$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft File: -c1w52K-aV9LpJAqoguUD3cKBjg.mft (raw, json) Hash identifier: QQxCzSQq2JntOQirf0yNcp7lwM1bbJZ1ySqhvCIwZg8= Subject key identifier: 15:6C:F3:92:2A:FD:2A:2F:4C:B8:75:69:A2:71:C0:C1:D2:62:4F:54 Authority key identifier: F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38 Certificate issuer: /CN=A91B9AB9/serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638 Certificate serial: AB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft Manifest number: AA Signing time: Thu 07 Aug 2025 06:42:24 +0000 Manifest this update: Thu 07 Aug 2025 06:42:24 +0000 Manifest next update: Thu 14 Aug 2025 06:42:24 +0000 Files and hashes: 1: -c1w52K-aV9LpJAqoguUD3cKBjg.crl (hash: wwjj4l+rsTc9/Y8a0KdAGD1xYyDMvfZdJxPAnp6XX5s=) 2: 723EACFE6E8511EF83048D43C4F9AE02.roa (hash: SORlAdQ9FssMHlMIfPwfvKAJ6kXMG+aUvNMZPsDTNq4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 171 (0xab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9AB9, serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638 Validity Not Before: Aug 7 06:42:24 2025 GMT Not After : Aug 14 06:42:24 2025 GMT Subject: CN=68944ad0-e2bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:37:9c:2b:ee:9e:49:26:6f:fd:1b:85:1d:a8: d3:7a:b0:c8:d6:cd:ea:b8:01:80:e4:9e:8c:d5:6f: aa:e8:9b:7c:6b:a2:c5:e1:56:2a:43:1d:fe:c9:0c: 53:49:b8:db:d5:10:2e:8b:02:42:48:39:2c:d8:12: 8b:b6:67:8d:c5:f7:5c:b1:e0:04:db:fc:6f:47:23: ba:c5:cd:44:d8:93:71:1b:a6:bf:2f:40:ab:53:f1: 02:ad:33:1b:fd:8c:71:71:7e:cd:1e:d8:39:a7:b2: 99:e8:d8:38:b5:68:fb:3f:cc:04:52:0b:8a:ba:e2: 80:f3:4a:88:8c:5c:55:cc:9a:f9:17:6d:00:86:03: 97:98:f3:f8:32:da:5c:95:45:62:b5:df:f4:7c:7c: 26:13:51:91:e1:4c:e6:77:c4:e6:fe:ed:02:6a:be: 5e:3d:bd:03:ec:e4:b2:bc:45:73:53:81:67:2e:af: 6d:10:1b:d0:38:1d:33:07:d4:c9:4e:c1:03:d1:e5: 73:eb:e3:81:96:12:ac:19:21:cc:eb:83:76:d8:38: d2:ca:25:f9:f0:43:51:cd:1f:38:33:3a:1f:f5:1b: ec:13:b5:9f:e8:d8:28:96:f8:f6:24:fc:df:23:3e: 9f:18:9c:92:9d:3a:11:96:6f:e1:c7:f3:50:16:03: f8:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:6C:F3:92:2A:FD:2A:2F:4C:B8:75:69:A2:71:C0:C1:D2:62:4F:54 X509v3 Authority Key Identifier: keyid:F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:8b:c9:54:16:95:fa:f2:5b:3e:2d:63:72:4d:44:b8:f1:04: ab:9e:23:2f:44:93:d4:8a:04:1a:02:64:e3:d5:aa:49:e1:02: 50:8d:c7:94:3d:16:24:bb:c8:a0:c6:99:fe:b2:fe:97:90:08: 11:e0:d9:30:ef:47:1d:3e:52:e1:bc:0b:ce:b2:95:78:83:63: 0b:9c:09:6f:d8:ce:83:72:85:c5:93:25:3c:f0:a4:13:74:ab: 53:52:1a:cf:71:54:a0:40:e4:46:d7:74:36:d8:00:3c:a8:b9: f5:05:13:a5:d0:76:7e:07:b2:cf:bf:c2:bb:f1:df:1a:5d:8f: 2d:cb:9b:46:0a:91:2b:41:64:49:f6:ef:5a:54:34:8f:26:7c: 6e:a4:2b:7c:b7:51:b4:d4:53:8d:ad:16:84:1a:ca:92:e2:85: 3c:50:4e:0d:7d:cf:33:7a:ed:ab:94:14:3c:c0:5d:83:7a:c7: 3d:3f:27:e6:2e:aa:d7:46:20:ce:e1:52:18:7a:59:01:44:c1: 48:07:77:73:1b:c4:48:d6:0a:8c:14:98:68:0f:d9:e3:2f:31: 36:be:95:c1:33:f5:5e:fa:86:3b:5c:c0:45:af:61:62:cf:59: 32:bd:ec:b4:5a:0c:1d:d9:8a:75:f8:63:c3:38:48:f4:e9:1a: 06:40:1e:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlBQjkxMTAvBgNVBAUTKEY5Q0Q3MEU3NjJCRTY5NUY0QkE0OTAyQUEyMEI5NDBG NzcwQTA2MzgwHhcNMjUwODA3MDY0MjI0WhcNMjUwODE0MDY0MjI0WjAYMRYwFAYD VQQDEw02ODk0NGFkMC1lMmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxTecK+6eSSZv/RuFHajTerDI1s3quAGA5J6M1W+q6Jt8a6LF4VYqQx3+yQxT Sbjb1RAuiwJCSDks2BKLtmeNxfdcseAE2/xvRyO6xc1E2JNxG6a/L0CrU/ECrTMb /YxxcX7NHtg5p7KZ6Ng4tWj7P8wEUguKuuKA80qIjFxVzJr5F20AhgOXmPP4Mtpc lUVitd/0fHwmE1GR4Uzmd8Tm/u0Car5ePb0D7OSyvEVzU4FnLq9tEBvQOB0zB9TJ TsED0eVz6+OBlhKsGSHM64N22DjSyiX58ENRzR84Mzof9RvsE7Wf6Ngolvj2JPzf Iz6fGJySnToRlm/hx/NQFgP40QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBVs85Iq /SovTLh1aaJxwMHSYk9UMB8GA1UdIwQYMBaAFPnNcOdivmlfS6SQKqILlA93CgY4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUFCOS9DNzZGOTJDMDZF ODQxMUVGQTNDRDk4M0ZDNEY5QUUwMi8tYzF3NTJLLWFWOUxwSkFxb2d1VUQzY0tC amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1jMXc1MkstYVY5THBKQXFvZ3VVRDNjS0JqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUFCOS9DNzZGOTJDMDZFODQxMUVGQTNDRDk4M0ZDNEY5QUUwMi8tYzF3NTJLLWFW OUxwSkFxb2d1VUQzY0tCamcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMi8lUFpX68ls+LWNyTUS48QSrniMvRJPUigQaAmTj1apJ4QJQjceU PRYku8igxpn+sv6XkAgR4Nkw70cdPlLhvAvOspV4g2MLnAlv2M6DcoXFkyU88KQT dKtTUhrPcVSgQORG13Q22AA8qLn1BROl0HZ+B7LPv8K78d8aXY8ty5tGCpErQWRJ 9u9aVDSPJnxupCt8t1G01FONrRaEGsqS4oU8UE4Nfc8zeu2rlBQ8wF2Desc9Pyfm LqrXRiDO4VIYelkBRMFIB3dzG8RI1gqMFJhoD9njLzE2vpXBM/Ve+oY7XMBFr2Fi z1kyvey0Wgwd2Yp1+GPDOEj06RoGQB5B -----END CERTIFICATE-----Generated at Fri Aug 8 21:00:31 2025 by rpki-client