$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft File: 0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft (raw, json) Hash identifier: gMjd9ovZyStzfCSQ3qE6zhIVUaKaHLcKWqB2nekZeRg= Subject key identifier: 55:B3:08:A8:94:81:1A:25:26:F9:A7:76:B8:96:9C:58:6E:C1:F1:85 Authority key identifier: D2:90:DD:16:72:22:C3:9B:13:4F:81:E5:27:F0:22:D8:5E:DF:23:F4 Certificate issuer: /CN=A91AE08E/serialNumber=D290DD167222C39B134F81E527F022D85EDF23F4 Certificate serial: 08BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft Manifest number: 08B2 Signing time: Sun 10 Aug 2025 20:31:39 +0000 Manifest this update: Sun 10 Aug 2025 20:31:39 +0000 Manifest next update: Sun 17 Aug 2025 20:31:39 +0000 Files and hashes: 1: 0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.crl (hash: NKd87HR7lPUdO0tWdCDImdBGHPQxHM5+WxYWJVXP61Y=) 2: 6E038820BF6211EA94C2957CC4F9AE02.roa (hash: PLkHHx8GaTekc9dmC5heFwXjJ3zz86/8Y8QSgJQ+mrU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.crl rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2237 (0x8bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE08E, serialNumber=D290DD167222C39B134F81E527F022D85EDF23F4 Validity Not Before: Aug 10 20:31:39 2025 GMT Not After : Aug 17 20:31:39 2025 GMT Subject: CN=689901ab-8b42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:18:50:5e:50:99:85:f9:ab:ed:92:de:06:00: 47:7d:74:ab:c6:0e:64:65:27:c0:3f:32:62:df:55: 6c:de:e2:d9:b5:c8:fd:da:03:67:3c:df:4d:34:bb: af:fe:79:4d:3e:96:6c:6e:f9:cf:40:dd:9c:2c:a8: e3:2f:b3:87:ba:e3:04:03:ed:d2:43:f5:0d:52:a4: 2b:fe:c7:e8:c2:b6:9d:f7:44:ad:94:89:25:76:3a: c0:3b:7b:01:1d:91:8a:70:f7:14:44:d3:06:d0:00: bf:d8:c3:17:9d:96:c5:1e:7d:62:57:42:6e:de:68: fc:91:f6:59:15:8b:a5:99:98:b7:e9:bf:09:bb:96: 9c:12:fe:08:a3:6a:10:0e:65:36:9f:30:df:75:b7: e5:0c:f9:70:e9:b4:37:a4:5f:17:4b:f8:89:ca:27: ce:f1:fb:38:64:79:86:06:0d:d2:c7:bc:8e:4a:80: 71:45:e1:1d:ad:b6:54:15:ea:b8:e0:78:b3:43:d2: 3f:1b:b9:41:f9:b1:08:4a:da:3b:40:7f:e7:be:63: f5:77:95:2c:50:24:15:eb:67:55:e9:a1:f1:3a:b6: 6e:23:c1:8a:09:2e:5e:6b:ad:d7:d4:d2:8a:b4:25: 6d:96:5f:45:15:5e:b3:96:ce:7a:9e:69:1d:46:fb: a8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:B3:08:A8:94:81:1A:25:26:F9:A7:76:B8:96:9C:58:6E:C1:F1:85 X509v3 Authority Key Identifier: keyid:D2:90:DD:16:72:22:C3:9B:13:4F:81:E5:27:F0:22:D8:5E:DF:23:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:8c:75:dc:61:28:29:b0:8a:9d:ae:47:a1:09:00:8f:03:31: 