$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft File: -cREz887ajdUceO1SHT8K0myxyY.mft (raw, json) Hash identifier: 8I09yi7sGvbObCbwJ3MMCh48NbPn1FTtLfk/tLlxl5w= Subject key identifier: 65:BD:44:70:1D:AA:7D:E6:55:0E:45:54:47:2C:B4:82:3C:89:65:EA Authority key identifier: F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26 Certificate issuer: /CN=A91E6B9A/serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726 Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft Manifest number: AB Signing time: Sat 19 Jul 2025 06:21:38 +0000 Manifest this update: Sat 19 Jul 2025 06:21:37 +0000 Manifest next update: Sat 26 Jul 2025 06:21:37 +0000 Files and hashes: 1: -cREz887ajdUceO1SHT8K0myxyY.crl (hash: KgjX/13qTt4aBGIJXdx1OOyn5msErabxBN4OoQhIzH4=) 2: 58CA0E62615111EFACF30C14C4F9AE02.roa (hash: n/H7m4JyEx7dcVifKMlTV7vtmvQ/Ig1JHl4d6IW0aVA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:21:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6B9A, serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726 Validity Not Before: Jul 19 06:21:37 2025 GMT Not After : Jul 26 06:21:37 2025 GMT Subject: CN=687b3972-8b67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:58:43:c7:df:6b:d4:ce:18:95:d1:5b:7d:89: 2c:91:0b:10:e9:61:46:1e:74:af:4b:24:6c:be:90: 66:72:bc:6f:9d:c8:88:8a:11:da:00:e6:ce:6e:b8: 0a:b7:43:51:c3:90:62:d7:16:80:60:ea:44:2d:87: d6:43:a4:2b:78:32:28:eb:e4:51:59:ea:6a:fa:dc: 50:e4:6a:4e:5e:3b:21:25:b5:f1:21:83:cd:90:8e: 8f:35:29:a7:ed:8f:1f:da:0c:65:54:94:89:48:8c: de:a6:02:fc:23:0e:6f:77:bb:86:bc:ce:4e:2d:22: 09:af:59:4b:d3:b9:f1:af:43:0f:88:dc:d8:8c:49: e3:82:4c:70:8e:1b:6f:12:72:72:2d:08:a0:a0:03: 8e:26:f2:d2:3b:2a:2d:4a:aa:d7:0c:a2:a8:84:bc: bd:51:14:a8:90:91:e6:bf:5e:12:84:50:7a:1d:db: 6a:85:a6:05:88:ae:83:ea:8a:02:98:6d:b9:88:69: 28:3a:4e:e2:c2:83:43:b4:7b:ba:e8:59:b1:a8:a0: c6:83:2a:c5:96:dc:26:dd:cf:1f:c5:83:e1:2f:bf: 74:70:2b:ce:53:9d:66:90:ad:71:58:2a:c5:d6:09: f5:4e:c8:00:15:3a:1e:9e:d0:e4:f0:4f:5c:e2:80: f1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:BD:44:70:1D:AA:7D:E6:55:0E:45:54:47:2C:B4:82:3C:89:65:EA X509v3 Authority Key Identifier: keyid:F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:66:03:4b:1c:fd:60:b4:5e:fe:0d:ee:bb:d3:9c:b3:d5:83: da:1c:84:cb:5d:46:af:ce:34:fb:2c:d6:57:87:a8:38:f3:fd: 88:2c:52:07:11:c0:30:8a:8a:a0:95:ec:53:a4:1d:74:d4:19: 75:c9:95:73:60:69:02:e9:f1:ec:6f:16:e9:71:60:67:91:a7: 20:97:1a:8d:16:2d:66:69:cd:70:fd:2f:56:1c:71:81:b5:b8: 2c:4b:26:e8:84:04:23:9d:f6:80:26:86:5f:09:5b:fa:96:f9: be:79:15:fb:b8:d2:02:48:c8:16:f9:72:c6:2c:1b:ed:51:29: 4d:3e:f5:1e:94:1e:96:62:66:5c:05:94:1c:01:f2:90:73:a9: 26:21:fb:c2:21:ab:b6:56:6c:64:b3:3d:01:99:18:40:fa:a6: f1:b6:f4:89:74:32:a7:73:e3:09:c1:28:19:d6:5f:3d:2e:9b: 67:30:6c:c5:77:8d:69:67:c1:13:38:a6:9c:4e:7c:b4:61:cd: 96:fa:10:1a:1c:2b:60:6f:72:b2:bb:a4:80:64:85:20:0f:1e: cd:de:b3:f1:c3:77:03:ea:e3:59:74:d3:ee:dd:55:79:94:81: 01:61:05:6d:c6:3a:3d:6b:3d:0b:cc:98:d0:4b:44:b5:88:e7: 0c:20:ca:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZCOUExMTAvBgNVBAUTKEY5QzQ0NENGQ0YzQjZBMzc1NDcxRTNCNTQ4NzRGQzJC NDlCMkM3MjYwHhcNMjUwNzE5MDYyMTM3WhcNMjUwNzI2MDYyMTM3WjAYMRYwFAYD VQQDEw02ODdiMzk3Mi04YjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuFhDx99r1M4YldFbfYkskQsQ6WFGHnSvSyRsvpBmcrxvnciIihHaAObObrgK t0NRw5Bi1xaAYOpELYfWQ6QreDIo6+RRWepq+txQ5GpOXjshJbXxIYPNkI6PNSmn 7Y8f2gxlVJSJSIzepgL8Iw5vd7uGvM5OLSIJr1lL07nxr0MPiNzYjEnjgkxwjhtv EnJyLQigoAOOJvLSOyotSqrXDKKohLy9URSokJHmv14ShFB6HdtqhaYFiK6D6ooC mG25iGkoOk7iwoNDtHu66FmxqKDGgyrFltwm3c8fxYPhL790cCvOU51mkK1xWCrF 1gn1TsgAFToentDk8E9c4oDxrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGW9RHAd qn3mVQ5FVEcstII8iWXqMB8GA1UdIwQYMBaAFPnERM/PO2o3VHHjtUh0/CtJsscm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkI5QS8xMTYwMTI4RTYx NTAxMUVGQUU3QThDNzNDNEY5QUUwMi8tY1JFejg4N2FqZFVjZU8xU0hUOEswbXl4 eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1jUkV6ODg3YWpkVWNlTzFTSFQ4SzBteXh5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkI5QS8xMTYwMTI4RTYxNTAxMUVGQUU3QThDNzNDNEY5QUUwMi8tY1JFejg4N2Fq ZFVjZU8xU0hUOEswbXl4eVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrZgNLHP1gtF7+De6705yz1YPaHITLXUavzjT7LNZXh6g48/2ILFIH EcAwioqglexTpB101Bl1yZVzYGkC6fHsbxbpcWBnkacglxqNFi1mac1w/S9WHHGB tbgsSybohAQjnfaAJoZfCVv6lvm+eRX7uNICSMgW+XLGLBvtUSlNPvUelB6WYmZc BZQcAfKQc6kmIfvCIau2Vmxksz0BmRhA+qbxtvSJdDKnc+MJwSgZ1l89LptnMGzF d41pZ8ETOKacTny0Yc2W+hAaHCtgb3Kyu6SAZIUgDx7N3rPxw3cD6uNZdNPu3VV5 lIEBYQVtxjo9az0LzJjQS0S1iOcMIMq0 -----END CERTIFICATE-----Generated at Mon Jul 21 00:27:16 2025 by rpki-client