$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft File: Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft (raw, json) Hash identifier: d+pxrtsMwkfc3aWkLI8tb52bP8Ouh52CDk8IJh1xw0I= Subject key identifier: 96:7C:A6:7C:1E:78:9A:8D:A6:D3:5B:84:9E:40:3F:43:6C:AF:12:49 Authority key identifier: 0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F Certificate issuer: /CN=A91AF5F7/serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F Certificate serial: 05F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft Manifest number: 05E8 Signing time: Sun 10 Aug 2025 23:06:30 +0000 Manifest this update: Sun 10 Aug 2025 23:06:29 +0000 Manifest next update: Sun 17 Aug 2025 23:06:29 +0000 Files and hashes: 1: Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl (hash: g2uQyM40ClVdfK+baD4dOtCHVCOYTWi4htlznaFEbOk=) 2: 4D38774A86E611EF9D6F5581C4F9AE02.roa (hash: 7ioLjk8VeJvEHBuoWRfrT57B74IDRpNgRa9+NJtrnGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1528 (0x5f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF5F7, serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F Validity Not Before: Aug 10 23:06:29 2025 GMT Not After : Aug 17 23:06:29 2025 GMT Subject: CN=689925f5-6ca4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d8:6b:ba:01:56:59:66:fb:ea:30:4c:d3:2f: 91:20:df:7d:a8:01:e1:35:30:ab:b0:50:1b:15:54: 91:45:e1:35:3f:b7:0f:6b:5a:fe:80:6f:5e:80:d2: f0:d4:0c:ee:c3:ed:a6:28:34:77:79:c5:2f:45:08: e2:30:00:65:a7:33:19:f2:aa:4d:54:3b:d1:8d:82: 3e:9b:91:9a:93:08:0a:a7:99:fa:5c:3f:bc:10:06: 40:82:70:cc:09:a4:e8:b9:85:79:66:eb:1d:a4:9e: 2b:41:e9:b6:16:5b:d7:e5:36:31:a5:34:f5:d1:5f: 26:98:d9:43:65:8b:cc:81:04:2d:ab:74:a9:d1:d8: 5a:d9:08:7d:fd:24:c5:9a:02:3d:53:a2:bd:52:28: 62:f6:9a:3a:76:55:88:6e:f2:8a:40:78:af:3e:91: 84:96:87:1d:b4:28:8a:fd:2a:72:eb:8e:f9:fa:2f: 39:bc:f8:bf:3a:35:26:e7:19:c3:f0:02:07:e0:21: 48:d1:c1:b2:4a:56:7e:f4:42:da:e2:0d:ec:b9:38: 4e:a2:22:67:e1:58:44:3d:e7:99:1d:bc:51:4c:ea: a5:4d:1b:7c:2b:98:1d:f5:05:bd:6b:5a:18:6a:20: b1:10:a1:20:eb:5a:88:33:67:33:d2:ed:35:c0:81: 87:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:7C:A6:7C:1E:78:9A:8D:A6:D3:5B:84:9E:40:3F:43:6C:AF:12:49 X509v3 Authority Key Identifier: keyid:0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:c6:84:d6:03:53:4a:35:c3:1b:15:10:a1:4b:4f:a0:78:4e: 21:2a:a0:68:01:0e:bf:20:38:f1:35:07:19:c8:5c:35:7f:18: 82:23:1a:51:66:ae:c8:e5:92:00:a0:8e:66:31:db:e9:9d:92: f7:18:ff:fc:6a:70:8d:cc:13:31:7d:99:4d:15:07:e0:42:78: aa:2c:5e:a4:16:67:0d:53:56:74:f1:02:dd:3f:ae:62:b5:67: 4a:76:3e:c4:e1:b1:e7:eb:9d:75:be:68:43:4f:91:dd:8f:a5: 7a:08:e9:81:02:58:ac:f3:d0:00:68:32:5b:16:10:54:a7:60: f3:78:24:5f:89:2c:cc:ef:87:58:52:66:eb:50:87:c8:d3:6d: 15:87:15:aa:be:56:99:b2:79:a7:ae:42:5f:27:ef:9f:54:92: 42:57:fe:2f:f6:f1:62:cc:92:4d:b6:f8:33:31:43:d8:a5:cf: 5e:90:aa:e2:f9:57:dc:38:b9:58:08:09:26:98:b1:2a:42:43: 18:52:cf:07:ab:08:d3:34:e1:86:76:78:01:3a:4c:ea:11:72: d1:fd:b2:73:f4:83:26:cd:e5:2d:6e:6e:48:20:2b:98:3e:30: 60:de:f5:8b:51:a9:b8:2b:75:87:50:ab:c0:ac:e5:43:fd:97: eb:99:6c:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY1RjcxMTAvBgNVBAUTKDBBMjc3RDI2QTlDMjQwMkI4QTFDRDQ1Nzc5MzVFNEYz QzI1OUMxOUYwHhcNMjUwODEwMjMwNjI5WhcNMjUwODE3MjMwNjI5WjAYMRYwFAYD VQQDEw02ODk5MjVmNS02Y2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt9hrugFWWWb76jBM0y+RIN99qAHhNTCrsFAbFVSRReE1P7cPa1r+gG9egNLw 1Azuw+2mKDR3ecUvRQjiMABlpzMZ8qpNVDvRjYI+m5GakwgKp5n6XD+8EAZAgnDM CaTouYV5ZusdpJ4rQem2FlvX5TYxpTT10V8mmNlDZYvMgQQtq3Sp0dha2Qh9/STF mgI9U6K9Uihi9po6dlWIbvKKQHivPpGElocdtCiK/Spy6475+i85vPi/OjUm5xnD 8AIH4CFI0cGySlZ+9ELa4g3suThOoiJn4VhEPeeZHbxRTOqlTRt8K5gd9QW9a1oY aiCxEKEg61qIM2cz0u01wIGHdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJZ8pnwe eJqNptNbhJ5AP0NsrxJJMB8GA1UdIwQYMBaAFAonfSapwkArihzUV3k15PPCWcGf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjVGNy80NEZDRTU2OEM3 ODQxMUVCQUQ0Qzk2NTlDNEY5QUUwMi9DaWQ5SnFuQ1FDdUtITlJYZVRYazg4Slp3 WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NpZDlKcW5DUUN1S0hOUlhlVFhrODhKWndaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjVGNy80NEZDRTU2OEM3ODQxMUVCQUQ0Qzk2NTlDNEY5QUUwMi9DaWQ5SnFuQ1FD dUtITlJYZVRYazg4Slp3WjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3xoTWA1NKNcMbFRChS0+geE4hKqBoAQ6/IDjxNQcZyFw1fxiCIxpR Zq7I5ZIAoI5mMdvpnZL3GP/8anCNzBMxfZlNFQfgQniqLF6kFmcNU1Z08QLdP65i tWdKdj7E4bHn6511vmhDT5Hdj6V6COmBAlis89AAaDJbFhBUp2DzeCRfiSzM74dY UmbrUIfI020VhxWqvlaZsnmnrkJfJ++fVJJCV/4v9vFizJJNtvgzMUPYpc9ekKri +VfcOLlYCAkmmLEqQkMYUs8HqwjTNOGGdngBOkzqEXLR/bJz9IMmzeUtbm5IICuY PjBg3vWLUam4K3WHUKvArOVD/ZfrmWwE -----END CERTIFICATE-----Generated at Mon Aug 11 07:49:54 2025 by rpki-client