$ rpki-client -vvf rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.mft File: x40eWVkb4MdSTTa9-FyKxuoZD44.mft (raw, json) Hash identifier: U/KR70atXystAyN9+5JnJoAfCYzQsCPyfDB3nGnspP8= Subject key identifier: AF:4D:8C:0E:5E:7B:DB:96:EE:8F:51:5A:45:78:33:C3:50:F7:7C:ED Authority key identifier: C7:8D:1E:59:59:1B:E0:C7:52:4D:36:BD:F8:5C:8A:C6:EA:19:0F:8E Certificate issuer: /CN=A91554E6/serialNumber=C78D1E59591BE0C7524D36BDF85C8AC6EA190F8E Certificate serial: 0158 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x40eWVkb4MdSTTa9-FyKxuoZD44.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.mft Manifest number: 0447 Signing time: Sat 09 Aug 2025 01:49:20 +0000 Manifest this update: Sat 09 Aug 2025 01:49:19 +0000 Manifest next update: Sat 16 Aug 2025 01:49:19 +0000 Files and hashes: 1: x40eWVkb4MdSTTa9-FyKxuoZD44.crl (hash: Dz6HXSke/VuDEUG5X+khzaC77jH7gBiBWXcMD1e3BRs=) 2: 2F9887306F0D11EE9B369C60C4F9AE02.roa (hash: aBiTKrdRm+ziRS/jKwG3ua8HiLf0c5Bx0y3taLaPOUU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.crl rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x40eWVkb4MdSTTa9-FyKxuoZD44.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 344 (0x158) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91554E6, serialNumber=C78D1E59591BE0C7524D36BDF85C8AC6EA190F8E Validity Not Before: Aug 9 01:49:19 2025 GMT Not After : Aug 16 01:49:19 2025 GMT Subject: CN=6896a91f-68eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8b:6f:78:4f:8f:99:8b:9a:1b:af:2a:50:64: 45:d4:74:64:4b:d5:39:8c:0a:44:61:86:be:c2:67: 1c:37:4e:bd:8e:e9:ee:3c:a0:ee:b7:c0:85:30:3b: 36:e8:94:3f:38:d2:c3:53:b7:d3:4a:3e:ef:33:5f: 1d:dd:cc:15:f7:f2:da:7a:bd:8e:0e:fc:7f:f5:d5: a5:84:31:46:4f:e2:a3:44:4e:bf:ef:7c:4a:64:a1: ce:1f:07:76:2c:17:8e:8f:d2:69:b4:9e:16:bf:ef: 0b:9a:ee:3e:3e:14:31:6b:02:95:27:c1:e9:36:1c: 3a:9d:80:8a:52:b9:36:33:5f:42:5c:4b:9e:75:71: ee:b7:8f:0a:aa:51:6c:43:99:69:b5:19:c8:a1:67: 6f:64:14:eb:6e:0c:ba:9b:9d:d3:2e:50:ae:a0:21: e5:5c:58:ee:88:25:ff:35:d9:6c:be:21:0c:ff:66: 52:12:d1:81:3c:4e:d1:0c:0c:b4:3e:af:78:fb:4b: 93:24:19:3c:0f:eb:86:4f:32:8c:5d:07:fe:11:d2: bf:f0:34:a0:80:c2:3f:b7:1b:de:4f:34:f7:73:6d: 14:61:74:71:e5:42:22:33:6c:13:bf:f2:1a:17:aa: 2a:b1:cf:ec:1f:8a:ef:49:e7:b6:9b:04:3f:72:61: 09:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:4D:8C:0E:5E:7B:DB:96:EE:8F:51:5A:45:78:33:C3:50:F7:7C:ED X509v3 Authority Key Identifier: keyid:C7:8D:1E:59:59:1B:E0:C7:52:4D:36:BD:F8:5C:8A:C6:EA:19:0F:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x40eWVkb4MdSTTa9-FyKxuoZD44.