$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft File: 25K4P0wYeDkNakTmrtV6d1ImNRI.mft (raw, json) Hash identifier: mE5Jok9lKZ/liAUC14SL4oYGKFwPz/ZtWT7gZFxBwWM= Subject key identifier: 0A:BB:0D:E2:5B:95:AE:27:B7:7E:0C:B0:74:85:B7:31:40:D7:D5:6C Authority key identifier: DB:92:B8:3F:4C:18:78:39:0D:6A:44:E6:AE:D5:7A:77:52:26:35:12 Certificate issuer: /CN=A91BBD5B/serialNumber=DB92B83F4C1878390D6A44E6AED57A7752263512 Certificate serial: 1D36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft Manifest number: 1D2B Signing time: Wed 06 Aug 2025 16:13:52 +0000 Manifest this update: Wed 06 Aug 2025 16:13:51 +0000 Manifest next update: Wed 13 Aug 2025 16:13:51 +0000 Files and hashes: 1: 25K4P0wYeDkNakTmrtV6d1ImNRI.crl (hash: xMw/OwlEtre9DlSVyK/kjhbZEagGuhu2XFNapmDYsXY=) 2: AB9480A6BB6811E69E8D1212C4F9AE02.roa (hash: XU2BtSx1XPF+OETuBQTO4A3xSlkRLbVqfxk4yTT8ml4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.crl rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 16:13:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7478 (0x1d36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBD5B, serialNumber=DB92B83F4C1878390D6A44E6AED57A7752263512 Validity Not Before: Aug 6 16:13:51 2025 GMT Not After : Aug 13 16:13:51 2025 GMT Subject: CN=68937f40-30f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:85:c6:b8:a8:40:e0:06:ac:8c:c8:ad:b7:72: d2:e9:0f:a8:ce:b8:e9:d5:0a:cb:87:46:b9:d9:2f: 05:2b:21:3a:de:4c:57:33:97:b4:bd:37:2b:84:d5: 0d:61:56:82:88:41:18:37:2a:ae:50:42:74:78:c3: 43:e3:74:b4:30:ea:6c:3f:eb:50:c6:b4:7f:c5:15: f8:f7:28:d4:3d:ad:ef:50:a3:ff:64:38:01:9a:89: 71:c4:3c:90:8e:06:48:e4:56:cf:fd:0c:49:34:16: f0:05:4e:82:ae:2c:0d:c0:81:54:6a:07:53:e3:05: 38:13:af:75:10:97:b2:ad:88:f8:5f:15:04:ed:cf: f7:fb:d0:db:d7:bf:ec:65:37:74:ae:72:1d:99:52: 8b:c2:fd:97:bc:ed:41:eb:1d:21:75:e2:d1:0f:15: ce:7f:00:f0:b6:91:42:b6:a7:c9:36:f4:04:38:30: 15:b1:28:06:39:19:92:5f:63:90:42:26:83:38:da: 41:15:2e:ba:13:b5:f1:d5:1b:e9:94:c0:98:e9:ee: 1a:1b:47:bf:c0:d2:80:85:58:5f:a3:f5:00:3f:be: cc:c3:9f:0a:a8:fe:0d:fb:76:77:ae:e6:28:3a:f3: b9:03:3b:da:62:5a:33:c0:0e:66:c4:08:57:6b:d1: 38:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:BB:0D:E2:5B:95:AE:27:B7:7E:0C:B0:74:85:B7:31:40:D7:D5:6C X509v3 Authority Key Identifier: keyid:DB:92:B8:3F:4C:18:78:39:0D:6A:44:E6:AE:D5:7A:77:52:26:35:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:0a:db:b9:9f:8b:3f:f4:ea:41:38:4b:77:d4:d7:b5:c2:a1: 