$ rpki-client -vvf rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft File: pWcIHaZpXdN7LCsbF6Abo95ZHss.mft (raw, json) Hash identifier: o7naDwRfxaWuFujgz15WrxJkeSbK+Xm5NNHj+R+3AIw= Subject key identifier: 3A:AF:AD:F6:A7:15:59:5D:8C:0C:23:3C:3F:A4:AE:3F:1F:B7:60:4D Authority key identifier: A5:67:08:1D:A6:69:5D:D3:7B:2C:2B:1B:17:A0:1B:A3:DE:59:1E:CB Certificate issuer: /CN=A91A284E/serialNumber=A567081DA6695DD37B2C2B1B17A01BA3DE591ECB Certificate serial: 07A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWcIHaZpXdN7LCsbF6Abo95ZHss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft Manifest number: 079C Signing time: Wed 06 Aug 2025 21:42:51 +0000 Manifest this update: Wed 06 Aug 2025 21:42:50 +0000 Manifest next update: Wed 13 Aug 2025 21:42:50 +0000 Files and hashes: 1: pWcIHaZpXdN7LCsbF6Abo95ZHss.crl (hash: /N2o9lpSe20sYpfgQU3IAXjyJ71GdsMJvwzPPlN2Ors=) 2: A3205106142511EB8FED0427C4F9AE02.roa (hash: VDZMZq0ravcenOYyOeGNgLAMJ2KdcwQBXJSf2fEc5SM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.crl rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWcIHaZpXdN7LCsbF6Abo95ZHss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 21:42:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1953 (0x7a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A284E, serialNumber=A567081DA6695DD37B2C2B1B17A01BA3DE591ECB Validity Not Before: Aug 6 21:42:50 2025 GMT Not After : Aug 13 21:42:50 2025 GMT Subject: CN=6893cc5b-3f13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5d:59:f6:57:fa:79:71:b1:24:c2:f5:50:06: 61:4d:2e:92:64:fa:69:33:b1:2d:4f:a3:10:dc:ed: 64:90:fb:98:10:36:77:2c:a3:fc:63:6c:b0:17:8a: 67:98:70:74:7b:39:cc:11:c5:5d:91:1e:bc:1f:d5: 42:5b:65:87:d8:72:0d:74:ef:f3:dc:3d:81:ba:dc: c6:96:e2:fa:52:ae:2c:51:20:d9:a5:58:2b:4a:22: 6c:a3:fd:84:3d:45:50:35:1b:3e:d1:96:d8:a8:9a: 65:86:9b:80:ee:20:24:8c:d8:01:20:45:3b:24:f2: 41:51:95:9d:5c:57:09:4e:e6:9b:8a:e7:4e:f1:a7: 6a:97:2a:61:30:20:13:9d:f3:92:e6:43:da:7e:50: a4:1a:d8:1e:af:4c:3c:eb:53:63:42:0e:a4:f6:e1: fb:25:99:5e:d6:20:3d:df:66:18:3a:47:bd:93:b4: 59:d0:e2:29:18:1e:45:7f:e8:72:03:c1:07:48:92: 1f:52:d8:ce:85:f6:2d:d0:8d:d2:a0:88:5b:65:42: e2:37:fb:a5:4b:a5:1b:28:c6:ab:a1:9e:84:00:02: e0:17:b9:09:88:64:3b:cb:c8:29:29:29:42:45:84: 18:24:1f:7f:65:38:5b:66:f7:f0:0f:af:46:2c:ef: 2c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:AF:AD:F6:A7:15:59:5D:8C:0C:23:3C:3F:A4:AE:3F:1F:B7:60:4D X509v3 Authority Key Identifier: