$ rpki-client -vvf rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.mft File: du8ZOVeobWTTw83rngdGdG70KQo.mft (raw, json) Hash identifier: Sp/wO6HQzEMxzakkTV3Hfw7L4iokEeMKJc6vhNrW9uY= Subject key identifier: E1:F5:20:43:7C:1D:12:D7:D5:A2:81:5D:8F:59:1A:67:F1:95:2D:98 Authority key identifier: 76:EF:19:39:57:A8:6D:64:D3:C3:CD:EB:9E:07:46:74:6E:F4:29:0A Certificate issuer: /CN=A91C40D6/serialNumber=76EF193957A86D64D3C3CDEB9E0746746EF4290A Certificate serial: 011F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/du8ZOVeobWTTw83rngdGdG70KQo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.mft Manifest number: 011C Signing time: Wed 06 Aug 2025 20:32:29 +0000 Manifest this update: Wed 06 Aug 2025 20:32:29 +0000 Manifest next update: Wed 13 Aug 2025 20:32:29 +0000 Files and hashes: 1: du8ZOVeobWTTw83rngdGdG70KQo.crl (hash: sZMDD3gzuNQCl6SgFQuJuNbURaVkBsV4xBzkT/u+kuE=) 2: DF4EFA76CA7811EE838E0A73C4F9AE02.roa (hash: /FORfGBg9zOxItBO8An19jk30uxSaavKCQfEXQzUIIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.crl rsync://rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/du8ZOVeobWTTw83rngdGdG70KQo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 20:32:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 287 (0x11f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C40D6, serialNumber=76EF193957A86D64D3C3CDEB9E0746746EF4290A Validity Not Before: Aug 6 20:32:29 2025 GMT Not After : Aug 13 20:32:29 2025 GMT Subject: CN=6893bbdd-0e1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:36:89:7f:0d:18:25:5b:35:34:24:83:5c:2b: a8:2e:4a:0d:e9:8c:d4:29:ce:00:66:1b:66:cc:d2: 7b:ea:c7:3c:5a:71:af:b3:77:19:71:03:d5:ab:44: 31:7e:21:a4:0a:73:eb:ad:7b:e4:e5:9f:1f:8a:77: 2d:bf:d2:c8:43:6e:ca:2b:2b:17:10:a8:e0:8d:f1: df:78:ed:ec:2f:ff:b6:26:4f:51:f6:c3:9d:b4:83: d3:61:95:f5:6c:c9:3b:33:90:dd:d8:80:26:cb:52: f9:1a:eb:4b:0a:2f:ba:d4:50:91:f0:c2:86:37:93: f1:b9:df:c7:62:33:e3:bb:75:68:9c:fa:29:b7:5c: d8:04:18:88:cc:22:ae:49:02:11:31:bd:82:f6:8c: 37:e8:74:5f:65:4d:cd:07:82:cc:7a:c6:90:27:10: d7:0e:bd:46:7b:3c:00:93:6a:35:1b:5f:f5:06:61: cb:f6:a1:9e:2b:f5:58:69:b3:cc:51:16:22:29:56: d1:18:2d:09:03:95:4e:c9:d0:73:48:08:97:56:13: 12:4d:aa:31:f8:b0:0f:f7:72:18:bd:21:c8:96:15: 3c:a3:d1:7c:5c:31:1d:57:d3:9e:b6:db:a1:31:69: a7:ce:93:20:52:e5:e0:7c:9e:01:1c:d5:73:d3:2d: e9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F5:20:43:7C:1D:12:D7:D5:A2:81:5D:8F:59:1A:67:F1:95:2D:98 X509v3 Authority Key Identifier: keyid:76:EF:19:39:57:A8:6D:64:D3:C3:CD:EB:9E:07:46:74:6E:F4:29:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/du8ZOVeobWTTw83rngdGdG70KQo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:bf:82:50:7a:5b:51:de:cc:fc:07:12:0a:eb:41:b0:78:d5: 64:44:0d:43:f8:82:05:ef:25:88:0b:68:ca:64:78:d9:83:86: 9a:65:08:92:be:6c:84:4e:20:90:8c:6e:93:51:74:f7:65:ea: 42:e1:01:24:7e:44:ca:01:7a:9e:d2:88:28:8c:ae:95:df:d0: 8e:db:cb:44:45:31:e7:e8:37:d4:80:dd:6a:30:69:b3:0d:24: 25:a5:8b:7e:3d:ed:53:eb:c0:24:e4:d8:ff:09:b1:bd:2e:47: 81:da:2b:3e:c6:7f:0e:46:14:f0:a6:39:ca:99:74:bc:cf:aa: 99:e8:06:25:0b:3d:95:a7:3a:82:9c:e8:bd:d5:e2:54:ed:74: 96:72:bb:b6:06:6a:62:9c:39:5d:72:5a:d5:60:df:26:35:24: 74:3f:fc:99:11:fe:7a:15:54:2f:03:3b:e3:c5:76:bc:22:92: d1:25:75:40:ee:3c:47:b4:9b:e8:7b:d8:90:58:31:8c:c6:1f: b7:35:9d:a5:3a:6c:b4:1a:ed:ac:c7:98:c4:d8:6c:bb:63:e9: 6a:fd:e2:8c:4c:3e:e6:1a:26:03:c2:04:b9:72:7e:38:40:4a: b5:cc:69:0f:9c:5b:48:38:f1:1e:b6:26:8c:f8:9e:2d:42:09: 1f:63:21:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQwRDYxMTAvBgNVBAUTKDc2RUYxOTM5NTdBODZENjREM0MzQ0RFQjlFMDc0Njc0 NkVGNDI5MEEwHhcNMjUwODA2MjAzMjI5WhcNMjUwODEzMjAzMjI5WjAYMRYwFAYD VQQDEw02ODkzYmJkZC0wZTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwTaJfw0YJVs1NCSDXCuoLkoN6YzUKc4AZhtmzNJ76sc8WnGvs3cZcQPVq0Qx fiGkCnPrrXvk5Z8finctv9LIQ27KKysXEKjgjfHfeO3sL/+2Jk9R9sOdtIPTYZX1 bMk7M5Dd2IAmy1L5GutLCi+61FCR8MKGN5Pxud/HYjPju3VonPopt1zYBBiIzCKu SQIRMb2C9ow36HRfZU3NB4LMesaQJxDXDr1GezwAk2o1G1/1BmHL9qGeK/VYabPM URYiKVbRGC0JA5VOydBzSAiXVhMSTaox+LAP93IYvSHIlhU8o9F8XDEdV9Oettuh MWmnzpMgUuXgfJ4BHNVz0y3pKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOH1IEN8 HRLX1aKBXY9ZGmfxlS2YMB8GA1UdIwQYMBaAFHbvGTlXqG1k08PN654HRnRu9CkK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDBENi8wNUY4NjAxNEM1 MzcxMUVFQjY3QUVCNzlDNEY5QUUwMi9kdThaT1Zlb2JXVFR3ODNybmdkR2RHNzBL UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2R1OFpPVmVvYldUVHc4M3JuZ2RHZEc3MEtRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDBENi8wNUY4NjAxNEM1MzcxMUVFQjY3QUVCNzlDNEY5QUUwMi9kdThaT1Zlb2JX VFR3ODNybmdkR2RHNzBLUW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlv4JQeltR3sz8BxIK60GweNVkRA1D+IIF7yWIC2jKZHjZg4aaZQiS vmyETiCQjG6TUXT3ZepC4QEkfkTKAXqe0ogojK6V39CO28tERTHn6DfUgN1qMGmz DSQlpYt+Pe1T68Ak5Nj/CbG9LkeB2is+xn8ORhTwpjnKmXS8z6qZ6AYlCz2VpzqC nOi91eJU7XSWcru2BmpinDldclrVYN8mNSR0P/yZEf56FVQvAzvjxXa8IpLRJXVA 7jxHtJvoe9iQWDGMxh+3NZ2lOmy0Gu2sx5jE2Gy7Y+lq/eKMTD7mGiYDwgS5cn44 QEq1zGkPnFtIOPEetiaM+J4tQgkfYyGT -----END CERTIFICATE-----Generated at Thu Aug 7 03:57:28 2025 by rpki-client