$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.mft File: anyGILARkTWk4pZxECAuepIQ_XY.mft (raw, json) Hash identifier: GtIKCZ/Cvjx8H4lB0Hxgv//xyDxSGYbvQNv8NG3bdKQ= Subject key identifier: 5D:E8:E6:AF:A9:D5:E1:BE:99:F8:9A:D1:AE:78:46:2B:FB:49:FF:DE Authority key identifier: 6A:7C:86:20:B0:11:91:35:A4:E2:96:71:10:20:2E:7A:92:10:FD:76 Certificate issuer: /CN=A91D2659/serialNumber=6A7C8620B0119135A4E2967110202E7A9210FD76 Certificate serial: 0CDD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anyGILARkTWk4pZxECAuepIQ_XY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.mft Manifest number: 0CD6 Signing time: Sun 24 Aug 2025 18:03:41 +0000 Manifest this update: Sun 24 Aug 2025 18:03:40 +0000 Manifest next update: Sun 31 Aug 2025 18:03:40 +0000 Files and hashes: 1: anyGILARkTWk4pZxECAuepIQ_XY.crl (hash: cE18pBViqBEL0DxiI9m62z3y4oIDfl+fScbqygaq7MY=) 2: 3ED2E738F0C511E9AD7DCC11C4F9AE02.roa (hash: Wr1nIVXklBpPXHRfvPiRNdEC8EzroDNqpMylbn6Uxs4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.crl rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anyGILARkTWk4pZxECAuepIQ_XY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 18:03:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3293 (0xcdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2659, serialNumber=6A7C8620B0119135A4E2967110202E7A9210FD76 Validity Not Before: Aug 24 18:03:40 2025 GMT Not After : Aug 31 18:03:40 2025 GMT Subject: CN=68ab53fd-c671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7a:32:ce:00:b6:79:c8:9b:01:80:c3:e6:5f: 70:94:06:28:ae:52:2a:b4:0b:a1:a3:bf:0a:1e:67: f7:38:58:9c:20:6b:94:46:0d:03:09:d4:87:be:de: 90:91:93:81:5e:2c:66:8c:a5:fb:82:57:f8:12:44: 84:69:1f:7f:04:09:7a:3d:83:c2:86:01:6f:7c:07: 23:7f:7a:c2:e8:f0:3c:e7:a4:28:cd:1b:39:a7:39: ca:1d:06:d8:0b:50:63:c7:bd:3c:16:bd:20:aa:0f: 58:ed:7f:d6:19:9a:00:bf:35:d3:1c:4d:65:b4:a2: 42:b1:cd:a9:18:31:b2:d0:bd:21:00:76:05:cc:b9: b5:58:ee:18:b3:4c:91:75:3f:b3:67:19:8b:47:8f: 52:ed:ee:fe:da:c2:88:1f:5f:fa:f7:42:8f:5c:cc: 02:9f:54:f2:a6:ad:0d:89:e3:2e:40:a7:46:d9:ce: dd:24:34:14:97:62:1e:7f:d2:53:ab:90:2b:a6:1b: ab:57:e6:cd:e9:11:b5:87:b8:2c:6e:2d:1d:9b:2a: 5a:e4:5f:28:2c:2b:7b:07:c1:de:81:8b:c7:68:6b: 96:e8:8d:fd:9c:76:33:c3:0a:8d:b1:1f:3c:0e:f3: df:43:09:76:d6:17:9e:fc:48:ed:5a:ac:bf:bd:6c: 81:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:E8:E6:AF:A9:D5:E1:BE:99:F8:9A:D1:AE:78:46:2B:FB:49:FF:DE X509v3 Authority Key Identifier: keyid:6A:7C:86:20:B0:11:91:35:A4:E2:96:71:10:20:2E:7A:92:10:FD:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anyGILARkTWk4pZxECAuepIQ_XY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:2b:1f:5d:ca:9f:19:84:93:f5:7e:0e:94:16:3c:97:d7:14: 5e:d0:1c:08:cc:6d:02:fb:d7:43:6c:86:d9:6a:5b:a8:1a:bb: d9:d7:ed:f8:49:53:a9:a8:75:ed:62:c5:18:e0:2d:07:9c:d1: 3e:4a:09:7e:8a:72:eb:d2:6f:93:bf:9a:d5:b9:f9:ea:17:66: 48:3e:40:d8:e9:80:81:24:49:39:b0:74:6c:d0:12:c5:a7:8a: ba:e0:9e:b4:e9:bc:68:1a:c2:4f:66:de:af:03:29:77:e0:ee: 0a:ee:b6:4c:86:ed:bd:43:d1:e9:fb:ac:27:29:73:28:09:3f: 6d:a5:e1:66:25:ca:41:51:ce:b4:da:57:02:5b:ab:84:81:0c: d7:f5:da:54:54:3d:04:c3:05:53:b7:4c:07:9d:90:b4:aa:d4: c9:5c:c2:d2:29:57:89:56:be:0e:bc:83:e8:23:8d:af:20:52: 6f:8b:96:62:7e:e8:2f:1e:0a:5b:be:43:4c:58:44:6a:92:c9: 95:12:65:8b:a2:22:a0:43:33:95:00:b4:1a:57:05:7a:0e:a6: b5:61:cd:7c:c1:91:83:79:a2:cc:54:57:78:ca:0c:13:1d:aa: 92:01:7a:32:78:8e:33:aa:fb:b5:df:ac:cf:5d:49:69:cf:8b: 19:a0:95:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI2NTkxMTAvBgNVBAUTKDZBN0M4NjIwQjAxMTkxMzVBNEUyOTY3MTEwMjAyRTdB OTIxMEZENzYwHhcNMjUwODI0MTgwMzQwWhcNMjUwODMxMTgwMzQwWjAYMRYwFAYD VQQDEw02OGFiNTNmZC1jNjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnnoyzgC2ecibAYDD5l9wlAYorlIqtAuho78KHmf3OFicIGuURg0DCdSHvt6Q kZOBXixmjKX7glf4EkSEaR9/BAl6PYPChgFvfAcjf3rC6PA856QozRs5pznKHQbY C1Bjx708Fr0gqg9Y7X/WGZoAvzXTHE1ltKJCsc2pGDGy0L0hAHYFzLm1WO4Ys0yR dT+zZxmLR49S7e7+2sKIH1/690KPXMwCn1Typq0NieMuQKdG2c7dJDQUl2Ief9JT q5ArphurV+bN6RG1h7gsbi0dmypa5F8oLCt7B8HegYvHaGuW6I39nHYzwwqNsR88 DvPfQwl21hee/EjtWqy/vWyBTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF3o5q+p 1eG+mfia0a54Riv7Sf/eMB8GA1UdIwQYMBaAFGp8hiCwEZE1pOKWcRAgLnqSEP12 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjY1OS9DNDY4RTlDNkYw QzMxMUU5OTI2Q0NEMEVDNEY5QUUwMi9hbnlHSUxBUmtUV2s0cFp4RUNBdWVwSVFf WFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FueUdJTEFSa1RXazRwWnhFQ0F1ZXBJUV9YWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjY1OS9DNDY4RTlDNkYwQzMxMUU5OTI2Q0NEMEVDNEY5QUUwMi9hbnlHSUxBUmtU V2s0cFp4RUNBdWVwSVFfWFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsKx9dyp8ZhJP1fg6UFjyX1xRe0BwIzG0C+9dDbIbZaluoGrvZ1+34 SVOpqHXtYsUY4C0HnNE+Sgl+inLr0m+Tv5rVufnqF2ZIPkDY6YCBJEk5sHRs0BLF p4q64J606bxoGsJPZt6vAyl34O4K7rZMhu29Q9Hp+6wnKXMoCT9tpeFmJcpBUc60 2lcCW6uEgQzX9dpUVD0EwwVTt0wHnZC0qtTJXMLSKVeJVr4OvIPoI42vIFJvi5Zi fugvHgpbvkNMWERqksmVEmWLoiKgQzOVALQaVwV6Dqa1Yc18wZGDeaLMVFd4ygwT HaqSAXoyeI4zqvu136zPXUlpz4sZoJUz -----END CERTIFICATE-----Generated at Sun Aug 24 22:09:17 2025 by rpki-client