$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft File: _0Md-OE71_7FHntTUHtFOan5ZWY.mft (raw, json) Hash identifier: tSBWsFgbtabSojhSLOzk9DuvJMWXyvkCOILEe7wpteg= Subject key identifier: 8D:E6:DA:F8:7E:63:A9:DC:A8:0E:E1:DF:AC:3A:20:6A:8D:68:DB:58 Authority key identifier: FF:43:1D:F8:E1:3B:D7:FE:C5:1E:7B:53:50:7B:45:39:A9:F9:65:66 Certificate issuer: /CN=A91E6C4E/serialNumber=FF431DF8E13BD7FEC51E7B53507B4539A9F96566 Certificate serial: 2131 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft Manifest number: 2125 Signing time: Wed 20 Aug 2025 15:59:36 +0000 Manifest this update: Wed 20 Aug 2025 15:59:36 +0000 Manifest next update: Wed 27 Aug 2025 15:59:36 +0000 Files and hashes: 1: _0Md-OE71_7FHntTUHtFOan5ZWY.crl (hash: JwL9WYce2y2+Jw5hzsDgPZz3k00aAI9eAD3oA1wPl0s=) 2: 5F0B20081CBF11EAA5FCAC86C4F9AE02.roa (hash: BjqwppR+NMle1n/1OCoqadfW2SGArIC17ShPvDamqQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.crl rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 15:59:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8497 (0x2131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6C4E, serialNumber=FF431DF8E13BD7FEC51E7B53507B4539A9F96566 Validity Not Before: Aug 20 15:59:36 2025 GMT Not After : Aug 27 15:59:36 2025 GMT Subject: CN=68a5f0e8-4d7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ad:37:ae:0f:fc:92:01:4e:77:9b:1c:89:8c: af:a0:e8:3a:b3:53:35:df:de:b4:15:97:db:40:0e: aa:13:9d:8c:d5:e3:f0:7c:c4:33:00:4e:d0:f4:fd: 42:99:66:d4:5c:dc:53:5a:b0:44:9c:03:22:d7:ae: ba:5f:b9:d5:c1:1c:af:bc:ed:b9:af:3e:e0:78:f6: fe:ae:9a:78:8d:f1:e0:9a:57:ce:96:6d:0e:da:a9: 69:8d:6b:8c:a5:f7:ca:69:be:c0:61:c7:18:22:76: 74:cf:ec:cf:8a:5c:5f:8e:d0:30:76:81:e2:4f:00: 18:1f:4e:8b:00:47:c5:2c:6c:00:0a:d3:18:5c:1e: 0b:5b:f2:35:05:c3:92:f4:e5:93:c6:f6:73:d0:99: 48:57:c7:69:b7:e6:4c:7f:40:be:9e:6b:2c:54:f1: ea:0c:a3:d1:0b:1e:2d:cf:5a:7e:f4:65:e6:05:45: 68:fb:b0:06:54:a3:44:ff:8c:67:03:34:ac:ed:d9: bd:84:45:cc:b7:a1:0d:9b:53:b3:d3:9b:70:4a:13: 19:2a:21:5b:d1:8b:cb:df:07:fb:71:57:0b:11:d6: a9:0a:35:23:49:ea:27:2f:cc:b6:47:69:40:d5:72: 39:6c:55:a8:2c:2c:48:50:a0:86:2c:bd:cc:a5:e6: 19:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:E6:DA:F8:7E:63:A9:DC:A8:0E:E1:DF:AC:3A:20:6A:8D:68:DB:58 X509v3 Authority Key Identifier: keyid:FF:43:1D:F8:E1:3B:D7:FE:C5:1E:7B:53:50:7B:45:39:A9:F9:65:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:58:73:72:4f:85:75:44:04:09:9b:8b:0a:ce:4b:58:37:8f: 