$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft File: tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft (raw, json) Hash identifier: 1nznUVqPcNGI0dM9mShzoUvFR3K9KeYT0iPBqQ1N63o= Subject key identifier: 11:B8:A4:70:02:F8:AC:41:FC:1D:D7:97:41:C1:F1:96:C2:59:4D:B4 Authority key identifier: B6:20:A9:C4:96:37:66:CC:3C:58:06:06:94:92:2E:9F:67:88:11:DE Certificate issuer: /CN=A91FD38A/serialNumber=B620A9C4963766CC3C58060694922E9F678811DE Certificate serial: 0C76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft Manifest number: 0C6D Signing time: Sun 24 Aug 2025 18:22:41 +0000 Manifest this update: Sun 24 Aug 2025 18:22:41 +0000 Manifest next update: Sun 31 Aug 2025 18:22:41 +0000 Files and hashes: 1: tiCpxJY3Zsw8WAYGlJIun2eIEd4.crl (hash: FkUuZqBZ6jPpmqEJqf4EHgzvY+ipMMTPjSRM7bcDobg=) 2: AA5D86B2381311EA998E103FC4F9AE02.roa (hash: SvZjqtxcRIhPhrqiLm27nklXEkCJpvMYZMwhSGgkVOM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.crl rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 18:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3190 (0xc76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD38A, serialNumber=B620A9C4963766CC3C58060694922E9F678811DE Validity Not Before: Aug 24 18:22:41 2025 GMT Not After : Aug 31 18:22:41 2025 GMT Subject: CN=68ab5871-021a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9f:f1:c6:e6:e2:e8:6e:21:06:73:94:d3:69: 88:98:38:17:81:97:1b:56:6c:52:f2:bd:c9:bf:41: 5b:73:2d:4a:9e:19:d0:72:6d:13:1f:61:31:9d:d8: 82:aa:2b:bb:70:7a:aa:c9:49:c7:19:39:0f:5a:76: 74:2e:d0:39:25:c1:bc:23:f8:c3:f7:90:a5:7b:09: ec:3c:a3:da:43:93:59:77:e5:13:09:c7:70:40:70: fa:7a:f0:c8:7d:48:04:05:2e:61:7d:1d:2f:c3:b0: d3:55:be:ea:7a:61:fd:dd:7c:c2:ac:ca:57:47:b6: 15:9e:fc:1e:79:8a:f8:9a:e9:16:79:5c:11:a3:c7: 05:51:eb:33:bf:77:c5:36:53:b0:28:f5:14:e1:61: a5:16:50:a1:d2:4d:f9:da:e6:46:a9:10:8f:bf:6b: 40:dd:89:00:5e:b3:94:2b:81:7a:2d:ad:7f:38:b3: c3:df:59:71:76:db:dc:4a:43:29:27:03:8e:4e:55: 31:59:c8:e2:4c:0a:bf:ac:14:83:2f:88:d5:a3:97: 1f:50:7b:f0:93:94:96:e2:cf:bc:de:7e:6f:3b:61: 70:ad:40:90:42:a4:06:ef:b0:50:5e:cc:52:53:42: 11:17:0a:33:3b:44:46:5c:9e:45:bb:38:be:aa:ac: a0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:B8:A4:70:02:F8:AC:41:FC:1D:D7:97:41:C1:F1:96:C2:59:4D:B4 X509v3 Authority Key Identifier: keyid:B6:20:A9:C4:96:37:66:CC:3C:58:06:06:94:92:2E:9F:67:88:11:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:39:ef:53:7b:2c:85:56:f6:b2:29:dc:20:10:d4:ab:58:df: 