24ga8tPLfZ8kNV1NXohs9+QG7hIHcrhg+8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 17:08:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4974 (0x136e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1FA8, serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561 Validity Not Before: Sep 4 17:08:58 2025 GMT Not After : Sep 11 17:08:58 2025 GMT Subject: CN=68b9c7aa-a51c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ca:12:d4:c1:4b:2c:33:c8:51:e2:06:61:7b: ea:25:0d:53:78:82:2b:26:77:06:1c:4c:b0:76:35: fe:ba:7e:35:23:c2:ab:4e:51:e4:30:6c:14:c8:37: f1:4d:d1:3f:de:be:64:d4:05:58:99:0f:57:c7:ad: a6:c9:a1:4a:0d:7f:57:4f:74:6f:e5:43:de:d4:6b: 6c:0d:83:4b:d0:b8:26:4f:3f:5e:e6:1d:e0:38:e8: c8:5e:8b:80:25:16:af:39:2f:01:4b:b1:2e:6a:63: c3:3b:4a:c6:7e:86:62:f4:52:bd:aa:56:e9:3a:07: 1d:1a:56:0d:2f:72:f4:66:1b:33:59:43:3f:ea:21: 7f:60:42:03:30:d5:4a:0a:58:49:43:1e:f3:87:6e: 68:71:87:58:8b:37:53:df:04:ed:25:e2:c8:da:b3: 13:79:9c:0e:f7:ce:a2:be:e4:93:50:c9:bb:d1:e7: b2:34:07:3b:47:9b:2d:ff:bc:ad:b4:5b:53:f7:5b: 68:de:02:7f:22:e9:df:52:bb:14:28:41:af:67:04: b5:69:f6:ca:76:64:6f:2a:54:a0:ec:57:0e:95:01: 17:ef:cc:0b:3d:0c:98:21:c1:8b:a7:9d:79:b6:aa: 61:67:39:cd:f6:58:67:84:d5:68:5d:4a:7f:5d:a5: fb:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:0A:BC:06:2E:F2:AB:2F:B4:3E:FE:00:32:5F:6E:D1:1B:8E:3E:BF X509v3 Authority Key Identifier: keyid:0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:a8:80:48:7e:80:83:61:8f:01:fb:ec:ee:42:a6:e1:36:c0: 4d:68:14:bb:5b:95:04:bc:df:f5:08:59:bf:ad:16:10:ad:3d: 3c:0d:9c:8f:62:70:21:58:0e:b2:e4:80:a5:79:cd:a6:a4:09: 29:50:64:5f:d7:b0:1c:6f:5a:2a:9b:04:09:27:47:7f:cd:4f: a0:50:02:fe:8c:98:f7:b8:9d:96:a5:c4:46:73:1b:27:a8:0e: 6d:73:93:69:ca:eb:f0:c5:9b:fe:1e:fa:ba:7e:67:75:ba:69: b0:3a:5b:0e:92:f1:23:93:14:3d:54:21:24:9e:0f:65:e3:dc: f2:c9:75:e0:fa:0e:a3:b7:16:63:1e:1e:1b:30:8b:f5:a3:1d: fa:52:95:b3:ee:94:58:08:4e:97:cc:7e:c3:f9:a0:f4:87:f2: 54:f8:56:8f:fe:39:6b:5c:0f:32:1b:59:8d:5d:29:bc:b0:68: 46:76:23:97:18:a3:63:c1:bd:4b:48:92:0e:99:53:60:85:1b: be:07:50:95:75:bc:a5:c2:cc:70:82:0f:0a:c9:c2:d3:f7:9a: 5c:c9:b9:1d:c8:af:04:ea:9e:93:76:04:3c:46:2e:e6:8d:f3: 2e:7b:a2:72:00:2b:3c:fe:00:3a:b0:c9:9d:03:88:df:97:01: a3:1f:2d:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE24wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFGQTgxMTAvBgNVBAUTKDBERUVFRDEzNjIxNDNDMzYyRjI0Rjk3QzY3QzhFNEVD RTJDN0E1NjEwHhcNMjUwOTA0MTcwODU4WhcNMjUwOTExMTcwODU4WjAYMRYwFAYD VQQDEw02OGI5YzdhYS1hNTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0coS1MFLLDPIUeIGYXvqJQ1TeIIrJncGHEywdjX+un41I8KrTlHkMGwUyDfx TdE/3r5k1AVYmQ9Xx62myaFKDX9XT3Rv5UPe1GtsDYNL0LgmTz9e5h3gOOjIXouA JRavOS8BS7EuamPDO0rGfoZi9FK9qlbpOgcdGlYNL3L0ZhszWUM/6iF/YEIDMNVK ClhJQx7zh25ocYdYizdT3wTtJeLI2rMTeZwO986ivuSTUMm70eeyNAc7R5st/7yt tFtT91to3gJ/IunfUrsUKEGvZwS1afbKdmRvKlSg7FcOlQEX78wLPQyYIcGLp515 tqphZznN9lhnhNVoXUp/XaX70QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD4KvAYu 8qsvtD7+ADJfbtEbjj6/MB8GA1UdIwQYMBaAFA3u7RNiFDw2LyT5fGfI5Ozix6Vh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUZBOC9ERjQ3MDkwMkFG RDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9EZTd0RTJJVVBEWXZKUGw4WjhqazdPTEhw V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0RlN3RFMklVUERZdkpQbDhaOGprN09MSHBXRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUZBOC9ERjQ3MDkwMkFGRDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9EZTd0RTJJVVBE WXZKUGw4WjhqazdPTEhwV0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnqIBIfoCDYY8B++zuQqbhNsBNaBS7W5UEvN/1CFm/rRYQrT08DZyP YnAhWA6y5IClec2mpAkpUGRf17Acb1oqmwQJJ0d/zU+gUAL+jJj3uJ2WpcRGcxsn qA5tc5NpyuvwxZv+Hvq6fmd1ummwOlsOkvEjkxQ9VCEkng9l49zyyXXg+g6jtxZj Hh4bMIv1ox36UpWz7pRYCE6XzH7D+aD0h/JU+FaP/jlrXA8yG1mNXSm8sGhGdiOX GKNjwb1LSJIOmVNghRu+B1CVdbylwsxwgg8KycLT95pcybkdyK8E6p6TdgQ8Ri7m jfMue6JyACs8/gA6sMmdA4jflwGjHy1i -----END CERTIFICATE-----Generated at Fri Sep 5 19:36:47 2025 by rpki-client