$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.mft File: s0it0HgdstIdxNM510-HoDk4ycc.mft (raw, json) Hash identifier: xu9Uc1kMW1GLLdNLa58ONrpLkojc6TLFLIJ/6LSr+iE= Subject key identifier: 61:E5:D2:53:9F:A7:8C:1B:70:8D:C2:3B:5D:14:F8:84:FC:8A:3B:FF Authority key identifier: B3:48:AD:D0:78:1D:B2:D2:1D:C4:D3:39:D7:4F:87:A0:39:38:C9:C7 Certificate issuer: /CN=A91C7C44/serialNumber=B348ADD0781DB2D21DC4D339D74F87A03938C9C7 Certificate serial: 020D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s0it0HgdstIdxNM510-HoDk4ycc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.mft Manifest number: 0207 Signing time: Mon 11 Aug 2025 02:24:44 +0000 Manifest this update: Mon 11 Aug 2025 02:24:43 +0000 Manifest next update: Mon 18 Aug 2025 02:24:43 +0000 Files and hashes: 1: s0it0HgdstIdxNM510-HoDk4ycc.crl (hash: 2oflFzAfmm2ayPKtps+ERdvk7j8pWCW/kKbXja/rrcc=) 2: 945D844463E311EDAD1B0B3FC4F9AE02.roa (hash: N+dN6EXW9kLpuaXIDcRP+SypH2TkoWeKEFt5XA9cnJo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.crl rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s0it0HgdstIdxNM510-HoDk4ycc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 525 (0x20d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7C44, serialNumber=B348ADD0781DB2D21DC4D339D74F87A03938C9C7 Validity Not Before: Aug 11 02:24:43 2025 GMT Not After : Aug 18 02:24:43 2025 GMT Subject: CN=6899546c-6851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bc:dc:b7:d7:ae:0d:a3:53:db:fa:da:0f:a7: e3:64:cc:f3:a3:51:c2:e1:33:97:d5:8d:43:df:da: 46:96:95:4e:66:25:bd:aa:a2:3f:55:e2:da:86:72: fb:9d:df:a0:a7:78:fb:1f:c8:72:4c:af:ae:f5:31: b5:3f:ab:69:ab:ab:0c:63:6e:f2:99:11:df:ec:94: 19:2a:92:6b:70:bc:bb:9c:c6:85:92:d3:33:0c:13: ca:68:18:f9:df:97:c9:17:3d:fa:c8:c7:63:1c:52: 9c:d4:a6:59:df:aa:e0:e5:55:eb:8d:d8:0b:41:14: 18:ef:5d:89:de:6c:3f:1d:d3:38:ff:1b:b8:cb:43: a4:f0:9c:64:74:86:03:f1:87:98:69:12:06:97:8e: 82:cf:a7:1c:4e:b4:57:49:c9:78:32:c0:04:48:26: dc:50:07:34:56:c5:bc:f4:e1:19:1d:88:eb:87:27: 82:ab:05:85:c4:11:81:1b:4d:5b:c9:0c:d9:3a:61: d0:10:16:da:45:d5:15:73:cb:a2:d2:7e:62:09:f9: a3:6b:c4:bd:36:c4:be:e8:71:b8:21:51:e2:f2:b7: 5c:78:a6:b8:1f:87:9c:b9:ef:b0:34:e7:96:05:99: ea:dc:c2:17:23:33:8e:45:55:9c:b5:67:90:c0:25: 38:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:E5:D2:53:9F:A7:8C:1B:70:8D:C2:3B:5D:14:F8:84:FC:8A:3B:FF X509v3 Authority Key Identifier: keyid:B3:48:AD:D0:78:1D:B2:D2:1D:C4:D3:39:D7:4F:87:A0:39:38:C9:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s0it0HgdstIdxNM510-HoDk4ycc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:0a:4b:12:9f:f8:e7:ce:51:61:e6:88:dc:92:e8:30:09:e4: 26:a4:39:6c:95:84:a4:39:7d:cd:10:eb:ea:15:97:58:09:4b: cc:a7:12:5e:cc:2c:94:06:d0:1d:8b:3a:40:a6:7e:b4:f2:52: 73:eb:dc:91:dd:c9:e5:5a:bd:c9:e1:0e:d4:90:b8:ec:6e:98: 9f:9f:f5:19:cb:6a:60:d2:7d:43:e8:80:44:9a:a0:17:e4:31: ef:f1:51:c8:84:71:cc:1e:5f:68:18:93:2e:e6:fc:14:97:c8: 44:9e:cc:94:78:a6:c9:76:87:2d:6e:8f:69:7e:6c:82:0f:80: 85:74:81:db:82:65:17:0e:b4:62:41:96:86:f4:76:43:b2:92: 98:dd:73:aa:a9:4b:cb:e3:2c:7b:15:67:42:aa:06:fd:8e:73: ad:c3:be:44:84:63:30:13:30:30:ae:99:6b:c6:78:65:b5:cd: 51:19:36:2e:c6:e8:7a:16:55:99:4e:ff:c0:c6:3c:93:d1:ae: 2f:ac:ec:cd:ef:5e:8f:bf:ef:00:ab:b1:14:8a:3f:fd:19:0c: b6:37:65:59:75:85:f8:f9:e0:49:f8:1f:5b:2f:f6:0b:42:9a: ad:1e:55:c0:1b:d2:ef:9e:fd:ca:39:53:43:5c:56:60:3f:4c: 8a:9f:e1:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdDNDQxMTAvBgNVBAUTKEIzNDhBREQwNzgxREIyRDIxREM0RDMzOUQ3NEY4N0Ew MzkzOEM5QzcwHhcNMjUwODExMDIyNDQzWhcNMjUwODE4MDIyNDQzWjAYMRYwFAYD VQQDEw02ODk5NTQ2Yy02ODUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7zct9euDaNT2/raD6fjZMzzo1HC4TOX1Y1D39pGlpVOZiW9qqI/VeLahnL7 nd+gp3j7H8hyTK+u9TG1P6tpq6sMY27ymRHf7JQZKpJrcLy7nMaFktMzDBPKaBj5 35fJFz36yMdjHFKc1KZZ36rg5VXrjdgLQRQY712J3mw/HdM4/xu4y0Ok8JxkdIYD 8YeYaRIGl46Cz6ccTrRXScl4MsAESCbcUAc0VsW89OEZHYjrhyeCqwWFxBGBG01b yQzZOmHQEBbaRdUVc8ui0n5iCfmja8S9NsS+6HG4IVHi8rdceKa4H4ecue+wNOeW BZnq3MIXIzOORVWctWeQwCU49wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGHl0lOf p4wbcI3CO10U+IT8ijv/MB8GA1UdIwQYMBaAFLNIrdB4HbLSHcTTOddPh6A5OMnH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0M0NC9ENTMzQTdCNDYz REUxMUVEODBCQ0QzMzdDNEY5QUUwMi9zMGl0MEhnZHN0SWR4Tk01MTAtSG9EazR5 Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MwaXQwSGdkc3RJZHhOTTUxMC1Ib0RrNHljYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0M0NC9ENTMzQTdCNDYzREUxMUVEODBCQ0QzMzdDNEY5QUUwMi9zMGl0MEhnZHN0 SWR4Tk01MTAtSG9EazR5Y2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXCksSn/jnzlFh5ojckugwCeQmpDlslYSkOX3NEOvqFZdYCUvMpxJe zCyUBtAdizpApn608lJz69yR3cnlWr3J4Q7UkLjsbpifn/UZy2pg0n1D6IBEmqAX 5DHv8VHIhHHMHl9oGJMu5vwUl8hEnsyUeKbJdoctbo9pfmyCD4CFdIHbgmUXDrRi QZaG9HZDspKY3XOqqUvL4yx7FWdCqgb9jnOtw75EhGMwEzAwrplrxnhltc1RGTYu xuh6FlWZTv/AxjyT0a4vrOzN716Pv+8Aq7EUij/9GQy2N2VZdYX4+eBJ+B9bL/YL QpqtHlXAG9Lvnv3KOVNDXFZgP0yKn+Fw -----END CERTIFICATE-----Generated at Mon Aug 11 04:20:23 2025 by rpki-client