$ rpki-client -vvf rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft File: 33nDugFSYeOshDI5zkcDWQHWapQ.mft (raw, json) Hash identifier: 4QP82rMseR/pD3ptN6Va4dvTW78KdB8G29Uwm/7s5W4= Subject key identifier: 06:12:7E:DB:95:1F:7E:83:7D:ED:52:D2:85:1A:96:1B:EF:E2:02:EA Authority key identifier: DF:79:C3:BA:01:52:61:E3:AC:84:32:39:CE:47:03:59:01:D6:6A:94 Certificate issuer: /CN=A91C572B/serialNumber=DF79C3BA015261E3AC843239CE47035901D66A94 Certificate serial: 01A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft Manifest number: 0197 Signing time: Sat 09 Aug 2025 03:49:29 +0000 Manifest this update: Sat 09 Aug 2025 03:49:29 +0000 Manifest next update: Sat 16 Aug 2025 03:49:29 +0000 Files and hashes: 1: 33nDugFSYeOshDI5zkcDWQHWapQ.crl (hash: xnkwjj/JBj6WwsJBXzaWGem6koqNxa0C6r9jrgJgYe4=) 2: 18DC0A381C0311EE9B0F2938C4F9AE02.roa (hash: wznc2xIu+Db8dBh8TB4MLEtEwoDgpd9YS1hyNvKSiTQ=) 3: 17C68D301C0311EE9B0F2938C4F9AE02.roa (hash: iplB9XZjSOwQ5O2H5iEJJvDG/Nz+QwUOR0kvaV5InLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.crl rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 417 (0x1a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C572B, serialNumber=DF79C3BA015261E3AC843239CE47035901D66A94 Validity Not Before: Aug 9 03:49:29 2025 GMT Not After : Aug 16 03:49:29 2025 GMT Subject: CN=6896c549-d522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b4:c0:69:2c:f5:ef:65:79:b1:1d:84:ed:a3: 3c:ae:7e:a9:be:13:df:ea:1c:bb:07:c4:c2:ca:b3: 8f:ee:a7:13:b0:ec:8b:36:cc:3b:70:08:3e:d8:12: a9:ed:71:c1:a9:a4:7c:62:1f:da:d3:00:a0:78:03: ae:69:ce:2c:fa:bb:22:28:a0:bc:e7:d8:a8:db:21: 22:6b:d2:67:39:e2:78:d8:65:24:40:ac:89:c8:62: 28:d2:85:73:83:77:5b:22:52:09:51:55:c9:14:ff: 3e:da:ee:67:03:4f:50:e9:c2:f7:c0:9a:4c:c6:d9: 25:29:5b:64:14:a8:4e:2f:67:35:c6:e4:6d:ed:1b: 49:b4:db:0e:24:00:cd:d6:39:b8:cb:0d:56:9f:7c: a0:1d:ed:91:37:07:76:01:1b:8b:1a:71:4c:1f:97: c7:a2:47:4a:87:f9:7a:a8:cd:b6:54:f4:8d:48:1b: e6:8e:2c:b5:9d:8e:87:ef:21:25:42:41:b8:99:e0: f7:cf:28:13:6d:f0:86:99:86:be:76:59:41:3c:b5: 73:b2:d5:ed:99:7b:7c:8c:f0:49:03:0b:d6:e3:d8: 0f:b9:2d:7f:d0:5b:92:ee:fd:cf:b3:67:48:79:03: a1:96:54:eb:d1:75:3d:5a:2d:91:1f:73:cf:6c:23: 0c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:12:7E:DB:95:1F:7E:83:7D:ED:52:D2:85:1A:96:1B:EF:E2:02:EA X509v3 Authority Key Identifier: