$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.mft File: K99csyKL7Ic-zuddZ1g1RlOCNJI.mft (raw, json) Hash identifier: BnNv+dcA6/S3LvzoyXAGj15nqKBCbu9cUqGPpvhxH4E= Subject key identifier: 82:62:E9:C7:C4:A4:46:32:1D:5B:C4:4A:4E:92:78:E5:B9:16:EF:CF Authority key identifier: 2B:DF:5C:B3:22:8B:EC:87:3E:CE:E7:5D:67:58:35:46:53:82:34:92 Certificate issuer: /CN=A91D8100/serialNumber=2BDF5CB3228BEC873ECEE75D6758354653823492 Certificate serial: 07F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K99csyKL7Ic-zuddZ1g1RlOCNJI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.mft Manifest number: 07E7 Signing time: Sun 24 Aug 2025 21:06:29 +0000 Manifest this update: Sun 24 Aug 2025 21:06:29 +0000 Manifest next update: Sun 31 Aug 2025 21:06:29 +0000 Files and hashes: 1: K99csyKL7Ic-zuddZ1g1RlOCNJI.crl (hash: SXc1tsQmMc5kpaTs18OzlmmGC95l6MilxyMUOO9kkG0=) 2: 353932A29B3111EEAFB64748C4F9AE02.roa (hash: 9uk0usjnIlSyDjwPsAY9kObLcGremCDO3bEAYN35jzU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.crl rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K99csyKL7Ic-zuddZ1g1RlOCNJI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 19:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2033 (0x7f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8100, serialNumber=2BDF5CB3228BEC873ECEE75D6758354653823492 Validity Not Before: Aug 24 21:06:29 2025 GMT Not After : Aug 31 21:06:29 2025 GMT Subject: CN=68ab7ed5-2bdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:56:7c:9a:8b:8a:06:c5:e8:c0:13:73:3d:66: c4:34:87:93:b8:86:1b:67:b6:3c:41:22:05:ec:d3: a5:30:87:76:d6:6a:36:f6:ab:71:d7:40:62:4f:a8: 26:46:3c:4a:00:8f:63:0c:46:43:7f:0b:a3:48:c3: 12:31:da:90:c4:42:04:17:c5:f1:9a:54:a2:eb:76: be:ff:16:02:f0:15:91:83:25:ab:0f:5e:8d:8f:ad: 2a:47:ee:50:41:71:57:b7:8b:30:1d:97:ca:45:35: 14:f8:bb:12:1a:df:17:be:8f:01:eb:3b:66:86:b7: 62:a1:b7:e3:a0:cf:12:24:b2:1e:7e:66:eb:64:00: 4e:6f:de:df:d4:37:ec:f6:02:ab:2c:bb:98:24:65: 22:22:e8:df:10:3a:99:1b:b9:2e:5a:90:30:25:b0: 79:bb:6c:0e:58:8e:1c:3f:92:b8:04:e4:90:5a:2d: 0c:62:1c:81:92:bf:4f:fc:2a:a2:83:f4:a1:1e:57: 71:ac:90:61:1f:12:3d:40:c7:f8:29:e9:c4:72:fd: 23:09:74:61:73:03:7e:87:34:6a:db:00:1c:0a:cc: 62:66:c2:b5:ea:82:2c:a9:5c:4e:41:fd:69:9e:43: ed:06:b7:e3:99:aa:e1:e5:a7:98:65:6b:3e:05:6b: d6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:62:E9:C7:C4:A4:46:32:1D:5B:C4:4A:4E:92:78:E5:B9:16:EF:CF X509v3 Authority Key Identifier: keyid:2B:DF:5C:B3:22:8B:EC:87:3E:CE:E7:5D:67:58:35:46:53:82:34:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K99csyKL7Ic-zuddZ1g1RlOCNJI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:0b:05:21:ea:c5:6d:fe:d6:34:e8:ff:a2:6b:90:16:98:f6: 7f:75:41:8a:16:bd:eb:b2:3c:49:f9:c6:13:1e:30:a8:2a:59: 2a:16:ef:00:64:4d:a9:fe:8b:89:db:6b:a3:75:64:f2:f3:3c: c5:90:d5:37:a0:75:36:29:50:63:33:b3:07:54:c6:ae:f0:ae: 5e:79:07:5b:52:87:b3:44:40:9d:db:6d:8d:db:1f:06:be:f9: 8a:2d:0e:96:50:f6:02:cc:69:c7:73:77:2c:7c:b4:c9:65:c6: d5:85:04:15:09:60:da:19:ed:68:5f:f0:d0:af:ff:02:bb:c5: 74:89:54:4b:eb:27:b7:27:71:59:31:5c:f0:79:19:41:3e:67: 01:58:32:6e:b7:9b:ff:ba:4a:cc:32:26:33:bb:37:e0:d7:1d: 3c:75:88:c5:2c:ea:e9:f0:91:2c:ef:ca:95:64:eb:54:c8:cd: 6e:01:1c:e9:71:d4:b3:fc:14:97:49:16:2f:c1:98:55:64:3b: 7f:34:a2:a4:24:6a:3e:07:de:dc:a2:3d:61:48:e8:f7:7e:99: 8d:c1:1d:54:6a:69:68:8e:06:f3:be:a6:94:b3:cc:ae:41:b4: 91:e6:5b:2a:88:92:7d:f6:86:8c:ca:b6:f5:0c:ee:a6:60:bc: 3e:99:a2:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgxMDAxMTAvBgNVBAUTKDJCREY1Q0IzMjI4QkVDODczRUNFRTc1RDY3NTgzNTQ2 NTM4MjM0OTIwHhcNMjUwODI0MjEwNjI5WhcNMjUwODMxMjEwNjI5WjAYMRYwFAYD VQQDEw02OGFiN2VkNS0yYmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzlZ8mouKBsXowBNzPWbENIeTuIYbZ7Y8QSIF7NOlMId21mo29qtx10BiT6gm RjxKAI9jDEZDfwujSMMSMdqQxEIEF8XxmlSi63a+/xYC8BWRgyWrD16Nj60qR+5Q QXFXt4swHZfKRTUU+LsSGt8Xvo8B6ztmhrdiobfjoM8SJLIefmbrZABOb97f1Dfs 9gKrLLuYJGUiIujfEDqZG7kuWpAwJbB5u2wOWI4cP5K4BOSQWi0MYhyBkr9P/Cqi g/ShHldxrJBhHxI9QMf4KenEcv0jCXRhcwN+hzRq2wAcCsxiZsK16oIsqVxOQf1p nkPtBrfjmarh5aeYZWs+BWvWVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIJi6cfE pEYyHVvESk6SeOW5Fu/PMB8GA1UdIwQYMBaAFCvfXLMii+yHPs7nXWdYNUZTgjSS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODEwMC9BQUM3MkUwQ0ZD Q0UxMUVBOEMxOUQ4N0ZDNEY5QUUwMi9LOTljc3lLTDdJYy16dWRkWjFnMVJsT0NO SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s5OWNzeUtMN0ljLXp1ZGRaMWcxUmxPQ05KSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODEwMC9BQUM3MkUwQ0ZDQ0UxMUVBOEMxOUQ4N0ZDNEY5QUUwMi9LOTljc3lLTDdJ Yy16dWRkWjFnMVJsT0NOSkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaCwUh6sVt/tY06P+ia5AWmPZ/dUGKFr3rsjxJ+cYTHjCoKlkqFu8A ZE2p/ouJ22ujdWTy8zzFkNU3oHU2KVBjM7MHVMau8K5eeQdbUoezRECd222N2x8G vvmKLQ6WUPYCzGnHc3csfLTJZcbVhQQVCWDaGe1oX/DQr/8Cu8V0iVRL6ye3J3FZ MVzweRlBPmcBWDJut5v/ukrMMiYzuzfg1x08dYjFLOrp8JEs78qVZOtUyM1uARzp cdSz/BSXSRYvwZhVZDt/NKKkJGo+B97coj1hSOj3fpmNwR1UamlojgbzvqaUs8yu QbSR5lsqiJJ99oaMyrb1DO6mYLw+maKv -----END CERTIFICATE-----Generated at Sun Aug 24 22:18:39 2025 by rpki-client