$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAFBA/D4420E90C1F511EBAB77977BC4F9AE02/o93avj1GtEgCYdq75SmgZrYgXYs.mft File: o93avj1GtEgCYdq75SmgZrYgXYs.mft (raw, json) Hash identifier: MPaqCefk+h8jCBK2fVo+HmsOasCC08IwSKWubWG1pQ8= Subject key identifier: 4E:D1:D0:E1:A0:5F:5C:74:BC:B3:B7:22:FB:D2:AB:B8:DD:6B:FE:4D Authority key identifier: A3:DD:DA:BE:3D:46:B4:48:02:61:DA:BB:E5:29:A0:66:B6:20:5D:8B Certificate issuer: /CN=A91FAFBA/serialNumber=A3DDDABE3D46B4480261DABBE529A066B6205D8B Certificate serial: 05F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o93avj1GtEgCYdq75SmgZrYgXYs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAFBA/D4420E90C1F511EBAB77977BC4F9AE02/o93avj1GtEgCYdq75SmgZrYgXYs.mft Manifest number: 05EC Signing time: Wed 20 Aug 2025 23:03:56 +0000 Manifest this update: Wed 20 Aug 2025 23:03:55 +0000 Manifest next update: Wed 27 Aug 2025 23:03:55 +0000 Files and hashes: 1: o93avj1GtEgCYdq75SmgZrYgXYs.crl (hash: ksaJkmAAEc1b1lLrKhdT5SNOO22yk+9Bt921xYv9DrQ=) 2: 416E569CC1F911EB91796381C4F9AE02.roa (hash: KmV3A66uHX2ovCCHWTgN+6Kx1zjXxXnhW11qwJ7+Kek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAFBA/D4420E90C1F511EBAB77977BC4F9AE02/o93avj1GtEgCYdq75SmgZrYgXYs.crl rsync://rpki.apnic.net/member_repository/A91FAFBA/D4420E90C1F511EBAB77977BC4F9AE02/o93avj1GtEgCYdq75SmgZrYgXYs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o93avj1GtEgCYdq75SmgZrYgXYs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 23:03:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1521 (0x5f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAFBA, serialNumber=A3DDDABE3D46B4480261DABBE529A066B6205D8B Validity Not Before: Aug 20 23:03:55 2025 GMT Not After : Aug 27 23:03:55 2025 GMT Subject: CN=68a6545c-fc9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f8:53:88:64:ea:73:5a:1f:91:f5:7a:02:c0: e9:06:27:62:75:f0:91:ff:45:c0:3e:68:01:94:c5: 56:28:70:b6:ee:15:96:6e:d6:1f:47:74:6b:06:39: 04:6b:e0:64:9d:15:50:28:57:b3:bf:93:b5:5f:3c: ab:c6:9c:b2:a2:40:e6:20:82:93:79:75:8c:05:3b: 24:50:7a:05:64:94:ea:b1:7a:64:99:bd:3e:a7:5f: c7:10:54:7c:0d:73:3a:25:cd:e9:27:ed:0c:f4:f4: f2:d4:a6:f1:21:9f:d7:61:99:6e:eb:f6:8a:2e:8c: e8:b5:49:07:c3:39:40:67:c5:22:4e:45:9b:01:88: 9d:a2:b8:e8:67:b7:c7:83:14:40:3e:22:be:5d:28: ff:dc:97:2d:f5:65:9e:f5:2e:38:de:87:84:07:c1: d5:06:f4:0c:64:f5:7d:30:36:12:12:20:d3:98:bd: 51:3d:c1:f6:9c:b3:9d:82:c8:f9:29:46:2f:84:10: 1c:91:5a:2a:be:3f:1b:fb:8d:31:46:94:a1:73:de: 91:3a:39:82:bc:ab:fc:96:2c:a1:ee:75:f7:b5:61: 1e:cc:9f:e2:88:25:0c:3a:26:5d:68:e7:3b:a2:9d: cc:94:12:64:cc:3d:77:ce:85:bd:4b:61:9f:12:46: 4b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:D1:D0:E1:A0:5F:5C:74:BC:B3:B7:22:FB:D2:AB:B8:DD:6B:FE:4D X509v3 Authority Key Identifier: keyid:A3:DD:DA:BE:3D:46:B4:48:02:61:DA:BB:E5:29:A0:66:B6:20:5D:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAFBA/D4420E90C1F511EBAB77977BC4F9AE02/o93avj1GtEgCYdq75SmgZrYgXYs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o93avj1GtEgCYdq75SmgZrYgXYs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAFBA/D4420E90C1F511EBAB77977BC4F9AE02/o93avj1GtEgCYdq75SmgZrYgXYs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:05:19:dc:10:75:2a:e0:78:6b:f3:47:7b:e5:a9:b0:04:b3: 33:24:2c:19:0f:4f:67:e9:33:aa:e5:89:66:6c:c2:2a:fb:e3: a1:c6:da:2e:74:11:b7:13:72:06:de:c2:7f:3d:bb:3a:a5:10: 95:48:25:5e:af:25:88:f2:98:75:68:d0:f7:c8:c7:2b:a4:86: 01:da:86:ce:bf:3e:90:84:53:60:74:77:1f:9f:1e:18:e4:b4: 4f:63:97:2f:0c:6d:f2:10:23:91:9c:0b:5e:b5:5d:a7:18:5d: 4e:31:d9:04:fb:d1:fc:ef:42:2c:16:3d:63:7b:b3:cf:50:09: 93:4d:a8:83:82:f5:e3:cc:8a:c2:7c:1f:c8:45:b2:4f:2a:cc: b1:4d:f1:bc:0d:9e:f4:ca:4e:08:da:f4:0a:64:bd:ce:e0:d0: 86:20:c2:ec:1b:1c:71:a9:4a:0f:36:15:6a:54:c4:b1:b3:f2: bd:dc:2a:93:92:46:b6:ea:d2:ac:30:f2:34:34:26:23:62:08: fe:cc:4c:c0:fc:cc:cb:13:30:e9:86:9b:70:42:99:8e:4e:87: 49:d9:d5:63:8b:be:df:0b:51:e0:4d:92:8e:dd:68:2e:fa:35: 0b:f4:50:92:dd:b1:3a:2f:11:07:8b:38:80:e8:5b:d3:f3:2b: 65:32:a1:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFGQkExMTAvBgNVBAUTKEEzREREQUJFM0Q0NkI0NDgwMjYxREFCQkU1MjlBMDY2 QjYyMDVEOEIwHhcNMjUwODIwMjMwMzU1WhcNMjUwODI3MjMwMzU1WjAYMRYwFAYD VQQDEw02OGE2NTQ1Yy1mYzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqPhTiGTqc1ofkfV6AsDpBididfCR/0XAPmgBlMVWKHC27hWWbtYfR3RrBjkE a+BknRVQKFezv5O1XzyrxpyyokDmIIKTeXWMBTskUHoFZJTqsXpkmb0+p1/HEFR8 DXM6Jc3pJ+0M9PTy1KbxIZ/XYZlu6/aKLozotUkHwzlAZ8UiTkWbAYidorjoZ7fH gxRAPiK+XSj/3Jct9WWe9S443oeEB8HVBvQMZPV9MDYSEiDTmL1RPcH2nLOdgsj5 KUYvhBAckVoqvj8b+40xRpShc96ROjmCvKv8liyh7nX3tWEezJ/iiCUMOiZdaOc7 op3MlBJkzD13zoW9S2GfEkZLcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE7R0OGg X1x0vLO3IvvSq7jda/5NMB8GA1UdIwQYMBaAFKPd2r49RrRIAmHau+UpoGa2IF2L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUZCQS9ENDQyMEU5MEMx RjUxMUVCQUI3Nzk3N0JDNEY5QUUwMi9vOTNhdmoxR3RFZ0NZZHE3NVNtZ1pyWWdY WXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL285M2F2ajFHdEVnQ1lkcTc1U21nWnJZZ1hZcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUZCQS9ENDQyMEU5MEMxRjUxMUVCQUI3Nzk3N0JDNEY5QUUwMi9vOTNhdmoxR3RF Z0NZZHE3NVNtZ1pyWWdYWXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqBRncEHUq4Hhr80d75amwBLMzJCwZD09n6TOq5YlmbMIq++Ohxtou dBG3E3IG3sJ/Pbs6pRCVSCVeryWI8ph1aND3yMcrpIYB2obOvz6QhFNgdHcfnx4Y 5LRPY5cvDG3yECORnAtetV2nGF1OMdkE+9H870IsFj1je7PPUAmTTaiDgvXjzIrC fB/IRbJPKsyxTfG8DZ70yk4I2vQKZL3O4NCGIMLsGxxxqUoPNhVqVMSxs/K93CqT kka26tKsMPI0NCYjYgj+zEzA/MzLEzDphptwQpmOTodJ2dVji77fC1HgTZKO3Wgu +jUL9FCS3bE6LxEHiziA6FvT8ytlMqHx -----END CERTIFICATE-----Generated at Fri Aug 22 16:33:59 2025 by rpki-client