$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft File: RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft (raw, json) Hash identifier: sTtZFoFv4LTO3owdJ1qjE2vvj4mkIxFMmVJVFVSCuWE= Subject key identifier: F3:9A:CA:B0:A2:F2:F9:1F:79:41:F5:04:43:C1:2F:E1:44:B3:C5:AD Authority key identifier: 47:0A:93:44:9E:61:1F:A9:AD:05:A2:89:D6:18:82:20:B5:FC:FC:3A Certificate issuer: /CN=A91CB8BA/serialNumber=470A93449E611FA9AD05A289D6188220B5FCFC3A Certificate serial: 08E9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft Manifest number: 08D8 Signing time: Mon 04 Aug 2025 20:44:06 +0000 Manifest this update: Mon 04 Aug 2025 20:44:05 +0000 Manifest next update: Mon 11 Aug 2025 20:44:05 +0000 Files and hashes: 1: RwqTRJ5hH6mtBaKJ1hiCILX8_Do.crl (hash: lXVhU5MdnxdaUtlcWvMT0Tif8VHewA5WcTg7TMqPMFU=) 2: 465DBB30BA8811EAAF996D39C4F9AE02.roa (hash: 23ndFVCcLg+/bCNKhL706A7YBuPjvG2i31lg9YjdTYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.crl rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 20:44:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2281 (0x8e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB8BA, serialNumber=470A93449E611FA9AD05A289D6188220B5FCFC3A Validity Not Before: Aug 4 20:44:05 2025 GMT Not After : Aug 11 20:44:05 2025 GMT Subject: CN=68911b96-8639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:97:f5:c4:52:cc:11:97:eb:dd:6e:92:ce:a3: 49:56:2d:d7:6b:57:3e:aa:c8:7b:85:e6:01:c7:16: 66:7e:6e:da:9f:b6:c0:36:6d:7c:1c:01:fc:e2:55: 53:55:89:08:a5:4f:fd:f5:05:b4:a8:7d:cd:cb:b4: 12:87:d6:de:4a:30:16:04:a4:d8:73:3b:25:0f:e6: 93:1b:05:8f:25:1c:77:a3:0b:a6:00:45:49:86:f5: 9f:74:98:5f:32:45:ca:cd:d5:3d:5a:e7:d1:fb:8f: 7e:2c:5a:64:43:99:93:5c:52:06:5b:c8:3a:26:80: ab:e6:a3:24:53:43:5c:b9:80:12:30:75:c7:48:ce: 44:70:60:fd:a5:52:85:a4:ee:63:30:02:d9:8a:ad: c3:b1:68:eb:8a:2c:af:1e:68:8e:dd:72:30:15:7d: 05:8c:53:2b:dd:24:89:cb:92:65:4f:9b:61:db:5f: d4:25:e7:a2:70:ee:07:d3:d6:f2:26:b6:44:13:38: 61:1e:8d:90:2a:92:0c:f8:ff:3b:68:08:dd:f5:ea: 04:09:fb:3b:63:21:d9:16:a1:0a:c4:f2:68:d8:a6: 34:5d:9e:c3:b0:44:e7:de:4f:8e:09:87:3a:c9:71: 4b:78:b2:48:e4:06:e0:e2:65:f8:96:96:fb:25:f0: 3e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:9A:CA:B0:A2:F2:F9:1F:79:41:F5:04:43:C1:2F:E1:44:B3:C5:AD X509v3 Authority Key Identifier: keyid:47:0A:93:44:9E:61:1F:A9:AD:05:A2:89:D6:18:82:20:B5:FC:FC:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:2d:98:76:32:da:f9:0b:1f:e5:c6:64:ea:a1:83:37:28:23: 