$ rpki-client -vvf rpki.apnic.net/member_repository/A91A657F/E94BCC48603211EFA5F8EE7EC4F9AE02/R_rmMixRsd0CJJdveh0rkibQkOo.mft File: R_rmMixRsd0CJJdveh0rkibQkOo.mft (raw, json) Hash identifier: CuKOGkfHj66a350bZXrwJLhCuuZ2zbSasuOYYybDr9Q= Subject key identifier: 74:18:94:84:6F:C6:F3:37:AA:7F:F4:7F:6F:71:F5:28:B8:A7:40:F4 Authority key identifier: 47:FA:E6:32:2C:51:B1:DD:02:24:97:6F:7A:1D:2B:92:26:D0:90:EA Certificate issuer: /CN=A91A657F/serialNumber=47FAE6322C51B1DD0224976F7A1D2B9226D090EA Certificate serial: BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_rmMixRsd0CJJdveh0rkibQkOo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A657F/E94BCC48603211EFA5F8EE7EC4F9AE02/R_rmMixRsd0CJJdveh0rkibQkOo.mft Manifest number: B9 Signing time: Tue 05 Aug 2025 06:33:14 +0000 Manifest this update: Tue 05 Aug 2025 06:33:14 +0000 Manifest next update: Tue 12 Aug 2025 06:33:14 +0000 Files and hashes: 1: R_rmMixRsd0CJJdveh0rkibQkOo.crl (hash: qk6fwWSfXB/vpG9abZfhkVyHuJfnXUlXgP2PlyHvzdo=) 2: 7564FD08603311EFA997483AC4F9AE02.roa (hash: j5L2oMlmz/AOJc/zBZV6x799FBe2Mb9/ypYCcp0WrrY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A657F/E94BCC48603211EFA5F8EE7EC4F9AE02/R_rmMixRsd0CJJdveh0rkibQkOo.crl rsync://rpki.apnic.net/member_repository/A91A657F/E94BCC48603211EFA5F8EE7EC4F9AE02/R_rmMixRsd0CJJdveh0rkibQkOo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_rmMixRsd0CJJdveh0rkibQkOo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 06:33:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A657F, serialNumber=47FAE6322C51B1DD0224976F7A1D2B9226D090EA Validity Not Before: Aug 5 06:33:14 2025 GMT Not After : Aug 12 06:33:14 2025 GMT Subject: CN=6891a5aa-8e36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d2:4f:b0:03:e7:b0:b0:37:6c:86:3b:27:91: 54:67:94:7a:a4:5c:68:10:64:b9:17:60:99:91:a7: e7:60:56:62:a0:3e:a1:72:6b:11:8f:45:e4:00:ea: 3d:a2:77:de:e3:31:b1:8b:76:88:09:d5:4a:db:54: c6:61:2b:5f:d5:5b:f4:9a:ea:e7:3b:8c:55:0b:3f: 3b:d2:b1:c7:87:63:b1:40:84:ae:d0:7c:03:48:e6: ce:06:2a:cd:92:e7:e9:33:5b:dd:6a:e6:27:01:b7: 60:96:8c:25:87:a5:6d:7e:8f:d8:4d:b8:95:a1:02: 30:e8:0e:26:24:65:2a:d7:cd:d2:1f:f5:d4:98:6e: 05:d1:e1:2a:9f:dd:b9:df:83:e9:57:50:83:35:6c: ce:6c:b1:7d:6a:e0:bb:8d:9b:09:84:27:df:2b:25: 17:fe:f6:53:31:64:af:09:19:c3:cd:a4:86:cf:63: d9:d9:59:4f:ba:e3:0c:cc:8e:af:cf:11:b6:a9:92: ec:87:d9:9b:d2:78:dd:40:5c:8f:57:7b:47:2d:43: ed:e1:a4:24:7f:5d:30:f4:af:a3:c9:e0:38:ad:d9: e8:39:59:14:ec:ee:aa:61:6c:aa:91:b8:ef:ad:96: be:fe:be:73:b6:0e:f2:37:ad:b6:b0:a8:44:f0:65: 44:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:18:94:84:6F:C6:F3:37:AA:7F:F4:7F:6F:71:F5:28:B8:A7:40:F4 X509v3 Authority Key Identifier: keyid:47:FA:E6:32:2C:51:B1:DD:02:24:97:6F:7A:1D:2B:92:26:D0:90:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A657F/E94BCC48603211EFA5F8EE7EC4F9AE02/R_rmMixRsd0CJJdveh0rkibQkOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_rmMixRsd0CJJdveh0rkibQkOo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A657F/E94BCC48603211EFA5F8EE7EC4F9AE02/R_rmMixRsd0CJJdveh0rkibQkOo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:e4:69:ec:52:98:3d:4d:c2:9a:1d:10:8e:dd:0c:2c:91:5f: d1:2f:cd:e6:2a:20:f4:fa:82:bb:d7:cc:5a:36:30:24:df:3f: 69:cd:77:1b:70:5b:e0:3a:47:1d:5a:52:d8:64:4d:c8:cd:ff: b9:b5:b7:ce:e7:2e:96:72:43:39:9a:de:e7:8d:e2:57:ad:2d: 97:04:64:f5:1b:73:99:b6:2d:1d:33:23:46:a6:2c:7c:19:9f: 88:a3:c2:5c:57:50:88:7b:7c:66:12:da:8e:96:63:8f:5b:11: dd:b0:63:78:6f:d0:7d:e2:ac:a0:01:82:49:f5:16:25:d8:f8: ab:27:86:a3:4c:ae:d9:c4:09:0c:57:23:c6:b7:4f:36:0d:79: 41:8a:1d:18:31:ec:64:c4:02:4f:a8:1d:da:e2:eb:b1:79:e9: 15:e9:95:b1:7e:73:ce:42:21:be:1c:f2:d1:c8:62:b3:95:0c: 45:31:6b:48:d2:17:10:5b:94:5c:36:61:a5:8f:99:ed:c1:77: 5f:4e:20:e9:06:f6:f6:0f:01:ed:d5:38:95:b2:41:92:fb:ef: 05:c4:71:b5:1a:f1:61:c4:8e:db:61:5e:5a:02:c0:4d:c9:b7: 5b:ee:73:43:3f:52:60:1e:03:42:63:ba:d8:a9:d6:8d:d7:7b: 13:fa:82:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY1N0YxMTAvBgNVBAUTKDQ3RkFFNjMyMkM1MUIxREQwMjI0OTc2RjdBMUQyQjky MjZEMDkwRUEwHhcNMjUwODA1MDYzMzE0WhcNMjUwODEyMDYzMzE0WjAYMRYwFAYD VQQDEw02ODkxYTVhYS04ZTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAudJPsAPnsLA3bIY7J5FUZ5R6pFxoEGS5F2CZkafnYFZioD6hcmsRj0XkAOo9 onfe4zGxi3aICdVK21TGYStf1Vv0murnO4xVCz870rHHh2OxQISu0HwDSObOBirN kufpM1vdauYnAbdglowlh6Vtfo/YTbiVoQIw6A4mJGUq183SH/XUmG4F0eEqn925 34PpV1CDNWzObLF9auC7jZsJhCffKyUX/vZTMWSvCRnDzaSGz2PZ2VlPuuMMzI6v zxG2qZLsh9mb0njdQFyPV3tHLUPt4aQkf10w9K+jyeA4rdnoOVkU7O6qYWyqkbjv rZa+/r5ztg7yN622sKhE8GVEzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHQYlIRv xvM3qn/0f29x9Si4p0D0MB8GA1UdIwQYMBaAFEf65jIsUbHdAiSXb3odK5Im0JDq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjU3Ri9FOTRCQ0M0ODYw MzIxMUVGQTVGOEVFN0VDNEY5QUUwMi9SX3JtTWl4UnNkMENKSmR2ZWgwcmtpYlFr T28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Jfcm1NaXhSc2QwQ0pKZHZlaDBya2liUWtPby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjU3Ri9FOTRCQ0M0ODYwMzIxMUVGQTVGOEVFN0VDNEY5QUUwMi9SX3JtTWl4UnNk MENKSmR2ZWgwcmtpYlFrT28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB05GnsUpg9TcKaHRCO3QwskV/RL83mKiD0+oK718xaNjAk3z9pzXcb cFvgOkcdWlLYZE3Izf+5tbfO5y6WckM5mt7njeJXrS2XBGT1G3OZti0dMyNGpix8 GZ+Io8JcV1CIe3xmEtqOlmOPWxHdsGN4b9B94qygAYJJ9RYl2PirJ4ajTK7ZxAkM VyPGt082DXlBih0YMexkxAJPqB3a4uuxeekV6ZWxfnPOQiG+HPLRyGKzlQxFMWtI 0hcQW5RcNmGlj5ntwXdfTiDpBvb2DwHt1TiVskGS++8FxHG1GvFhxI7bYV5aAsBN ybdb7nNDP1JgHgNCY7rYqdaN13sT+oJe -----END CERTIFICATE-----Generated at Wed Aug 6 13:05:32 2025 by rpki-client