$ rpki-client -vvf rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft File: p1cNzzcgqNWohWpLtlg_G66uAJM.mft (raw, json) Hash identifier: 43x/c87M36xtbaj3jfOqqwxJUoofVE6/14QrlkaKiWM= Subject key identifier: 80:89:D4:C9:61:43:02:E7:B2:6D:E8:03:09:17:C5:D0:1B:91:AB:BD Authority key identifier: A7:57:0D:CF:37:20:A8:D5:A8:85:6A:4B:B6:58:3F:1B:AE:AE:00:93 Certificate issuer: /CN=A91B37E3/serialNumber=A7570DCF3720A8D5A8856A4BB6583F1BAEAE0093 Certificate serial: 0CC3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft Manifest number: 0C94 Signing time: Tue 12 Aug 2025 18:30:32 +0000 Manifest this update: Tue 12 Aug 2025 18:30:31 +0000 Manifest next update: Tue 19 Aug 2025 18:30:31 +0000 Files and hashes: 1: p1cNzzcgqNWohWpLtlg_G66uAJM.crl (hash: XDZQuuWaZ68NM6SU/mvZgr5s9XipDlIchdJXZHgaQPU=) 2: 1994900403CE11EAA10C6A84C4F9AE02.roa (hash: +t2OsFQRgFf0c7jNBR5fu1U2IpPKMIuwM5iZNaY//qo=) 3: 5B47C2265D8411F0BBB04858C4F9AE02.roa (hash: Uur2jCKI44RTppdHPrBOV4rDdME7NfVW8X3JWQwRDe0=) 4: 4F6721CEB84B11EAB6247B7AC4F9AE02.roa (hash: coEgjngsR/Ce6vFWSBZaZ5rCfdvEVYlwbgZyFrxHv0s=) 5: 24252532B84711EA8A7F036DC4F9AE02.roa (hash: 5MqZOZoSVhwobP4LcJgxINFesjcjTvuIMp43rKBprmw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.crl rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 18:30:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3267 (0xcc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B37E3, serialNumber=A7570DCF3720A8D5A8856A4BB6583F1BAEAE0093 Validity Not Before: Aug 12 18:30:31 2025 GMT Not After : Aug 19 18:30:31 2025 GMT Subject: CN=689b8847-4e7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:0d:f5:58:a6:2e:df:ba:d4:f0:5b:a1:f9:61: 3a:16:09:8c:f7:08:a9:33:25:41:55:5c:c6:64:ce: f5:3b:ed:2b:55:86:77:17:06:6f:a9:a6:14:63:0b: 2b:f5:e1:f6:20:dc:26:a8:ef:3c:fd:1a:3a:1a:20: d6:c6:2a:09:35:1d:78:c4:81:6f:3f:ac:92:04:f4: 7c:5b:63:16:00:10:85:d0:dd:dc:31:83:b4:a5:b1: 22:a6:be:5d:2e:28:2e:8c:2e:89:30:08:34:0c:fb: 51:58:69:bb:3b:2d:70:5c:36:f5:99:d9:ff:d2:cf: 09:82:5a:71:cb:56:ee:1a:58:5a:57:f5:74:8d:15: 88:12:f8:e0:f1:8d:a5:12:bb:09:f0:2e:13:84:8d: db:e0:d9:c0:1e:aa:a6:9a:0b:f7:6f:ca:d8:9e:23: 9a:6e:6c:80:93:1f:60:19:7c:1a:3a:2e:9c:21:ae: a5:72:61:8e:e3:cc:63:63:4b:98:08:c1:2b:04:9a: e1:88:fb:23:0f:4c:6f:d1:12:95:27:f8:5c:9a:e4: 45:87:17:87:50:7b:db:96:a4:62:29:25:1c:2a:a1: 5c:35:3c:60:cd:ac:25:b9:23:4a:0b:a6:c8:b4:fc: a5:ac:16:63:1a:4e:f0:34:90:b9:0f:7b:19:91:45: 7b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:89:D4:C9:61:43:02:E7:B2:6D:E8:03:09:17:C5:D0:1B:91:AB:BD