$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft File: _g28w89QoeDrA9MSluOfuogMGQU.mft (raw, json) Hash identifier: v8/0q/jA85e5DUiQZjb7dG1Z/cPC/59aNchojKXlWZo= Subject key identifier: 40:62:4E:2A:27:FC:47:F3:FB:72:AB:8B:6D:29:5C:30:36:C4:AF:C4 Authority key identifier: FE:0D:BC:C3:CF:50:A1:E0:EB:03:D3:12:96:E3:9F:BA:88:0C:19:05 Certificate issuer: /CN=A91F7FEA/serialNumber=FE0DBCC3CF50A1E0EB03D31296E39FBA880C1905 Certificate serial: 0AB7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_g28w89QoeDrA9MSluOfuogMGQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft Manifest number: 0AA9 Signing time: Wed 20 Aug 2025 19:37:51 +0000 Manifest this update: Wed 20 Aug 2025 19:37:51 +0000 Manifest next update: Wed 27 Aug 2025 19:37:51 +0000 Files and hashes: 1: _g28w89QoeDrA9MSluOfuogMGQU.crl (hash: Ueo0u9P7OX1ZhB8DwwZskqWjNAJKx68y7E3e2i/HQwU=) 2: AF5AC6B69E3F11EEA6B6CB0DC4F9AE02.roa (hash: aO7ZzsxjyqFcAzfGikfamjQffULd11X020Rl4PUmMgc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.crl rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_g28w89QoeDrA9MSluOfuogMGQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 19:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2743 (0xab7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7FEA, serialNumber=FE0DBCC3CF50A1E0EB03D31296E39FBA880C1905 Validity Not Before: Aug 20 19:37:51 2025 GMT Not After : Aug 27 19:37:51 2025 GMT Subject: CN=68a6240f-db16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5d:6f:be:22:a6:40:23:ce:20:d3:0c:48:f7: ec:f0:ff:cb:5e:d4:9c:d8:da:15:a1:23:47:7d:40: 15:cb:04:c1:ad:b2:4b:14:67:30:5c:57:5f:4d:23: 48:f6:93:e2:c6:7b:1d:0c:f5:22:45:94:b6:f3:c4: 95:b0:fd:44:32:57:6e:28:2e:d3:09:82:32:e8:f5: de:d6:01:81:53:50:b6:8f:3d:b7:0a:b5:dc:90:4b: ee:81:29:4e:03:56:82:8c:ab:46:75:8d:57:90:37: ba:f2:9b:6c:d5:b5:6d:46:53:df:14:c5:61:c9:01: a0:3e:60:d1:04:ca:ed:bd:d8:95:f8:24:95:8f:70: 3d:c0:53:cf:7f:88:54:d8:cb:f3:1d:3f:b2:3e:a2: 26:d1:d2:7b:86:08:af:75:79:a5:8a:3e:a9:76:6d: af:0f:c2:f6:9b:77:67:70:ef:42:5c:37:ce:9b:40: 06:83:2c:28:5a:c0:ea:a6:89:fe:fb:31:76:8c:b6: 9e:6c:0f:5a:7e:3d:97:27:93:53:7b:9f:cb:44:68: 85:a1:5f:61:05:e8:e0:82:ba:14:fc:74:0b:8f:26: 03:ae:e9:23:b4:ca:71:d6:78:ea:e9:2f:1e:87:f0: 51:6b:21:4b:89:d4:a7:0f:48:fd:07:3a:c1:38:17: b4:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:62:4E:2A:27:FC:47:F3:FB:72:AB:8B:6D:29:5C:30:36:C4:AF:C4 X509v3 Authority Key Identifier: keyid:FE:0D:BC:C3:CF:50:A1:E0:EB:03:D3:12:96:E3:9F:BA:88:0C:19:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_g28w89QoeDrA9MSluOfuogMGQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:05:75:36:04:91:16:93:a9:f5:21:73:dd:f0:b3:ac:b0:31: 17:08:5d:b6:b4:5a:5c:43:f8:3d:81:a5:f1:8f:07:f1:ab:4b: 2b:10:93:ce:c1:59:0a:5c:56:c4:dc:41:30:00:f0:9c:c1:1c: b9:58:d0:7a:0a:be:1d:74:14:b9:c8:5b:ec:93:d4:8e:01:83: ff:9f:32:a8:cf:44:5e:56:1b:3e:7d:c8:6e:99:8d:29:ac:88: 96:66:cc:68:dd:9f:06:79:90:ab:df:ed:fd:ad:9b:cc:fb:f3: 87:dd:d0:cd:aa:d3:e4:06:10:16:ec:30:de:26:cb:5e:bb:8c: b4:54:e9:d7:42:68:48:19:21:1e:43:40:dd:83:00:13:41:eb: 97:9f:de:3e:5c:4b:98:95:1e:9a:93:9f:7c:a3:de:bb:86:ea: e2:f9:a2:37:26:57:dd:08:84:96:1f:fa:dd:b0:b9:49:42:b7: a5:e3:e2:e8:c8:a6:5f:cd:71:6d:d5:ec:57:f8:bc:17:3d:bd: 06:ea:7b:c3:22:aa:33:90:79:78:8b:51:85:79:da:d4:16:9a: 1b:36:85:76:73:cd:40:ff:df:05:34:08:ee:0a:59:95:c7:ef: 44:51:a3:a6:a1:06:d6:8b:6c:7f:5f:42:53:ba:65:4e:95:07: 1b:e2:c4:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdGRUExMTAvBgNVBAUTKEZFMERCQ0MzQ0Y1MEExRTBFQjAzRDMxMjk2RTM5RkJB ODgwQzE5MDUwHhcNMjUwODIwMTkzNzUxWhcNMjUwODI3MTkzNzUxWjAYMRYwFAYD VQQDEw02OGE2MjQwZi1kYjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwV1vviKmQCPOINMMSPfs8P/LXtSc2NoVoSNHfUAVywTBrbJLFGcwXFdfTSNI 9pPixnsdDPUiRZS288SVsP1EMlduKC7TCYIy6PXe1gGBU1C2jz23CrXckEvugSlO A1aCjKtGdY1XkDe68pts1bVtRlPfFMVhyQGgPmDRBMrtvdiV+CSVj3A9wFPPf4hU 2MvzHT+yPqIm0dJ7hgivdXmlij6pdm2vD8L2m3dncO9CXDfOm0AGgywoWsDqpon+ +zF2jLaebA9afj2XJ5NTe5/LRGiFoV9hBejggroU/HQLjyYDrukjtMpx1njq6S8e h/BRayFLidSnD0j9BzrBOBe0eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEBiTion /Efz+3Kri20pXDA2xK/EMB8GA1UdIwQYMBaAFP4NvMPPUKHg6wPTEpbjn7qIDBkF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0ZFQS8xRUUzQUVFQzYw NDgxMUVBOEM2OTBCMzhDNEY5QUUwMi9fZzI4dzg5UW9lRHJBOU1TbHVPZnVvZ01H UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19nMjh3ODlRb2VEckE5TVNsdU9mdW9nTUdRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0ZFQS8xRUUzQUVFQzYwNDgxMUVBOEM2OTBCMzhDNEY5QUUwMi9fZzI4dzg5UW9l RHJBOU1TbHVPZnVvZ01HUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjBXU2BJEWk6n1IXPd8LOssDEXCF22tFpcQ/g9gaXxjwfxq0srEJPO wVkKXFbE3EEwAPCcwRy5WNB6Cr4ddBS5yFvsk9SOAYP/nzKoz0ReVhs+fchumY0p rIiWZsxo3Z8GeZCr3+39rZvM+/OH3dDNqtPkBhAW7DDeJsteu4y0VOnXQmhIGSEe Q0DdgwATQeuXn94+XEuYlR6ak598o967huri+aI3JlfdCISWH/rdsLlJQrel4+Lo yKZfzXFt1exX+LwXPb0G6nvDIqozkHl4i1GFedrUFpobNoV2c81A/98FNAjuClmV x+9EUaOmoQbWi2x/X0JTumVOlQcb4sQJ -----END CERTIFICATE-----Generated at Fri Aug 22 16:31:37 2025 by rpki-client