90:10:10:27:27:df:03:b9:fe:c9:46:0f:84:c1:9b:ab:d4:77: 69:5a:92:4e:9a:eb:49:f0:a7:8a:99:8e:f9:01:59:e3:35:62: af:54:c7:28:b0:c3:1f:8c:cb:26:fe:d6:70:c9:5a:42:12:1b: e6:75:cd:05:fd:48:fc:ef:b6:b7:9e:06:b7:c6:78:1e:60:7c: a4:ce:49:f8:df:fe:d7:81:a0:be:78:86:b4:12:36:06:a9:61: 86:ad:b9:ac:a3:32:03:cf:d8:1e:88:dc:54:66:ec:af:40:59: 53:7f:dd:10:20:6b:31:72:d1:96:73:c1:2e:0f:18:6f:55:dc: 24:a8:7f:6a:64:65:e5:a1:5b:61:dd:4b:cd:ce:7a:99:35:80: a9:13:2f:3c:cc:da:9b:4d:c3:aa:46:65:3a:09:45:27:de:06: 71:de:fb:17:f9:63:5c:e9:34:00:03:f0:e7:ff:a2:f9:15:39: f1:10:30:39:a9:eb:a6:2c:27:53:7e:47:78:36:4a:18:8e:9f: 5e:5a:30:03:ef:6b:0b:c8:ec:e5:41:50:8e:df:f0:19:64:77: 30:63:a8:1b:9b:68:8a:b8:de:98:98:5f:15:79:83:bd:94:7e: 64:32:e7:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHTYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJENUIxMTAvBgNVBAUTKERCOTJCODNGNEMxODc4MzkwRDZBNDRFNkFFRDU3QTc3 NTIyNjM1MTIwHhcNMjUwODA2MTYxMzUxWhcNMjUwODEzMTYxMzUxWjAYMRYwFAYD VQQDEw02ODkzN2Y0MC0zMGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7YXGuKhA4AasjMitt3LS6Q+ozrjp1QrLh0a52S8FKyE63kxXM5e0vTcrhNUN YVaCiEEYNyquUEJ0eMND43S0MOpsP+tQxrR/xRX49yjUPa3vUKP/ZDgBmolxxDyQ jgZI5FbP/QxJNBbwBU6CriwNwIFUagdT4wU4E691EJeyrYj4XxUE7c/3+9Db17/s ZTd0rnIdmVKLwv2XvO1B6x0hdeLRDxXOfwDwtpFCtqfJNvQEODAVsSgGORmSX2OQ QiaDONpBFS66E7Xx1RvplMCY6e4aG0e/wNKAhVhfo/UAP77Mw58KqP4N+3Z3ruYo OvO5AzvaYlozwA5mxAhXa9E4WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAq7DeJb la4nt34MsHSFtzFA19VsMB8GA1UdIwQYMBaAFNuSuD9MGHg5DWpE5q7VendSJjUS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkQ1Qi8xNzAyRkMzRUJC NjcxMUU2QUUyNDA0MEZDNEY5QUUwMi8yNUs0UDB3WWVEa05ha1RtcnRWNmQxSW1O UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI1SzRQMHdZZURrTmFrVG1ydFY2ZDFJbU5SSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkQ1Qi8xNzAyRkMzRUJCNjcxMUU2QUUyNDA0MEZDNEY5QUUwMi8yNUs0UDB3WWVE a05ha1RtcnRWNmQxSW1OUkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBECtu5n4s/9OpBOEt31Ne1wqGQEBAnJ98Duf7JRg+EwZur1HdpWpJO mutJ8KeKmY75AVnjNWKvVMcosMMfjMsm/tZwyVpCEhvmdc0F/Uj877a3nga3xnge YHykzkn43/7XgaC+eIa0EjYGqWGGrbmsozIDz9geiNxUZuyvQFlTf90QIGsxctGW c8EuDxhvVdwkqH9qZGXloVth3UvNznqZNYCpEy88zNqbTcOqRmU6CUUn3gZx3vsX +WNc6TQAA/Dn/6L5FTnxEDA5qeumLCdTfkd4NkoYjp9eWjAD72sLyOzlQVCO3/AZ ZHcwY6gbm2iKuN6YmF8VeYO9lH5kMudE -----END CERTIFICATE-----Generated at Fri Aug 8 13:07:38 2025 by rpki-client