$ rpki-client -vvf rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/0PiwBllsfAN8tUkwWzlpAACq6KQ.mft File: 0PiwBllsfAN8tUkwWzlpAACq6KQ.mft (raw, json) Hash identifier: ZBOR1bVJJGTjCT/4Eej2bjSaj9T2hXhVQp2iNDtjsVU= Subject key identifier: 65:49:37:2D:25:8C:8B:28:20:F5:FD:BC:1C:20:B1:E6:C1:E0:7E:FC Authority key identifier: D0:F8:B0:06:59:6C:7C:03:7C:B5:49:30:5B:39:69:00:00:AA:E8:A4 Certificate issuer: /CN=A91754C0/serialNumber=D0F8B006596C7C037CB549305B39690000AAE8A4 Certificate serial: 011A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0PiwBllsfAN8tUkwWzlpAACq6KQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/0PiwBllsfAN8tUkwWzlpAACq6KQ.mft Manifest number: 0116 Signing time: Mon 11 Aug 2025 05:01:08 +0000 Manifest this update: Mon 11 Aug 2025 05:01:07 +0000 Manifest next update: Mon 18 Aug 2025 05:01:07 +0000 Files and hashes: 1: 0PiwBllsfAN8tUkwWzlpAACq6KQ.crl (hash: 09CJSs196Ssz6s/U+xBfPdY0N5Btg7mGpIue9WAdWyk=) 2: D0CB00D4CCBD11EEAC4BCD4BC4F9AE02.roa (hash: tE5MO0yGqfdQRPhR9mD7EUVj7T64niX8BINnA3y1Amk=) 3: 6BA3FEA4CCBD11EEBADDFC4AC4F9AE02.roa (hash: qBQp3vvSD9elb8dQbwCPuGirBXWWVwR3GT0tS3LqEZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/0PiwBllsfAN8tUkwWzlpAACq6KQ.crl rsync://rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/0PiwBllsfAN8tUkwWzlpAACq6KQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0PiwBllsfAN8tUkwWzlpAACq6KQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 05:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 282 (0x11a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91754C0, serialNumber=D0F8B006596C7C037CB549305B39690000AAE8A4 Validity Not Before: Aug 11 05:01:07 2025 GMT Not After : Aug 18 05:01:07 2025 GMT Subject: CN=68997913-5479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:29:91:2e:1d:9d:81:c6:b9:8b:d9:83:8f:1e: ee:2b:1f:08:46:2b:bd:e1:f2:14:20:5c:e1:86:11: 9c:89:6d:31:f3:7f:41:54:55:f4:98:3d:51:34:ee: f9:d9:c7:34:f2:16:f2:08:7a:4d:0c:f4:fa:cd:0d: 86:6f:62:ed:ef:05:aa:f4:76:d9:54:6f:cf:0e:ea: 03:60:e6:66:21:77:aa:47:b2:c0:e5:fe:2b:dd:ab: 03:c3:d6:8e:ab:ec:cb:e2:71:76:86:77:da:33:46: 99:a6:c0:47:09:62:b2:e9:24:4e:c9:3c:a6:ce:fe: ad:7c:e3:ac:40:d2:b8:f9:53:d2:54:f9:cc:96:a0: 5f:60:5c:e2:60:0f:8d:ab:6b:94:52:33:eb:15:95: 87:32:fe:fb:ea:ae:7e:b6:fc:c6:fe:52:75:1c:cb: 21:a2:64:d7:e9:bb:a7:90:8c:ed:9e:04:4e:be:3c: 8c:06:7e:c0:a0:02:86:d0:e7:0d:d1:b2:4e:c2:cb: 14:e5:ac:ad:c1:33:61:c0:44:0b:e8:05:48:f2:ac: e4:bb:e9:bf:79:5d:63:81:38:44:e6:97:af:c1:8e: 6f:f5:01:78:db:64:27:af:ef:68:58:3a:07:29:a5: 49:2f:7f:e0:7e:dd:56:9d:2e:be:27:12:ae:27:b8: 62:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:49:37:2D:25:8C:8B:28:20:F5:FD:BC:1C:20:B1:E6:C1:E0:7E:FC X509v3 Authority Key Identifier: keyid:D0:F8:B0:06:59:6C:7C:03:7C:B5:49:30:5B:39:69:00:00:AA:E8:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/0PiwBllsfAN8tUkwWzlpAACq6KQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0PiwBllsfAN8tUkwWzlpAACq6KQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/0PiwBllsfAN8tUkwWzlpAACq6KQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:b7:04:a4:5f:81:ae:ec:b9:53:1d:fd:0b:83:37:86:6d:e8: 67:36:f0:9e:30:db:3e:1b:26:2a:8f:62:c2:d7:ec:d1:30:72: d0:cb:d1:ea:44:bd:30:d4:c9:a8:07:4c:d6:44:9e:bd:1c:3f: 02:64:3d:0f:0b:8d:00:fc:33:83:53:e9:1d:04:0d:2f:e3:ec: c2:9d:87:7f:3a:ad:8d:60:84:5b:6f:77:7c:78:f0:fe:84:8d: 3c:4d:c7:32:07:4b:e4:eb:a0:a7:66:34:dd:24:73:1c:f8:3f: 1a:70:cc:39:44:e0:f3:42:c1:1a:ec:b1:d8:5b:12:bb:e6:37: e3:64:b9:1f:0d:46:dd:19:e6:a3:cc:19:5e:00:80:da:0c:d9: 35:0b:a3:46:cf:05:fe:bc:06:f6:0c:69:e8:96:b2:fe:f8:f8: 63:4a:a3:93:48:89:38:dc:fe:7e:d2:df:bb:9b:7a:b6:78:d0: 11:d8:46:50:cf:32:10:2a:24:c6:62:9d:ea:c8:cb:fd:cf:39: fe:9f:06:aa:d0:be:0d:95:06:84:99:80:fe:f2:1a:e7:ef:37: 90:5f:cb:c5:09:c2:e3:32:f1:07:c4:b9:f6:9c:e9:dd:c6:90: 30:67:9c:a6:9c:e7:1c:53:72:78:f3:78:2c:a7:0e:4a:04:0e: 9f:bc:a3:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU0QzAxMTAvBgNVBAUTKEQwRjhCMDA2NTk2QzdDMDM3Q0I1NDkzMDVCMzk2OTAw MDBBQUU4QTQwHhcNMjUwODExMDUwMTA3WhcNMjUwODE4MDUwMTA3WjAYMRYwFAYD VQQDEw02ODk5NzkxMy01NDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxCmRLh2dgca5i9mDjx7uKx8IRiu94fIUIFzhhhGciW0x839BVFX0mD1RNO75 2cc08hbyCHpNDPT6zQ2Gb2Lt7wWq9HbZVG/PDuoDYOZmIXeqR7LA5f4r3asDw9aO q+zL4nF2hnfaM0aZpsBHCWKy6SROyTymzv6tfOOsQNK4+VPSVPnMlqBfYFziYA+N q2uUUjPrFZWHMv776q5+tvzG/lJ1HMshomTX6bunkIztngROvjyMBn7AoAKG0OcN 0bJOwssU5aytwTNhwEQL6AVI8qzku+m/eV1jgThE5pevwY5v9QF422Qnr+9oWDoH KaVJL3/gft1WnS6+JxKuJ7hi8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGVJNy0l jIsoIPX9vBwgsebB4H78MB8GA1UdIwQYMBaAFND4sAZZbHwDfLVJMFs5aQAAquik MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTRDMC9GRURGNTcyRUND QkIxMUVFOEEwRjc3NDhDNEY5QUUwMi8wUGl3Qmxsc2ZBTjh0VWt3V3pscEFBQ3E2 S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBQaXdCbGxzZkFOOHRVa3dXemxwQUFDcTZLUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTRDMC9GRURGNTcyRUNDQkIxMUVFOEEwRjc3NDhDNEY5QUUwMi8wUGl3Qmxsc2ZB Tjh0VWt3V3pscEFBQ3E2S1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGtwSkX4Gu7LlTHf0LgzeGbehnNvCeMNs+GyYqj2LC1+zRMHLQy9Hq RL0w1MmoB0zWRJ69HD8CZD0PC40A/DODU+kdBA0v4+zCnYd/Oq2NYIRbb3d8ePD+ hI08TccyB0vk66CnZjTdJHMc+D8acMw5RODzQsEa7LHYWxK75jfjZLkfDUbdGeaj zBleAIDaDNk1C6NGzwX+vAb2DGnolrL++PhjSqOTSIk43P5+0t+7m3q2eNAR2EZQ zzIQKiTGYp3qyMv9zzn+nwaq0L4NlQaEmYD+8hrn7zeQX8vFCcLjMvEHxLn2nOnd xpAwZ5ymnOccU3J483gspw5KBA6fvKM+ -----END CERTIFICATE-----Generated at Wed Aug 13 05:54:04 2025 by rpki-client