$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft File: cM0CtmQkeah0RicVcG5qqaidosk.mft (raw, json) Hash identifier: NR/rxzUdME90dio0tPu7TDaEYNP/d3yVXBGctFh67Ws= Subject key identifier: 29:AE:01:1E:E9:4A:4D:15:48:AF:7A:10:1B:FF:15:82:2D:75:D5:66 Authority key identifier: 70:CD:02:B6:64:24:79:A8:74:46:27:15:70:6E:6A:A9:A8:9D:A2:C9 Certificate issuer: /CN=A91BE6D7/serialNumber=70CD02B6642479A874462715706E6AA9A89DA2C9 Certificate serial: 0141 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0CtmQkeah0RicVcG5qqaidosk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft Manifest number: 0136 Signing time: Mon 11 Aug 2025 04:45:50 +0000 Manifest this update: Mon 11 Aug 2025 04:45:49 +0000 Manifest next update: Mon 18 Aug 2025 04:45:49 +0000 Files and hashes: 1: cM0CtmQkeah0RicVcG5qqaidosk.crl (hash: NdkBjx5n8KQJ/x+pZv1vhK1mkah0xAALpKNezxEijiE=) 2: 7251CC7C546211EF85988412C4F9AE02.roa (hash: MXnU/QcuEmDKktg0CnuwolgKiFkbHbMHOSWdEnSOv5c=) 3: 371059F4B8A311EEBDA30041C4F9AE02.roa (hash: S3mbIiQ1nO0L4Bz9sTuCjtwzB96XobjR5ufSof/xnsw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.crl rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0CtmQkeah0RicVcG5qqaidosk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 04:45:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 321 (0x141) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE6D7, serialNumber=70CD02B6642479A874462715706E6AA9A89DA2C9 Validity Not Before: Aug 11 04:45:49 2025 GMT Not After : Aug 18 04:45:49 2025 GMT Subject: CN=6899757d-a826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:83:77:0b:25:14:40:bb:99:bd:71:c3:c8:3b: 67:8e:3f:a3:76:6c:7d:84:11:fc:9d:9c:f7:a9:b2: d3:26:95:9c:20:6e:8c:2f:7c:4a:16:a4:a5:1a:bc: 27:0a:fd:3e:d1:68:49:39:d2:d4:40:35:da:a6:f5: a5:27:f8:13:18:2e:f4:46:5b:fb:54:4e:ae:b5:ea: 24:51:10:51:a7:f5:54:75:e3:05:50:72:11:0a:51: 44:b1:9c:6b:15:16:3a:ba:e7:ee:36:52:e2:91:96: 22:c7:54:b8:19:7b:49:00:d0:52:80:b7:f3:a0:83: bd:78:5d:b2:ce:57:73:32:37:a0:f5:f8:5a:9e:3d: 0d:13:24:8c:d3:91:a2:1c:67:a4:39:4f:a2:5d:61: e5:a8:10:47:36:68:ff:d7:f5:a3:5e:c7:99:78:70: 38:19:c1:bc:c7:d8:87:3e:72:1a:9e:b5:56:c8:0c: 48:7e:93:f7:3e:15:c6:cb:23:a1:95:f8:d4:d4:b8: 52:5e:a3:01:29:ea:a7:8f:51:dc:4b:b9:1c:92:3b: d3:ef:a0:39:c0:9d:1f:cc:c6:03:d7:97:c0:59:7e: bb:3c:9a:81:26:08:63:e1:d1:41:c0:4f:0b:b5:a6: 7e:f6:3c:01:b2:7e:b5:ff:e2:ea:39:bc:f3:aa:88: 51:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:AE:01:1E:E9:4A:4D:15:48:AF:7A:10:1B:FF:15:82:2D:75:D5:66 X509v3 Authority Key Identifier: keyid:70:CD:02:B6:64:24:79:A8:74:46:27:15:70:6E:6A:A9:A8:9D:A2:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0CtmQkeah0RicVcG5qqaidosk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:e0:ca:92:79:96:74:91:18:59:9e:f4:1a:c8:09:3b:f0:04: c9:11:a1:c3:1e:74:53:0a:26:94:ab:47:d3:c7:07:21:09:b6: 76:e1:64:4e:b9:7d:99:e3:68:0a:5d:04:bf:1e:55:67:62:08: 9f:90:54:71:34:a1:d1:44:3c:45:1b:8f:85:af:72:bc:9c:9a: 66:f1:27:ba:f1:03:42:39:1e:28:51:4e:36:ea:69:fa:24:bb: 36:5c:05:c0:05:67:61:2a:ab:e9:f9:67:d9:18:80:b6:71:bc: 10:53:e1:6e:34:4e:6f:c9:1c:46:6f:12:a7:41:7e:73:25:ab: 3e:03:14:a8:81:7b:36:b8:2c:0f:a3:46:c3:98:69:b5:bb:f6: 5c:37:69:20:ba:46:39:d4:67:66:3c:72:a6:fa:d6:a8:83:be: 76:4e:de:c6:1b:76:de:8f:dc:2d:60:b1:f7:a5:9e:d1:ee:54: 47:b7:c0:de:84:f2:2b:73:70:4b:ed:45:ed:fe:ff:93:e4:58: f1:4d:2c:06:fb:98:82:42:dc:37:dc:ab:86:65:5e:67:a9:46: c4:11:ed:4c:30:fd:ee:f9:44:e1:3c:7d:45:91:b0:85:e6:06: 2c:7c:49:45:cc:df:fe:37:82:76:06:52:2b:59:60:c9:23:90: 0d:41:9c:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkU2RDcxMTAvBgNVBAUTKDcwQ0QwMkI2NjQyNDc5QTg3NDQ2MjcxNTcwNkU2QUE5 QTg5REEyQzkwHhcNMjUwODExMDQ0NTQ5WhcNMjUwODE4MDQ0NTQ5WjAYMRYwFAYD VQQDEw02ODk5NzU3ZC1hODI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA14N3CyUUQLuZvXHDyDtnjj+jdmx9hBH8nZz3qbLTJpWcIG6ML3xKFqSlGrwn Cv0+0WhJOdLUQDXapvWlJ/gTGC70Rlv7VE6uteokURBRp/VUdeMFUHIRClFEsZxr FRY6uufuNlLikZYix1S4GXtJANBSgLfzoIO9eF2yzldzMjeg9fhanj0NEySM05Gi HGekOU+iXWHlqBBHNmj/1/WjXseZeHA4GcG8x9iHPnIanrVWyAxIfpP3PhXGyyOh lfjU1LhSXqMBKeqnj1HcS7kckjvT76A5wJ0fzMYD15fAWX67PJqBJghj4dFBwE8L taZ+9jwBsn61/+LqObzzqohRNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCmuAR7p Sk0VSK96EBv/FYItddVmMB8GA1UdIwQYMBaAFHDNArZkJHmodEYnFXBuaqmonaLJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTZENy83MUE1MTU3NEFF RjIxMUVFQjI5M0I0ODBDNEY5QUUwMi9jTTBDdG1Ra2VhaDBSaWNWY0c1cXFhaWRv c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NNMEN0bVFrZWFoMFJpY1ZjRzVxcWFpZG9zay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTZENy83MUE1MTU3NEFFRjIxMUVFQjI5M0I0ODBDNEY5QUUwMi9jTTBDdG1Ra2Vh aDBSaWNWY0c1cXFhaWRvc2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAr4MqSeZZ0kRhZnvQayAk78ATJEaHDHnRTCiaUq0fTxwchCbZ24WRO uX2Z42gKXQS/HlVnYgifkFRxNKHRRDxFG4+Fr3K8nJpm8Se68QNCOR4oUU426mn6 JLs2XAXABWdhKqvp+WfZGIC2cbwQU+FuNE5vyRxGbxKnQX5zJas+AxSogXs2uCwP o0bDmGm1u/ZcN2kgukY51GdmPHKm+taog752Tt7GG3bej9wtYLH3pZ7R7lRHt8De hPIrc3BL7UXt/v+T5FjxTSwG+5iCQtw33KuGZV5nqUbEEe1MMP3u+UThPH1FkbCF 5gYsfElFzN/+N4J2BlIrWWDJI5ANQZwX -----END CERTIFICATE-----Generated at Tue Aug 12 18:19:00 2025 by rpki-client