$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft File: D3l9fCpdNafL2-hN_HPLmBnV7yM.mft (raw, json) Hash identifier: nRzu0N8S/agVh6VllYWh4LuLa0RN453Q/dVFOaN7JNs= Subject key identifier: BB:46:FD:D7:20:AD:4C:F7:E2:17:12:2E:90:60:0D:97:E4:28:48:63 Authority key identifier: 0F:79:7D:7C:2A:5D:35:A7:CB:DB:E8:4D:FC:73:CB:98:19:D5:EF:23 Certificate issuer: /CN=A91B0913/serialNumber=0F797D7C2A5D35A7CBDBE84DFC73CB9819D5EF23 Certificate serial: 028D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft Manifest number: 028A Signing time: Thu 07 Aug 2025 02:14:58 +0000 Manifest this update: Thu 07 Aug 2025 02:14:58 +0000 Manifest next update: Thu 14 Aug 2025 02:14:58 +0000 Files and hashes: 1: D3l9fCpdNafL2-hN_HPLmBnV7yM.crl (hash: S4Wlbu8qHfQrGXKs76GQLeP/DYHrzFxMtaCFz4Xho9Y=) 2: A1B8513612FE11ED8A1DA356C4F9AE02.roa (hash: zKt5rIlG3Ic7UH3iJOhsHCuRIq5p4/W7QWgInl/Ff3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.crl rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 02:14:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 653 (0x28d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0913, serialNumber=0F797D7C2A5D35A7CBDBE84DFC73CB9819D5EF23 Validity Not Before: Aug 7 02:14:58 2025 GMT Not After : Aug 14 02:14:58 2025 GMT Subject: CN=68940c22-7bba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:81:f5:a4:34:9e:89:b3:f9:d8:80:61:a5:af: 68:89:84:c4:48:7d:8e:7c:10:a7:18:f2:8c:78:26: 46:98:dc:1f:a5:49:9e:34:1a:26:b6:65:f9:0f:99: 35:e5:68:8e:e2:7c:6b:ee:ac:10:55:40:8b:67:f1: 5a:6e:58:ad:5e:25:14:6b:65:b1:b2:ff:bc:19:a0: c7:43:b0:0d:e7:9a:f2:81:41:dd:2b:c1:a3:ee:c7: a4:42:03:78:c8:26:dd:d2:50:cb:2f:5e:c7:38:84: cb:81:14:db:9f:7c:19:3b:14:be:a1:61:75:75:7a: 8b:41:13:e7:80:25:b3:99:03:b7:fa:05:8c:1e:54: ea:ff:e6:0f:95:60:de:50:25:3a:5d:86:03:7e:1c: e3:55:f8:81:35:d8:08:94:2c:e3:6b:6e:37:e3:fa: 92:21:9b:8a:62:a8:79:eb:4b:86:3f:d3:24:63:26: 0d:b8:26:e2:ff:5b:c5:32:a6:17:de:d6:f3:0e:ab: 1e:79:c4:a3:f9:8a:c0:25:df:0f:5f:00:ed:56:1c: b4:5c:9c:30:77:8c:c5:f4:5e:9b:af:97:f6:c6:2d: f6:bf:df:c9:3e:79:59:c6:42:5b:af:df:14:93:53: 65:06:6a:f6:40:7b:6c:39:4a:55:5b:00:93:c1:a4: 88:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:46:FD:D7:20:AD:4C:F7:E2:17:12:2E:90:60:0D:97:E4:28:48:63 X509v3 Authority Key Identifier: keyid:0F:79:7D:7C:2A:5D:35:A7:CB:DB:E8:4D:FC:73:CB:98:19:D5:EF:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:bf:02:fd:61:7b:4d:13:10:2a:3b:88:bf:ec:87:34:87:43: 