$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6499/9F836C52780911EBA16AE156C4F9AE02/C99de_bArcNvIwEoNtjC3CQnkzw.mft File: C99de_bArcNvIwEoNtjC3CQnkzw.mft (raw, json) Hash identifier: Gtd86aRaMfRZHxAnVTQq646Ly8MW6JimTqtmKfFm6NY= Subject key identifier: 92:A0:76:05:17:34:27:33:43:9A:22:11:9D:DC:28:15:D6:DF:52:05 Authority key identifier: 0B:DF:5D:7B:F6:C0:AD:C3:6F:23:01:28:36:D8:C2:DC:24:27:93:3C Certificate issuer: /CN=A91D6499/serialNumber=0BDF5D7BF6C0ADC36F23012836D8C2DC2427933C Certificate serial: 06BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C99de_bArcNvIwEoNtjC3CQnkzw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6499/9F836C52780911EBA16AE156C4F9AE02/C99de_bArcNvIwEoNtjC3CQnkzw.mft Manifest number: 06B0 Signing time: Wed 20 Aug 2025 22:14:50 +0000 Manifest this update: Wed 20 Aug 2025 22:14:49 +0000 Manifest next update: Wed 27 Aug 2025 22:14:49 +0000 Files and hashes: 1: C99de_bArcNvIwEoNtjC3CQnkzw.crl (hash: dr/RIHP7n3PK7M+ydx6bjtXMOCxMWe5tX42o8vKPMDc=) 2: A96F9914F1D811EFA3152963C4F9AE02.roa (hash: GbZWi9q6UX7D+oMHHFTd4plXypkHkfSoO+ds1DieM3U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6499/9F836C52780911EBA16AE156C4F9AE02/C99de_bArcNvIwEoNtjC3CQnkzw.crl rsync://rpki.apnic.net/member_repository/A91D6499/9F836C52780911EBA16AE156C4F9AE02/C99de_bArcNvIwEoNtjC3CQnkzw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C99de_bArcNvIwEoNtjC3CQnkzw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 22:14:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1724 (0x6bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6499, serialNumber=0BDF5D7BF6C0ADC36F23012836D8C2DC2427933C Validity Not Before: Aug 20 22:14:49 2025 GMT Not After : Aug 27 22:14:49 2025 GMT Subject: CN=68a648da-a826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:67:d3:fb:e5:70:29:55:01:8a:fd:e7:20:9d: 80:84:87:38:d5:9c:01:df:8f:35:5e:6e:72:6f:3b: e2:bc:bc:ce:99:05:c9:d5:4a:62:a4:55:da:68:64: b0:5c:c3:05:13:48:92:87:8f:b4:d4:09:11:7a:2b: d6:21:06:8f:0b:05:23:63:69:32:ee:10:4c:c4:1e: 62:b8:da:31:f3:6e:38:22:61:02:fc:16:07:53:4b: ef:bd:6f:0e:0d:90:83:9c:3a:7a:93:9e:15:63:cf: d4:9e:06:71:9b:34:01:b9:8c:1d:da:91:43:6b:46: 1f:90:fb:cc:2e:65:2c:c2:d8:fb:ac:9e:83:e9:7a: 32:ec:7f:c3:9f:91:ec:d8:46:b6:63:1d:4b:fa:6a: 24:32:b2:99:d1:b5:7f:91:85:cd:ae:6b:44:6f:c0: 87:0b:50:93:f7:05:e4:24:70:56:bf:fa:85:27:c6: ab:8e:0f:af:e5:b8:c0:a3:2b:7f:c5:63:de:76:15: 7f:8f:e8:83:48:76:6e:72:a1:1b:98:3e:f3:eb:f6: 78:51:50:f1:d4:7b:fd:56:d8:6a:5d:31:16:84:53: 00:8c:46:9e:67:48:6e:b5:a2:09:f8:58:30:6c:fc: 42:a0:55:b4:0e:f4:ac:b8:5f:62:d0:6c:c5:fa:52: 9f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:A0:76:05:17:34:27:33:43:9A:22:11:9D:DC:28:15:D6:DF:52:05 X509v3 Authority Key Identifier: