$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft File: 1383l1I1q95fSYn78_6TjVJ8GUg.mft (raw, json) Hash identifier: oLcEsEmJb3F+7AUEM9PPeBdnw/UML/xc9QGjfQNicLY= Subject key identifier: B0:4D:2E:95:32:15:25:A7:18:7B:26:A7:CC:36:E5:84:AD:20:BB:8E Authority key identifier: D7:7F:37:97:52:35:AB:DE:5F:49:89:FB:F3:FE:93:8D:52:7C:19:48 Certificate issuer: /CN=A91F8336/serialNumber=D77F37975235ABDE5F4989FBF3FE938D527C1948 Certificate serial: 11E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1383l1I1q95fSYn78_6TjVJ8GUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft Manifest number: 11C7 Signing time: Sun 24 Aug 2025 17:09:43 +0000 Manifest this update: Sun 24 Aug 2025 17:09:43 +0000 Manifest next update: Sun 31 Aug 2025 17:09:43 +0000 Files and hashes: 1: 1383l1I1q95fSYn78_6TjVJ8GUg.crl (hash: mfzDVGNhATMzJPgUijiq9s1SQm53ma+Qqo8H4ulIA3w=) 2: 4AE6CFF8B25211EBA977EE09C4F9AE02.roa (hash: ZdFF8YkXhtC1AoahmW58AQqkSN0T37GBdkW2/eDce6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.crl rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1383l1I1q95fSYn78_6TjVJ8GUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 17:09:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4577 (0x11e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8336, serialNumber=D77F37975235ABDE5F4989FBF3FE938D527C1948 Validity Not Before: Aug 24 17:09:43 2025 GMT Not After : Aug 31 17:09:43 2025 GMT Subject: CN=68ab4757-abb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d2:87:16:57:a4:59:5a:a7:a8:0d:ec:6d:27: 73:9f:2c:5c:3b:eb:05:c5:60:df:b2:97:ee:c6:0c: d2:b0:a5:5b:de:bf:7f:25:2c:53:49:c5:ce:8a:87: 8b:11:a1:ab:9b:99:b0:50:43:b2:5e:30:7e:bd:2d: c8:4b:c1:96:86:07:38:92:10:9e:d7:32:70:77:ff: a1:56:eb:59:7c:29:87:b0:64:88:87:9a:ed:85:6e: c9:ba:86:e0:64:40:2e:35:8b:78:72:65:97:4a:a1: 2d:e5:0b:19:0d:0e:34:4a:81:d2:80:5a:fa:c4:85: 71:91:0a:ae:75:0b:f0:1d:e0:a8:2d:41:28:58:21: 99:fe:6e:0d:bf:0a:aa:4e:9c:1a:f4:b4:e1:e7:e6: 28:ad:a5:04:cc:04:c5:2e:9f:03:26:6b:11:76:b0: 46:db:db:a1:74:5b:02:64:57:c8:df:2e:93:22:46: bf:be:d6:77:04:33:41:3c:08:be:78:d6:a9:19:0b: 41:e5:d4:87:3f:29:35:27:39:cf:91:f6:47:27:29: fa:8e:cb:c4:a8:8f:8d:94:ef:3b:ba:91:32:52:15: eb:0e:f7:d0:55:ae:6c:9f:ea:47:fe:c3:e7:08:a2: 63:f8:5b:85:e3:cd:71:41:4a:64:b5:bf:fe:e1:d7: 16:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:4D:2E:95:32:15:25:A7:18:7B:26:A7:CC:36:E5:84:AD:20:BB:8E X509v3 Authority Key Identifier: