$ rpki-client -vvf rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft File: d-lG0L0pqiF78bHFrwsxU2wUenE.mft (raw, json) Hash identifier: pnURGR2Ten9bdsBcpBctb0t8KGIT6/3VUXQDAn1x6jg= Subject key identifier: FE:B3:17:AA:F4:F3:56:76:1D:35:1D:DB:45:59:EE:31:6B:51:F8:97 Authority key identifier: 77:E9:46:D0:BD:29:AA:21:7B:F1:B1:C5:AF:0B:31:53:6C:14:7A:71 Certificate issuer: /CN=A91B352F/serialNumber=77E946D0BD29AA217BF1B1C5AF0B31536C147A71 Certificate serial: 34AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft Manifest number: 34AB Signing time: Sun 10 Aug 2025 15:15:14 +0000 Manifest this update: Sun 10 Aug 2025 15:15:14 +0000 Manifest next update: Sun 17 Aug 2025 15:15:14 +0000 Files and hashes: 1: d-lG0L0pqiF78bHFrwsxU2wUenE.crl (hash: kYuiqzJfo3P6iqsKHoU472ksBH9IWJ5G0pOlj3mOPlc=) 2: 92BA7F4A69DE11EF8FF0EF50C4F9AE02.roa (hash: zYMb1XnG0WFocOb8g6o9H1kl0CBRuaJqUP3nm71UW5w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.crl rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13486 (0x34ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B352F, serialNumber=77E946D0BD29AA217BF1B1C5AF0B31536C147A71 Validity Not Before: Aug 10 15:15:14 2025 GMT Not After : Aug 17 15:15:14 2025 GMT Subject: CN=6898b782-8c31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d8:65:fe:57:ad:41:c0:5d:47:e5:e9:a7:9b: b4:ee:84:84:7f:5e:33:d8:48:3b:85:41:0e:4d:43: de:a8:3f:dc:b4:c4:24:94:9e:d8:c1:9f:8d:39:aa: f6:2a:e0:8e:8c:9b:30:dd:1f:cd:03:77:b4:fc:a8: 24:18:71:df:47:53:1b:d5:78:81:aa:b6:04:23:a7: 77:84:56:af:4d:18:e5:74:b3:59:17:8b:75:3e:6b: 3a:47:40:3b:9e:be:41:5c:e0:71:da:a7:06:71:2c: d6:3c:11:54:e2:16:22:63:73:f4:29:5b:ce:9c:85: 4a:1f:74:56:34:ad:71:98:41:9f:ec:25:f3:1b:b5: 65:88:2e:f7:1f:7e:96:68:fe:da:69:eb:ea:74:38: ce:08:58:8b:5e:fd:d3:7c:c4:7d:21:cd:07:58:c6: 7b:0a:67:57:44:92:ba:5e:07:56:75:fb:7c:72:0e: 25:f2:56:da:f4:9a:61:09:89:e3:d1:f4:41:53:b3: 85:e3:9f:e3:3f:dc:57:1c:17:8b:66:7d:23:50:51: 4b:60:5b:54:7c:29:36:70:e4:e2:a4:65:22:e8:73: 65:f4:32:56:87:c0:f0:8f:d3:fc:85:b0:f3:47:05: c0:05:de:8f:54:92:76:42:2d:94:f3:c1:94:20:05: 7f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:B3:17:AA:F4:F3:56:76:1D:35:1D:DB:45:59:EE:31:6B:51:F8:97 X509v3 Authority Key Identifier: keyid:77:E9:46:D0:BD:29:AA:21:7B:F1:B1:C5:AF:0B:31:53:6C:14:7A:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:e5:61:87:7b:3d:f2:bd:f1:3e:82:0f:1c:08:a9:82:ee:26: