$ rpki-client -vvf rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.mft File: 66pMRPJIk3FKHVs2Ci17LYYFsWM.mft (raw, json) Hash identifier: B7dV7nwuOJlKgB2yaEVUDNbfbxD0yVCymBssp6Phd8I= Subject key identifier: 32:7E:A7:01:3C:CB:3A:5B:E4:D2:E1:0A:06:BB:AF:29:C1:D5:37:71 Authority key identifier: EB:AA:4C:44:F2:48:93:71:4A:1D:5B:36:0A:2D:7B:2D:86:05:B1:63 Certificate issuer: /CN=A91504D6/serialNumber=EBAA4C44F24893714A1D5B360A2D7B2D8605B163 Certificate serial: D7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/66pMRPJIk3FKHVs2Ci17LYYFsWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.mft Manifest number: D5 Signing time: Sat 09 Aug 2025 05:59:42 +0000 Manifest this update: Sat 09 Aug 2025 05:59:41 +0000 Manifest next update: Sat 16 Aug 2025 05:59:41 +0000 Files and hashes: 1: 66pMRPJIk3FKHVs2Ci17LYYFsWM.crl (hash: kvYMR2x5sXh3kOZwlY0znwM66+rfh/LWaGU9chKE5uA=) 2: BE82B5AE31C911EFA31A8D3AC4F9AE02.roa (hash: 6SVIugHlnaJdlkKtpec/q8AF54HgJPVuchm8bN57MAM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.crl rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/66pMRPJIk3FKHVs2Ci17LYYFsWM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91504D6, serialNumber=EBAA4C44F24893714A1D5B360A2D7B2D8605B163 Validity Not Before: Aug 9 05:59:41 2025 GMT Not After : Aug 16 05:59:41 2025 GMT Subject: CN=6896e3cd-edfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:21:bb:16:35:ec:3e:e3:29:1e:a7:72:af:64: c6:f9:b5:cf:69:1b:81:c9:07:8c:e5:7c:2e:80:1f: ff:9b:0b:ea:8a:6d:35:71:56:34:d6:c4:de:ba:af: 43:b3:03:10:36:8e:86:a2:97:5f:08:4b:55:23:22: 97:a1:a6:30:bd:60:80:33:a0:97:2e:13:bd:70:f6: 55:0f:1f:61:ae:8a:f2:d0:5a:fc:c8:f5:82:86:39: ee:a9:96:23:9a:2e:ba:a0:f9:32:c2:8f:e3:5d:a2: f6:4a:c6:3c:68:ea:20:0f:62:5b:bf:04:61:10:f9: ec:85:f9:94:ba:e3:61:eb:08:cd:69:e3:90:94:f7: da:d7:73:3b:d3:39:f0:73:52:ee:ca:48:dc:5f:54: 2d:df:18:bf:dd:fe:b6:32:6f:f1:45:b4:ef:7d:c4: 5e:63:9c:1c:d2:78:ca:90:e4:92:e3:cf:f0:43:72: 39:8d:e6:f9:a9:da:81:b5:0d:30:93:35:2d:96:19: a2:53:92:42:4e:dd:15:9a:55:5a:62:1b:38:ec:f8: 7a:75:9d:a0:e0:49:82:78:a3:8f:21:21:c4:38:e0: 7a:17:ba:fb:09:a1:0c:27:cd:ab:8d:ef:cc:6b:86: ae:c8:65:6d:7a:7e:14:f0:89:c4:22:b5:42:d8:c7: de:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:7E:A7:01:3C:CB:3A:5B:E4:D2:E1:0A:06:BB:AF:29:C1:D5:37:71 X509v3 Authority Key Identifier: keyid:EB:AA:4C:44:F2:48:93:71:4A:1D:5B:36:0A:2D:7B:2D:86:05:B1:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/66pMRPJIk3FKHVs2Ci17LYYFsWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:de:04:e5:3c:53:d7:a1:7e:d2:2a:79:ff:54:b6:25:1e:be: 9a:05:ed:20:41:26:14:4d:51:8b:34:bd:5b:d0:32:07:44:72: 1d:a4:85:b1:7d:ee:f2:dc:18:aa:7c:ae:06:4a:24:77:80:21: 50:e4:30:d3:98:a7:b6:4f:ba:92:95:f1:8e:47:c4:50:80:46: d6:b0:0a:35:07:82:9f:a0:d7:b8:96:d0:d7:f5:c0:c3:82:a7: 25:0d:fd:4a:1d:13:df:51:d5:03:51:81:65:67:6f:54:6b:45: 69:58:d5:44:e2:94:95:a2:63:f8:dc:d7:16:cd:25:91:8f:fa: 72:c2:50:75:b8:d5:ca:21:90:25:bb:87:a6:4b:6e:80:1d:25: 2a:89:f9:7a:90:1e:b0:32:4c:ac:22:33:d4:3f:d1:f9:95:ce: eb:bb:e2:eb:21:db:d8:85:1f:4e:72:f4:71:48:e4:91:8d:9a: bb:93:f9:81:5a:86:62:09:11:9e:c9:24:4d:61:a8:fc:e3:19: 09:69:2b:dd:6f:5d:ae:a7:07:27:31:87:dd:67:2d:a4:91:90: 4d:4e:d2:19:b0:db:c3:90:1d:b6:d3:7c:dc:cc:a6:a8:b9:92: 38:72:a2:32:42:00:e2:be:e0:54:55:5f:63:32:36:64:4c:0e: d7:00:93:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA0RDYxMTAvBgNVBAUTKEVCQUE0QzQ0RjI0ODkzNzE0QTFENUIzNjBBMkQ3QjJE ODYwNUIxNjMwHhcNMjUwODA5MDU1OTQxWhcNMjUwODE2MDU1OTQxWjAYMRYwFAYD VQQDEw02ODk2ZTNjZC1lZGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4yG7FjXsPuMpHqdyr2TG+bXPaRuByQeM5XwugB//mwvqim01cVY01sTeuq9D swMQNo6GopdfCEtVIyKXoaYwvWCAM6CXLhO9cPZVDx9hrory0Fr8yPWChjnuqZYj mi66oPkywo/jXaL2SsY8aOogD2JbvwRhEPnshfmUuuNh6wjNaeOQlPfa13M70znw c1LuykjcX1Qt3xi/3f62Mm/xRbTvfcReY5wc0njKkOSS48/wQ3I5jeb5qdqBtQ0w kzUtlhmiU5JCTt0VmlVaYhs47Ph6dZ2g4EmCeKOPISHEOOB6F7r7CaEMJ82rje/M a4auyGVten4U8InEIrVC2MfeQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDJ+pwE8 yzpb5NLhCga7rynB1TdxMB8GA1UdIwQYMBaAFOuqTETySJNxSh1bNgotey2GBbFj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDRENi9BRDBDQUMxRTMx QTkxMUVGQjZGQjFENjBDNEY5QUUwMi82NnBNUlBKSWszRktIVnMyQ2kxN0xZWUZz V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzY2cE1SUEpJazNGS0hWczJDaTE3TFlZRnNXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDRENi9BRDBDQUMxRTMxQTkxMUVGQjZGQjFENjBDNEY5QUUwMi82NnBNUlBKSWsz RktIVnMyQ2kxN0xZWUZzV00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA03gTlPFPXoX7SKnn/VLYlHr6aBe0gQSYUTVGLNL1b0DIHRHIdpIWx fe7y3BiqfK4GSiR3gCFQ5DDTmKe2T7qSlfGOR8RQgEbWsAo1B4KfoNe4ltDX9cDD gqclDf1KHRPfUdUDUYFlZ29Ua0VpWNVE4pSVomP43NcWzSWRj/pywlB1uNXKIZAl u4emS26AHSUqifl6kB6wMkysIjPUP9H5lc7ru+LrIdvYhR9OcvRxSOSRjZq7k/mB WoZiCRGeySRNYaj84xkJaSvdb12upwcnMYfdZy2kkZBNTtIZsNvDkB2203zczKao uZI4cqIyQgDivuBUVV9jMjZkTA7XAJMF -----END CERTIFICATE-----Generated at Sat Aug 9 23:18:10 2025 by rpki-client