$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD75B/64A1DA4801DC11ED9EFE2A56C4F9AE02/64E_WXYcfGsa4oxHgWfiBhq1ys8.mft File: 64E_WXYcfGsa4oxHgWfiBhq1ys8.mft (raw, json) Hash identifier: cmr2wYKr/JdUFc0syJrTQ8+p0f4UNOuG3Fw2UC7JiKg= Subject key identifier: 30:D4:A7:6F:13:B1:73:41:9D:6C:1E:1C:2E:BB:19:C9:CB:F4:4A:69 Authority key identifier: EB:81:3F:59:76:1C:7C:6B:1A:E2:8C:47:81:67:E2:06:1A:B5:CA:CF Certificate issuer: /CN=A91DD75B/serialNumber=EB813F59761C7C6B1AE28C478167E2061AB5CACF Certificate serial: 02C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64E_WXYcfGsa4oxHgWfiBhq1ys8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD75B/64A1DA4801DC11ED9EFE2A56C4F9AE02/64E_WXYcfGsa4oxHgWfiBhq1ys8.mft Manifest number: 02C0 Signing time: Thu 21 Aug 2025 01:35:42 +0000 Manifest this update: Thu 21 Aug 2025 01:35:41 +0000 Manifest next update: Thu 28 Aug 2025 01:35:41 +0000 Files and hashes: 1: 64E_WXYcfGsa4oxHgWfiBhq1ys8.crl (hash: QGdw2AtVbW55BVC5TufXtwbzMNa05uE4wwzX6G6Ah8w=) 2: D6A658CE01DE11ED8236F073C4F9AE02.roa (hash: kmjWEDePak7RaIzaM2s6P+tZd0JsQcs5f1UxF22C33k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD75B/64A1DA4801DC11ED9EFE2A56C4F9AE02/64E_WXYcfGsa4oxHgWfiBhq1ys8.crl rsync://rpki.apnic.net/member_repository/A91DD75B/64A1DA4801DC11ED9EFE2A56C4F9AE02/64E_WXYcfGsa4oxHgWfiBhq1ys8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64E_WXYcfGsa4oxHgWfiBhq1ys8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 01:35:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 708 (0x2c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD75B, serialNumber=EB813F59761C7C6B1AE28C478167E2061AB5CACF Validity Not Before: Aug 21 01:35:41 2025 GMT Not After : Aug 28 01:35:41 2025 GMT Subject: CN=68a677ee-fba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d8:ac:e5:56:19:0c:fc:fc:05:3f:23:82:34: 79:e3:81:fe:90:31:a5:24:59:95:0c:ca:b3:9c:0e: a5:d0:01:5b:61:f1:f1:75:be:3e:45:d2:19:78:55: a5:74:38:11:26:bf:ee:85:bf:2d:16:27:59:c5:21: b5:14:0b:9e:ee:b2:6e:37:00:2b:72:99:18:c3:3f: 71:1f:bd:39:84:61:aa:73:49:a0:f4:15:ca:64:1b: fe:61:8d:2b:b2:a1:3c:cd:62:22:8e:36:c1:74:fc: cb:aa:07:93:2f:af:fd:55:d6:af:10:63:67:2f:c6: 42:97:07:3e:91:4e:58:35:16:7a:7c:09:60:a2:57: 65:53:74:a7:79:7c:61:b5:6b:ea:19:20:dd:19:49: 7c:23:de:94:7c:85:fc:32:1a:6b:8c:cb:0a:01:0d: 66:98:b4:c5:0c:07:ab:12:40:62:73:2e:bc:2c:ec: 67:7f:45:f7:8d:d2:eb:56:4c:77:01:3d:a8:49:0e: aa:e6:c0:f5:f3:de:bb:36:fc:9c:a6:43:2a:b1:58: 27:95:e4:ac:f2:21:b2:bf:09:85:fc:cf:d1:b2:a6: 43:0e:68:b4:c4:a8:9c:f1:a3:67:c9:fb:4d:de:73: 78:b0:e7:d8:6a:ed:5f:29:66:06:d4:e9:83:cd:ce: 97:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D4:A7:6F:13:B1:73:41:9D:6C:1E:1C:2E:BB:19:C9:CB:F4:4A:69 X509v3 Authority Key Identifier: keyid:EB:81:3F:59:76:1C:7C:6B:1A:E2:8C:47:81:67:E2:06:1A:B5:CA:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD75B/64A1DA4801DC11ED9EFE2A56C4F9AE02/64E_WXYcfGsa4oxHgWfiBhq1ys8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64E_WXYcfGsa4oxHgWfiBhq1ys8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD75B/64A1DA4801DC11ED9EFE2A56C4F9AE02/64E_WXYcfGsa4oxHgWfiBhq1ys8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:06:05:b4:b3:c7:d2:3e:5b:93:3e:eb:b8:ef:22:96:bb:4a: 92:9d:ee:22:47:a4:2e:1a:cd:09:0a:71:ed:dd:57:f7:04:98: 58:b1:c1:2e:7b:dd:71:cd:53:9e:21:28:16:c8:46:74:ea:5e: a4:6b:33:f8:9a:28:82:b4:a0:54:68:cf:96:74:af:69:24:1a: db:92:cc:2d:40:62:19:dc:91:54:ab:c4:7c:67:dc:b5:18:9a: 63:fd:eb:40:dc:92:3d:d3:35:5c:00:2a:26:40:6d:b1:1d:9c: af:79:23:e3:77:fd:7f:f7:83:bd:d3:1f:9a:28:65:8b:2d:08: 97:e0:a2:7e:bd:65:d8:00:80:93:24:7d:d7:a3:ae:ff:f9:57: 65:aa:10:96:e8:cd:c3:fd:fb:e0:91:31:6d:c5:cd:6d:66:f9: 60:12:7e:f2:b8:16:cc:44:55:0c:04:94:78:09:79:b3:f3:3d: e1:85:09:65:f2:ef:44:1a:92:4b:76:a8:72:6c:15:48:a5:68: c0:95:6e:c9:ab:38:f0:8e:1a:00:92:0c:73:f1:d6:50:a1:44: 08:66:13:93:ce:5c:60:22:3f:f7:02:a8:46:51:7f:73:12:10: b3:7c:9f:cf:d0:59:49:23:b4:10:04:1c:fa:74:40:b7:04:0b: 88:e4:81:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ3NUIxMTAvBgNVBAUTKEVCODEzRjU5NzYxQzdDNkIxQUUyOEM0NzgxNjdFMjA2 MUFCNUNBQ0YwHhcNMjUwODIxMDEzNTQxWhcNMjUwODI4MDEzNTQxWjAYMRYwFAYD VQQDEw02OGE2NzdlZS1mYmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Nis5VYZDPz8BT8jgjR544H+kDGlJFmVDMqznA6l0AFbYfHxdb4+RdIZeFWl dDgRJr/uhb8tFidZxSG1FAue7rJuNwArcpkYwz9xH705hGGqc0mg9BXKZBv+YY0r sqE8zWIijjbBdPzLqgeTL6/9VdavEGNnL8ZClwc+kU5YNRZ6fAlgoldlU3SneXxh tWvqGSDdGUl8I96UfIX8MhprjMsKAQ1mmLTFDAerEkBicy68LOxnf0X3jdLrVkx3 AT2oSQ6q5sD18967NvycpkMqsVgnleSs8iGyvwmF/M/RsqZDDmi0xKic8aNnyftN 3nN4sOfYau1fKWYG1OmDzc6XXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDDUp28T sXNBnWweHC67GcnL9EppMB8GA1UdIwQYMBaAFOuBP1l2HHxrGuKMR4Fn4gYatcrP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDc1Qi82NEExREE0ODAx REMxMUVEOUVGRTJBNTZDNEY5QUUwMi82NEVfV1hZY2ZHc2E0b3hIZ1dmaUJocTF5 czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY0RV9XWFljZkdzYTRveEhnV2ZpQmhxMXlzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDc1Qi82NEExREE0ODAxREMxMUVEOUVGRTJBNTZDNEY5QUUwMi82NEVfV1hZY2ZH c2E0b3hIZ1dmaUJocTF5czgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBBgW0s8fSPluTPuu47yKWu0qSne4iR6QuGs0JCnHt3Vf3BJhYscEu e91xzVOeISgWyEZ06l6kazP4miiCtKBUaM+WdK9pJBrbkswtQGIZ3JFUq8R8Z9y1 GJpj/etA3JI90zVcAComQG2xHZyveSPjd/1/94O90x+aKGWLLQiX4KJ+vWXYAICT JH3Xo67/+VdlqhCW6M3D/fvgkTFtxc1tZvlgEn7yuBbMRFUMBJR4CXmz8z3hhQll 8u9EGpJLdqhybBVIpWjAlW7JqzjwjhoAkgxz8dZQoUQIZhOTzlxgIj/3AqhGUX9z EhCzfJ/P0FlJI7QQBBz6dEC3BAuI5IGy -----END CERTIFICATE-----Generated at Fri Aug 22 16:16:43 2025 by rpki-client