2c:2c:63:4b:6a:bc:10:a4:37:07:d8:ec:d0:b0:39:62:0b:b1: 33:99:cd:44:ae:91:e6:b6:98:63:a9:8f:d5:fe:3d:a9:90:f3: f4:61:f0:60:8f:34:2d:88:2c:90:34:0e:5e:f2:98:38:87:b9: 86:31:ec:ce:76:b2:86:c6:08:71:58:c2:0e:20:ad:3b:b7:42: 00:70:13:ab:4d:60:39:ff:ba:6b:c5:b2:b0:f4:2a:86:73:d3: cd:25:17:87:31:c8:59:45:a6:2d:94:aa:3b:8e:e3:a7:a8:e8: 89:5e:39:40:ec:58:cb:ba:33:94:02:91:c7:0f:02:61:90:33: a0:40:cf:64:8f:6e:40:ee:ef:09:de:34:10:a3:a9:5c:3c:34: 67:15:3d:a1:a7:b9:7e:e9:4c:7c:5e:fc:06:8f:1a:4b:bd:e8: 7b:ec:bd:9c:d8:54:6b:dc:bf:d5:d7:fd:17:ce:93:4a:2a:6a: 40:e2:96:a0:f1:ab:de:19:ff:d0:2d:ad:e4:af:86:2f:57:4d: d2:b7:6f:21:1e:9a:a7:05:56:e9:4b:fb:41:78:f3:38:44:ae: 5a:1a:bf:7c:67:97:51:44:93:88:e3:21:fc:01:14:ce:60:dd: 9d:13:3f:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA5MTMxMTAvBgNVBAUTKDBGNzk3RDdDMkE1RDM1QTdDQkRCRTg0REZDNzNDQjk4 MTlENUVGMjMwHhcNMjUwODA3MDIxNDU4WhcNMjUwODE0MDIxNDU4WjAYMRYwFAYD VQQDEw02ODk0MGMyMi03YmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvYH1pDSeibP52IBhpa9oiYTESH2OfBCnGPKMeCZGmNwfpUmeNBomtmX5D5k1 5WiO4nxr7qwQVUCLZ/FablitXiUUa2Wxsv+8GaDHQ7AN55rygUHdK8Gj7sekQgN4 yCbd0lDLL17HOITLgRTbn3wZOxS+oWF1dXqLQRPngCWzmQO3+gWMHlTq/+YPlWDe UCU6XYYDfhzjVfiBNdgIlCzja2434/qSIZuKYqh560uGP9MkYyYNuCbi/1vFMqYX 3tbzDqseecSj+YrAJd8PXwDtVhy0XJwwd4zF9F6br5f2xi32v9/JPnlZxkJbr98U k1NlBmr2QHtsOUpVWwCTwaSIHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLtG/dcg rUz34hcSLpBgDZfkKEhjMB8GA1UdIwQYMBaAFA95fXwqXTWny9voTfxzy5gZ1e8j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDkxMy9EQTcxM0Y5NjEy RkExMUVEODRBRDcyNTFDNEY5QUUwMi9EM2w5ZkNwZE5hZkwyLWhOX0hQTG1CblY3 eU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0QzbDlmQ3BkTmFmTDItaE5fSFBMbUJuVjd5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDkxMy9EQTcxM0Y5NjEyRkExMUVEODRBRDcyNTFDNEY5QUUwMi9EM2w5ZkNwZE5h ZkwyLWhOX0hQTG1CblY3eU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnvwL9YXtNExAqO4i/7Ic0h0MsLGNLarwQpDcH2OzQsDliC7Ezmc1E rpHmtphjqY/V/j2pkPP0YfBgjzQtiCyQNA5e8pg4h7mGMezOdrKGxghxWMIOIK07 t0IAcBOrTWA5/7prxbKw9CqGc9PNJReHMchZRaYtlKo7juOnqOiJXjlA7FjLujOU ApHHDwJhkDOgQM9kj25A7u8J3jQQo6lcPDRnFT2hp7l+6Ux8XvwGjxpLveh77L2c 2FRr3L/V1/0XzpNKKmpA4pag8aveGf/QLa3kr4YvV03St28hHpqnBVbpS/tBePM4 RK5aGr98Z5dRRJOI4yH8ARTOYN2dEz8m -----END CERTIFICATE-----Generated at Thu Aug 7 05:11:10 2025 by rpki-client