$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft File: D6tO-YKPSvJnwW2K1HEKjuybu64.mft (raw, json) Hash identifier: ZkNRvEHO67niqG5bxmBsEqBgfvqtb5I+zg91UqG5DdM= Subject key identifier: 3B:CD:62:D9:E6:1D:07:D1:9A:5D:EB:D5:F8:2E:A6:D3:92:D6:4D:55 Authority key identifier: 0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE Certificate issuer: /CN=A91BEBE9/serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE Certificate serial: 01AA Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft Manifest number: 019F Signing time: Mon 11 Aug 2025 03:24:19 +0000 Manifest this update: Mon 11 Aug 2025 03:24:19 +0000 Manifest next update: Mon 18 Aug 2025 03:24:19 +0000 Files and hashes: 1: D6tO-YKPSvJnwW2K1HEKjuybu64.crl (hash: fEioBAH3RpDCDNYjnEtciU3wzEZ0xSrqQii1t/oE7Co=) 2: A0DEDD52FDF811EEA4D57274C4F9AE02.roa (hash: 5LwG+YuvnWBKIRnuTBcbel0b3f9GalJtz9Pj2RCQeu4=) 3: A16366C6FDF811EEA4D57274C4F9AE02.roa (hash: XEujoILkyQGDOgd5du+8WCWbh++D58fSsRkYOzlukgc=) 4: A1C0742EFDF811EEA4D57274C4F9AE02.roa (hash: NGaaDsp7E7XVzTL3vht2Lwlvp5OwCewd6D52RccQHyQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 426 (0x1aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEBE9, serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE Validity Not Before: Aug 11 03:24:19 2025 GMT Not After : Aug 18 03:24:19 2025 GMT Subject: CN=68996263-ec91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:92:eb:7f:23:9b:8b:03:35:0b:7a:eb:32:d0: e0:a0:f6:1b:e1:c8:74:f7:2b:4c:e5:69:a7:43:ad: 56:ae:c6:51:6e:cf:f8:ea:fc:47:f2:05:2f:21:06: 54:09:50:3e:48:41:61:de:48:4a:81:e7:1d:12:62: 06:41:b1:fc:76:ff:44:55:93:d5:c5:01:75:cb:6b: 19:76:ec:69:ba:a8:f2:cc:42:24:82:1b:5f:67:73: 18:8c:01:2f:00:e3:c7:77:b2:e9:91:d5:96:2d:71: f5:8f:80:34:39:c8:0a:35:1a:b7:bc:5e:63:89:57: bd:b1:42:4a:5e:c7:d9:af:c6:5b:a7:5d:2e:03:ec: 7a:c7:d6:b7:e3:a7:74:47:63:74:19:a6:8b:fb:25: aa:9a:31:63:af:6e:78:29:0a:46:ca:1f:b2:35:f2: de:84:80:ef:f0:dc:ce:0e:15:77:a7:f7:89:fd:8a: 47:f7:cc:6d:b9:0f:49:50:63:a4:5f:d3:c4:2a:14: 83:81:39:62:d8:ae:90:c4:14:05:ac:b2:2e:bf:e0: e0:be:99:58:f7:47:45:5b:87:ee:90:a2:96:9e:95: 95:ca:f1:3e:34:37:d2:e8:95:95:a1:e6:51:56:22: 6f:c5:53:3d:fc:d3:f0:8d:6e:05:9f:82:ef:12:29: f2:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:CD:62:D9:E6:1D:07:D1:9A:5D:EB:D5:F8:2E:A6:D3:92:D6:4D:55 X509v3 Authority Key Identifier: keyid:0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:ef:03:a7:3b:f7:3f:3e:9a:91:62:d0:79:37:81:43:a6:93: 53:41:7f:0e:0e:f2:04:1b:56:4c:d3:97:de:2e:07:f7:49:13: d6:4c:11:70:1a:e0:e7:a3:b1:a5:31:f4:b5:a8:87:50:3f:40: 71:b5:d5:6f:6e:32:bf:e8:49:94:f4:3b:be:1e:e2:68:ef:ad: 90:a1:4f:99:d4:5d:6c:3f:0b:98:b6:99:0d:fc:f2:ea:e5:e1: 5d:f0:d2:b0:33:b5:fa:b9:de:01:8c:2d:6c:c4:6f:2e:ba:b8: ef:20:60:81:4f:35:fc:70:83:2f:07:72:d2:9a:4d:e9:98:25: be:f0:f7:08:e5:95:1e:fc:93:c0:4d:b3:b3:b7:46:b2:59:f2: 18:9f:fc:3a:6e:72:4d:2d:18:ba:75:4d:a9:b3:4b:36:e3:d8: d1:20:5d:7d:df:77:15:95:6f:2e:21:d4:c1:be:65:f8:60:de: ea:57:5c:57:6d:5d:72:6c:28:5c:7f:d0:7e:98:8e:55:25:83: 23:e4:76:91:d8:c6:3d:83:7b:aa:b3:b8:18:72:a0:63:14:8b: b2:d1:ea:6d:a3:50:ff:dc:c5:3b:49:4b:45:cd:45:fb:97:3d: 32:0a:c9:70:41:ae:42:4a:54:6a:33:d6:5d:66:7c:ed:90:32: ed:a1:fc:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVCRTkxMTAvBgNVBAUTKDBGQUI0RUY5ODI4RjRBRjI2N0MxNkQ4QUQ0NzEwQThF RUM5QkJCQUUwHhcNMjUwODExMDMyNDE5WhcNMjUwODE4MDMyNDE5WjAYMRYwFAYD VQQDEw02ODk5NjI2My1lYzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApJLrfyObiwM1C3rrMtDgoPYb4ch09ytM5WmnQ61WrsZRbs/46vxH8gUvIQZU CVA+SEFh3khKgecdEmIGQbH8dv9EVZPVxQF1y2sZduxpuqjyzEIkghtfZ3MYjAEv AOPHd7LpkdWWLXH1j4A0OcgKNRq3vF5jiVe9sUJKXsfZr8Zbp10uA+x6x9a346d0 R2N0GaaL+yWqmjFjr254KQpGyh+yNfLehIDv8NzODhV3p/eJ/YpH98xtuQ9JUGOk X9PEKhSDgTli2K6QxBQFrLIuv+DgvplY90dFW4fukKKWnpWVyvE+NDfS6JWVoeZR ViJvxVM9/NPwjW4Fn4LvEinyWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDvNYtnm HQfRml3r1fguptOS1k1VMB8GA1UdIwQYMBaAFA+rTvmCj0ryZ8FtitRxCo7sm7uu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUJFOS85NEM5Qjg3ODAw NUQxMUVFQkU3QTkyNDFDNEY5QUUwMi9ENnRPLVlLUFN2Sm53VzJLMUhFS2p1eWJ1 NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0Q2dE8tWUtQU3ZKbndXMksxSEVLanV5YnU2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUJFOS85NEM5Qjg3ODAwNUQxMUVFQkU3QTkyNDFDNEY5QUUwMi9ENnRPLVlLUFN2 Sm53VzJLMUhFS2p1eWJ1NjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCj7wOnO/c/PpqRYtB5N4FDppNTQX8ODvIEG1ZM05feLgf3SRPWTBFw GuDno7GlMfS1qIdQP0BxtdVvbjK/6EmU9Du+HuJo762QoU+Z1F1sPwuYtpkN/PLq 5eFd8NKwM7X6ud4BjC1sxG8uurjvIGCBTzX8cIMvB3LSmk3pmCW+8PcI5ZUe/JPA TbOzt0ayWfIYn/w6bnJNLRi6dU2ps0s249jRIF1933cVlW8uIdTBvmX4YN7qV1xX bV1ybChcf9B+mI5VJYMj5HaR2MY9g3uqs7gYcqBjFIuy0epto1D/3MU7SUtFzUX7 lz0yCslwQa5CSlRqM9ZdZnztkDLtofy0 -----END CERTIFICATE-----Generated at Mon Aug 11 07:30:34 2025 by rpki-client