keyid:DF:79:C3:BA:01:52:61:E3:AC:84:32:39:CE:47:03:59:01:D6:6A:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:d7:06:04:65:e0:ce:6e:5e:ce:a5:71:7f:52:d2:e9:93:9f: 82:5b:e7:0b:b9:3c:e5:fa:72:c8:26:34:5f:2e:06:01:fb:2b: a7:a0:37:52:95:ca:2f:2e:2e:d3:a2:0d:b0:9d:7b:60:cd:88: 7d:78:d2:13:7d:eb:c1:e5:99:7f:ec:40:ae:6e:65:d8:6a:43: d4:b1:b4:91:80:6b:cc:38:41:4c:06:26:2d:81:1c:09:9f:d2: cd:27:6c:fd:82:b2:53:6c:9d:43:f1:a2:40:ea:7d:59:10:3c: 8a:b7:8a:56:af:a0:08:89:8e:c3:3b:b8:3f:71:77:da:a8:24: b8:d0:8a:2a:a4:d4:b7:3a:d0:f5:c4:62:de:c2:75:7e:ff:0c: 9f:49:6a:24:3f:ac:9d:86:47:2f:a5:98:e5:b3:7a:af:19:cc: 46:db:91:0e:79:a8:61:78:ab:95:f8:0f:93:2d:4c:09:d7:46: 54:e7:10:be:f5:01:4e:e9:1a:8d:95:f7:77:76:ec:57:f0:3f: 3e:36:81:85:99:49:39:3d:8c:ed:f4:ce:45:6d:3a:dd:b5:5b: 23:50:c3:6c:98:01:56:9d:20:a0:8d:2f:52:b5:7c:54:a1:b4: 0c:40:45:cd:b3:b7:52:14:e5:ee:80:77:71:aa:c3:f6:2c:fc: ae:21:0e:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU3MkIxMTAvBgNVBAUTKERGNzlDM0JBMDE1MjYxRTNBQzg0MzIzOUNFNDcwMzU5 MDFENjZBOTQwHhcNMjUwODA5MDM0OTI5WhcNMjUwODE2MDM0OTI5WjAYMRYwFAYD VQQDEw02ODk2YzU0OS1kNTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzrTAaSz172V5sR2E7aM8rn6pvhPf6hy7B8TCyrOP7qcTsOyLNsw7cAg+2BKp 7XHBqaR8Yh/a0wCgeAOuac4s+rsiKKC859io2yEia9JnOeJ42GUkQKyJyGIo0oVz g3dbIlIJUVXJFP8+2u5nA09Q6cL3wJpMxtklKVtkFKhOL2c1xuRt7RtJtNsOJADN 1jm4yw1Wn3ygHe2RNwd2ARuLGnFMH5fHokdKh/l6qM22VPSNSBvmjiy1nY6H7yEl QkG4meD3zygTbfCGmYa+dllBPLVzstXtmXt8jPBJAwvW49gPuS1/0FuS7v3Ps2dI eQOhllTr0XU9Wi2RH3PPbCMMiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAYSftuV H36Dfe1S0oUalhvv4gLqMB8GA1UdIwQYMBaAFN95w7oBUmHjrIQyOc5HA1kB1mqU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTcyQi9GN0U1QzE2ODBF OUExMUVFQTY0NDlFNzFDNEY5QUUwMi8zM25EdWdGU1llT3NoREk1emtjRFdRSFdh cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMzbkR1Z0ZTWWVPc2hESTV6a2NEV1FIV2FwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTcyQi9GN0U1QzE2ODBFOUExMUVFQTY0NDlFNzFDNEY5QUUwMi8zM25EdWdGU1ll T3NoREk1emtjRFdRSFdhcFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAV1wYEZeDObl7OpXF/UtLpk5+CW+cLuTzl+nLIJjRfLgYB+yunoDdS lcovLi7Tog2wnXtgzYh9eNITfevB5Zl/7ECubmXYakPUsbSRgGvMOEFMBiYtgRwJ n9LNJ2z9grJTbJ1D8aJA6n1ZEDyKt4pWr6AIiY7DO7g/cXfaqCS40IoqpNS3OtD1 xGLewnV+/wyfSWokP6ydhkcvpZjls3qvGcxG25EOeahheKuV+A+TLUwJ10ZU5xC+ 9QFO6RqNlfd3duxX8D8+NoGFmUk5PYzt9M5FbTrdtVsjUMNsmAFWnSCgjS9StXxU obQMQEXNs7dSFOXugHdxqsP2LPyuIQ7V -----END CERTIFICATE-----Generated at Sun Aug 10 13:46:45 2025 by rpki-client