$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft File: RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft (raw, json) Hash identifier: AhAIJt1rwmqZ8XJZR1mSgl+mayOHf1fd0EJXqfjDqqc= Subject key identifier: B1:FB:7C:53:C4:08:1E:EE:35:2C:74:BB:D8:0E:C1:8A:DB:0E:B3:4E Authority key identifier: 45:C8:08:A8:AC:DE:24:AC:96:13:E0:1A:49:59:61:00:ED:5E:8C:F1 Certificate issuer: /CN=A91C6833/serialNumber=45C808A8ACDE24AC9613E01A49596100ED5E8CF1 Certificate serial: 1E77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcgIqKzeJKyWE-AaSVlhAO1ejPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft Manifest number: 1E62 Signing time: Tue 12 Aug 2025 16:08:39 +0000 Manifest this update: Tue 12 Aug 2025 16:08:39 +0000 Manifest next update: Tue 19 Aug 2025 16:08:39 +0000 Files and hashes: 1: RcgIqKzeJKyWE-AaSVlhAO1ejPE.crl (hash: kkWQm4+nBkVC09yHw1lGWz+OnzFEyKPjsDqTVDWk7Lw=) 2: 3F1BB7A09BC011EF995CBB11C4F9AE02.roa (hash: ppVaHDx1dLxEzXzKs4B/Bei6naIiQDjP+g7Sivk4L7g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.crl rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcgIqKzeJKyWE-AaSVlhAO1ejPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 16:08:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7799 (0x1e77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6833, serialNumber=45C808A8ACDE24AC9613E01A49596100ED5E8CF1 Validity Not Before: Aug 12 16:08:39 2025 GMT Not After : Aug 19 16:08:39 2025 GMT Subject: CN=689b6707-9525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c8:6e:83:b2:ff:26:6a:31:62:40:c6:39:ad: 7d:05:00:2a:eb:48:c1:de:9e:04:85:d3:88:3a:d9: 2f:be:c7:e8:88:95:3e:fc:d7:ff:16:c8:2a:37:5c: c7:9f:f9:77:56:3c:bf:10:6f:12:07:7c:42:bf:b8: bb:30:31:82:a4:a8:d7:41:af:2c:ed:6d:9c:ab:5e: 5f:b7:fe:1c:73:32:b5:33:3a:45:12:44:03:8d:1b: 92:5d:5c:21:5d:27:5e:17:df:0b:42:74:b4:86:6a: 27:12:ab:76:f2:64:09:15:c8:08:95:f1:01:10:6d: 1c:e2:7f:b7:9d:7c:38:8a:17:1b:16:08:32:77:a7: 6d:e0:d2:b4:23:01:63:9f:5d:23:d2:33:05:25:2c: b9:e5:11:19:fd:26:28:1e:e5:69:c4:92:49:29:40: 71:ac:36:64:37:f1:6f:77:1d:14:3b:63:72:c0:c3: ce:7d:9d:a3:10:15:73:8c:2a:05:53:57:ec:8b:de: 14:ae:81:b6:a2:5b:6e:3b:32:24:dc:af:fc:e7:9d: 85:f6:83:22:27:62:91:69:a4:c5:f0:b4:1a:fd:df: 01:b8:bd:90:63:40:45:28:e7:2f:04:34:e0:df:16: c3:6d:bc:47:75:51:6e:95:c4:c4:86:b5:77:7e:ab: 7b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:FB:7C:53:C4:08:1E:EE:35:2C:74:BB:D8:0E:C1:8A:DB:0E:B3:4E X509v3 Authority Key Identifier: keyid:45:C8:08:A8:AC:DE:24:AC:96:13:E0:1A:49:59:61:00:ED:5E:8C:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcgIqKzeJKyWE-AaSVlhAO1ejPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:d1:b2:73:8a:cb:a5:e3:0f:95:f1:80:f4:a3:b1:f5:cb:3f: f7:f4:37:ba:e1:5a:25:c1:96:b5:70:aa:57:32:be:c0:fa:87: e2:15:f3:f2:84:2d:60:05:f3:e2:f3:8d:14:66:3e:fe:48:d4: b7:73:4f:78:81:f7:a7:93:e6:ab:14:e7:01:cd:56:20:71:44: 39:16:b6:0c:6e:64:93:31:d5:83:06:b3:19:d8:27:19:df:1e: af:1b:a5:59:d3:e3:f7:35:4c:2f:b4:59:85:c7:1b:50:98:de: 8e:d2:a2:f8:f2:f4:4c:44:20:c7:bb:e4:be:46:d3:be:dd:82: b4:a4:86:03:0f:46:41:0b:e6:de:38:06:23:ea:a1:3c:54:4d: 04:6d:3f:a5:01:94:b9:fc:19:58:11:7a:d3:5c:95:b6:e2:54: c6:21:89:51:1e:81:5e:75:16:da:95:41:18:b0:15:3c:c4:ed: 16:5d:28:c4:0f:95:5c:0d:7b:5d:9c:36:41:07:e7:fa:d8:9d: 54:a3:51:26:2d:49:cb:a9:9c:b5:4a:69:ed:04:f4:37:b7:fa: fd:50:c0:c0:15:82:a4:e8:d8:62:8b:fe:41:98:54:72:98:5a: 8a:ba:4d:a1:c5:b4:68:57:dd:f5:21:ee:fa:02:46:f5:10:9b: 14:f1:dc:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY4MzMxMTAvBgNVBAUTKDQ1QzgwOEE4QUNERTI0QUM5NjEzRTAxQTQ5NTk2MTAw RUQ1RThDRjEwHhcNMjUwODEyMTYwODM5WhcNMjUwODE5MTYwODM5WjAYMRYwFAYD VQQDEw02ODliNjcwNy05NTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl8hug7L/JmoxYkDGOa19BQAq60jB3p4EhdOIOtkvvsfoiJU+/Nf/FsgqN1zH n/l3Vjy/EG8SB3xCv7i7MDGCpKjXQa8s7W2cq15ft/4cczK1MzpFEkQDjRuSXVwh XSdeF98LQnS0hmonEqt28mQJFcgIlfEBEG0c4n+3nXw4ihcbFggyd6dt4NK0IwFj n10j0jMFJSy55REZ/SYoHuVpxJJJKUBxrDZkN/Fvdx0UO2NywMPOfZ2jEBVzjCoF U1fsi94UroG2oltuOzIk3K/8552F9oMiJ2KRaaTF8LQa/d8BuL2QY0BFKOcvBDTg 3xbDbbxHdVFulcTEhrV3fqt77wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLH7fFPE CB7uNSx0u9gOwYrbDrNOMB8GA1UdIwQYMBaAFEXICKis3iSslhPgGklZYQDtXozx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjgzMy9GM0Q0ODBFQzgz QjMxMUU2OUREODY3MzBDNEY5QUUwMi9SY2dJcUt6ZUpLeVdFLUFhU1ZsaEFPMWVq UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JjZ0lxS3plSkt5V0UtQWFTVmxoQU8xZWpQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjgzMy9GM0Q0ODBFQzgzQjMxMUU2OUREODY3MzBDNEY5QUUwMi9SY2dJcUt6ZUpL eVdFLUFhU1ZsaEFPMWVqUEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBW0bJzisul4w+V8YD0o7H1yz/39De64VolwZa1cKpXMr7A+ofiFfPy hC1gBfPi840UZj7+SNS3c094gfenk+arFOcBzVYgcUQ5FrYMbmSTMdWDBrMZ2CcZ 3x6vG6VZ0+P3NUwvtFmFxxtQmN6O0qL48vRMRCDHu+S+RtO+3YK0pIYDD0ZBC+be OAYj6qE8VE0EbT+lAZS5/BlYEXrTXJW24lTGIYlRHoFedRbalUEYsBU8xO0WXSjE D5VcDXtdnDZBB+f62J1Uo1EmLUnLqZy1SmntBPQ3t/r9UMDAFYKk6Nhii/5BmFRy mFqKuk2hxbRoV931Ie76Akb1EJsU8dxq -----END CERTIFICATE-----Generated at Tue Aug 12 22:50:40 2025 by rpki-client