X509v3 Authority Key Identifier: keyid:A7:57:0D:CF:37:20:A8:D5:A8:85:6A:4B:B6:58:3F:1B:AE:AE:00:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:c4:4f:2b:4e:04:f6:07:78:b6:a0:0a:8d:59:30:f9:1e:4a: 23:68:96:d8:47:94:01:b2:a7:46:07:69:8f:41:0d:00:fd:37: b2:ef:ee:81:69:0f:d8:be:c3:d6:19:e6:5d:63:6a:6b:05:39: 4b:b4:89:96:bc:72:73:84:d5:8d:a3:e4:82:e7:5a:e5:4d:00: 2e:f4:d3:fd:f2:4b:8a:95:ca:69:15:ef:3e:0e:51:fd:2c:9d: 2f:78:f1:47:87:a9:83:f4:bc:c1:93:bb:4c:ca:b9:59:1a:a4: 93:52:d3:51:7c:2e:4f:2d:31:da:23:6a:82:98:99:ea:11:62: fa:1f:c0:af:0a:56:da:df:64:93:1a:f2:0b:cd:7d:d2:7a:6f: c0:5d:e3:cb:b7:ca:77:50:37:dd:37:7b:be:9b:61:c3:4a:d5: 01:cc:b5:10:49:fb:91:40:54:2d:85:d0:de:34:06:d2:39:61: ff:6d:27:4b:d4:74:a6:14:bd:66:e8:e6:a2:7c:af:eb:46:1f: c4:f2:38:3e:5f:a3:38:ab:54:8f:90:af:b8:bf:14:45:78:e0: e2:ec:fe:ea:17:1e:22:d8:b7:76:19:e5:90:1f:e9:97:d5:76: 44:31:73:73:ae:9e:44:70:cd:6d:6a:11:b3:43:51:96:ca:4c: 34:97:ee:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM3RTMxMTAvBgNVBAUTKEE3NTcwRENGMzcyMEE4RDVBODg1NkE0QkI2NTgzRjFC QUVBRTAwOTMwHhcNMjUwODEyMTgzMDMxWhcNMjUwODE5MTgzMDMxWjAYMRYwFAYD VQQDEw02ODliODg0Ny00ZTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6g31WKYu37rU8Fuh+WE6FgmM9wipMyVBVVzGZM71O+0rVYZ3FwZvqaYUYwsr 9eH2INwmqO88/Ro6GiDWxioJNR14xIFvP6ySBPR8W2MWABCF0N3cMYO0pbEipr5d LigujC6JMAg0DPtRWGm7Oy1wXDb1mdn/0s8Jglpxy1buGlhaV/V0jRWIEvjg8Y2l ErsJ8C4ThI3b4NnAHqqmmgv3b8rYniOabmyAkx9gGXwaOi6cIa6lcmGO48xjY0uY CMErBJrhiPsjD0xv0RKVJ/hcmuRFhxeHUHvblqRiKSUcKqFcNTxgzawluSNKC6bI tPylrBZjGk7wNJC5D3sZkUV7MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFICJ1Mlh QwLnsm3oAwkXxdAbkau9MB8GA1UdIwQYMBaAFKdXDc83IKjVqIVqS7ZYPxuurgCT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzdFMy8wQUZFQTdDRTAz QTAxMUVBQjRDNUQyN0NDNEY5QUUwMi9wMWNOenpjZ3FOV29oV3BMdGxnX0c2NnVB Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AxY056emNncU5Xb2hXcEx0bGdfRzY2dUFKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzdFMy8wQUZFQTdDRTAzQTAxMUVBQjRDNUQyN0NDNEY5QUUwMi9wMWNOenpjZ3FO V29oV3BMdGxnX0c2NnVBSk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9xE8rTgT2B3i2oAqNWTD5HkojaJbYR5QBsqdGB2mPQQ0A/Tey7+6B aQ/YvsPWGeZdY2prBTlLtImWvHJzhNWNo+SC51rlTQAu9NP98kuKlcppFe8+DlH9 LJ0vePFHh6mD9LzBk7tMyrlZGqSTUtNRfC5PLTHaI2qCmJnqEWL6H8CvClba32ST GvILzX3Sem/AXePLt8p3UDfdN3u+m2HDStUBzLUQSfuRQFQthdDeNAbSOWH/bSdL 1HSmFL1m6OaifK/rRh/E8jg+X6M4q1SPkK+4vxRFeODi7P7qFx4i2Ld2GeWQH+mX 1XZEMXNzrp5EcM1tahGzQ1GWykw0l+7J -----END CERTIFICATE-----Generated at Wed Aug 13 05:54:15 2025 by rpki-client