$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft File: s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft (raw, json) Hash identifier: IQW49/pQU/OIYizHWkLrwf8lMEXKuYug/eBO1McCTqk= Subject key identifier: F1:1C:01:CA:D3:3E:D3:69:1B:F1:B0:23:FB:95:64:49:1B:CB:A8:E1 Authority key identifier: B3:62:43:7A:B6:7D:29:0C:5C:DF:EF:2F:62:B7:7E:DD:8A:9F:FA:44 Certificate issuer: /CN=A91CAE04/serialNumber=B362437AB67D290C5CDFEF2F62B77EDD8A9FFA44 Certificate serial: 0173 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft Manifest number: 0168 Signing time: Mon 11 Aug 2025 04:09:36 +0000 Manifest this update: Mon 11 Aug 2025 04:09:35 +0000 Manifest next update: Mon 18 Aug 2025 04:09:35 +0000 Files and hashes: 1: s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl (hash: D7hKJf37XfTz3Fofo/UmZYNP5hDo8ARrFTuaJHnaq+E=) 2: ABA6DCF0030F11EFB12D8A18C4F9AE02.roa (hash: 8DzejS8W4fMDZxY9d0U5Ub0yW6L6q7unUQ1/+VEKpFE=) 3: 7E40FBBA09EF11EFAA24237EC4F9AE02.roa (hash: M7N4nEDh5dyTQv8ASFX1wDCT+UJFNgGAfP+B+anOP+c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 04:09:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 371 (0x173) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAE04, serialNumber=B362437AB67D290C5CDFEF2F62B77EDD8A9FFA44 Validity Not Before: Aug 11 04:09:35 2025 GMT Not After : Aug 18 04:09:35 2025 GMT Subject: CN=68996cff-aa2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:3c:4e:6f:9e:c8:0c:26:3f:e3:06:4f:5d:19: c8:d6:e2:1f:cc:e3:25:0c:64:13:67:2c:2d:ba:31: 11:29:03:73:c4:25:e3:ed:30:a2:aa:af:d1:0f:6c: 3f:60:a0:46:52:6e:bb:91:7b:79:0a:3f:b7:c1:3c: e6:88:b8:0f:bc:63:27:e9:4c:e6:f2:8d:8b:00:ae: 40:c7:8b:3e:c0:0b:a7:94:69:95:11:8e:9d:8d:ad: 61:1e:ff:1c:70:74:b0:1d:44:3a:82:5c:da:08:f0: 90:ba:39:40:f3:5f:9d:5d:69:ca:4d:ab:37:7a:d8: d6:5c:f7:79:e4:bd:db:39:18:e4:ea:ca:f9:86:cd: 9f:48:9a:ab:76:24:1d:49:8e:65:84:78:45:7b:c5: 83:e8:1f:bd:dc:f3:7c:fe:0a:cc:ae:c9:a8:5d:a1: 5b:a7:6f:a1:d3:6a:f0:cd:3f:42:44:e1:20:21:18: ea:e7:20:e0:f0:38:04:d0:05:42:44:6f:d7:0a:f8: 07:38:09:1f:fb:16:5b:b2:b3:bc:dd:1f:58:7f:0d: d4:68:46:55:2a:ec:12:74:78:14:14:d9:bb:1d:f9: 3f:b0:6c:ce:d4:59:d9:4d:a7:c3:8a:e4:5d:cb:9d: b1:f3:16:4f:e5:3d:c8:6a:da:2f:74:77:c1:be:d2: 38:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:1C:01:CA:D3:3E:D3:69:1B:F1:B0:23:FB:95:64:49:1B:CB:A8:E1 X509v3 Authority Key Identifier: