$ rpki-client -vvf rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/S91WBs7jg4cxsnbrWuJ0CVXm6DU.mft File: S91WBs7jg4cxsnbrWuJ0CVXm6DU.mft (raw, json) Hash identifier: dxff5Wo0PNBnpyaiaLBz5ACd/LijAhQktZhI00F41S4= Subject key identifier: BF:59:2A:B3:73:B4:00:9B:28:69:60:D9:83:39:4C:32:FE:8A:12:26 Authority key identifier: 4B:DD:56:06:CE:E3:83:87:31:B2:76:EB:5A:E2:74:09:55:E6:E8:35 Certificate issuer: /CN=A91A40AE/serialNumber=4BDD5606CEE3838731B276EB5AE2740955E6E835 Certificate serial: 02CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S91WBs7jg4cxsnbrWuJ0CVXm6DU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/S91WBs7jg4cxsnbrWuJ0CVXm6DU.mft Manifest number: 02C8 Signing time: Sat 09 Aug 2025 01:55:53 +0000 Manifest this update: Sat 09 Aug 2025 01:55:53 +0000 Manifest next update: Sat 16 Aug 2025 01:55:53 +0000 Files and hashes: 1: S91WBs7jg4cxsnbrWuJ0CVXm6DU.crl (hash: Pe98kcKVU93waCK0zIEHQxkHQgeQN4h3df6/zO0hbVc=) 2: 0C2902B4FC3D11ECAD619C35C4F9AE02.roa (hash: MBRZFEnGY9HD1b044iv1jg/gd/S5QUVqB7co270dkzU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/S91WBs7jg4cxsnbrWuJ0CVXm6DU.crl rsync://rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/S91WBs7jg4cxsnbrWuJ0CVXm6DU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S91WBs7jg4cxsnbrWuJ0CVXm6DU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 716 (0x2cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A40AE, serialNumber=4BDD5606CEE3838731B276EB5AE2740955E6E835 Validity Not Before: Aug 9 01:55:53 2025 GMT Not After : Aug 16 01:55:53 2025 GMT Subject: CN=6896aaa9-b00c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:5b:c7:fb:70:03:2d:f3:6a:a0:b9:3a:9d:98: 5f:c4:f2:0b:d2:bd:2a:7e:29:1e:60:cd:0d:bf:b9: 4d:fb:80:73:4d:74:45:16:7e:f6:68:3c:c9:e0:36: 2f:3a:13:ac:b7:a4:b7:50:f1:be:99:3e:cf:78:6f: f2:4d:04:0c:bd:2b:bc:5a:03:07:a3:f6:fe:3e:96: 25:1c:22:93:3d:37:54:1c:f0:27:c7:f5:c6:32:7e: 95:30:9e:99:19:3b:70:f5:4d:63:b4:59:83:a0:f1: 1e:82:bb:97:e9:92:17:68:af:14:d1:c1:7a:5f:21: 7c:97:c8:a1:d2:ec:75:7e:32:95:97:64:06:2e:33: 96:72:67:4b:9c:bb:ba:68:07:38:6d:91:e0:69:f2: fe:0a:02:5f:76:6a:6c:c9:a3:d3:35:23:cd:73:0a: 29:7f:3a:71:7e:0f:8d:8b:c4:04:a2:06:15:40:3a: 9c:aa:f9:c6:2a:25:3e:84:30:71:97:9a:1a:a3:53: 1b:8b:93:26:a8:ce:f4:4e:76:23:3a:42:cc:d1:f5: da:ee:c1:b7:1c:71:6c:24:a1:ca:c5:99:a6:5c:e3: 9f:4a:08:81:73:cd:10:c1:a4:92:a3:27:78:f6:6c: 52:35:57:d2:31:c0:4b:51:1b:13:9d:c2:0d:09:94: 80:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:59:2A:B3:73:B4:00:9B:28:69:60:D9:83:39:4C:32:FE:8A:12:26 X509v3 Authority Key Identifier: keyid:4B:DD:56:06:CE:E3:83:87:31:B2:76:EB:5A:E2:74:09:55:E6:E8:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/S91WBs7jg4cxsnbrWuJ0CVXm6DU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S91WBs7jg4cxsnbrWuJ0CVXm6DU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/S91WBs7jg4cxsnbrWuJ0CVXm6DU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:a8:42:64:81:8d:49:87:db:c8:e7:79:b1:fb:8b:d8:47:93: 6f:72:88:a2:87:d7:c9:18:e4:07:da:f3:52:b1:91:b8:5f:db: 75:d2:07:74:0b:a8:99:b3:42:5b:0d:67:a0:19:d8:9c:6d:1e: 50:0e:ab:71:ee:8f:58:56:de:e1:ff:48:75:11:88:07:89:b2: ea:4c:9c:14:7f:d1:82:87:05:e5:e8:ae:c7:1e:37:fd:dc:2f: 9a:2c:e8:73:68:ae:cf:e4:91:96:45:ad:55:c8:c2:18:64:2e: cb:b3:ba:06:1e:fb:b4:29:76:81:16:be:3a:e0:6d:45:c7:9e: 8b:a8:29:53:2e:12:0c:11:0d:d1:04:27:a1:3b:3c:d6:e5:c8: e0:7a:78:b8:b9:04:64:79:e6:b1:9f:94:b2:a7:d2:dd:8f:57: 6d:9f:55:ad:d8:00:ca:3e:43:30:1f:c8:ad:55:92:c2:8f:1d: 11:b4:8c:cb:86:c5:74:98:78:7f:7a:2d:c2:39:dc:ed:9e:d9: 6f:27:88:e2:2d:f6:00:81:78:c3:06:ba:eb:ea:6f:34:e5:37: 0f:59:58:f3:9b:9d:b3:50:64:06:8d:14:bf:cc:fb:da:db:a8: df:fa:7f:49:fb:e6:03:9e:f7:e2:9c:81:9d:51:0b:1e:1b:fe: 2a:1a:77:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQwQUUxMTAvBgNVBAUTKDRCREQ1NjA2Q0VFMzgzODczMUIyNzZFQjVBRTI3NDA5 NTVFNkU4MzUwHhcNMjUwODA5MDE1NTUzWhcNMjUwODE2MDE1NTUzWjAYMRYwFAYD VQQDEw02ODk2YWFhOS1iMDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7FvH+3ADLfNqoLk6nZhfxPIL0r0qfikeYM0Nv7lN+4BzTXRFFn72aDzJ4DYv OhOst6S3UPG+mT7PeG/yTQQMvSu8WgMHo/b+PpYlHCKTPTdUHPAnx/XGMn6VMJ6Z GTtw9U1jtFmDoPEegruX6ZIXaK8U0cF6XyF8l8ih0ux1fjKVl2QGLjOWcmdLnLu6 aAc4bZHgafL+CgJfdmpsyaPTNSPNcwopfzpxfg+Ni8QEogYVQDqcqvnGKiU+hDBx l5oao1Mbi5MmqM70TnYjOkLM0fXa7sG3HHFsJKHKxZmmXOOfSgiBc80QwaSSoyd4 9mxSNVfSMcBLURsTncINCZSAMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL9ZKrNz tACbKGlg2YM5TDL+ihImMB8GA1UdIwQYMBaAFEvdVgbO44OHMbJ261ridAlV5ug1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDBBRS84NjIxNUZEMEZD MzgxMUVDOUQxQUE3MUVDNEY5QUUwMi9TOTFXQnM3amc0Y3hzbmJyV3VKMENWWG02 RFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1M5MVdCczdqZzRjeHNuYnJXdUowQ1ZYbTZEVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDBBRS84NjIxNUZEMEZDMzgxMUVDOUQxQUE3MUVDNEY5QUUwMi9TOTFXQnM3amc0 Y3hzbmJyV3VKMENWWG02RFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbqEJkgY1Jh9vI53mx+4vYR5Nvcoiih9fJGOQH2vNSsZG4X9t10gd0 C6iZs0JbDWegGdicbR5QDqtx7o9YVt7h/0h1EYgHibLqTJwUf9GChwXl6K7HHjf9 3C+aLOhzaK7P5JGWRa1VyMIYZC7Ls7oGHvu0KXaBFr464G1Fx56LqClTLhIMEQ3R BCehOzzW5cjgeni4uQRkeeaxn5Syp9Ldj1dtn1Wt2ADKPkMwH8itVZLCjx0RtIzL hsV0mHh/ei3COdztntlvJ4jiLfYAgXjDBrrr6m805TcPWVjzm52zUGQGjRS/zPva 26jf+n9J++YDnvfinIGdUQseG/4qGnfQ -----END CERTIFICATE-----Generated at Sat Aug 9 10:37:53 2025 by rpki-client