$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft File: redjNI0CWa0SzYi3ZNOYy4rHQMk.mft (raw, json) Hash identifier: Dm0pQ0BYbTpnzCELbJAsq0KRKfxEK44luGtGmZJWEts= Subject key identifier: 5F:A5:99:C6:32:E5:1A:1A:9A:DA:B8:18:09:DD:EB:58:61:25:22:2E Authority key identifier: AD:E7:63:34:8D:02:59:AD:12:CD:88:B7:64:D3:98:CB:8A:C7:40:C9 Certificate issuer: /CN=A91BBCC9/serialNumber=ADE763348D0259AD12CD88B764D398CB8AC740C9 Certificate serial: 060E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/redjNI0CWa0SzYi3ZNOYy4rHQMk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft Manifest number: 0605 Signing time: Sun 10 Aug 2025 22:56:16 +0000 Manifest this update: Sun 10 Aug 2025 22:56:15 +0000 Manifest next update: Sun 17 Aug 2025 22:56:15 +0000 Files and hashes: 1: redjNI0CWa0SzYi3ZNOYy4rHQMk.crl (hash: KKyvSI0LpLZL9O8s1d7MWa5ySTkEpY+RVE2LuZhzi+g=) 2: B69C27DCB6D711EB9D603F7DC4F9AE02.roa (hash: ClA7TsoBf9is9kiaEyUF4SSCiNxpgXXELAtT3dKemLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.crl rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/redjNI0CWa0SzYi3ZNOYy4rHQMk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 Aug 2025 22:56:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1550 (0x60e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBCC9, serialNumber=ADE763348D0259AD12CD88B764D398CB8AC740C9 Validity Not Before: Aug 10 22:56:15 2025 GMT Not After : Aug 17 22:56:15 2025 GMT Subject: CN=6899238f-4e05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f3:e8:57:9a:22:31:77:68:08:38:09:38:31: a8:49:70:4e:a8:26:f0:99:05:e8:18:28:9c:c5:5f: fb:8c:e4:de:7b:f8:5f:9e:b5:a9:a8:85:58:ff:28: 00:b2:f9:71:df:59:4a:e8:ee:2f:37:2a:a4:00:a2: 68:12:c9:3b:65:5f:4d:a4:c6:70:e7:7a:5a:43:aa: 39:59:f4:97:41:67:84:51:fc:0d:1c:82:85:c2:78: 83:21:ca:fe:d3:61:62:05:2a:c8:f6:c3:aa:d1:1d: b7:44:b3:5e:0c:25:a8:29:1b:5c:74:31:c7:84:ff: b0:a5:21:d7:1d:51:da:5d:25:e7:33:da:0e:e2:46: 1e:93:b7:b2:31:10:6d:7d:ef:e1:14:f5:6e:84:80: 9c:58:09:97:0f:01:0a:36:1b:d6:b5:38:58:9d:dc: 40:c1:76:c4:aa:69:e1:99:aa:af:04:b2:78:d9:75: c7:3f:7c:81:a1:78:01:a3:7c:c7:23:53:d0:2b:2f: 8d:48:ac:22:18:56:5f:d6:72:4d:dd:05:cf:c2:d4: dd:41:df:7e:e2:13:55:c7:d6:3a:71:02:b4:69:de: 58:80:f7:11:8d:06:06:64:77:78:70:75:ce:1f:16: 5a:59:54:20:13:19:06:aa:ea:a9:ce:90:56:6f:c5: 3e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:A5:99:C6:32:E5:1A:1A:9A:DA:B8:18:09:DD:EB:58:61:25:22:2E X509v3 Authority Key Identifier: keyid:AD:E7:63:34:8D:02:59:AD:12:CD:88:B7:64:D3:98:CB:8A:C7:40:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/redjNI0CWa0SzYi3ZNOYy4rHQMk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:ba:26:93:c0:bd:03:cf:32:c3:67:6b:28:13:11:e1:f7:74: e8:40:d4:9e:af:61:6e:71:30:37:bb:e3:05:30:e3:f8:8c:0c: cf:68:72:31:43:35:27:ca:8f:2c:e4:f5:9e:b0:94:58:c3:c3: 1d:fa:ce:cf:54:b1:7c:14:86:8d:aa:25:63:66:8b:59:49:21: 7e:3e:36:6f:73:99:54:f1:73:03:5d:c3:60:ce:2b:13:af:fe: da:f6:1d:a9:48:74:50:7f:96:1b:d9:33:2e:e9:f6:46:0e:5c: 4c:37:b9:6e:99:55:a1:33:f1:43:22:74:19:5a:b9:a0:28:d7: df:a7:79:5e:ad:c6:3a:f6:92:8f:86:e7:63:9c:65:e9:a1:8b: f5:58:26:4d:41:81:4c:ea:33:79:0b:a4:a7:f1:0f:5b:4a:1f: 85:2e:77:20:11:da:bf:a1:d3:4a:cb:3c:a6:c0:25:6d:42:d3: d7:58:2e:14:ea:72:98:ed:96:28:47:69:6a:eb:de:56:01:73: 17:a1:35:56:be:5f:ad:8a:4b:50:89:47:c7:83:7d:93:60:15: e0:72:2c:6a:29:ab:da:0c:c9:89:af:b0:87:bb:c7:e6:33:bf: 9e:f9:92:71:8d:2f:3d:c4:1c:f4:35:50:db:31:05:17:e6:27: 59:f6:a2:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJDQzkxMTAvBgNVBAUTKEFERTc2MzM0OEQwMjU5QUQxMkNEODhCNzY0RDM5OENC OEFDNzQwQzkwHhcNMjUwODEwMjI1NjE1WhcNMjUwODE3MjI1NjE1WjAYMRYwFAYD VQQDEw02ODk5MjM4Zi00ZTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/PoV5oiMXdoCDgJODGoSXBOqCbwmQXoGCicxV/7jOTee/hfnrWpqIVY/ygA svlx31lK6O4vNyqkAKJoEsk7ZV9NpMZw53paQ6o5WfSXQWeEUfwNHIKFwniDIcr+ 02FiBSrI9sOq0R23RLNeDCWoKRtcdDHHhP+wpSHXHVHaXSXnM9oO4kYek7eyMRBt fe/hFPVuhICcWAmXDwEKNhvWtThYndxAwXbEqmnhmaqvBLJ42XXHP3yBoXgBo3zH I1PQKy+NSKwiGFZf1nJN3QXPwtTdQd9+4hNVx9Y6cQK0ad5YgPcRjQYGZHd4cHXO HxZaWVQgExkGquqpzpBWb8U+CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+lmcYy 5Roamtq4GAnd61hhJSIuMB8GA1UdIwQYMBaAFK3nYzSNAlmtEs2It2TTmMuKx0DJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkNDOS9EMzBCMTVDMEI2 Q0YxMUVCODRFQjE4NTFDNEY5QUUwMi9yZWRqTkkwQ1dhMFN6WWkzWk5PWXk0ckhR TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JlZGpOSTBDV2EwU3pZaTNaTk9ZeTRySFFNay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkNDOS9EMzBCMTVDMEI2Q0YxMUVCODRFQjE4NTFDNEY5QUUwMi9yZWRqTkkwQ1dh MFN6WWkzWk5PWXk0ckhRTWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwuiaTwL0DzzLDZ2soExHh93ToQNSer2FucTA3u+MFMOP4jAzPaHIx QzUnyo8s5PWesJRYw8Md+s7PVLF8FIaNqiVjZotZSSF+PjZvc5lU8XMDXcNgzisT r/7a9h2pSHRQf5Yb2TMu6fZGDlxMN7lumVWhM/FDInQZWrmgKNffp3lercY69pKP hudjnGXpoYv1WCZNQYFM6jN5C6Sn8Q9bSh+FLncgEdq/odNKyzymwCVtQtPXWC4U 6nKY7ZYoR2lq695WAXMXoTVWvl+tiktQiUfHg32TYBXgcixqKavaDMmJr7CHu8fm M7+e+ZJxjS89xBz0NVDbMQUX5idZ9qKo -----END CERTIFICATE-----Generated at Wed Aug 13 00:25:28 2025 by rpki-client