a6:81:a8:a6:62:26:a4:2b:d6:0e:7c:4e:c7:fa:92:ec:fd:1a: 3f:3b:34:3e:a7:8e:3c:bc:6c:2b:d8:4f:21:ad:fe:15:6d:94: a7:01:ab:d6:b4:b3:d3:a0:5e:db:e0:6e:41:cf:79:24:29:cc: f8:c2:89:a2:f4:77:69:13:3d:3d:a7:5b:5c:76:0c:4b:cf:b1: ac:eb:ab:a7:80:e3:ef:a6:c5:56:2c:34:a7:b4:a9:f5:15:15: 3e:31:7a:4c:c7:3b:9e:59:dd:53:bf:7d:b5:a8:ff:10:3d:05: 2a:a2:b8:3a:98:4b:3d:6f:aa:2b:fa:b9:dd:9c:24:85:91:fc: 1b:c2:b0:e9:86:0f:e7:ce:37:ca:1b:70:2a:bb:9e:76:fe:f7: 33:b3:48:53:d3:a0:d1:20:b8:d8:bb:c8:21:5e:4f:cb:50:89: ff:b3:45:ef:71:7f:e6:5e:9b:92:3f:9c:be:65:78:0c:ad:90: b3:c9:92:c8:4d:78:da:23:b5:65:8d:ff:35:ee:c0:a4:9f:ee: ef:dd:a7:c5:7a:23:2f:1f:df:ac:50:67:99:82:4f:6b:e1:bc: 7b:93:51:85:4a:52:aa:c0:06:7a:61:8c:3a:e9:31:45:e7:9f: 4c:3e:7d:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM1MkYxMTAvBgNVBAUTKDc3RTk0NkQwQkQyOUFBMjE3QkYxQjFDNUFGMEIzMTUz NkMxNDdBNzEwHhcNMjUwODEwMTUxNTE0WhcNMjUwODE3MTUxNTE0WjAYMRYwFAYD VQQDEw02ODk4Yjc4Mi04YzMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0thl/letQcBdR+Xpp5u07oSEf14z2Eg7hUEOTUPeqD/ctMQklJ7YwZ+NOar2 KuCOjJsw3R/NA3e0/KgkGHHfR1Mb1XiBqrYEI6d3hFavTRjldLNZF4t1Pms6R0A7 nr5BXOBx2qcGcSzWPBFU4hYiY3P0KVvOnIVKH3RWNK1xmEGf7CXzG7VliC73H36W aP7aaevqdDjOCFiLXv3TfMR9Ic0HWMZ7CmdXRJK6XgdWdft8cg4l8lba9JphCYnj 0fRBU7OF45/jP9xXHBeLZn0jUFFLYFtUfCk2cOTipGUi6HNl9DJWh8Dwj9P8hbDz RwXABd6PVJJ2Qi2U88GUIAV/QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP6zF6r0 81Z2HTUd20VZ7jFrUfiXMB8GA1UdIwQYMBaAFHfpRtC9Kaohe/Gxxa8LMVNsFHpx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzUyRi9GNkZGRTI5RTFE QTkxMUUyQThFRjZFQTUwOEIwMkNEMi9kLWxHMEwwcHFpRjc4YkhGcndzeFUyd1Vl bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QtbEcwTDBwcWlGNzhiSEZyd3N4VTJ3VWVuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzUyRi9GNkZGRTI5RTFEQTkxMUUyQThFRjZFQTUwOEIwMkNEMi9kLWxHMEwwcHFp Rjc4YkhGcndzeFUyd1VlbkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCe5WGHez3yvfE+gg8cCKmC7iamgaimYiakK9YOfE7H+pLs/Ro/OzQ+ p448vGwr2E8hrf4VbZSnAavWtLPToF7b4G5Bz3kkKcz4womi9HdpEz09p1tcdgxL z7Gs66ungOPvpsVWLDSntKn1FRU+MXpMxzueWd1Tv321qP8QPQUqorg6mEs9b6or +rndnCSFkfwbwrDphg/nzjfKG3Aqu552/vczs0hT06DRILjYu8ghXk/LUIn/s0Xv cX/mXpuSP5y+ZXgMrZCzyZLITXjaI7Vljf817sCkn+7v3afFeiMvH9+sUGeZgk9r 4bx7k1GFSlKqwAZ6YYw66TFF559MPn2f -----END CERTIFICATE-----Generated at Mon Aug 11 04:22:23 2025 by rpki-client