$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft File: tSlwZVVtKyKTSTXnUgcivVMz2k8.mft (raw, json) Hash identifier: szKRJxXbWjdC2iymgEZaj4GlyAyeCUwAxQO43NRTlVc= Subject key identifier: 3D:22:40:BA:19:5D:68:B4:A5:73:C5:5C:49:5A:60:44:8A:33:43:83 Authority key identifier: B5:29:70:65:55:6D:2B:22:93:49:35:E7:52:07:22:BD:53:33:DA:4F Certificate issuer: /CN=A91CD7A4/serialNumber=B5297065556D2B22934935E7520722BD5333DA4F Certificate serial: 01A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSlwZVVtKyKTSTXnUgcivVMz2k8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft Manifest number: 01A1 Signing time: Fri 05 Sep 2025 03:39:16 +0000 Manifest this update: Fri 05 Sep 2025 03:39:15 +0000 Manifest next update: Fri 12 Sep 2025 03:39:15 +0000 Files and hashes: 1: tSlwZVVtKyKTSTXnUgcivVMz2k8.crl (hash: bEQ6IIjTGF88QBunY6MpH3elntga8yQCqQ0pPpWNUQ0=) 2: 275245323AB511F0AE5E5919C4F9AE02.roa (hash: IHKKhIw85fk9s47CrpZDKzzYoR/RN4XUlJphLrYmJyk=) 3: AD47BEC4320611EE845F4A5AC4F9AE02.roa (hash: P7EwycxEH4BjaRzRhYFgj1fovDv1DxA8C+5endacXNQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.crl rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSlwZVVtKyKTSTXnUgcivVMz2k8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 03:39:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 423 (0x1a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD7A4, serialNumber=B5297065556D2B22934935E7520722BD5333DA4F Validity Not Before: Sep 5 03:39:15 2025 GMT Not After : Sep 12 03:39:15 2025 GMT Subject: CN=68ba5b64-bead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:68:6b:22:2d:35:07:2e:a6:eb:ac:ff:c4:3c: e9:58:76:7d:6f:62:6c:c9:f4:db:01:f0:8c:80:f9: bf:0f:42:50:df:ec:92:f5:b6:ce:15:a8:23:0a:a4: 31:f4:7a:44:16:83:9f:00:1e:87:b2:69:46:c5:c2: d3:ce:79:84:c8:6c:5b:45:ba:dc:57:b8:38:8b:16: 95:4d:a9:9d:fc:79:d5:34:8f:3d:79:99:92:8a:74: 3e:4e:f7:8f:7b:83:e1:43:a2:06:c0:b0:00:4f:0f: 1b:47:9e:ed:e6:d1:cb:c0:69:86:db:89:2c:bd:46: ec:14:9c:e8:73:25:12:f9:51:7a:7e:68:36:be:d9: 19:f9:19:69:2e:14:10:c8:b6:92:af:20:85:51:21: 6c:82:45:55:38:e8:70:e0:cf:6d:8a:5f:89:ae:e7: db:d2:47:03:72:0f:da:73:ec:a2:17:ec:43:e5:b6: c7:16:c6:eb:c1:ce:41:c4:c6:f7:eb:21:64:21:13: b4:85:86:cd:18:30:18:53:b0:f3:84:b8:90:72:63: 5f:23:2c:17:ed:3f:5b:85:87:fd:92:50:b0:18:ff: 52:a3:f7:4c:21:99:dd:21:3b:b2:b1:2c:d7:3a:75: e3:9a:2d:5a:6b:66:12:7a:b3:be:f3:52:7b:59:81: 99:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:22:40:BA:19:5D:68:B4:A5:73:C5:5C:49:5A:60:44:8A:33:43:83 X509v3 Authority Key Identifier: keyid:B5:29:70:65:55:6D:2B:22:93:49:35:E7:52:07:22:BD:53:33:DA:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSlwZVVtKyKTSTXnUgcivVMz2k8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:b0:97:d4:6f:f3:05:6f:c3:73:b4:f7:5e:e2:8a:19:b6:2b: af:38:51:fa:83:ee:08:af:67:e6:15:4e:f5:d6:2c:7a:50:cb: b4:d4:d9:d5:4d:40:d2:72:fd:49:bb:e7:fd:f4:12:44:f8:be: c7:9d:b8:e8:8c:2f:dd:3c:40:33:ee:6b:42:6f:f4:a9:8b:29: d1:77:64:41:0b:a0:59:a3:73:ae:15:f4:62:4f:30:f2:f2:27: 98:8a:2b:cc:60:d4:0b:37:4f:35:fd:00:40:b3:36:af:55:b9: 5e:fc:3b:60:26:11:8c:e6:fc:a9:97:1c:8a:12:e6:ff:70:7a: 3f:02:09:ab:70:d0:08:ad:2f:56:cc:fd:ac:15:74:0b:69:66: 90:fe:7b:b7:e6:d5:1b:8e:f3:15:fa:19:bd:74:a5:3e:46:17: ec:85:38:58:9d:19:24:37:39:0c:c4:74:28:e4:78:46:c0:f9: 8d:8e:87:20:c5:ba:56:f5:48:58:8f:b5:1d:85:72:f7:4d:13: 54:c3:ae:68:0b:36:e7:2c:a0:a8:a6:db:d5:f3:41:72:b5:38: 4c:96:44:e0:fd:8e:34:63:64:c0:47:73:f3:40:58:7f:ac:3a: f0:b3:2d:ae:3c:f7:4a:3d:18:1f:5b:e7:4b:6b:f6:18:5b:a2: d4:53:7e:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Q3QTQxMTAvBgNVBAUTKEI1Mjk3MDY1NTU2RDJCMjI5MzQ5MzVFNzUyMDcyMkJE NTMzM0RBNEYwHhcNMjUwOTA1MDMzOTE1WhcNMjUwOTEyMDMzOTE1WjAYMRYwFAYD VQQDEw02OGJhNWI2NC1iZWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApWhrIi01By6m66z/xDzpWHZ9b2JsyfTbAfCMgPm/D0JQ3+yS9bbOFagjCqQx 9HpEFoOfAB6HsmlGxcLTznmEyGxbRbrcV7g4ixaVTamd/HnVNI89eZmSinQ+TveP e4PhQ6IGwLAATw8bR57t5tHLwGmG24ksvUbsFJzocyUS+VF6fmg2vtkZ+RlpLhQQ yLaSryCFUSFsgkVVOOhw4M9til+Jrufb0kcDcg/ac+yiF+xD5bbHFsbrwc5BxMb3 6yFkIRO0hYbNGDAYU7DzhLiQcmNfIywX7T9bhYf9klCwGP9So/dMIZndITuysSzX OnXjmi1aa2YSerO+81J7WYGZLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD0iQLoZ XWi0pXPFXElaYESKM0ODMB8GA1UdIwQYMBaAFLUpcGVVbSsik0k151IHIr1TM9pP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDdBNC8zQ0M3MTk5NjEx ODcxMUVFQjM5RkUyNDNDNEY5QUUwMi90U2x3WlZWdEt5S1RTVFhuVWdjaXZWTXoy azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RTbHdaVlZ0S3lLVFNUWG5VZ2NpdlZNejJrOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDdBNC8zQ0M3MTk5NjExODcxMUVFQjM5RkUyNDNDNEY5QUUwMi90U2x3WlZWdEt5 S1RTVFhuVWdjaXZWTXoyazgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9sJfUb/MFb8NztPde4ooZtiuvOFH6g+4Ir2fmFU711ix6UMu01NnV TUDScv1Ju+f99BJE+L7HnbjojC/dPEAz7mtCb/SpiynRd2RBC6BZo3OuFfRiTzDy 8ieYiivMYNQLN081/QBAszavVble/DtgJhGM5vyplxyKEub/cHo/AgmrcNAIrS9W zP2sFXQLaWaQ/nu35tUbjvMV+hm9dKU+RhfshThYnRkkNzkMxHQo5HhGwPmNjocg xbpW9UhYj7UdhXL3TRNUw65oCzbnLKCoptvV80FytThMlkTg/Y40Y2TAR3PzQFh/ rDrwsy2uPPdKPRgfW+dLa/YYW6LUU34L -----END CERTIFICATE-----Generated at Sat Sep 6 15:29:20 2025 by rpki-client