keyid:A5:67:08:1D:A6:69:5D:D3:7B:2C:2B:1B:17:A0:1B:A3:DE:59:1E:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWcIHaZpXdN7LCsbF6Abo95ZHss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:20:40:88:3a:75:37:c6:3f:fe:af:33:87:2f:8c:19:b4:62: 04:48:d4:73:c6:8d:c7:1c:9f:a2:de:54:92:09:93:ad:81:f0: 2f:4a:65:3e:35:3e:60:ac:17:12:9b:c6:50:a3:ae:c7:ed:99: 47:46:35:b9:a8:a7:44:e4:c0:8f:07:d2:95:84:94:73:6c:99: 6f:0f:f2:9e:ce:c5:16:64:da:56:47:d6:85:b8:f8:b4:b9:da: 20:d2:6c:8b:84:dd:18:cf:93:30:c3:c3:44:c1:46:c2:21:fa: c3:56:30:40:58:62:3c:20:ec:8c:7a:d4:59:ac:65:9e:7c:86: 4d:fc:fb:7d:37:e5:88:2a:b6:80:27:17:8a:4c:b8:3e:7c:d4: 36:5d:fa:ce:aa:15:b4:bb:dc:da:2b:08:c4:81:05:a5:bc:85: 3c:35:88:c3:57:7a:a8:ad:96:12:3e:f5:5e:3e:1b:79:8f:b4: 95:c1:e9:ae:79:26:45:bb:3f:ac:4c:cf:2b:0e:3a:b4:7d:13: 04:9e:61:b3:52:1e:f7:71:28:52:46:f6:09:05:a8:57:52:97: 13:f5:c1:c3:67:64:25:27:53:3f:bb:12:d8:f4:51:91:67:e8: ea:2e:2c:52:b3:20:25:7f:49:41:d6:7b:8e:d1:58:78:e8:bf: 66:b6:ce:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTI4NEUxMTAvBgNVBAUTKEE1NjcwODFEQTY2OTVERDM3QjJDMkIxQjE3QTAxQkEz REU1OTFFQ0IwHhcNMjUwODA2MjE0MjUwWhcNMjUwODEzMjE0MjUwWjAYMRYwFAYD VQQDEw02ODkzY2M1Yi0zZjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyF1Z9lf6eXGxJML1UAZhTS6SZPppM7EtT6MQ3O1kkPuYEDZ3LKP8Y2ywF4pn mHB0eznMEcVdkR68H9VCW2WH2HINdO/z3D2ButzGluL6Uq4sUSDZpVgrSiJso/2E PUVQNRs+0ZbYqJplhpuA7iAkjNgBIEU7JPJBUZWdXFcJTuabiudO8adqlyphMCAT nfOS5kPaflCkGtger0w861NjQg6k9uH7JZle1iA932YYOke9k7RZ0OIpGB5Ff+hy A8EHSJIfUtjOhfYt0I3SoIhbZULiN/ulS6UbKMaroZ6EAALgF7kJiGQ7y8gpKSlC RYQYJB9/ZThbZvfwD69GLO8s0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDqvrfan FVldjAwjPD+krj8ft2BNMB8GA1UdIwQYMBaAFKVnCB2maV3TeywrGxegG6PeWR7L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjg0RS9FOTA1RENCMDE0 MjMxMUVCOUZDNEMyMjRDNEY5QUUwMi9wV2NJSGFacFhkTjdMQ3NiRjZBYm85NVpI c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BXY0lIYVpwWGRON0xDc2JGNkFibzk1Wkhzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Mjg0RS9FOTA1RENCMDE0MjMxMUVCOUZDNEMyMjRDNEY5QUUwMi9wV2NJSGFacFhk TjdMQ3NiRjZBYm85NVpIc3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARIECIOnU3xj/+rzOHL4wZtGIESNRzxo3HHJ+i3lSSCZOtgfAvSmU+ NT5grBcSm8ZQo67H7ZlHRjW5qKdE5MCPB9KVhJRzbJlvD/KezsUWZNpWR9aFuPi0 udog0myLhN0Yz5Mww8NEwUbCIfrDVjBAWGI8IOyMetRZrGWefIZN/Pt9N+WIKraA JxeKTLg+fNQ2XfrOqhW0u9zaKwjEgQWlvIU8NYjDV3qorZYSPvVePht5j7SVwemu eSZFuz+sTM8rDjq0fRMEnmGzUh73cShSRvYJBahXUpcT9cHDZ2QlJ1M/uxLY9FGR Z+jqLixSsyAlf0lB1nuO0Vh46L9mts5r -----END CERTIFICATE-----Generated at Fri Aug 8 20:57:04 2025 by rpki-client