$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft File: DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft (raw, json) Hash identifier: jpmCuCwqhtNzK0dmFHLyeNa/7kcPdNpkeVPCkIKt/ZU= Subject key identifier: 50:5A:84:3B:02:15:82:40:CA:E0:77:E1:AC:46:C0:2E:E1:0B:F5:FC Authority key identifier: 0E:66:3C:B4:90:0E:F4:D8:22:F9:9A:BD:E2:7F:A4:03:AB:9F:4C:40 Certificate issuer: /CN=A91EDFAF/serialNumber=0E663CB4900EF4D822F99ABDE27FA403AB9F4C40 Certificate serial: AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft Manifest number: A4 Signing time: Thu 21 Aug 2025 06:30:28 +0000 Manifest this update: Thu 21 Aug 2025 06:30:28 +0000 Manifest next update: Thu 28 Aug 2025 06:30:28 +0000 Files and hashes: 1: DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl (hash: nDjVV/l5Mbgboi289R6bZx3jPsB1bDSWgzyg3hx8xOg=) 2: 5E89A9888CBD11EFBA479615C4F9AE02.roa (hash: Ccx7SnGjPCxsvKUBeamLN1Oa9v9jyBTBtL74lgFdLHk=) 3: 5D58A6368CBD11EFBA479615C4F9AE02.roa (hash: k2dEAv933yKqFgM4NCZBdb4Xn5r7WtBWqggONtm/gBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 06:30:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDFAF, serialNumber=0E663CB4900EF4D822F99ABDE27FA403AB9F4C40 Validity Not Before: Aug 21 06:30:28 2025 GMT Not After : Aug 28 06:30:28 2025 GMT Subject: CN=68a6bd04-0bbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:10:1f:a1:3e:aa:79:d2:b3:2d:00:2a:5e:5f: 42:3b:64:47:ef:0b:42:8c:46:b3:69:48:39:c3:88: cd:91:0d:b7:9e:71:18:27:ad:b2:7f:b0:4d:b0:13: 84:b6:34:a1:16:be:10:16:f0:07:47:0e:06:9e:53: ca:ad:25:bd:a1:45:1e:7f:a5:07:f5:c6:de:fe:02: c9:d3:34:b2:10:51:08:20:9d:e2:79:77:4b:0a:0a: db:53:08:a7:0b:03:79:82:d9:c7:66:81:b6:7a:72: ab:9c:b7:95:4f:86:ce:1c:57:d2:b2:00:28:41:8d: bc:8c:0b:48:2d:99:a3:be:0e:69:7a:5a:67:00:a4: 49:06:22:a4:ea:d8:27:2f:7f:2f:1e:21:bc:c3:6b: c7:f2:6a:c2:8f:2e:52:8f:c8:57:88:51:47:b0:b6: 1b:b1:01:66:16:ec:33:9d:8b:73:66:a6:e1:cc:8e: 80:e7:a8:bc:4f:50:c1:e2:f8:df:27:bf:bd:08:de: fe:f3:f9:48:bd:e6:5f:82:96:12:1b:a4:c3:90:7d: c0:36:c5:2e:ad:f2:a5:07:4e:be:63:8a:79:e4:db: 01:b5:40:ac:78:da:74:b8:8a:81:69:b9:8a:54:e1: f6:c8:c4:2e:f6:fe:9c:9b:27:92:78:8b:ea:63:3c: ae:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:5A:84:3B:02:15:82:40:CA:E0:77:E1:AC:46:C0:2E:E1:0B:F5:FC X509v3 Authority Key Identifier: keyid:0E:66:3C:B4:90:0E:F4:D8:22:F9:9A:BD:E2:7F:A4:03:AB:9F:4C:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:5b:f5:d1:df:21:2a:2b:b8:07:64:d4:5f:ae:34:e6:b0:46: ab:2c:21:3b:24:f7:e2:2b:1b:19:4a:2e:47:45:60:46:80:26: 44:ca:90:96:d9:d3:7c:fd:bc:b4:3a:aa:47:73:00:d5:19:1f: d2:56:94:16:b9:1e:62:42:a6:a2:e3:3f:e9:70:62:06:9e:93: 87:99:9d:21:59:48:40:5f:81:f8:43:cc:38:86:94:fa:b2:d9: c0:e0:1a:7a:9e:3d:3b:f8:04:96:da:5d:d6:86:79:b6:57:a8: b0:15:86:f4:0a:de:3b:aa:60:9e:ac:b0:c4:d8:70:0f:e0:53: 83:9d:9f:00:23:09:60:76:e2:f2:b7:51:8c:60:fc:ce:5c:93: a4:50:5e:84:e8:ec:ff:d1:8f:5f:a6:c2:73:ea:89:e6:dd:8e: 9b:25:f9:f6:83:84:26:d0:07:81:b7:02:df:46:6c:ac:84:6b: 52:a3:1e:e9:6e:4b:2c:8a:55:19:9d:c3:4a:43:33:99:97:95: 84:ef:a4:88:22:88:1f:7c:65:7a:62:de:a0:b3:db:14:63:a8: 05:61:24:2b:e1:1f:ea:5e:83:da:43:1d:c0:8f:8b:ff:12:9f: 99:56:4d:b1:2a:4c:e0:46:d8:5b:11:52:07:b2:27:30:51:1e: 1d:eb:49:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURGQUYxMTAvBgNVBAUTKDBFNjYzQ0I0OTAwRUY0RDgyMkY5OUFCREUyN0ZBNDAz QUI5RjRDNDAwHhcNMjUwODIxMDYzMDI4WhcNMjUwODI4MDYzMDI4WjAYMRYwFAYD VQQDEw02OGE2YmQwNC0wYmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuhAfoT6qedKzLQAqXl9CO2RH7wtCjEazaUg5w4jNkQ23nnEYJ62yf7BNsBOE tjShFr4QFvAHRw4GnlPKrSW9oUUef6UH9cbe/gLJ0zSyEFEIIJ3ieXdLCgrbUwin CwN5gtnHZoG2enKrnLeVT4bOHFfSsgAoQY28jAtILZmjvg5pelpnAKRJBiKk6tgn L38vHiG8w2vH8mrCjy5Sj8hXiFFHsLYbsQFmFuwznYtzZqbhzI6A56i8T1DB4vjf J7+9CN7+8/lIveZfgpYSG6TDkH3ANsUurfKlB06+Y4p55NsBtUCseNp0uIqBabmK VOH2yMQu9v6cmyeSeIvqYzyulQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFBahDsC FYJAyuB34axGwC7hC/X8MB8GA1UdIwQYMBaAFA5mPLSQDvTYIvmaveJ/pAOrn0xA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREZBRi85N0JFOTMwRThD QkMxMUVGQkYyMjAwMTJDNEY5QUUwMi9EbVk4dEpBTzlOZ2ktWnE5NG4ta0E2dWZU RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RtWTh0SkFPOU5naS1acTk0bi1rQTZ1ZlRFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF REZBRi85N0JFOTMwRThDQkMxMUVGQkYyMjAwMTJDNEY5QUUwMi9EbVk4dEpBTzlO Z2ktWnE5NG4ta0E2dWZURUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbW/XR3yEqK7gHZNRfrjTmsEarLCE7JPfiKxsZSi5HRWBGgCZEypCW 2dN8/by0OqpHcwDVGR/SVpQWuR5iQqai4z/pcGIGnpOHmZ0hWUhAX4H4Q8w4hpT6 stnA4Bp6nj07+ASW2l3Whnm2V6iwFYb0Ct47qmCerLDE2HAP4FODnZ8AIwlgduLy t1GMYPzOXJOkUF6E6Oz/0Y9fpsJz6onm3Y6bJfn2g4Qm0AeBtwLfRmyshGtSox7p bkssilUZncNKQzOZl5WE76SIIogffGV6Yt6gs9sUY6gFYSQr4R/qXoPaQx3Aj4v/ Ep+ZVk2xKkzgRthbEVIHsicwUR4d60mS -----END CERTIFICATE-----Generated at Fri Aug 22 16:34:03 2025 by rpki-client