$ rpki-client -vvf rpki.apnic.net/member_repository/A91B74D6/DE22AD240CDF11EF9484E62AC4F9AE02/d0ZKhG930cTTZqMGuAaTn88qYBo.mft File: d0ZKhG930cTTZqMGuAaTn88qYBo.mft (raw, json) Hash identifier: yrUGtvII/knMtKTwrw8UHJcBqwTROQZCjwoYHIzhhGk= Subject key identifier: F1:C6:E8:4E:CF:FA:1B:A9:7D:D7:6C:E6:AB:6C:40:1D:AB:51:BF:95 Authority key identifier: 77:46:4A:84:6F:77:D1:C4:D3:66:A3:06:B8:06:93:9F:CF:2A:60:1A Certificate issuer: /CN=A91B74D6/serialNumber=77464A846F77D1C4D366A306B806939FCF2A601A Certificate serial: F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0ZKhG930cTTZqMGuAaTn88qYBo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B74D6/DE22AD240CDF11EF9484E62AC4F9AE02/d0ZKhG930cTTZqMGuAaTn88qYBo.mft Manifest number: F0 Signing time: Sat 09 Aug 2025 05:44:30 +0000 Manifest this update: Sat 09 Aug 2025 05:44:30 +0000 Manifest next update: Sat 16 Aug 2025 05:44:30 +0000 Files and hashes: 1: d0ZKhG930cTTZqMGuAaTn88qYBo.crl (hash: kZzNp9LqSoN2cWuZh+tNOwswLO94nh1IcdNxItL4ZgI=) 2: ABD84FB00F8A11EF943CC917C4F9AE02.roa (hash: PDnutuYB/riFGiwE/DA4jtgTvwtaDb0EZnLNk2dEE1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B74D6/DE22AD240CDF11EF9484E62AC4F9AE02/d0ZKhG930cTTZqMGuAaTn88qYBo.crl rsync://rpki.apnic.net/member_repository/A91B74D6/DE22AD240CDF11EF9484E62AC4F9AE02/d0ZKhG930cTTZqMGuAaTn88qYBo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0ZKhG930cTTZqMGuAaTn88qYBo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 245 (0xf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B74D6, serialNumber=77464A846F77D1C4D366A306B806939FCF2A601A Validity Not Before: Aug 9 05:44:30 2025 GMT Not After : Aug 16 05:44:30 2025 GMT Subject: CN=6896e03e-5cd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:5c:90:1b:21:8b:8e:46:c6:48:14:1e:3b:93: 31:05:19:a7:8c:fa:ad:10:16:76:c5:b5:90:8e:94: 81:bb:9f:74:43:bb:2d:21:4d:46:94:14:ea:96:15: 47:99:5b:83:b2:ac:cf:21:e9:0d:37:17:a3:67:78: 24:8a:b3:23:10:91:68:6b:0e:41:e8:01:87:b6:85: 1f:47:b0:6a:ea:3d:22:b6:3b:59:ac:8c:67:f8:31: 43:a2:44:d7:52:a3:3f:89:60:bc:e3:24:58:06:ce: 97:4f:2b:39:e2:28:59:9b:00:ea:c6:c1:0e:a5:ea: e0:aa:1e:75:f2:1f:5a:a3:74:48:88:04:d9:33:e9: 7c:25:9a:79:cf:92:7d:d2:d8:35:bb:05:cd:4e:c7: 22:5e:ea:b9:b9:bf:59:1e:d3:00:a9:3b:34:56:ce: cc:54:85:6e:ea:53:d5:b5:cd:64:67:42:36:3b:31: ae:85:29:4a:f0:1f:c6:e9:f9:ee:d3:c9:49:78:30: b8:63:98:9b:ab:15:09:9a:44:04:19:f4:85:be:84: 7b:4d:c6:d3:0d:d2:90:16:22:d8:81:42:c8:d1:07: 82:1d:fe:28:9f:1b:4a:10:da:6e:de:fe:b4:ac:81: bb:60:c0:49:a1:08:53:df:71:e3:ab:9b:77:43:66: 6f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:C6:E8:4E:CF:FA:1B:A9:7D:D7:6C:E6:AB:6C:40:1D:AB:51:BF:95 X509v3 Authority Key Identifier: keyid:77:46:4A:84:6F:77:D1:C4:D3:66:A3:06:B8:06:93:9F:CF:2A:60:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B74D6/DE22AD240CDF11EF9484E62AC4F9AE02/d0ZKhG930cTTZqMGuAaTn88qYBo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0ZKhG930cTTZqMGuAaTn88qYBo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B74D6/DE22AD240CDF11EF9484E62AC4F9AE02/d0ZKhG930cTTZqMGuAaTn88qYBo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:31:df:11:01:04:11:19:6f:b5:da:3c:34:63:4b:fd:28:af: 23:79:c7:20:33:6d:d7:57:6e:8d:9b:94:6b:fb:26:63:6c:5e: 14:8a:c6:05:45:a4:de:94:f1:12:59:f3:ec:19:1a:e7:3a:47: f7:65:7f:cb:c0:43:e8:bb:37:d4:8f:b4:7b:14:d2:fe:a3:ba: cc:b3:1a:1e:ae:4e:f8:c7:2c:61:ee:be:3d:26:02:5e:56:c1: a0:78:6b:9b:51:53:11:d7:86:6f:e4:1f:55:49:39:d5:1a:bc: 3f:7a:87:21:cd:7f:be:bc:b7:37:45:59:e1:4a:36:13:b8:30: 82:c2:2c:14:d3:03:18:66:bc:2c:b1:f4:c2:58:4e:fc:34:b8: fb:b3:e1:2d:be:f8:a1:af:bf:54:41:d1:9e:bd:57:49:f4:19: 3e:32:7f:bd:6e:19:3c:ff:d6:d8:2b:c2:39:84:b2:e4:5f:24: 3e:92:b7:b7:c0:0b:e9:9f:76:63:10:91:b7:a0:c8:5e:57:01: 3b:5a:ea:ec:eb:22:03:7c:34:9c:53:ff:57:21:b1:6e:14:cd: 54:d8:b2:30:da:a9:81:76:0b:4f:76:af:71:38:37:d2:25:00: b0:ca:03:84:65:95:9e:0f:45:87:5d:e8:fe:e3:02:bc:56:8f: 83:9d:a4:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc0RDYxMTAvBgNVBAUTKDc3NDY0QTg0NkY3N0QxQzREMzY2QTMwNkI4MDY5MzlG Q0YyQTYwMUEwHhcNMjUwODA5MDU0NDMwWhcNMjUwODE2MDU0NDMwWjAYMRYwFAYD VQQDEw02ODk2ZTAzZS01Y2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA21yQGyGLjkbGSBQeO5MxBRmnjPqtEBZ2xbWQjpSBu590Q7stIU1GlBTqlhVH mVuDsqzPIekNNxejZ3gkirMjEJFoaw5B6AGHtoUfR7Bq6j0itjtZrIxn+DFDokTX UqM/iWC84yRYBs6XTys54ihZmwDqxsEOpergqh518h9ao3RIiATZM+l8JZp5z5J9 0tg1uwXNTsciXuq5ub9ZHtMAqTs0Vs7MVIVu6lPVtc1kZ0I2OzGuhSlK8B/G6fnu 08lJeDC4Y5ibqxUJmkQEGfSFvoR7TcbTDdKQFiLYgULI0QeCHf4onxtKENpu3v60 rIG7YMBJoQhT33Hjq5t3Q2ZvkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPHG6E7P +hupfdds5qtsQB2rUb+VMB8GA1UdIwQYMBaAFHdGSoRvd9HE02ajBrgGk5/PKmAa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzRENi9ERTIyQUQyNDBD REYxMUVGOTQ4NEU2MkFDNEY5QUUwMi9kMFpLaEc5MzBjVFRacU1HdUFhVG44OHFZ Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QwWktoRzkzMGNUVFpxTUd1QWFUbjg4cVlCby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzRENi9ERTIyQUQyNDBDREYxMUVGOTQ4NEU2MkFDNEY5QUUwMi9kMFpLaEc5MzBj VFRacU1HdUFhVG44OHFZQm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlMd8RAQQRGW+12jw0Y0v9KK8jeccgM23XV26Nm5Rr+yZjbF4UisYF RaTelPESWfPsGRrnOkf3ZX/LwEPouzfUj7R7FNL+o7rMsxoerk74xyxh7r49JgJe VsGgeGubUVMR14Zv5B9VSTnVGrw/eochzX++vLc3RVnhSjYTuDCCwiwU0wMYZrws sfTCWE78NLj7s+Etvvihr79UQdGevVdJ9Bk+Mn+9bhk8/9bYK8I5hLLkXyQ+kre3 wAvpn3ZjEJG3oMheVwE7Wurs6yIDfDScU/9XIbFuFM1U2LIw2qmBdgtPdq9xODfS JQCwygOEZZWeD0WHXej+4wK8Vo+DnaQF -----END CERTIFICATE-----Generated at Sun Aug 10 13:54:07 2025 by rpki-client