9f:1a:b3:f5:d3:83:46:1f:af:9e:f3:ab:b4:6a:20:e4:0e:6b: e8:08:e9:62:03:a4:da:0e:a4:df:bf:78:21:63:14:7f:de:2e: 2e:54:b4:89:24:42:12:6a:62:14:5d:da:ff:15:db:68:48:3b: ba:7e:6a:eb:f8:01:3d:d6:9e:93:8f:3b:0e:dd:b6:a1:19:f2: e6:ea:eb:1b:82:dc:7c:6c:d2:11:f7:b5:62:f5:e1:01:53:c5: 48:57:4a:3f:07:9d:66:e5:78:bc:2b:0a:4e:09:3b:e9:1f:0e: f6:29:db:55:d2:7e:4f:9f:24:81:29:f2:e5:57:8e:d8:81:a5: 1b:cb:88:ed:9b:1b:89:7f:1f:f2:f0:28:2b:f7:ee:ed:04:aa: d7:86:bd:7b:a7:35:eb:08:94:88:31:ff:ab:91:ae:14:62:8f: df:10:21:d8:8e:7b:af:49:2b:05:9b:74:4f:e7:aa:af:be:0b: 59:86:9b:73:e1:ca:05:36:66:01:75:df:69:19:16:36:23:33: 05:f0:26:8f:67:27:9b:33:3c:c6:cf:4d:47:6b:7a:a3:b5:d8: 72:d3:e6:9a:66:35:03:3a:1d:c7:12:dc:71:b3:d1:86:b2:c6: 70:a9:ed:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I4QkExMTAvBgNVBAUTKDQ3MEE5MzQ0OUU2MTFGQTlBRDA1QTI4OUQ2MTg4MjIw QjVGQ0ZDM0EwHhcNMjUwODA0MjA0NDA1WhcNMjUwODExMjA0NDA1WjAYMRYwFAYD VQQDEw02ODkxMWI5Ni04NjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZf1xFLMEZfr3W6SzqNJVi3Xa1c+qsh7heYBxxZmfm7an7bANm18HAH84lVT VYkIpU/99QW0qH3Ny7QSh9beSjAWBKTYczslD+aTGwWPJRx3owumAEVJhvWfdJhf MkXKzdU9WufR+49+LFpkQ5mTXFIGW8g6JoCr5qMkU0NcuYASMHXHSM5EcGD9pVKF pO5jMALZiq3DsWjriiyvHmiO3XIwFX0FjFMr3SSJy5JlT5th21/UJeeicO4H09by JrZEEzhhHo2QKpIM+P87aAjd9eoECfs7YyHZFqEKxPJo2KY0XZ7DsETn3k+OCYc6 yXFLeLJI5Abg4mX4lpb7JfA+XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPOayrCi 8vkfeUH1BEPBL+FEs8WtMB8GA1UdIwQYMBaAFEcKk0SeYR+prQWiidYYgiC1/Pw6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjhCQS8yQjczMkU3MEJB ODUxMUVBQkE4MzhFMzBDNEY5QUUwMi9Sd3FUUko1aEg2bXRCYUtKMWhpQ0lMWDhf RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1J3cVRSSjVoSDZtdEJhS0oxaGlDSUxYOF9Eby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjhCQS8yQjczMkU3MEJBODUxMUVBQkE4MzhFMzBDNEY5QUUwMi9Sd3FUUko1aEg2 bXRCYUtKMWhpQ0lMWDhfRG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKLZh2Mtr5Cx/lxmTqoYM3KCOfGrP104NGH6+e86u0aiDkDmvoCOli A6TaDqTfv3ghYxR/3i4uVLSJJEISamIUXdr/FdtoSDu6fmrr+AE91p6TjzsO3bah GfLm6usbgtx8bNIR97Vi9eEBU8VIV0o/B51m5Xi8KwpOCTvpHw72KdtV0n5PnySB KfLlV47YgaUby4jtmxuJfx/y8Cgr9+7tBKrXhr17pzXrCJSIMf+rka4UYo/fECHY jnuvSSsFm3RP56qvvgtZhptz4coFNmYBdd9pGRY2IzMF8CaPZyebMzzGz01Ha3qj tdhy0+aaZjUDOh3HEtxxs9GGssZwqe0n -----END CERTIFICATE-----Generated at Wed Aug 6 14:22:05 2025 by rpki-client