$ rpki-client -vvf rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft File: sumTicSsA0jYrsh1t0aJ0E5wyDo.mft (raw, json) Hash identifier: RB8o8IUymK05Lnw4pUGbhR0fzMYZVNshGcEjzyXpLVY= Subject key identifier: B9:C5:E1:0C:AE:27:13:07:93:B3:97:DF:25:9A:A5:F1:2C:C3:87:F1 Authority key identifier: B2:E9:93:89:C4:AC:03:48:D8:AE:C8:75:B7:46:89:D0:4E:70:C8:3A Certificate issuer: /CN=A91E77A1/serialNumber=B2E99389C4AC0348D8AEC875B74689D04E70C83A Certificate serial: 07AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sumTicSsA0jYrsh1t0aJ0E5wyDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft Manifest number: 07A4 Signing time: Wed 20 Aug 2025 21:26:15 +0000 Manifest this update: Wed 20 Aug 2025 21:26:14 +0000 Manifest next update: Wed 27 Aug 2025 21:26:14 +0000 Files and hashes: 1: sumTicSsA0jYrsh1t0aJ0E5wyDo.crl (hash: RdCZiXxMv6gyWdLERzcXPK7K1Mf3+B1AA84J356BkpI=) 2: 4F7AD592169311EB89C20F1DC4F9AE02.roa (hash: 1PaL5t22VHHOGdbUhH+qGnaUlXQ1MvnbAc80idZHNIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.crl rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sumTicSsA0jYrsh1t0aJ0E5wyDo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 21:26:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1964 (0x7ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E77A1, serialNumber=B2E99389C4AC0348D8AEC875B74689D04E70C83A Validity Not Before: Aug 20 21:26:14 2025 GMT Not After : Aug 27 21:26:14 2025 GMT Subject: CN=68a63d76-75c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4d:02:26:7d:6f:ee:86:26:ae:d6:13:94:31: 80:e1:cf:21:43:bd:ec:1c:8c:60:23:bb:cc:ed:db: b7:c5:64:d7:45:38:ee:65:0b:5d:10:bb:68:8a:f9: 0c:cf:21:de:b5:b8:19:b7:a5:5e:e9:1c:d2:77:e4: 51:12:bc:da:ee:83:7f:60:07:e2:27:07:5c:9f:8e: d2:ed:52:d7:1d:1c:ba:71:0d:60:2d:56:47:44:69: b4:52:c2:ed:ae:90:3d:1b:11:25:a3:07:e8:72:9e: 67:aa:45:4a:f4:ea:19:93:da:39:9a:3e:2a:8b:a2: c0:27:bc:6f:1a:b0:89:06:e4:fc:0b:ea:85:c1:27: 3e:83:73:c6:ce:23:2b:7d:5c:fc:d2:c5:c4:6a:e7: 81:b5:39:ec:f2:09:c0:cd:ed:35:07:73:28:9e:98: a0:f7:05:c2:17:b8:35:7c:c4:cc:d0:ec:52:15:e8: 0e:e6:21:d4:97:42:b4:fe:42:a9:65:b5:7b:1a:79: 25:db:f4:c0:cd:ba:30:2e:51:d9:96:aa:5e:10:7e: 48:d4:e0:60:de:82:e7:e0:10:8b:c2:37:06:df:b1: 84:fc:b7:64:96:83:fa:4a:e9:5f:51:b0:3a:5d:29: 27:91:e1:d6:d5:2f:ba:50:b4:0b:a5:b8:cd:28:a2: ca:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:C5:E1:0C:AE:27:13:07:93:B3:97:DF:25:9A:A5:F1:2C:C3:87:F1 X509v3 Authority Key Identifier: keyid:B2:E9:93:89:C4:AC:03:48:D8:AE:C8:75:B7:46:89:D0:4E:70:C8:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sumTicSsA0jYrsh1t0aJ0E5wyDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:39:8e:10:d7:7c:bc:3b:56:e7:03:38:f4:64:78:d1:ee:6c: 8c:3a:39:84:68:77:b7:8d:87:23:fc:70:62:1b:36:1f:7f:fb: 4b:8a:bd:d4:ba:96:d6:80:a0:07:cc:f7:78:43:41:dc:f8:7d: 0d:e2:ea:98:d0:ca:06:02:e2:a3:92:da:e7:04:83:c4:a1:e8: b2:43:8c:70:ac:25:02:94:54:69:43:9e:35:df:e7:1f:91:1d: c4:a5:f8:97:9a:9f:61:c0:7a:34:89:e0:86:49:16:7d:33:b5: a1:6f:e4:af:07:b7:9c:2f:f3:0c:b8:5f:6f:42:d7:8e:b7:19: 44:e5:f7:db:2f:91:cf:e5:9c:03:3c:21:d5:d8:a2:00:db:3b: 3c:fc:9c:4d:50:24:3b:d3:f2:f0:09:6f:d5:78:db:50:28:31: df:f4:f6:44:47:c1:2a:1c:15:be:32:70:a8:d9:96:0d:e6:e2: 3f:ac:34:bc:d1:0f:6c:4a:46:44:42:01:36:28:d4:81:dd:ed: ff:d2:23:f9:e3:8a:fb:7f:64:6e:d7:96:76:88:12:0a:27:e6: 6e:37:19:3f:34:5b:f0:a7:8d:74:d2:e0:1f:e8:56:bc:64:88: 4e:5f:a1:c1:ad:70:1a:3f:6e:b7:3a:fc:d9:52:55:61:d5:78: a0:ad:50:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc3QTExMTAvBgNVBAUTKEIyRTk5Mzg5QzRBQzAzNDhEOEFFQzg3NUI3NDY4OUQw NEU3MEM4M0EwHhcNMjUwODIwMjEyNjE0WhcNMjUwODI3MjEyNjE0WjAYMRYwFAYD VQQDEw02OGE2M2Q3Ni03NWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt00CJn1v7oYmrtYTlDGA4c8hQ73sHIxgI7vM7du3xWTXRTjuZQtdELtoivkM zyHetbgZt6Ve6RzSd+RRErza7oN/YAfiJwdcn47S7VLXHRy6cQ1gLVZHRGm0UsLt rpA9GxElowfocp5nqkVK9OoZk9o5mj4qi6LAJ7xvGrCJBuT8C+qFwSc+g3PGziMr fVz80sXEaueBtTns8gnAze01B3Monpig9wXCF7g1fMTM0OxSFegO5iHUl0K0/kKp ZbV7Gnkl2/TAzbowLlHZlqpeEH5I1OBg3oLn4BCLwjcG37GE/LdkloP6SulfUbA6 XSknkeHW1S+6ULQLpbjNKKLK/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLnF4Qyu JxMHk7OX3yWapfEsw4fxMB8GA1UdIwQYMBaAFLLpk4nErANI2K7IdbdGidBOcMg6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzdBMS9CNUMyN0E4QzE2 OTExMUVCQUFCMzA0MUJDNEY5QUUwMi9zdW1UaWNTc0Ewallyc2gxdDBhSjBFNXd5 RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N1bVRpY1NzQTBqWXJzaDF0MGFKMEU1d3lEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzdBMS9CNUMyN0E4QzE2OTExMUVCQUFCMzA0MUJDNEY5QUUwMi9zdW1UaWNTc0Ew allyc2gxdDBhSjBFNXd5RG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXOY4Q13y8O1bnAzj0ZHjR7myMOjmEaHe3jYcj/HBiGzYff/tLir3U upbWgKAHzPd4Q0Hc+H0N4uqY0MoGAuKjktrnBIPEoeiyQ4xwrCUClFRpQ5413+cf kR3EpfiXmp9hwHo0ieCGSRZ9M7Whb+SvB7ecL/MMuF9vQteOtxlE5ffbL5HP5ZwD PCHV2KIA2zs8/JxNUCQ70/LwCW/VeNtQKDHf9PZER8EqHBW+MnCo2ZYN5uI/rDS8 0Q9sSkZEQgE2KNSB3e3/0iP544r7f2Ru15Z2iBIKJ+ZuNxk/NFvwp4100uAf6Fa8 ZIhOX6HBrXAaP263OvzZUlVh1XigrVDV -----END CERTIFICATE-----Generated at Fri Aug 22 16:27:42 2025 by rpki-client