keyid:0B:DF:5D:7B:F6:C0:AD:C3:6F:23:01:28:36:D8:C2:DC:24:27:93:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6499/9F836C52780911EBA16AE156C4F9AE02/C99de_bArcNvIwEoNtjC3CQnkzw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C99de_bArcNvIwEoNtjC3CQnkzw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6499/9F836C52780911EBA16AE156C4F9AE02/C99de_bArcNvIwEoNtjC3CQnkzw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:17:7a:9e:2a:74:07:cc:ac:40:3e:40:2e:8e:3b:ff:cb:4e: 1a:08:2f:0f:24:34:3a:03:c5:ac:4a:32:dc:9f:8a:e4:03:d0: 3e:db:1e:2a:0c:fe:83:d8:fd:79:7d:8f:17:3b:b2:45:d0:84: 7b:30:2e:05:28:d8:1b:12:25:8d:2f:58:38:4e:ac:ee:53:ff: d9:e1:a9:80:51:98:71:da:6a:71:6e:19:3d:18:c1:0d:55:15: c3:eb:dc:d7:d6:12:9a:33:76:d6:f7:ef:88:f9:8c:a7:03:88: 9b:5d:39:15:ce:f7:e5:c9:ab:f9:f7:ad:d5:c8:0b:60:f9:23: 25:70:87:15:d3:d7:89:a1:b2:5b:c9:a0:40:02:15:8a:aa:23: 5d:41:7f:91:22:55:13:af:32:fe:32:69:1d:32:a9:99:47:04: a1:88:ff:ff:7d:7d:62:2c:cf:05:46:63:9f:c0:16:00:d4:49: 7c:5d:4c:34:91:79:84:1c:1e:2d:30:b7:d8:f7:29:ce:32:f2: 42:a9:b8:c1:19:42:ae:20:42:c0:12:0c:c5:eb:e3:86:bd:a8: f4:81:d4:bc:3d:74:3a:82:df:bc:9f:63:72:dc:c3:53:3d:14: ae:11:30:55:17:3f:93:d7:46:65:68:86:7f:ed:cf:b2:46:bf: 15:4c:d5:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY0OTkxMTAvBgNVBAUTKDBCREY1RDdCRjZDMEFEQzM2RjIzMDEyODM2RDhDMkRD MjQyNzkzM0MwHhcNMjUwODIwMjIxNDQ5WhcNMjUwODI3MjIxNDQ5WjAYMRYwFAYD VQQDEw02OGE2NDhkYS1hODI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0mfT++VwKVUBiv3nIJ2AhIc41ZwB3481Xm5ybzvivLzOmQXJ1UpipFXaaGSw XMMFE0iSh4+01AkReivWIQaPCwUjY2ky7hBMxB5iuNox8244ImEC/BYHU0vvvW8O DZCDnDp6k54VY8/UngZxmzQBuYwd2pFDa0YfkPvMLmUswtj7rJ6D6Xoy7H/Dn5Hs 2Ea2Yx1L+mokMrKZ0bV/kYXNrmtEb8CHC1CT9wXkJHBWv/qFJ8arjg+v5bjAoyt/ xWPedhV/j+iDSHZucqEbmD7z6/Z4UVDx1Hv9VthqXTEWhFMAjEaeZ0hutaIJ+Fgw bPxCoFW0DvSsuF9i0GzF+lKfTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJKgdgUX NCczQ5oiEZ3cKBXW31IFMB8GA1UdIwQYMBaAFAvfXXv2wK3DbyMBKDbYwtwkJ5M8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjQ5OS85RjgzNkM1Mjc4 MDkxMUVCQTE2QUUxNTZDNEY5QUUwMi9DOTlkZV9iQXJjTnZJd0VvTnRqQzNDUW5r encuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M5OWRlX2JBcmNOdkl3RW9OdGpDM0NRbmt6dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjQ5OS85RjgzNkM1Mjc4MDkxMUVCQTE2QUUxNTZDNEY5QUUwMi9DOTlkZV9iQXJj TnZJd0VvTnRqQzNDUW5rencubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjF3qeKnQHzKxAPkAujjv/y04aCC8PJDQ6A8WsSjLcn4rkA9A+2x4q DP6D2P15fY8XO7JF0IR7MC4FKNgbEiWNL1g4TqzuU//Z4amAUZhx2mpxbhk9GMEN VRXD69zX1hKaM3bW9++I+YynA4ibXTkVzvflyav5963VyAtg+SMlcIcV09eJobJb yaBAAhWKqiNdQX+RIlUTrzL+MmkdMqmZRwShiP//fX1iLM8FRmOfwBYA1El8XUw0 kXmEHB4tMLfY9ynOMvJCqbjBGUKuIELAEgzF6+OGvaj0gdS8PXQ6gt+8n2Ny3MNT PRSuETBVFz+T10ZlaIZ/7c+yRr8VTNU6 -----END CERTIFICATE-----Generated at Fri Aug 22 16:34:01 2025 by rpki-client