$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.mft File: 0VLfcuXWwcb-QrZCN3w7CIEobec.mft (raw, json) Hash identifier: pwzUy/nnEX65KiTHj5HVbCDYdCeUgzOa6agRXSa9+sU= Subject key identifier: 0C:60:3D:40:9F:BF:82:42:A9:D2:A9:31:CD:5D:26:6E:74:6D:91:0E Authority key identifier: D1:52:DF:72:E5:D6:C1:C6:FE:42:B6:42:37:7C:3B:08:81:28:6D:E7 Certificate issuer: /CN=A91C0FAC/serialNumber=D152DF72E5D6C1C6FE42B642377C3B0881286DE7 Certificate serial: 053F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0VLfcuXWwcb-QrZCN3w7CIEobec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.mft Manifest number: 053B Signing time: Sun 10 Aug 2025 23:36:15 +0000 Manifest this update: Sun 10 Aug 2025 23:36:15 +0000 Manifest next update: Sun 17 Aug 2025 23:36:15 +0000 Files and hashes: 1: 0VLfcuXWwcb-QrZCN3w7CIEobec.crl (hash: arYdeA8gWG0/ZplV9jchVR7dbx1/c1EqcyiwKKw+kGg=) 2: 4C2E7A3C049B11ECAC7E5D0DC4F9AE02.roa (hash: RRDCzU53SK4RYR2DdbmwE16o06HoY4GRJ9TEKW1rm3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.crl rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0VLfcuXWwcb-QrZCN3w7CIEobec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1343 (0x53f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0FAC, serialNumber=D152DF72E5D6C1C6FE42B642377C3B0881286DE7 Validity Not Before: Aug 10 23:36:15 2025 GMT Not After : Aug 17 23:36:15 2025 GMT Subject: CN=68992cef-7a2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ea:fa:7a:80:44:40:de:78:0f:1a:36:f6:2d: 45:51:e1:12:2b:43:de:12:e9:e3:d8:c3:cd:57:a2: ca:00:57:60:9c:53:c7:63:cc:46:82:76:90:6e:b3: 11:d9:e6:08:58:1e:f5:a2:39:f3:46:f5:4a:45:08: 9c:46:12:08:f0:be:7c:f2:95:58:93:c2:7c:0d:20: 6b:e5:3b:dd:13:71:cc:9b:8a:89:c7:87:b5:68:32: e8:9a:74:b7:50:a7:76:63:1e:bc:68:a4:cd:a9:0a: 04:05:1c:d7:38:cd:82:64:01:48:cc:f3:51:06:da: 13:f1:f5:3f:13:c2:c4:85:6b:e1:31:7d:d6:b5:db: ee:73:c0:0d:14:a8:69:e1:ec:5f:e0:bd:64:cf:38: b2:de:fb:cf:04:33:f2:a0:f6:9d:d5:1b:d5:2b:bd: 25:67:e4:47:b1:b8:c7:f2:44:a5:76:90:29:60:d0: a0:de:64:da:9a:10:20:7e:6e:5c:fe:e5:44:eb:f5: e2:20:ca:f2:b7:2a:1c:40:26:a2:6d:94:46:f2:86: 9b:eb:2a:6a:b5:43:23:c4:a3:c1:87:17:85:23:1d: fb:15:32:9e:e7:d0:cc:d3:81:cc:77:b5:3e:a1:cf: d6:c3:e2:b4:11:bd:4b:08:72:42:9d:f3:84:3d:26: 22:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:60:3D:40:9F:BF:82:42:A9:D2:A9:31:CD:5D:26:6E:74:6D:91:0E X509v3 Authority Key Identifier: keyid:D1:52:DF:72:E5:D6:C1:C6:FE:42:B6:42:37:7C:3B:08:81:28:6D:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0VLfcuXWwcb-QrZCN3w7CIEobec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:96:2f:b2:ab:44:b3:8c:53:09:80:8f:84:40:85:79:4f:c2: f8:6c:e6:d4:57:8d:81:53:6e:10:a1:a6:d7:d6:76:72:5b:21: ca:71:9b:2c:55:e8:ba:c5:6b:04:36:ad:ef:f3:85:60:c9:fc: c9:8b:51:8c:0d:09:c3:db:8c:db:60:bd:c1:3b:ac:ed:74:13: d2:8e:44:5a:de:a7:18:27:f1:9a:ee:a4:26:91:2e:7b:bf:f7: f3:e3:ec:62:09:c0:2d:02:23:30:7e:25:65:f2:05:cb:e6:4b: 8f:83:48:83:73:10:8a:cc:3d:53:54:bb:0b:ee:a0:63:33:e8: ef:1b:c0:fb:e1:c9:27:cf:1a:f9:d1:e8:54:2c:1f:b7:2b:3c: 2b:32:57:2b:b2:06:31:8a:0a:b6:29:c0:10:a5:e2:62:66:89: 74:42:28:04:ce:f9:19:db:d2:11:42:ed:67:ef:51:af:3a:f4: 6f:88:cc:b8:00:1e:31:2e:2f:a2:b6:b0:a6:2c:50:3c:4f:40: 78:60:6a:0a:d1:61:4e:8e:5d:3f:31:7c:c0:43:ec:cd:ae:14: 35:f7:12:c0:9a:b2:ea:bf:42:38:f2:9b:ab:e2:8a:e1:f9:72: ea:8d:e3:44:4f:49:a7:67:9a:a4:40:14:b2:59:89:f2:eb:90: d3:08:88:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBGQUMxMTAvBgNVBAUTKEQxNTJERjcyRTVENkMxQzZGRTQyQjY0MjM3N0MzQjA4 ODEyODZERTcwHhcNMjUwODEwMjMzNjE1WhcNMjUwODE3MjMzNjE1WjAYMRYwFAYD VQQDEw02ODk5MmNlZi03YTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyer6eoBEQN54Dxo29i1FUeESK0PeEunj2MPNV6LKAFdgnFPHY8xGgnaQbrMR 2eYIWB71ojnzRvVKRQicRhII8L588pVYk8J8DSBr5TvdE3HMm4qJx4e1aDLomnS3 UKd2Yx68aKTNqQoEBRzXOM2CZAFIzPNRBtoT8fU/E8LEhWvhMX3Wtdvuc8ANFKhp 4exf4L1kzziy3vvPBDPyoPad1RvVK70lZ+RHsbjH8kSldpApYNCg3mTamhAgfm5c /uVE6/XiIMrytyocQCaibZRG8oab6ypqtUMjxKPBhxeFIx37FTKe59DM04HMd7U+ oc/Ww+K0Eb1LCHJCnfOEPSYikwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAxgPUCf v4JCqdKpMc1dJm50bZEOMB8GA1UdIwQYMBaAFNFS33Ll1sHG/kK2Qjd8OwiBKG3n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEZBQy8zQ0Y3OThFMDA0 OTcxMUVDQTUzRDRCM0NDNEY5QUUwMi8wVkxmY3VYV3djYi1RclpDTjN3N0NJRW9i ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBWTGZjdVhXd2NiLVFyWkNOM3c3Q0lFb2JlYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEZBQy8zQ0Y3OThFMDA0OTcxMUVDQTUzRDRCM0NDNEY5QUUwMi8wVkxmY3VYV3dj Yi1RclpDTjN3N0NJRW9iZWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlli+yq0SzjFMJgI+EQIV5T8L4bObUV42BU24QoabX1nZyWyHKcZss Vei6xWsENq3v84VgyfzJi1GMDQnD24zbYL3BO6ztdBPSjkRa3qcYJ/Ga7qQmkS57 v/fz4+xiCcAtAiMwfiVl8gXL5kuPg0iDcxCKzD1TVLsL7qBjM+jvG8D74cknzxr5 0ehULB+3KzwrMlcrsgYxigq2KcAQpeJiZol0QigEzvkZ29IRQu1n71GvOvRviMy4 AB4xLi+itrCmLFA8T0B4YGoK0WFOjl0/MXzAQ+zNrhQ19xLAmrLqv0I48pur4orh +XLqjeNET0mnZ5qkQBSyWYny65DTCIgT -----END CERTIFICATE-----Generated at Mon Aug 11 04:16:58 2025 by rpki-client