$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft File: MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft (raw, json) Hash identifier: iCXdqY2rvBxZTcDl1ZbuV5kNtwsncvnODETMNHcjkJg= Subject key identifier: 5C:BE:67:E1:8D:64:5D:B5:0B:2B:06:C7:C6:63:21:FA:4B:B9:75:6F Authority key identifier: 31:D2:1D:5C:EE:5F:AC:DE:F3:C8:C1:C8:7D:0D:73:91:F9:F7:3A:FF Certificate issuer: /CN=A91C8203/serialNumber=31D21D5CEE5FACDEF3C8C1C87D0D7391F9F73AFF Certificate serial: 9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft Manifest number: 9A Signing time: Tue 19 Aug 2025 06:50:07 +0000 Manifest this update: Tue 19 Aug 2025 06:50:07 +0000 Manifest next update: Tue 26 Aug 2025 06:50:07 +0000 Files and hashes: 1: MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl (hash: qE1e38EQH7Ev7Vm1AAi721Wt87zAWSVKIBBjb66sbYg=) 2: BE48D4AA927D11EF9651FC4AC4F9AE02.roa (hash: izRhlY7DGrfvs8MmjLdXrrQgAeYYKtyct/uQzFPAxkk=) 3: D9BE56E2927D11EFB83ACB5CC4F9AE02.roa (hash: gD5kq8/HSPW50HYpmldu2HRZWRqRsB+3dXKbKp9PeAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 06:50:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8203, serialNumber=31D21D5CEE5FACDEF3C8C1C87D0D7391F9F73AFF Validity Not Before: Aug 19 06:50:07 2025 GMT Not After : Aug 26 06:50:07 2025 GMT Subject: CN=68a41e9f-006f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d3:d7:14:26:57:51:a0:9e:34:45:3e:3d:ff: 5f:f6:4a:d9:ef:97:fa:55:b2:42:a5:34:b0:ee:e1: dc:e0:53:b9:8e:f8:04:1b:13:42:bd:4f:62:92:66: 24:ed:0c:90:fa:b3:6f:d7:4e:d4:24:6c:af:b6:cd: 43:79:6e:5a:d7:13:0f:08:06:06:b1:1a:41:ff:40: e3:74:55:dd:7d:3c:1d:27:48:58:57:8b:c0:b7:9c: e5:ca:8b:45:e3:6e:9a:db:07:6b:c5:62:fc:cb:f8: 67:fe:24:a4:81:95:d1:42:58:a6:a3:05:eb:6b:0c: 49:bc:d0:d8:d5:2e:6a:4e:34:b7:27:59:44:5d:f9: 56:15:c0:1b:39:3f:ba:ac:42:1e:21:6b:a4:5c:79: 82:7b:f5:74:09:d7:30:93:43:52:01:4a:38:f2:7b: e1:9b:b9:b5:da:99:b4:92:fa:b7:c2:09:39:20:93: 60:f5:83:94:76:4e:51:3f:21:80:e6:6c:f1:d1:c4: 2d:33:e3:86:c4:0c:96:48:5b:b1:35:d4:72:58:26: 58:40:5e:79:96:e1:6f:79:b8:03:9b:f6:33:82:ea: f1:70:4c:8d:9f:c1:d8:2e:fe:fd:01:a3:ca:b8:4d: fd:db:e9:01:9a:56:69:95:4c:8d:61:20:3b:d6:3a: 96:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:BE:67:E1:8D:64:5D:B5:0B:2B:06:C7:C6:63:21:FA:4B:B9:75:6F X509v3 Authority Key Identifier: keyid:31:D2:1D:5C:EE:5F:AC:DE:F3:C8:C1:C8:7D:0D:73:91:F9:F7:3A:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:1f:c4:04:19:1d:3f:df:20:8c:34:0b:94:b0:0f:2d:4f:72: 