$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft File: _CT1OQdHh-zqsAwkJgbCvWiBmg0.mft (raw, json) Hash identifier: aRpM65KTIgEKt2yE7LCFM8Qc+SsDsM5fbkb5r4N7yrs= Subject key identifier: 64:EA:CD:BD:CA:82:5B:71:05:88:78:5D:C5:13:12:81:0F:8C:C6:C0 Authority key identifier: FC:24:F5:39:07:47:87:EC:EA:B0:0C:24:26:06:C2:BD:68:81:9A:0D Certificate issuer: /CN=A91A9CBB/serialNumber=FC24F539074787ECEAB00C242606C2BD68819A0D Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft Manifest number: 40 Signing time: Sat 09 Aug 2025 08:00:34 +0000 Manifest this update: Sat 09 Aug 2025 08:00:33 +0000 Manifest next update: Sat 16 Aug 2025 08:00:33 +0000 Files and hashes: 1: _CT1OQdHh-zqsAwkJgbCvWiBmg0.crl (hash: dLoKjjUMQSRXbZNy4YN7N4DxzNMkdE18d4ufbtoEt70=) 2: 947AB09E459C11F0BF881335C4F9AE02.roa (hash: ZL0Aa2llI8aydVHlIy2x+gVqsBcKLbop2xFjrlC+Qtw=) 3: 2A8C8F02198E11F09D302145C4F9AE02.roa (hash: pkFF5f+Vaat+aJOayMibpTMU9Wp7Q864DQvUc24s624=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.crl rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9CBB, serialNumber=FC24F539074787ECEAB00C242606C2BD68819A0D Validity Not Before: Aug 9 08:00:33 2025 GMT Not After : Aug 16 08:00:33 2025 GMT Subject: CN=68970021-ff5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:eb:11:5d:44:eb:b9:1f:05:9e:4e:d0:26:ad: 5f:7f:c4:72:4c:dc:ab:18:79:b9:24:18:77:44:7c: 13:aa:2f:e5:cf:b4:c9:4b:ac:fd:1e:19:1c:7b:f5: cb:24:d4:83:ea:4c:36:2e:cf:d0:3f:a3:ec:87:b2: 18:bb:2d:e4:d0:d0:68:cc:d1:30:31:8b:eb:13:79: bd:fc:b9:9c:4a:7c:b7:66:d7:b8:c9:2d:99:8f:ca: 9e:23:be:37:f4:a7:b5:76:2c:1a:5a:13:f1:27:d9: 1d:1c:03:3e:fe:90:fb:ae:07:f5:6e:84:e5:27:50: d1:ee:2f:69:02:e8:6b:f0:ce:e2:b6:ba:08:97:9a: 05:1e:39:ba:50:0a:20:a2:c9:3c:15:f4:1d:69:55: e9:d7:ec:ab:18:d8:33:f8:d1:71:71:b0:ac:26:25: e1:3d:ff:61:df:b2:dc:77:ad:f0:5d:3d:8d:80:d2: aa:f6:65:61:12:69:90:e5:a8:66:69:e9:55:62:44: b8:96:85:42:89:d9:cd:a9:99:8b:37:2c:25:42:e5: 48:41:75:56:d9:b0:86:de:71:9a:c1:68:0b:a3:8e: fd:e4:de:a1:ef:e8:06:de:3b:76:78:98:7f:cb:03: 2a:c9:76:c9:20:c6:ee:54:1a:93:a3:f7:bd:d5:9a: 97:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:EA:CD:BD:CA:82:5B:71:05:88:78:5D:C5:13:12:81:0F:8C:C6:C0 X509v3 Authority Key Identifier: keyid:FC:24:F5:39:07:47:87:EC:EA:B0:0C:24:26:06:C2:BD:68:81:9A:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:35:b9:86:e3:fd:7a:f7:8a:52:96:15:af:83:e0:0c:89:11: 