$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft File: reE11eBNSWNwmzymv8AQttD5fK8.mft (raw, json) Hash identifier: bb8raYznttK28pEMmwyihcayiMWylNElLrhszIMtejk= Subject key identifier: 1F:4D:A9:5E:01:F1:F1:C8:B0:00:53:B4:2B:C5:4B:D0:44:1A:28:3A Authority key identifier: AD:E1:35:D5:E0:4D:49:63:70:9B:3C:A6:BF:C0:10:B6:D0:F9:7C:AF Certificate issuer: /CN=A91B7A06/serialNumber=ADE135D5E04D4963709B3CA6BFC010B6D0F97CAF Certificate serial: 12CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft Manifest number: 12BA Signing time: Sat 02 Aug 2025 17:13:26 +0000 Manifest this update: Sat 02 Aug 2025 17:13:25 +0000 Manifest next update: Sat 09 Aug 2025 17:13:25 +0000 Files and hashes: 1: reE11eBNSWNwmzymv8AQttD5fK8.crl (hash: milFlT258LvQoCt9VIozRiM5Sl+WMlzEUjX9ylsbJrQ=) 2: F8E415E2987F11ED9E1F4D0FC4F9AE02.roa (hash: 7pmnV5Cl3nyicdVcCHy3I4exAgnaUpV8eerReqmDkys=) 3: F7B1497E987F11ED9E1F4D0FC4F9AE02.roa (hash: RNLRzQRn83cGoWXhxHuljK6RYAeQYTlxrkWaUDZ8G44=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.crl rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 17:13:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4810 (0x12ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7A06, serialNumber=ADE135D5E04D4963709B3CA6BFC010B6D0F97CAF Validity Not Before: Aug 2 17:13:25 2025 GMT Not After : Aug 9 17:13:25 2025 GMT Subject: CN=688e4736-ecc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a6:d6:68:67:15:02:cc:66:49:8a:be:fd:e9: a7:09:e3:92:8f:4b:87:1b:51:0c:23:b3:27:d9:03: f2:01:31:0a:88:69:0b:d1:d5:1e:13:de:33:1c:ee: cb:2a:62:e2:2a:20:58:f1:8c:e9:6f:c3:67:f5:5b: 23:2b:90:f6:6a:f0:27:8d:b7:80:1b:08:85:8c:95: 5b:7f:4d:3c:84:d6:66:ee:5c:70:ca:d4:6a:02:cb: 02:f4:46:af:de:7f:d4:c7:19:74:ea:a1:af:43:cd: 1b:ad:3d:b3:cf:7c:3e:e3:48:c5:80:d6:2d:eb:36: 3e:88:49:13:cf:d6:c5:1b:9c:11:2d:04:e5:80:dc: 55:af:fa:3b:b9:99:6e:f0:ee:c1:18:ad:0e:7a:8b: 47:f2:8e:78:d0:cd:5a:09:8f:3a:c0:ed:39:bb:54: 13:94:ec:63:c1:26:2f:03:21:cb:ce:66:dc:2b:80: f1:1a:d2:e0:20:5c:f5:05:7c:2d:f5:c0:8b:87:85: fc:38:98:9e:f4:2f:3f:0b:7c:ce:bf:0b:ac:c2:ee: 3b:92:45:cf:b9:b3:0a:63:fb:25:60:30:c2:5d:15: 24:ed:38:a5:c9:92:f7:01:f7:48:b5:58:50:3e:46: fb:20:4c:77:30:98:dd:ff:24:24:33:79:2c:d0:e2: 9b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:4D:A9:5E:01:F1:F1:C8:B0:00:53:B4:2B:C5:4B:D0:44:1A:28:3A X509v3 Authority Key Identifier: keyid:AD:E1:35:D5:E0:4D:49:63:70:9B:3C:A6:BF:C0:10:B6:D0:F9:7C:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:89:a9:08:f4:f2:6a:bd:38:7c:4d:d0:c4:07:a0:31:5e:a0: f0:fe:ee:79:03:01:8c:e8:b9:f6:91:b8:ff:51:33:31:38:1c: 5a:0a:13:1f:95:24:05:06:12:d1:54:05:a7:5b:c7:2f:a6:07: de:9e:ea:9f:7c:b0:fb:57:78:c4:df:16:c8:34:b5:7a:4d:d4: 87:af:a2:2e:89:10:d8:3c:86:4b:cf:05:ab:e4:c4:4f:af:07: bd:22:01:9f:a5:69:79:b5:17:b2:11:5e:e7:4c:3b:11:ea:87: ae:27:dc:23:b6:46:49:8f:65:94:34:97:0e:fe:59:f6:fa:3a: 66:d1:ec:d8:04:40:1d:17:1f:d4:2e:fe:cc:f1:30:98:58:eb: 05:67:3d:8d:34:9f:29:df:8e:e0:96:9d:5d:2d:66:93:7c:da: d1:00:5c:7b:5b:c3:11:cf:61:0f:af:e9:10:b0:1a:b8:f6:c6: 6d:38:cf:82:c1:84:c7:10:03:b8:15:d8:8a:c9:a5:d3:2a:78: 7f:1b:84:ba:d6:01:e6:c5:de:6b:76:94:c5:44:7e:ac:7d:6d: 18:d6:fe:44:28:38:3b:e5:17:a1:c5:05:59:57:c6:c5:c5:0a: dd:af:1b:4f:9b:e3:69:5c:0e:b1:2f:2e:1f:06:55:13:96:1f: 24:a7:eb:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEsowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdBMDYxMTAvBgNVBAUTKEFERTEzNUQ1RTA0RDQ5NjM3MDlCM0NBNkJGQzAxMEI2 RDBGOTdDQUYwHhcNMjUwODAyMTcxMzI1WhcNMjUwODA5MTcxMzI1WjAYMRYwFAYD VQQDEw02ODhlNDczNi1lY2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArqbWaGcVAsxmSYq+/emnCeOSj0uHG1EMI7Mn2QPyATEKiGkL0dUeE94zHO7L KmLiKiBY8Yzpb8Nn9VsjK5D2avAnjbeAGwiFjJVbf008hNZm7lxwytRqAssC9Eav 3n/Uxxl06qGvQ80brT2zz3w+40jFgNYt6zY+iEkTz9bFG5wRLQTlgNxVr/o7uZlu 8O7BGK0OeotH8o540M1aCY86wO05u1QTlOxjwSYvAyHLzmbcK4DxGtLgIFz1BXwt 9cCLh4X8OJie9C8/C3zOvwuswu47kkXPubMKY/slYDDCXRUk7TilyZL3AfdItVhQ Pkb7IEx3MJjd/yQkM3ks0OKbqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB9NqV4B 8fHIsABTtCvFS9BEGig6MB8GA1UdIwQYMBaAFK3hNdXgTUljcJs8pr/AELbQ+Xyv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0EwNi80OEY0RENEQUM2 QzMxMUU4OEY3MUNDNTZDNEY5QUUwMi9yZUUxMWVCTlNXTndtenltdjhBUXR0RDVm SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JlRTExZUJOU1dOd216eW12OEFRdHRENWZLOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0EwNi80OEY0RENEQUM2QzMxMUU4OEY3MUNDNTZDNEY5QUUwMi9yZUUxMWVCTlNX TndtenltdjhBUXR0RDVmSzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAriakI9PJqvTh8TdDEB6AxXqDw/u55AwGM6Ln2kbj/UTMxOBxaChMf lSQFBhLRVAWnW8cvpgfenuqffLD7V3jE3xbINLV6TdSHr6IuiRDYPIZLzwWr5MRP rwe9IgGfpWl5tReyEV7nTDsR6oeuJ9wjtkZJj2WUNJcO/ln2+jpm0ezYBEAdFx/U Lv7M8TCYWOsFZz2NNJ8p347glp1dLWaTfNrRAFx7W8MRz2EPr+kQsBq49sZtOM+C wYTHEAO4FdiKyaXTKnh/G4S61gHmxd5rdpTFRH6sfW0Y1v5EKDg75RehxQVZV8bF xQrdrxtPm+NpXA6xLy4fBlUTlh8kp+sH -----END CERTIFICATE-----Generated at Mon Aug 4 19:08:48 2025 by rpki-client