$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.mft File: 62gLfeTEobRDq9eZuvUkndSw6pA.mft (raw, json) Hash identifier: 13joqFU9jo0WkyCwzLUw4lW9uiMTahQq0vNqEnxfxLE= Subject key identifier: 2F:BE:ED:DE:90:61:73:CE:E3:A1:6B:8E:ED:39:B7:04:3A:35:76:FC Authority key identifier: EB:68:0B:7D:E4:C4:A1:B4:43:AB:D7:99:BA:F5:24:9D:D4:B0:EA:90 Certificate issuer: /CN=A91DC866/serialNumber=EB680B7DE4C4A1B443ABD799BAF5249DD4B0EA90 Certificate serial: 34D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62gLfeTEobRDq9eZuvUkndSw6pA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.mft Manifest number: 34C5 Signing time: Sun 24 Aug 2025 14:49:50 +0000 Manifest this update: Sun 24 Aug 2025 14:49:50 +0000 Manifest next update: Sun 31 Aug 2025 14:49:50 +0000 Files and hashes: 1: 62gLfeTEobRDq9eZuvUkndSw6pA.crl (hash: 4HNPnpUgPQ3VxTfyMN6/s4T5HUI3YlsuN1ehgdwvZTY=) 2: D55D2990561F11E7B9B5FB2CC4F9AE02.roa (hash: 6l+okkOVayeN3r7Oa8ISbsZRxypv5sX/p1C5qPHUzI4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.crl rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62gLfeTEobRDq9eZuvUkndSw6pA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 14:49:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13527 (0x34d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC866, serialNumber=EB680B7DE4C4A1B443ABD799BAF5249DD4B0EA90 Validity Not Before: Aug 24 14:49:50 2025 GMT Not After : Aug 31 14:49:50 2025 GMT Subject: CN=68ab268e-17f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:3f:09:0b:ba:f4:86:94:b4:3f:11:14:e1:ea: 46:3d:15:e8:a0:d0:91:d5:f3:04:a3:a1:b0:d1:75: e0:2c:5c:09:81:e6:0a:e4:68:ad:e3:c6:2d:ed:ba: ee:13:5d:be:5a:bb:43:b5:2a:d5:18:bf:8c:94:56: 62:36:f7:48:5e:65:e9:b3:54:b7:7a:dd:e5:bb:1e: ef:ed:12:cc:e8:18:9e:30:70:af:54:ea:ab:0d:7e: 63:3e:78:fc:61:95:17:a1:b1:6c:d0:7c:05:83:86: 34:46:dc:11:1c:f6:ba:8f:90:27:03:1c:8b:c9:1d: 09:14:82:d1:d6:3f:9c:bd:db:4e:21:c0:da:4b:50: 03:4f:a8:32:79:da:36:09:d2:42:4b:13:da:1e:91: 9b:ac:64:8b:c4:cc:c8:65:35:cf:2c:b5:a0:c1:d3: 8c:1c:28:2d:a2:0f:98:b7:7d:b1:eb:a1:8a:10:9d: 92:a4:2b:ae:83:8c:7e:f8:c9:43:36:df:17:03:29: 7f:a6:bb:e1:50:b2:62:44:55:52:a8:29:e1:9a:54: b3:99:c0:cf:04:b5:7c:b9:eb:02:23:b2:c7:c3:84: dd:ad:b8:6f:a3:b2:da:e3:2f:b6:ef:28:94:57:b9: e0:fa:61:e6:4f:3c:01:4c:c3:86:e8:6d:8b:0f:3f: 1c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:BE:ED:DE:90:61:73:CE:E3:A1:6B:8E:ED:39:B7:04:3A:35:76:FC X509v3 Authority Key Identifier: keyid:EB:68:0B:7D:E4:C4:A1:B4:43:AB:D7:99:BA:F5:24:9D:D4:B0:EA:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62gLfeTEobRDq9eZuvUkndSw6pA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:b9:55:ce:bd:96:40:fd:1b:8d:28:c6:13:f3:3c:36:1e:63: 61:83:3a:ad:a0:e1:50:1e:51:f2:92:72:9d:06:1b:ce:8e:62: 58:1c:ae:d3:d1:6a:db:53:3f:b1:86:af:d4:ac:dd:51:25:b0: ea:18:c0:3a:79:a7:ac:6f:8f:9b:3d:ea:d7:e7:92:75:bd:2e: 51:9e:c6:d9:3b:24:ae:74:ac:85:32:44:2f:6b:d7:d1:8f:87: 50:c3:66:4a:c1:b9:bd:ae:46:f7:93:d1:65:ca:9a:cd:e0:b1: 17:50:a2:c6:08:4d:44:ca:7b:19:23:97:43:c5:5c:0c:76:6a: 8d:fd:03:c7:2a:1d:d6:0b:6d:90:9b:a2:4b:98:9a:40:99:99: 4c:0f:95:3c:db:e8:3d:62:fa:51:a6:6a:6e:a3:57:29:a6:d1: fe:b3:25:14:17:40:66:a9:0f:38:80:4c:7e:41:92:25:f5:66: 4a:e8:ff:60:b2:12:c4:30:37:b5:87:64:9c:78:93:0d:52:a2: bf:8a:b3:47:07:4d:b3:f1:e8:42:ae:de:3d:84:67:90:b3:79: 09:60:29:db:67:13:78:89:99:5e:f9:21:83:05:8d:f1:6b:c8: cd:4e:bf:3d:54:ea:06:76:2a:62:fd:55:fd:99:b4:c4:0c:d1: 70:50:4c:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM4NjYxMTAvBgNVBAUTKEVCNjgwQjdERTRDNEExQjQ0M0FCRDc5OUJBRjUyNDlE RDRCMEVBOTAwHhcNMjUwODI0MTQ0OTUwWhcNMjUwODMxMTQ0OTUwWjAYMRYwFAYD VQQDEw02OGFiMjY4ZS0xN2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmj8JC7r0hpS0PxEU4epGPRXooNCR1fMEo6Gw0XXgLFwJgeYK5Git48Yt7bru E12+WrtDtSrVGL+MlFZiNvdIXmXps1S3et3lux7v7RLM6BieMHCvVOqrDX5jPnj8 YZUXobFs0HwFg4Y0RtwRHPa6j5AnAxyLyR0JFILR1j+cvdtOIcDaS1ADT6gyedo2 CdJCSxPaHpGbrGSLxMzIZTXPLLWgwdOMHCgtog+Yt32x66GKEJ2SpCuug4x++MlD Nt8XAyl/prvhULJiRFVSqCnhmlSzmcDPBLV8uesCI7LHw4Tdrbhvo7La4y+27yiU V7ng+mHmTzwBTMOG6G2LDz8cjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC++7d6Q YXPO46Frju05twQ6NXb8MB8GA1UdIwQYMBaAFOtoC33kxKG0Q6vXmbr1JJ3UsOqQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzg2Ni82QTBERjlCQTFE OTYxMUUyQjdCNTA1N0YwOEIwMkNEMi82MmdMZmVURW9iUkRxOWVadXZVa25kU3c2 cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzYyZ0xmZVRFb2JSRHE5ZVp1dlVrbmRTdzZwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Qzg2Ni82QTBERjlCQTFEOTYxMUUyQjdCNTA1N0YwOEIwMkNEMi82MmdMZmVURW9i UkRxOWVadXZVa25kU3c2cEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOuVXOvZZA/RuNKMYT8zw2HmNhgzqtoOFQHlHyknKdBhvOjmJYHK7T 0WrbUz+xhq/UrN1RJbDqGMA6eaesb4+bPerX55J1vS5RnsbZOySudKyFMkQva9fR j4dQw2ZKwbm9rkb3k9FlyprN4LEXUKLGCE1EynsZI5dDxVwMdmqN/QPHKh3WC22Q m6JLmJpAmZlMD5U82+g9YvpRpmpuo1cpptH+syUUF0BmqQ84gEx+QZIl9WZK6P9g shLEMDe1h2SceJMNUqK/irNHB02z8ehCrt49hGeQs3kJYCnbZxN4iZle+SGDBY3x a8jNTr89VOoGdipi/VX9mbTEDNFwUEyA -----END CERTIFICATE-----Generated at Sun Aug 24 21:58:23 2025 by rpki-client