7d:2b:99:83:21:1a:37:db:63:c7:df:89:14:e2:92:bb:74:34: 59:6f:04:18:3c:c3:a8:a0:95:ec:c9:aa:0e:bc:e2:09:2d:90: 5b:5a:2a:7e:b9:7b:81:c0:27:55:96:ac:85:ac:a2:9e:a5:f8: 04:76:40:5d:95:f0:4c:9a:43:2b:5c:7a:78:b5:fc:91:3e:14: 7e:84:c7:28:28:83:5e:c1:82:4d:d3:f8:b0:2d:06:b1:53:17: f2:26:57:08:06:0e:68:30:5e:11:d7:c0:b3:b1:7c:d9:56:e5: a0:84:26:b0:9a:7f:81:99:8d:62:cb:19:2c:10:67:fe:e0:a7: 62:89:a0:84:17:d2:7c:88:6f:a7:e3:db:55:6e:3b:be:52:17: 1f:8c:f4:74:0f:f2:73:30:9e:c5:61:a2:fe:70:4c:f6:b7:1f: 3b:da:35:7f:d9:ab:54:6e:a4:0e:5b:2f:31:6c:11:02:98:4b: a2:26:db:9c:ab:e1:44:f5:34:9c:ff:4d:75:fc:8a:dd:ea:ce: f0:5a:df:46:43:97:b8:dc:35:9d:89:db:99:e5:63:93:9c:5e: ed:15:e6:a6:10:02:e6:29:ac:d2:45:fe:cc:5c:12:64:56:1e: 60:76:df:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUUwOEUxMTAvBgNVBAUTKEQyOTBERDE2NzIyMkMzOUIxMzRGODFFNTI3RjAyMkQ4 NUVERjIzRjQwHhcNMjUwODEwMjAzMTM5WhcNMjUwODE3MjAzMTM5WjAYMRYwFAYD VQQDEw02ODk5MDFhYi04YjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/BhQXlCZhfmr7ZLeBgBHfXSrxg5kZSfAPzJi31Vs3uLZtcj92gNnPN9NNLuv /nlNPpZsbvnPQN2cLKjjL7OHuuMEA+3SQ/UNUqQr/sfowrad90StlIkldjrAO3sB HZGKcPcURNMG0AC/2MMXnZbFHn1iV0Ju3mj8kfZZFYulmZi36b8Ju5acEv4Io2oQ DmU2nzDfdbflDPlw6bQ3pF8XS/iJyifO8fs4ZHmGBg3Sx7yOSoBxReEdrbZUFeq4 4HizQ9I/G7lB+bEISto7QH/nvmP1d5UsUCQV62dV6aHxOrZuI8GKCS5ea63X1NKK tCVtll9FFV6zls56nmkdRvuovQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFWzCKiU gRolJvmndriWnFhuwfGFMB8GA1UdIwQYMBaAFNKQ3RZyIsObE0+B5SfwIthe3yP0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTA4RS9CMkEzQzIzQ0JG NEExMUVBOEMzMTVEMzFDNEY5QUUwMi8wcERkRm5JaXc1c1RUNEhsSl9BaTJGN2ZJ X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBwRGRGbklpdzVzVFQ0SGxKX0FpMkY3ZklfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTA4RS9CMkEzQzIzQ0JGNEExMUVBOEMzMTVEMzFDNEY5QUUwMi8wcERkRm5JaXc1 c1RUNEhsSl9BaTJGN2ZJX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRjHXcYSgpsIqdrkehCQCPAzF9K5mDIRo322PH34kU4pK7dDRZbwQY PMOooJXsyaoOvOIJLZBbWip+uXuBwCdVlqyFrKKepfgEdkBdlfBMmkMrXHp4tfyR PhR+hMcoKINewYJN0/iwLQaxUxfyJlcIBg5oMF4R18CzsXzZVuWghCawmn+BmY1i yxksEGf+4KdiiaCEF9J8iG+n49tVbju+UhcfjPR0D/JzMJ7FYaL+cEz2tx872jV/ 2atUbqQOWy8xbBECmEuiJtucq+FE9TSc/011/Ird6s7wWt9GQ5e43DWdiduZ5WOT nF7tFeamEALmKazSRf7MXBJkVh5gdt8M -----END CERTIFICATE-----Generated at Mon Aug 11 07:44:45 2025 by rpki-client