17:ea:a9:71:d1:60:91:55:3f:17:a6:7e:d1:28:28:eb:d1:de: 9f:48:93:37:40:3e:4d:14:8f:8f:ea:04:2d:2b:98:5c:0e:51: 45:7e:77:35:13:43:e7:c4:71:ab:fd:67:41:2f:b4:e1:14:e7: 07:4c:4d:b4:04:aa:49:e1:62:22:5b:59:cc:44:8b:ca:8b:54: 76:13:36:5f:75:47:bf:72:0e:b1:fc:f3:7b:16:e7:70:b9:71: ca:d8:55:4d:18:93:86:ee:5f:a2:81:12:a0:be:c7:86:1e:8a: d6:fd:7b:a0:12:2e:5d:5c:0b:cb:6f:81:e8:f1:04:ad:b8:34: 31:70:db:a2:ec:4d:76:23:fc:a0:e2:c6:ec:7b:0b:2e:60:a7: 74:15:12:81:c1:c7:77:a5:ce:91:61:2f:63:a7:5b:10:1e:4e: c4:c7:83:fa:44:12:97:fa:dd:8b:7d:b0:00:68:af:21:88:97: 03:e3:64:04:95:99:03:55:68:06:5e:8c:2d:4e:d2:a1:ed:13: 04:da:72:f5:7f:d5:41:23:bb:df:28:38:8a:0a:94:49:40:40: ca:12:ec:94:6e:31:ca:ac:5f:2b:7e:5c:20:da:82:2f:78:d4: 0b:14:a6:36 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OUNCQjExMC8GA1UEBRMoRkMyNEY1MzkwNzQ3ODdFQ0VBQjAwQzI0MjYwNkMyQkQ2 ODgxOUEwRDAeFw0yNTA4MDkwODAwMzNaFw0yNTA4MTYwODAwMzNaMBgxFjAUBgNV BAMTDTY4OTcwMDIxLWZmNWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDf6xFdROu5HwWeTtAmrV9/xHJM3KsYebkkGHdEfBOqL+XPtMlLrP0eGRx79csk 1IPqTDYuz9A/o+yHshi7LeTQ0GjM0TAxi+sTeb38uZxKfLdm17jJLZmPyp4jvjf0 p7V2LBpaE/En2R0cAz7+kPuuB/VuhOUnUNHuL2kC6GvwzuK2ugiXmgUeObpQCiCi yTwV9B1pVenX7KsY2DP40XFxsKwmJeE9/2Hfstx3rfBdPY2A0qr2ZWESaZDlqGZp 6VViRLiWhUKJ2c2pmYs3LCVC5UhBdVbZsIbecZrBaAujjv3k3qHv6AbeO3Z4mH/L AyrJdskgxu5UGpOj973Vmpf5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZOrNvcqC W3EFiHhdxRMSgQ+MxsAwHwYDVR0jBBgwFoAU/CT1OQdHh+zqsAwkJgbCvWiBmg0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5Q0JCL0Q1M0JEMTQ2MTVC MTExRjBBMjc3NEEwOUM0RjlBRTAyL19DVDFPUWRIaC16cXNBd2tKZ2JDdldpQm1n MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX0NUMU9RZEhoLXpxc0F3a0pnYkN2V2lCbWcwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 Q0JCL0Q1M0JEMTQ2MTVCMTExRjBBMjc3NEEwOUM0RjlBRTAyL19DVDFPUWRIaC16 cXNBd2tKZ2JDdldpQm1nMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAw1uYbj/Xr3ilKWFa+D4AyJERfqqXHRYJFVPxemftEoKOvR3p9IkzdA Pk0Uj4/qBC0rmFwOUUV+dzUTQ+fEcav9Z0EvtOEU5wdMTbQEqknhYiJbWcxEi8qL VHYTNl91R79yDrH883sW53C5ccrYVU0Yk4buX6KBEqC+x4Yeitb9e6ASLl1cC8tv gejxBK24NDFw26LsTXYj/KDixux7Cy5gp3QVEoHBx3elzpFhL2OnWxAeTsTHg/pE Epf63Yt9sABoryGIlwPjZASVmQNVaAZejC1O0qHtEwTacvV/1UEju98oOIoKlElA QMoS7JRuMcqsXyt+XCDagi941AsUpjY= -----END CERTIFICATE-----Generated at Sat Aug 9 14:33:46 2025 by rpki-client