$ rpki-client -vvf rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.mft File: 72cCp9CuyDTe-49BaLL-j01YQ-g.mft (raw, json) Hash identifier: EFWgAzzgOJoB32wMW3WzbtsXI0DvnngVbnRRh00cnco= Subject key identifier: 81:B3:88:C4:97:31:AB:A3:D2:76:0C:55:24:8E:B8:24:10:F2:D5:72 Authority key identifier: EF:67:02:A7:D0:AE:C8:34:DE:FB:8F:41:68:B2:FE:8F:4D:58:43:E8 Certificate issuer: /CN=A91A352E/serialNumber=EF6702A7D0AEC834DEFB8F4168B2FE8F4D5843E8 Certificate serial: 019A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72cCp9CuyDTe-49BaLL-j01YQ-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.mft Manifest number: 0194 Signing time: Thu 07 Aug 2025 03:55:55 +0000 Manifest this update: Thu 07 Aug 2025 03:55:55 +0000 Manifest next update: Thu 14 Aug 2025 03:55:55 +0000 Files and hashes: 1: 72cCp9CuyDTe-49BaLL-j01YQ-g.crl (hash: 02nqsqvRHYrpIdm+CK9l0avwOWMRRgbvA9Ku4LtvUcA=) 2: 3E734F70B9A311EE85D60B49C4F9AE02.roa (hash: rwWLgX0j1gAae5w6bqH0qLh9uyb80tM8QLuYgGiI8EU=) 3: C3835BF6B9A311EEB293524AC4F9AE02.roa (hash: d9ZhGU94CxjAU4bAS3pBSunhF0F9voc5kw0tZ3gpDNw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.crl rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72cCp9CuyDTe-49BaLL-j01YQ-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 03:55:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 410 (0x19a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A352E, serialNumber=EF6702A7D0AEC834DEFB8F4168B2FE8F4D5843E8 Validity Not Before: Aug 7 03:55:55 2025 GMT Not After : Aug 14 03:55:55 2025 GMT Subject: CN=689423cb-58f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2a:6f:ea:07:af:42:59:47:ba:a3:c7:34:29: ce:65:ed:12:0e:80:be:81:96:ec:f1:71:eb:23:79: 79:49:a5:43:81:26:2e:57:ad:95:fa:e0:09:3e:36: 12:67:ed:16:6c:06:02:84:85:13:28:8f:c3:94:27: e8:57:90:b9:2f:99:5e:f7:73:c6:b8:46:b2:9e:9e: b3:98:2e:d6:c5:97:97:04:26:d4:8f:a9:b5:ef:67: e9:77:13:f0:98:a7:da:c8:4e:54:4c:ad:df:ad:77: b0:b6:ec:b6:e6:fd:f6:2e:94:85:df:6c:0c:80:36: f5:88:d6:3e:2f:01:f1:fa:83:15:2a:0e:cc:35:b7: 24:10:24:8b:55:c5:56:3c:5a:7a:27:86:d8:a7:8b: b1:61:5f:8c:ae:40:b4:64:69:5c:cf:6a:e8:65:31: 31:32:5c:34:54:c1:7b:6f:2b:30:e0:4c:9f:5a:5e: e2:d4:1d:a9:a3:dc:44:09:a4:97:37:fd:00:42:ed: 6b:4d:1b:a9:72:ef:5d:2c:3a:22:32:44:54:32:64: bc:a0:d1:df:6a:a9:e1:8c:fb:f7:14:ad:a3:fc:10: 3d:c9:4e:39:d0:ad:9d:66:2d:6d:8e:ab:fa:f6:bd: 76:37:a1:c0:9a:2f:a1:da:70:c3:e8:f0:60:a3:cf: a7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:B3:88:C4:97:31:AB:A3:D2:76:0C:55:24:8E:B8:24:10:F2:D5:72 X509v3 Authority Key Identifier: keyid:EF:67:02:A7:D0:AE:C8:34:DE:FB:8F:41:68:B2:FE:8F:4D:58:43:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72cCp9CuyDTe-49BaLL-j01YQ-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:a4:0a:90:c9:73:7a:3f:56:82:cf:fa:2b:84:f8:64:41:82: ac:9a:1e:99:f9:04:d5:d9:b1:4c:fb:a8:fa:94:ed:5d:23:57: 36:b2:ce:ef:59:c2:5a:38:04:4b:c0:7f:1f:aa:78:d8:aa:fc: bb:1c:76:38:e4:d0:af:8d:87:57:9a:c9:3b:e9:0e:51:56:82: d0:86:35:53:e1:00:e4:94:65:92:06:3d:d6:44:f3:b9:c3:7a: ee:b8:58:80:8f:d8:d5:b0:b3:f0:0d:2c:2a:a5:e2:37:95:91: 4a:df:0c:21:78:70:80:76:ab:7b:2e:73:fe:e7:d3:b6:0b:0e: aa:d7:41:79:98:21:6a:c9:c0:e0:78:c6:d0:b4:2b:fd:fe:c1: a7:3c:92:87:92:a4:48:bd:85:17:06:83:02:64:89:27:8e:ce: 70:b0:99:70:a6:1b:f8:ab:28:7c:e9:83:56:4c:17:00:b6:c1: 48:f1:4a:a3:4e:9f:91:65:a8:70:26:18:15:c8:20:d3:30:71: d9:a4:df:42:2a:15:6d:74:9e:8d:fa:c9:e2:6b:41:37:d1:67: b9:cc:1e:01:69:27:66:3d:c7:b4:e6:15:d5:f6:7a:38:32:9e: 28:84:c1:8e:ac:60:26:fe:aa:cb:20:d2:20:b3:76:7e:81:a5: 97:db:c8:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM1MkUxMTAvBgNVBAUTKEVGNjcwMkE3RDBBRUM4MzRERUZCOEY0MTY4QjJGRThG NEQ1ODQzRTgwHhcNMjUwODA3MDM1NTU1WhcNMjUwODE0MDM1NTU1WjAYMRYwFAYD VQQDEw02ODk0MjNjYi01OGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxSpv6gevQllHuqPHNCnOZe0SDoC+gZbs8XHrI3l5SaVDgSYuV62V+uAJPjYS Z+0WbAYChIUTKI/DlCfoV5C5L5le93PGuEaynp6zmC7WxZeXBCbUj6m172fpdxPw mKfayE5UTK3frXewtuy25v32LpSF32wMgDb1iNY+LwHx+oMVKg7MNbckECSLVcVW PFp6J4bYp4uxYV+MrkC0ZGlcz2roZTExMlw0VMF7bysw4EyfWl7i1B2po9xECaSX N/0AQu1rTRupcu9dLDoiMkRUMmS8oNHfaqnhjPv3FK2j/BA9yU450K2dZi1tjqv6 9r12N6HAmi+h2nDD6PBgo8+nVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIGziMSX Mauj0nYMVSSOuCQQ8tVyMB8GA1UdIwQYMBaAFO9nAqfQrsg03vuPQWiy/o9NWEPo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzUyRS9EQzMzNTk3QzBC NjAxMUVFQjMyMjA0MUFDNEY5QUUwMi83MmNDcDlDdXlEVGUtNDlCYUxMLWowMVlR LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcyY0NwOUN1eURUZS00OUJhTEwtajAxWVEtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzUyRS9EQzMzNTk3QzBCNjAxMUVFQjMyMjA0MUFDNEY5QUUwMi83MmNDcDlDdXlE VGUtNDlCYUxMLWowMVlRLWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBspAqQyXN6P1aCz/orhPhkQYKsmh6Z+QTV2bFM+6j6lO1dI1c2ss7v WcJaOARLwH8fqnjYqvy7HHY45NCvjYdXmsk76Q5RVoLQhjVT4QDklGWSBj3WRPO5 w3ruuFiAj9jVsLPwDSwqpeI3lZFK3wwheHCAdqt7LnP+59O2Cw6q10F5mCFqycDg eMbQtCv9/sGnPJKHkqRIvYUXBoMCZIknjs5wsJlwphv4qyh86YNWTBcAtsFI8Uqj Tp+RZahwJhgVyCDTMHHZpN9CKhVtdJ6N+snia0E30We5zB4BaSdmPce05hXV9no4 Mp4ohMGOrGAm/qrLINIgs3Z+gaWX28jh -----END CERTIFICATE-----Generated at Sat Aug 9 02:59:23 2025 by rpki-client