$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.mft File: Rhxyji1WPw4JJFm6przkudbBi7g.mft (raw, json) Hash identifier: rsr/wLEaj32qBtYLV7u1sw4ajSdIqIkB5xm+0FWlLoA= Subject key identifier: 2B:AB:19:46:82:40:14:F8:B5:9F:50:0A:6A:9C:A5:70:AE:BB:48:6D Authority key identifier: 46:1C:72:8E:2D:56:3F:0E:09:24:59:BA:A6:BC:E4:B9:D6:C1:8B:B8 Certificate issuer: /CN=A91A9B22/serialNumber=461C728E2D563F0E092459BAA6BCE4B9D6C18BB8 Certificate serial: 07E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rhxyji1WPw4JJFm6przkudbBi7g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.mft Manifest number: 07DF Signing time: Fri 08 Aug 2025 21:26:00 +0000 Manifest this update: Fri 08 Aug 2025 21:25:59 +0000 Manifest next update: Fri 15 Aug 2025 21:25:59 +0000 Files and hashes: 1: Rhxyji1WPw4JJFm6przkudbBi7g.crl (hash: tFhZeHolwjkJNTo8W3foGni9+NIN5X1Ab2pFk9HkzrI=) 2: AF0AC0A63D0A11EB9F59D648C4F9AE02.roa (hash: +xXZdocc+DAKSGVr9i3J1ZCcXvPRm7qfVi4qSp6nPXU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.crl rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rhxyji1WPw4JJFm6przkudbBi7g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2022 (0x7e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9B22, serialNumber=461C728E2D563F0E092459BAA6BCE4B9D6C18BB8 Validity Not Before: Aug 8 21:25:59 2025 GMT Not After : Aug 15 21:25:59 2025 GMT Subject: CN=68966b67-58d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b4:1f:51:ea:2b:7d:3b:38:e5:82:79:a4:79: dd:08:6b:5b:5f:4f:38:1c:33:56:e5:55:63:87:0d: c1:47:5f:03:4c:e8:37:af:f2:ca:87:66:11:1b:fa: c9:22:4f:b7:2e:7a:3a:a4:5d:20:9c:25:e0:8b:e2: fe:59:66:46:b9:72:08:dc:95:7f:06:6f:1e:9b:3b: 07:8b:9f:ff:9a:a1:f2:f0:13:85:44:36:dd:11:a7: 1e:0e:cd:ee:5d:6a:6f:5d:c9:c1:45:5f:dc:69:85: e4:df:8a:b2:52:e5:15:0c:2d:b1:be:c5:8d:4a:03: 54:64:48:87:2a:54:2a:fc:d3:e0:18:f7:a1:ae:8e: 42:43:a5:22:bb:03:4f:82:5b:69:d1:aa:ff:8b:92: 9a:72:e4:d6:5c:0b:5e:ab:44:e5:7e:d5:cc:b7:ad: 81:f0:e0:0a:e0:a1:e0:f7:92:80:03:09:12:e5:c6: 9c:81:16:7e:66:28:b9:0b:56:49:5f:d1:a7:03:f9: f6:99:47:92:c7:a5:ea:1f:6a:22:20:cb:67:c2:6a: 8f:54:97:1f:a3:60:e1:a8:8f:e7:24:d3:62:0e:0c: 16:63:e0:28:71:2b:96:5c:9c:01:9f:fb:bb:e8:c5: 7f:50:62:c2:9d:35:2f:8d:a2:43:89:37:e0:bd:1b: 4b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:AB:19:46:82:40:14:F8:B5:9F:50:0A:6A:9C:A5:70:AE:BB:48:6D X509v3 Authority Key Identifier: keyid:46:1C:72:8E:2D:56:3F:0E:09:24:59:BA:A6:BC:E4:B9:D6:C1:8B:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rhxyji1WPw4JJFm6przkudbBi7g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:3b:d8:2b:ed:90:de:cc:a5:e0:01:72:4f:9e:36:36:e6:7d: 84:ee:ec:6a:34:5b:78:77:6c:dc:c2:d5:46:8a:e2:f1:5c:53: 06:44:25:15:d2:ac:60:2c:37:28:98:ec:e3:d4:b4:79:fd:31: 04:ff:42:32:aa:9e:b5:33:7a:0d:10:de:21:79:9b:21:dd:a5: bf:26:c0:1f:e8:18:ec:e3:a6:ed:44:18:9d:21:a2:2d:c0:ef: a5:b3:a6:da:9e:8d:03:c0:bc:ce:54:60:cd:3d:e0:ac:be:3b: 62:c7:ea:24:ad:89:9c:b1:75:f9:93:46:94:aa:63:b9:33:a4: 84:a2:59:10:a2:bc:b1:bd:02:f6:24:53:12:1c:e1:16:f0:cb: 65:58:18:0b:84:d7:02:26:a3:dc:41:54:d7:cb:d9:2c:91:dd: 56:89:98:77:0b:94:0f:68:21:33:f3:ec:25:9c:41:33:b4:63: 43:1e:bc:55:9d:ba:cf:52:0e:de:44:47:92:8e:b7:ca:2d:e3: f3:da:d4:29:43:60:b4:00:64:ad:62:ca:09:0f:79:2b:34:dd: 1b:33:7f:08:db:27:2e:b7:a6:0c:d1:3e:3e:6b:9a:13:20:a0: ad:66:62:95:21:19:03:ce:4f:e0:fa:60:bc:8d:b3:b6:64:8b: 03:98:e0:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlCMjIxMTAvBgNVBAUTKDQ2MUM3MjhFMkQ1NjNGMEUwOTI0NTlCQUE2QkNFNEI5 RDZDMThCQjgwHhcNMjUwODA4MjEyNTU5WhcNMjUwODE1MjEyNTU5WjAYMRYwFAYD VQQDEw02ODk2NmI2Ny01OGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyLQfUeorfTs45YJ5pHndCGtbX084HDNW5VVjhw3BR18DTOg3r/LKh2YRG/rJ Ik+3Lno6pF0gnCXgi+L+WWZGuXII3JV/Bm8emzsHi5//mqHy8BOFRDbdEaceDs3u XWpvXcnBRV/caYXk34qyUuUVDC2xvsWNSgNUZEiHKlQq/NPgGPehro5CQ6UiuwNP gltp0ar/i5KacuTWXAteq0TlftXMt62B8OAK4KHg95KAAwkS5cacgRZ+Zii5C1ZJ X9GnA/n2mUeSx6XqH2oiIMtnwmqPVJcfo2DhqI/nJNNiDgwWY+AocSuWXJwBn/u7 6MV/UGLCnTUvjaJDiTfgvRtLWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCurGUaC QBT4tZ9QCmqcpXCuu0htMB8GA1UdIwQYMBaAFEYcco4tVj8OCSRZuqa85LnWwYu4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUIyMi9ENzVGOTg1Q0ZD ODYxMUVBQkU4RjYyMkRDNEY5QUUwMi9SaHh5amkxV1B3NEpKRm02cHJ6a3VkYkJp N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JoeHlqaTFXUHc0SkpGbTZwcnprdWRiQmk3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUIyMi9ENzVGOTg1Q0ZDODYxMUVBQkU4RjYyMkRDNEY5QUUwMi9SaHh5amkxV1B3 NEpKRm02cHJ6a3VkYkJpN2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfO9gr7ZDezKXgAXJPnjY25n2E7uxqNFt4d2zcwtVGiuLxXFMGRCUV 0qxgLDcomOzj1LR5/TEE/0Iyqp61M3oNEN4heZsh3aW/JsAf6Bjs46btRBidIaIt wO+ls6bano0DwLzOVGDNPeCsvjtix+okrYmcsXX5k0aUqmO5M6SEolkQoryxvQL2 JFMSHOEW8MtlWBgLhNcCJqPcQVTXy9kskd1WiZh3C5QPaCEz8+wlnEEztGNDHrxV nbrPUg7eREeSjrfKLePz2tQpQ2C0AGStYsoJD3krNN0bM38I2ycut6YM0T4+a5oT IKCtZmKVIRkDzk/g+mC8jbO2ZIsDmOC0 -----END CERTIFICATE-----Generated at Sat Aug 9 14:25:34 2025 by rpki-client