81:61:8d:94:07:4b:29:76:12:4a:59:e7:55:52:52:a1:2e:fa: 4c:94:11:03:08:ff:25:e2:29:a1:42:28:20:ab:24:f4:49:b8: 04:50:3a:2a:42:62:cc:a4:f1:1f:2b:b9:70:f2:0a:14:54:c6: ce:6f:d4:a9:c4:d0:23:94:5a:a2:14:58:0b:b1:d8:e6:fa:8f: fe:fb:1a:36:8e:71:35:d2:fe:40:23:05:f4:2b:15:20:39:d6: 70:58:5c:d3:2e:16:8a:94:34:b2:78:b3:96:00:04:bf:0e:87: 38:9d:e7:5b:9f:d3:9d:84:bc:52:75:92:48:9f:29:27:3d:7a: 56:eb:a1:c3:ad:e9:be:a4:f2:00:29:ec:6b:ed:69:e5:bb:db: 25:bd:c2:2f:7a:dc:0d:be:8b:f9:4b:1a:68:51:d4:18:85:65: 23:e6:d2:c5:d5:d2:dd:71:38:e9:70:b3:0c:aa:dd:eb:2f:37: 7d:09:6d:d9:c5:3d:14:e9:62:c3:57:af:e6:f9:07:7e:4f:ba: 8d:6e:00:20:90:85:a8:a8:72:dd:7a:e8:95:42:31:82:e9:d9: 00:c2:f1:31:ca:92:82:66:dc:79:4e:75:ea:97:d7:67:89:9e: bc:85:12:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQzOEExMTAvBgNVBAUTKEI2MjBBOUM0OTYzNzY2Q0MzQzU4MDYwNjk0OTIyRTlG Njc4ODExREUwHhcNMjUwODI0MTgyMjQxWhcNMjUwODMxMTgyMjQxWjAYMRYwFAYD VQQDEw02OGFiNTg3MS0wMjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs5/xxubi6G4hBnOU02mImDgXgZcbVmxS8r3Jv0Fbcy1KnhnQcm0TH2ExndiC qiu7cHqqyUnHGTkPWnZ0LtA5JcG8I/jD95ClewnsPKPaQ5NZd+UTCcdwQHD6evDI fUgEBS5hfR0vw7DTVb7qemH93XzCrMpXR7YVnvweeYr4mukWeVwRo8cFUeszv3fF NlOwKPUU4WGlFlCh0k352uZGqRCPv2tA3YkAXrOUK4F6La1/OLPD31lxdtvcSkMp JwOOTlUxWcjiTAq/rBSDL4jVo5cfUHvwk5SW4s+83n5vO2FwrUCQQqQG77BQXsxS U0IRFwozO0RGXJ5Fuzi+qqygaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBG4pHAC +KxB/B3Xl0HB8ZbCWU20MB8GA1UdIwQYMBaAFLYgqcSWN2bMPFgGBpSSLp9niBHe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDM4QS85QUVGMTdCRTA1 RjQxMUVBODg2QTNDMjNDNEY5QUUwMi90aUNweEpZM1pzdzhXQVlHbEpJdW4yZUlF ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RpQ3B4SlkzWnN3OFdBWUdsSkl1bjJlSUVkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDM4QS85QUVGMTdCRTA1RjQxMUVBODg2QTNDMjNDNEY5QUUwMi90aUNweEpZM1pz dzhXQVlHbEpJdW4yZUlFZDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDPOe9TeyyFVvayKdwgENSrWN+BYY2UB0spdhJKWedVUlKhLvpMlBED CP8l4imhQiggqyT0SbgEUDoqQmLMpPEfK7lw8goUVMbOb9SpxNAjlFqiFFgLsdjm +o/++xo2jnE10v5AIwX0KxUgOdZwWFzTLhaKlDSyeLOWAAS/Doc4nedbn9OdhLxS dZJInyknPXpW66HDrem+pPIAKexr7Wnlu9slvcIvetwNvov5SxpoUdQYhWUj5tLF 1dLdcTjpcLMMqt3rLzd9CW3ZxT0U6WLDV6/m+Qd+T7qNbgAgkIWoqHLdeuiVQjGC 6dkAwvExypKCZtx5TnXql9dniZ68hRJa -----END CERTIFICATE-----Generated at Sun Aug 24 22:18:32 2025 by rpki-client