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:a1:e3:8a:02:21:ed:aa:92:ab:34:8d:d5:84:61:ae:6f:7b: 86:48:cc:c3:7b:4d:51:81:f2:65:4f:07:5c:47:85:34:65:70: 70:80:13:78:6c:59:46:8d:00:a7:64:62:74:3c:b9:ca:06:0b: e6:98:be:bb:d6:6f:86:3b:78:80:b2:1e:16:c8:c8:fa:7b:70: 2d:c4:48:83:c5:59:fb:b7:99:81:24:22:58:48:b2:81:20:89: ed:73:bf:db:bb:a4:2e:fc:42:58:4e:b2:9e:e9:ba:3e:19:ed: 51:03:58:de:cf:4c:8c:c6:a8:60:b8:f3:9d:3e:06:52:ce:a1: 4d:aa:15:dc:fe:45:9e:b5:15:ae:71:d2:9b:86:bd:26:c1:67: f2:ff:b9:f8:b8:80:e6:00:00:dd:83:5e:21:3e:21:f3:05:5c: 9d:fb:6a:1a:56:16:4e:d5:42:12:aa:e2:dc:ba:c8:d7:a3:bb: b7:43:7a:46:2a:c5:67:6f:eb:7d:1a:45:3f:4c:25:3b:72:89: 00:85:f2:ba:a6:5f:34:97:58:e7:84:e8:1b:58:07:37:14:27: 5d:40:1c:c0:c2:2d:37:11:48:22:4b:c0:b1:18:48:e2:ce:f8: f6:d8:04:a4:19:45:60:6d:82:aa:3a:4b:47:26:73:37:a5:58: 96:f9:0c:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU0RTYxMTAvBgNVBAUTKEM3OEQxRTU5NTkxQkUwQzc1MjREMzZCREY4NUM4QUM2 RUExOTBGOEUwHhcNMjUwODA5MDE0OTE5WhcNMjUwODE2MDE0OTE5WjAYMRYwFAYD VQQDEw02ODk2YTkxZi02OGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2YtveE+PmYuaG68qUGRF1HRkS9U5jApEYYa+wmccN069junuPKDut8CFMDs2 6JQ/ONLDU7fTSj7vM18d3cwV9/Laer2ODvx/9dWlhDFGT+KjRE6/73xKZKHOHwd2 LBeOj9JptJ4Wv+8Lmu4+PhQxawKVJ8HpNhw6nYCKUrk2M19CXEuedXHut48KqlFs Q5lptRnIoWdvZBTrbgy6m53TLlCuoCHlXFjuiCX/NdlsviEM/2ZSEtGBPE7RDAy0 Pq94+0uTJBk8D+uGTzKMXQf+EdK/8DSggMI/txveTzT3c20UYXRx5UIiM2wTv/Ia F6oqsc/sH4rvSee2mwQ/cmEJUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK9NjA5e e9uW7o9RWkV4M8NQ93ztMB8GA1UdIwQYMBaAFMeNHllZG+DHUk02vfhcisbqGQ+O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTRFNi85RjA2Nzc0OEVE NEIxMUVDQUI4RkFBNzdDNEY5QUUwMi94NDBlV1ZrYjRNZFNUVGE5LUZ5S3h1b1pE NDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g0MGVXVmtiNE1kU1RUYTktRnlLeHVvWkQ0NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTRFNi85RjA2Nzc0OEVENEIxMUVDQUI4RkFBNzdDNEY5QUUwMi94NDBlV1ZrYjRN ZFNUVGE5LUZ5S3h1b1pENDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWoeOKAiHtqpKrNI3VhGGub3uGSMzDe01RgfJlTwdcR4U0ZXBwgBN4 bFlGjQCnZGJ0PLnKBgvmmL671m+GO3iAsh4WyMj6e3AtxEiDxVn7t5mBJCJYSLKB IIntc7/bu6Qu/EJYTrKe6bo+Ge1RA1jez0yMxqhguPOdPgZSzqFNqhXc/kWetRWu cdKbhr0mwWfy/7n4uIDmAADdg14hPiHzBVyd+2oaVhZO1UISquLcusjXo7u3Q3pG KsVnb+t9GkU/TCU7cokAhfK6pl80l1jnhOgbWAc3FCddQBzAwi03EUgiS8CxGEji zvj22ASkGUVgbYKqOktHJnM3pViW+Qw2 -----END CERTIFICATE-----Generated at Sat Aug 9 22:38:40 2025 by rpki-client