2b:30:76:ba:b8:5b:28:8e:ad:8a:32:0c:64:e3:10:99:e1:f1: e7:5a:ab:aa:75:d3:71:26:15:51:a8:0c:92:5d:05:ac:e3:9b: 88:17:f0:b5:af:a2:6f:d9:1c:da:0b:c4:02:95:92:77:71:85: 67:d1:89:7c:0d:09:0e:e5:58:ec:2a:5b:78:31:4d:ea:79:39: f4:26:ae:1a:aa:71:a2:80:3f:c7:ce:0e:0f:be:29:4a:fd:e4: 0f:40:b2:7e:69:5d:ea:5d:74:d8:30:aa:f3:ab:4d:01:b3:97: 63:65:2e:92:52:82:a4:53:9e:f2:f1:76:33:60:78:0e:4a:fc: b8:61:df:13:0f:3f:03:c2:d7:1d:0f:75:79:80:88:9d:96:e5: ba:61:55:ee:db:7d:a4:0a:06:af:00:9c:a8:c5:9c:50:32:84: 46:39:17:7e:ac:d3:05:ac:6c:73:8b:d0:f6:fa:e2:0e:5b:18: bc:84:88:69:09:ad:27:58:59:aa:3b:5f:aa:8b:c3:a8:2f:f4: 62:77:c9:6a:71:82:ac:2c:6f:31:cf:7a:34:da:95:bd:a7:fa: 7d:39:b5:16:43:4b:8b:cc:c6:33:6b:eb:0a:56:b2:48:15:ea: 4f:b4:8b:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgyMDMxMTAvBgNVBAUTKDMxRDIxRDVDRUU1RkFDREVGM0M4QzFDODdEMEQ3Mzkx RjlGNzNBRkYwHhcNMjUwODE5MDY1MDA3WhcNMjUwODI2MDY1MDA3WjAYMRYwFAYD VQQDEw02OGE0MWU5Zi0wMDZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw9PXFCZXUaCeNEU+Pf9f9krZ75f6VbJCpTSw7uHc4FO5jvgEGxNCvU9ikmYk 7QyQ+rNv107UJGyvts1DeW5a1xMPCAYGsRpB/0DjdFXdfTwdJ0hYV4vAt5zlyotF 426a2wdrxWL8y/hn/iSkgZXRQlimowXrawxJvNDY1S5qTjS3J1lEXflWFcAbOT+6 rEIeIWukXHmCe/V0Cdcwk0NSAUo48nvhm7m12pm0kvq3wgk5IJNg9YOUdk5RPyGA 5mzx0cQtM+OGxAyWSFuxNdRyWCZYQF55luFvebgDm/YzgurxcEyNn8HYLv79AaPK uE392+kBmlZplUyNYSA71jqWsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFy+Z+GN ZF21CysGx8ZjIfpLuXVvMB8GA1UdIwQYMBaAFDHSHVzuX6ze88jByH0Nc5H59zr/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODIwMy9CQzUxNURBQTky N0ExMUVGQjU2NDNDNEVDNEY5QUUwMi9NZElkWE81ZnJON3p5TUhJZlExemtmbjNP djguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01kSWRYTzVmck43enlNSElmUTF6a2ZuM092OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODIwMy9CQzUxNURBQTkyN0ExMUVGQjU2NDNDNEVDNEY5QUUwMi9NZElkWE81ZnJO N3p5TUhJZlExemtmbjNPdjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSH8QEGR0/3yCMNAuUsA8tT3IrMHa6uFsojq2KMgxk4xCZ4fHnWquq ddNxJhVRqAySXQWs45uIF/C1r6Jv2RzaC8QClZJ3cYVn0Yl8DQkO5VjsKlt4MU3q eTn0Jq4aqnGigD/Hzg4PvilK/eQPQLJ+aV3qXXTYMKrzq00Bs5djZS6SUoKkU57y 8XYzYHgOSvy4Yd8TDz8DwtcdD3V5gIidluW6YVXu232kCgavAJyoxZxQMoRGORd+ rNMFrGxzi9D2+uIOWxi8hIhpCa0nWFmqO1+qi8OoL/Rid8lqcYKsLG8xz3o02pW9 p/p9ObUWQ0uLzMYza+sKVrJIFepPtIup -----END CERTIFICATE-----Generated at Wed Aug 20 18:18:24 2025 by rpki-client