keyid:D7:7F:37:97:52:35:AB:DE:5F:49:89:FB:F3:FE:93:8D:52:7C:19:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1383l1I1q95fSYn78_6TjVJ8GUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:7e:4e:cf:7c:9b:c7:ee:fd:1a:55:87:28:57:a0:0a:48:a1: 79:1c:5f:08:47:be:76:2e:53:d8:ca:52:d2:d3:41:d9:4b:9a: f5:6d:06:d3:9f:f7:75:12:a5:fe:8d:2c:c0:41:b8:7f:41:59: 06:f6:19:2c:42:97:e9:f2:6c:58:ea:c4:30:b5:3d:f1:ea:5e: ad:a2:63:1a:1f:ad:2b:b5:a7:54:de:68:ca:ed:59:6d:9f:a9: df:f3:16:b9:0e:ce:eb:4c:5a:18:43:73:2b:d7:5f:cc:a6:86: 12:8f:6a:43:f1:93:29:0b:c3:6a:30:91:5e:4e:dc:a3:46:7b: 08:ae:c6:f2:5d:ee:4a:e2:59:2d:f2:97:ef:3d:5b:cf:d9:e7: 0e:43:5f:12:59:30:5e:0c:87:18:b2:56:92:b3:ed:e7:6c:2f: 1d:61:9b:cf:25:0c:e9:5b:80:4a:61:50:73:d8:f5:76:51:93: 55:1e:03:c0:d6:78:80:0f:be:17:9a:b1:a8:e4:c9:95:fe:6b: 67:53:80:e1:f2:30:d2:f5:0d:dc:23:c8:1d:3a:fc:9d:6f:aa: 6d:15:46:34:3a:8a:9e:f2:b5:cd:47:40:2b:30:c8:50:40:88: f3:0d:a4:2e:2d:f6:ac:64:f2:a5:3f:e1:81:58:35:1d:ff:58: 29:ea:3d:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgzMzYxMTAvBgNVBAUTKEQ3N0YzNzk3NTIzNUFCREU1RjQ5ODlGQkYzRkU5MzhE NTI3QzE5NDgwHhcNMjUwODI0MTcwOTQzWhcNMjUwODMxMTcwOTQzWjAYMRYwFAYD VQQDEw02OGFiNDc1Ny1hYmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxtKHFlekWVqnqA3sbSdznyxcO+sFxWDfspfuxgzSsKVb3r9/JSxTScXOioeL EaGrm5mwUEOyXjB+vS3IS8GWhgc4khCe1zJwd/+hVutZfCmHsGSIh5rthW7Juobg ZEAuNYt4cmWXSqEt5QsZDQ40SoHSgFr6xIVxkQqudQvwHeCoLUEoWCGZ/m4Nvwqq Tpwa9LTh5+YoraUEzATFLp8DJmsRdrBG29uhdFsCZFfI3y6TIka/vtZ3BDNBPAi+ eNapGQtB5dSHPyk1JznPkfZHJyn6jsvEqI+NlO87upEyUhXrDvfQVa5sn+pH/sPn CKJj+FuF481xQUpktb/+4dcWmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLBNLpUy FSWnGHsmp8w25YStILuOMB8GA1UdIwQYMBaAFNd/N5dSNaveX0mJ+/P+k41SfBlI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODMzNi8zN0UxNjczRUZE MUQxMUU4QjNFMzZFNTdDNEY5QUUwMi8xMzgzbDFJMXE5NWZTWW43OF82VGpWSjhH VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzEzODNsMUkxcTk1ZlNZbjc4XzZUalZKOEdVZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODMzNi8zN0UxNjczRUZEMUQxMUU4QjNFMzZFNTdDNEY5QUUwMi8xMzgzbDFJMXE5 NWZTWW43OF82VGpWSjhHVWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBufk7PfJvH7v0aVYcoV6AKSKF5HF8IR752LlPYylLS00HZS5r1bQbT n/d1EqX+jSzAQbh/QVkG9hksQpfp8mxY6sQwtT3x6l6tomMaH60rtadU3mjK7Vlt n6nf8xa5Ds7rTFoYQ3Mr11/MpoYSj2pD8ZMpC8NqMJFeTtyjRnsIrsbyXe5K4lkt 8pfvPVvP2ecOQ18SWTBeDIcYslaSs+3nbC8dYZvPJQzpW4BKYVBz2PV2UZNVHgPA 1niAD74XmrGo5MmV/mtnU4Dh8jDS9Q3cI8gdOvydb6ptFUY0Ooqe8rXNR0ArMMhQ QIjzDaQuLfasZPKlP+GBWDUd/1gp6j1i -----END CERTIFICATE-----Generated at Sun Aug 24 21:54:12 2025 by rpki-client