keyid:B3:62:43:7A:B6:7D:29:0C:5C:DF:EF:2F:62:B7:7E:DD:8A:9F:FA:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:0e:8f:84:a8:65:fc:a2:aa:70:63:f7:73:d5:81:7c:f8:65: 62:67:d2:0b:cf:0b:56:6b:84:fa:0b:73:ae:dc:ab:6d:b5:da: e5:cb:39:8b:b8:d3:c3:99:a5:a1:91:46:88:46:98:d1:0d:b1: 5e:6d:80:ec:58:48:aa:dd:b7:6d:85:96:7f:f0:5a:26:bc:61: c8:80:b7:ed:c9:8c:33:47:f1:8f:47:00:d4:cd:0d:2c:fa:a6: bb:fb:c8:c9:2b:46:15:33:a9:64:82:57:41:58:06:97:63:a1: e3:58:5c:e9:8c:dd:5a:8a:40:2e:a6:cf:27:ca:6b:79:e5:fd: 26:4e:73:ac:d1:68:35:30:2c:87:fb:34:44:9a:cb:37:5c:66: 5f:9f:1c:37:b3:80:c6:30:92:d4:fe:75:e5:e5:0c:16:3f:cc: c8:4f:a8:19:b9:aa:4d:40:82:51:16:6c:02:09:7d:7b:76:79: 6f:02:b9:57:ea:94:ec:22:3a:59:2a:87:c0:69:cc:f9:ee:cc: a0:7d:f3:d1:1b:7e:dd:7e:1d:81:ee:2a:c2:36:90:26:6f:d4: 1b:6d:1c:59:2e:ee:68:e1:2a:f5:8a:4d:67:60:42:e2:26:68: 29:a1:ff:ab:c2:10:6e:41:dd:b8:1d:bb:d2:f5:5e:55:b8:58: 5f:26:59:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FFMDQxMTAvBgNVBAUTKEIzNjI0MzdBQjY3RDI5MEM1Q0RGRUYyRjYyQjc3RURE OEE5RkZBNDQwHhcNMjUwODExMDQwOTM1WhcNMjUwODE4MDQwOTM1WjAYMRYwFAYD VQQDEw02ODk5NmNmZi1hYTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4DxOb57IDCY/4wZPXRnI1uIfzOMlDGQTZywtujERKQNzxCXj7TCiqq/RD2w/ YKBGUm67kXt5Cj+3wTzmiLgPvGMn6Uzm8o2LAK5Ax4s+wAunlGmVEY6dja1hHv8c cHSwHUQ6glzaCPCQujlA81+dXWnKTas3etjWXPd55L3bORjk6sr5hs2fSJqrdiQd SY5lhHhFe8WD6B+93PN8/grMrsmoXaFbp2+h02rwzT9CROEgIRjq5yDg8DgE0AVC RG/XCvgHOAkf+xZbsrO83R9Yfw3UaEZVKuwSdHgUFNm7Hfk/sGzO1FnZTafDiuRd y52x8xZP5T3IatovdHfBvtI4XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPEcAcrT PtNpG/GwI/uVZEkby6jhMB8GA1UdIwQYMBaAFLNiQ3q2fSkMXN/vL2K3ft2Kn/pE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUUwNC85RDhGNzcyQTVG OTYxMUVFODM2MzhGM0VDNEY5QUUwMi9zMkpEZXJaOUtReGMzLTh2WXJkLTNZcWYt a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MySkRlclo5S1F4YzMtOHZZcmQtM1lxZi1rUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUUwNC85RDhGNzcyQTVGOTYxMUVFODM2MzhGM0VDNEY5QUUwMi9zMkpEZXJaOUtR eGMzLTh2WXJkLTNZcWYta1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2Do+EqGX8oqpwY/dz1YF8+GViZ9ILzwtWa4T6C3Ou3KtttdrlyzmL uNPDmaWhkUaIRpjRDbFebYDsWEiq3bdthZZ/8FomvGHIgLftyYwzR/GPRwDUzQ0s +qa7+8jJK0YVM6lkgldBWAaXY6HjWFzpjN1aikAups8nymt55f0mTnOs0Wg1MCyH +zREmss3XGZfnxw3s4DGMJLU/nXl5QwWP8zIT6gZuapNQIJRFmwCCX17dnlvArlX 6pTsIjpZKofAacz57sygffPRG37dfh2B7irCNpAmb9QbbRxZLu5o4Sr1ik1nYELi Jmgpof+rwhBuQd24HbvS9V5VuFhfJlm7 -----END CERTIFICATE-----Generated at Wed Aug 13 02:15:36 2025 by rpki-client