$ rpki-client -vvf rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft File: 64sK0sB2YghSy8N4kOZK1Aa0ieg.mft (raw, json) Hash identifier: 3GMn1y5nlizhi1WNBf7sTwbOQH/9XfSDZYPBMExh/NY= Subject key identifier: D3:FE:A9:CC:DE:22:93:41:CC:1E:00:95:E3:50:D2:EB:43:5C:9A:64 Authority key identifier: EB:8B:0A:D2:C0:76:62:08:52:CB:C3:78:90:E6:4A:D4:06:B4:89:E8 Certificate issuer: /CN=A91C72B1/serialNumber=EB8B0AD2C076620852CBC37890E64AD406B489E8 Certificate serial: 0D41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft Manifest number: 0D37 Signing time: Sun 24 Aug 2025 17:59:23 +0000 Manifest this update: Sun 24 Aug 2025 17:59:22 +0000 Manifest next update: Sun 31 Aug 2025 17:59:22 +0000 Files and hashes: 1: 64sK0sB2YghSy8N4kOZK1Aa0ieg.crl (hash: XEsGO5Bn5xbBoQtHP/sJrwUFMXx6asBDjeZzZaLAVd4=) 2: 6714424C3C9111EA9416CA78C4F9AE02.roa (hash: YQKzakVZRwkEoSkOxzmifYwaHBBE1uM/hdsf+7QDJq4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.crl rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 17:59:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3393 (0xd41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C72B1, serialNumber=EB8B0AD2C076620852CBC37890E64AD406B489E8 Validity Not Before: Aug 24 17:59:22 2025 GMT Not After : Aug 31 17:59:22 2025 GMT Subject: CN=68ab52fa-258f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cf:6c:cf:bd:fd:63:5c:2b:e5:74:73:e4:ce: 48:15:c9:d0:1a:d4:51:78:6f:9c:2c:a5:29:47:05: d9:5b:5e:2e:a2:85:43:54:e6:d4:f9:c0:62:0e:31: fa:eb:84:72:87:88:7a:08:11:4b:56:96:61:7d:62: 8f:3c:fe:47:cc:8a:42:46:d9:c6:c9:00:60:e7:4b: d2:13:41:b5:14:dd:3d:d3:21:9f:79:31:64:7f:67: 29:83:5c:f0:03:64:14:61:8e:2c:e2:90:56:5f:b1: fd:fd:41:08:26:54:15:46:0c:e6:77:b1:d7:68:15: 25:e5:55:08:b8:12:53:73:7a:87:54:27:90:c1:7e: 23:99:12:98:64:2a:9a:54:e8:14:5b:0e:84:5c:65: e2:64:51:ff:18:f9:f7:91:02:1b:03:06:e5:4f:d0: d8:79:b6:82:f3:3b:d4:0a:e3:bb:17:45:c0:85:3f: 21:de:e9:cd:86:55:b7:ac:d4:c3:37:c3:fe:6f:0c: 8d:2f:4f:31:6d:ea:f1:b8:9f:40:4a:51:db:fc:4c: dd:f9:57:65:0b:a2:18:f8:b9:ca:bd:cc:bf:a8:9f: e1:f7:f6:36:b7:2f:d2:58:39:31:31:1f:0e:f2:0f: c1:47:47:4e:3d:8c:0a:73:c8:40:ce:a2:71:48:d4: 98:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:FE:A9:CC:DE:22:93:41:CC:1E:00:95:E3:50:D2:EB:43:5C:9A:64 X509v3 Authority Key Identifier: keyid:EB:8B:0A:D2:C0:76:62:08:52:CB:C3:78:90:E6:4A:D4:06:B4:89:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:58:da:61:9d:5f:a3:01:28:30:c3:8e:ca:90:a8:50:d6:60: e9:20:a8:4c:55:ae:e5:40:28:03:a1:79:07:a6:e0:0f:79:ce: 05:0d:b3:cd:84:fb:e4:56:4b:96:20:38:55:39:0d:17:86:45: 43:b4:8b:9d:57:82:2b:3a:8f:cc:38:fb:46:7d:db:d9:d4:15: 83:92:a6:d9:23:79:62:fc:7e:eb:14:71:fc:14:c3:5d:1a:7f: cb:cd:ea:9a:f9:3a:23:3d:93:eb:0f:15:85:6b:35:07:11:30: 9c:63:eb:b5:1c:4f:34:5f:87:f6:d9:3d:b0:00:21:ba:d3:e4: dd:ab:83:7e:25:69:f5:ba:6f:7e:6d:f8:9b:66:21:ed:ad:1e: 0d:e3:f9:d4:57:68:bd:af:7d:7e:44:fe:51:65:17:89:c9:70: c8:7a:e7:e9:a4:ac:f6:55:b9:89:a6:dc:2a:7e:65:46:f5:37: 91:50:ca:af:7a:54:12:3e:07:64:12:cc:1e:8b:3d:39:b7:df: 58:b6:08:a1:72:91:4c:25:5e:0d:d0:cd:4a:f6:d6:ce:aa:6f: 2a:7c:9a:3c:7a:ea:52:64:97:41:73:b3:66:62:5c:75:a3:9c: 36:86:b9:c8:33:d9:f6:56:6c:f7:10:1a:5e:1e:c8:67:31:6c: 60:aa:0e:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcyQjExMTAvBgNVBAUTKEVCOEIwQUQyQzA3NjYyMDg1MkNCQzM3ODkwRTY0QUQ0 MDZCNDg5RTgwHhcNMjUwODI0MTc1OTIyWhcNMjUwODMxMTc1OTIyWjAYMRYwFAYD VQQDEw02OGFiNTJmYS0yNThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAts9sz739Y1wr5XRz5M5IFcnQGtRReG+cLKUpRwXZW14uooVDVObU+cBiDjH6 64Ryh4h6CBFLVpZhfWKPPP5HzIpCRtnGyQBg50vSE0G1FN090yGfeTFkf2cpg1zw A2QUYY4s4pBWX7H9/UEIJlQVRgzmd7HXaBUl5VUIuBJTc3qHVCeQwX4jmRKYZCqa VOgUWw6EXGXiZFH/GPn3kQIbAwblT9DYebaC8zvUCuO7F0XAhT8h3unNhlW3rNTD N8P+bwyNL08xberxuJ9ASlHb/Ezd+VdlC6IY+LnKvcy/qJ/h9/Y2ty/SWDkxMR8O 8g/BR0dOPYwKc8hAzqJxSNSYWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNP+qcze IpNBzB4AleNQ0utDXJpkMB8GA1UdIwQYMBaAFOuLCtLAdmIIUsvDeJDmStQGtIno MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzJCMS8yQTQ1Rjk4MERF QzkxMUU5QUFBN0VDMzNDNEY5QUUwMi82NHNLMHNCMllnaFN5OE40a09aSzFBYTBp ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY0c0swc0IyWWdoU3k4TjRrT1pLMUFhMGllZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzJCMS8yQTQ1Rjk4MERFQzkxMUU5QUFBN0VDMzNDNEY5QUUwMi82NHNLMHNCMlln aFN5OE40a09aSzFBYTBpZWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOWNphnV+jASgww47KkKhQ1mDpIKhMVa7lQCgDoXkHpuAPec4FDbPN hPvkVkuWIDhVOQ0XhkVDtIudV4IrOo/MOPtGfdvZ1BWDkqbZI3li/H7rFHH8FMNd Gn/Lzeqa+TojPZPrDxWFazUHETCcY+u1HE80X4f22T2wACG60+Tdq4N+JWn1um9+ bfibZiHtrR4N4/nUV2i9r31+RP5RZReJyXDIeufppKz2VbmJptwqfmVG9TeRUMqv elQSPgdkEsweiz05t99YtgihcpFMJV4N0M1K9tbOqm8qfJo8eupSZJdBc7NmYlx1 o5w2hrnIM9n2Vmz3EBpeHshnMWxgqg7K -----END CERTIFICATE-----Generated at Sun Aug 24 22:00:36 2025 by rpki-client