$ rpki-client -vvf rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.mft File: 0rwrzA84njpcUzzEc6fENrsbdNk.mft (raw, json) Hash identifier: BWGmQHFhob+YQ/ukq74vz+9apar/n0+qDkFNohIRpj8= Subject key identifier: E5:66:67:EE:70:22:22:B3:CC:1E:AE:AD:C1:54:34:A4:38:AB:95:A2 Authority key identifier: D2:BC:2B:CC:0F:38:9E:3A:5C:53:3C:C4:73:A7:C4:36:BB:1B:74:D9 Certificate issuer: /CN=A91C21C7/serialNumber=D2BC2BCC0F389E3A5C533CC473A7C436BB1B74D9 Certificate serial: 2D97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rwrzA84njpcUzzEc6fENrsbdNk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.mft Manifest number: 2D72 Signing time: Sun 24 Aug 2025 15:29:00 +0000 Manifest this update: Sun 24 Aug 2025 15:28:59 +0000 Manifest next update: Sun 31 Aug 2025 15:28:59 +0000 Files and hashes: 1: 0rwrzA84njpcUzzEc6fENrsbdNk.crl (hash: xEIpIRI17pG7QfNZ3S7tzLQLszJ9NqDUlxIYiB74SmQ=) 2: E2AD90E813E811E9B287C144C4F9AE02.roa (hash: CwjqOoJS53tpi81tzFuwu956lUr2HE8GT6aAkGCmQ3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.crl rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rwrzA84njpcUzzEc6fENrsbdNk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 15:28:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11671 (0x2d97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C21C7, serialNumber=D2BC2BCC0F389E3A5C533CC473A7C436BB1B74D9 Validity Not Before: Aug 24 15:28:59 2025 GMT Not After : Aug 31 15:28:59 2025 GMT Subject: CN=68ab2fbc-5f38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d9:4b:2c:03:8a:d6:da:df:ff:b7:30:9f:2e: d4:5f:fd:03:10:b2:b7:74:55:e7:93:7a:e5:7e:81: c3:3b:d0:87:d5:56:d5:da:9b:89:60:3a:13:78:ae: 98:38:30:a8:d3:8d:9c:68:00:90:49:13:eb:78:ee: e2:b5:5a:46:ba:0f:da:4a:b0:51:d2:ab:9f:37:39: cd:33:bd:7b:5e:2e:66:2f:fe:d9:d3:1e:ed:11:81: fb:d6:85:ae:ce:23:e8:41:50:c8:b4:3d:1e:cd:2d: ab:b7:5d:31:e7:6b:a9:47:f9:a7:9b:6d:c8:b2:3e: d9:d7:f2:80:f3:1d:2d:7c:48:9e:d9:d6:fa:53:d2: 5f:3a:ea:f9:0a:df:5c:08:8a:ee:2d:91:88:32:8b: 89:be:27:9b:02:d3:09:5a:0d:9f:ad:55:76:0e:d0: 53:33:6d:f6:1e:a6:95:39:c9:18:21:74:8a:8b:48: fb:9f:c1:d6:0b:2b:59:a6:ad:af:25:b8:b2:d3:43: 0e:7d:24:f7:62:57:66:b4:81:8b:f1:ad:38:f8:93: c5:9b:18:c3:55:c7:58:3f:0e:4d:6b:e6:60:46:bb: 3f:13:8a:89:41:4a:6d:81:cb:29:08:50:55:58:b4: 83:78:30:40:1b:2f:d8:ec:15:e2:f8:4b:ae:df:35: 7b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:66:67:EE:70:22:22:B3:CC:1E:AE:AD:C1:54:34:A4:38:AB:95:A2 X509v3 Authority Key Identifier: keyid:D2:BC:2B:CC:0F:38:9E:3A:5C:53:3C:C4:73:A7:C4:36:BB:1B:74:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rwrzA84njpcUzzEc6fENrsbdNk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:57:fb:c3:26:f0:18:de:01:f4:45:22:56:c1:42:47:6c:18: c7:b5:bd:5a:0a:17:d7:2a:b2:eb:2f:bd:02:ee:d3:87:77:25: d4:6b:b6:3a:d9:8c:41:ec:68:95:31:ac:63:d7:83:4d:fb:3d: f3:f3:05:15:60:e4:98:8b:e8:6b:20:06:5e:d9:06:d4:49:21: 72:8d:0d:00:29:4d:ac:7c:2e:16:14:53:37:18:f5:dc:39:54: 07:a1:ee:4d:c9:01:2f:08:99:b5:41:84:97:41:79:87:16:bb: 3d:c4:47:de:12:f3:62:b7:f8:33:3d:a6:ba:54:df:61:d0:58: 4a:a8:76:fd:79:d8:7f:6a:6e:b9:fc:6b:11:db:da:d9:92:d3: b4:92:20:11:a3:f9:52:3e:7e:9c:af:2c:7b:97:7c:14:6f:d7: ba:d8:ab:74:0c:13:b5:1e:87:9e:4a:8c:c1:7f:f4:b3:4a:6e: 92:28:0c:59:b0:a0:40:c0:21:a6:7c:38:d2:b7:ce:71:5f:0c: ae:fc:7f:62:61:dc:c7:92:5f:d0:62:0b:9d:4d:de:4c:af:78: ad:1b:9b:88:15:e2:de:5c:5a:e7:8d:4c:d1:f7:37:53:99:b5: 85:1b:ee:15:44:12:07:d3:8a:cd:14:46:c7:21:ae:03:9f:24: d7:bf:6a:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzIxQzcxMTAvBgNVBAUTKEQyQkMyQkNDMEYzODlFM0E1QzUzM0NDNDczQTdDNDM2 QkIxQjc0RDkwHhcNMjUwODI0MTUyODU5WhcNMjUwODMxMTUyODU5WjAYMRYwFAYD VQQDEw02OGFiMmZiYy01ZjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwdlLLAOK1trf/7cwny7UX/0DELK3dFXnk3rlfoHDO9CH1VbV2puJYDoTeK6Y ODCo042caACQSRPreO7itVpGug/aSrBR0qufNznNM717Xi5mL/7Z0x7tEYH71oWu ziPoQVDItD0ezS2rt10x52upR/mnm23Isj7Z1/KA8x0tfEie2db6U9JfOur5Ct9c CIruLZGIMouJviebAtMJWg2frVV2DtBTM232HqaVOckYIXSKi0j7n8HWCytZpq2v Jbiy00MOfST3YldmtIGL8a04+JPFmxjDVcdYPw5Na+ZgRrs/E4qJQUptgcspCFBV WLSDeDBAGy/Y7BXi+Euu3zV7ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOVmZ+5w IiKzzB6urcFUNKQ4q5WiMB8GA1UdIwQYMBaAFNK8K8wPOJ46XFM8xHOnxDa7G3TZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjFDNy81NDIyMkZEMDhG QUIxMUUzOTM2MkVGMzU1OTExRUEzMi8wcndyekE4NG5qcGNVenpFYzZmRU5yc2Jk TmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzByd3J6QTg0bmpwY1V6ekVjNmZFTnJzYmROay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjFDNy81NDIyMkZEMDhGQUIxMUUzOTM2MkVGMzU1OTExRUEzMi8wcndyekE4NG5q cGNVenpFYzZmRU5yc2JkTmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEV/vDJvAY3gH0RSJWwUJHbBjHtb1aChfXKrLrL70C7tOHdyXUa7Y6 2YxB7GiVMaxj14NN+z3z8wUVYOSYi+hrIAZe2QbUSSFyjQ0AKU2sfC4WFFM3GPXc OVQHoe5NyQEvCJm1QYSXQXmHFrs9xEfeEvNit/gzPaa6VN9h0FhKqHb9edh/am65 /GsR29rZktO0kiARo/lSPn6cryx7l3wUb9e62Kt0DBO1HoeeSozBf/SzSm6SKAxZ sKBAwCGmfDjSt85xXwyu/H9iYdzHkl/QYgudTd5Mr3itG5uIFeLeXFrnjUzR9zdT mbWFG+4VRBIH04rNFEbHIa4DnyTXv2rh -----END CERTIFICATE-----Generated at Sun Aug 24 22:16:13 2025 by rpki-client