42:6a:0d:e6:6f:7c:ba:18:ee:36:3f:08:ca:a9:65:44:16:98: 75:be:a3:59:c5:45:9f:a9:0b:27:31:48:e3:3f:52:2b:79:84: a0:05:48:ff:14:1d:44:d9:f7:49:de:b0:4c:ab:b2:c2:20:0c: 52:6b:85:4e:14:99:20:d8:5b:f0:de:f2:fa:4f:c8:cd:0f:83: 10:0f:f3:1d:30:da:34:d3:29:7d:6f:8f:30:91:70:bc:63:09: b4:08:ad:c5:41:98:41:79:2a:42:a1:36:7a:c4:c7:68:dd:2b: ea:36:db:be:55:e9:c8:d5:ff:ff:01:9b:a2:34:77:c6:0a:eb: 45:b3:a3:fc:37:b9:11:83:61:31:92:16:5c:10:8a:80:e7:e8: 0e:29:a9:b3:a5:a6:18:30:9a:cb:62:1c:58:ae:e1:a4:81:1c: 4c:99:a6:a4:78:b0:2a:96:6b:09:a5:0b:0f:6c:bf:f8:ad:2f: e1:47:e5:95:a9:5d:45:bc:2e:5f:60:4b:a3:4a:e7:b5:21:62: c2:9d:c0:d9:d1:17:9b:71:86:e4:20:72:ab:3f:2f:d6:48:c5: 3c:db:af:1b:6a:93:c0:4c:eb:cc:d4:4c:9c:a6:d6:59:ac:69: be:f2:dc:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICITEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZDNEUxMTAvBgNVBAUTKEZGNDMxREY4RTEzQkQ3RkVDNTFFN0I1MzUwN0I0NTM5 QTlGOTY1NjYwHhcNMjUwODIwMTU1OTM2WhcNMjUwODI3MTU1OTM2WjAYMRYwFAYD VQQDEw02OGE1ZjBlOC00ZDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0603rg/8kgFOd5sciYyvoOg6s1M13960FZfbQA6qE52M1ePwfMQzAE7Q9P1C mWbUXNxTWrBEnAMi1666X7nVwRyvvO25rz7gePb+rpp4jfHgmlfOlm0O2qlpjWuM pffKab7AYccYInZ0z+zPilxfjtAwdoHiTwAYH06LAEfFLGwACtMYXB4LW/I1BcOS 9OWTxvZz0JlIV8dpt+ZMf0C+nmssVPHqDKPRCx4tz1p+9GXmBUVo+7AGVKNE/4xn AzSs7dm9hEXMt6ENm1Oz05twShMZKiFb0YvL3wf7cVcLEdapCjUjSeonL8y2R2lA 1XI5bFWoLCxIUKCGLL3MpeYZ4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI3m2vh+ Y6ncqA7h36w6IGqNaNtYMB8GA1UdIwQYMBaAFP9DHfjhO9f+xR57U1B7RTmp+WVm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkM0RS8zNDQ4NjUyQ0Yz Q0IxMUU1QUUzNjYwNjJDNEY5QUUwMi9fME1kLU9FNzFfN0ZIbnRUVUh0Rk9hbjVa V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18wTWQtT0U3MV83RkhudFRVSHRGT2FuNVpXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkM0RS8zNDQ4NjUyQ0YzQ0IxMUU1QUUzNjYwNjJDNEY5QUUwMi9fME1kLU9FNzFf N0ZIbnRUVUh0Rk9hbjVaV1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsWHNyT4V1RAQJm4sKzktYN49Cag3mb3y6GO42PwjKqWVEFph1vqNZ xUWfqQsnMUjjP1IreYSgBUj/FB1E2fdJ3rBMq7LCIAxSa4VOFJkg2Fvw3vL6T8jN D4MQD/MdMNo00yl9b48wkXC8Ywm0CK3FQZhBeSpCoTZ6xMdo3SvqNtu+VenI1f// AZuiNHfGCutFs6P8N7kRg2ExkhZcEIqA5+gOKamzpaYYMJrLYhxYruGkgRxMmaak eLAqlmsJpQsPbL/4rS/hR+WVqV1FvC5fYEujSue1IWLCncDZ0RebcYbkIHKrPy/W SMU8268bapPATOvM1EycptZZrGm+8txj -----END CERTIFICATE-----Generated at Fri Aug 22 16:33:59 2025 by rpki-client