$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft File: dddb2lG8oAYPcIETI0xBReREQho.mft (raw, json) Hash identifier: aEpyBsIjx88z5cFLhhF6ig2gCpcCcs2H5v0V57JIrQU= Subject key identifier: 99:10:16:25:BC:1C:25:8D:D2:6C:82:15:8F:AB:50:56:01:C0:5E:C2 Authority key identifier: 75:D7:5B:DA:51:BC:A0:06:0F:70:81:13:23:4C:41:45:E4:44:42:1A Certificate issuer: /CN=A91CBB48/serialNumber=75D75BDA51BCA0060F708113234C4145E444421A Certificate serial: 0872 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dddb2lG8oAYPcIETI0xBReREQho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft Manifest number: 086C Signing time: Sun 10 Aug 2025 20:39:37 +0000 Manifest this update: Sun 10 Aug 2025 20:39:37 +0000 Manifest next update: Sun 17 Aug 2025 20:39:37 +0000 Files and hashes: 1: dddb2lG8oAYPcIETI0xBReREQho.crl (hash: 8vnMosUjrkmkdbGPU3dR+yBjp0XBaCsy6uO52R+9lec=) 2: 96AC80A2CBB411EA99BB9A4DC4F9AE02.roa (hash: Orts9nJAHIeXwpDUPuUMiOuSaf1VvGVbpuD8ge8k//4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.crl rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dddb2lG8oAYPcIETI0xBReREQho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2162 (0x872) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBB48, serialNumber=75D75BDA51BCA0060F708113234C4145E444421A Validity Not Before: Aug 10 20:39:37 2025 GMT Not After : Aug 17 20:39:37 2025 GMT Subject: CN=68990389-712a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0c:1f:ee:a5:37:8b:42:29:e6:ee:18:e6:a9: 1f:4b:27:ff:57:10:3e:e2:c2:cf:43:e6:23:cc:97: 6f:ab:96:1f:1c:a6:9c:f8:6e:51:32:1a:35:9e:45: 37:d1:1b:4d:b7:ce:09:6b:a1:d0:fe:8f:20:03:e3: 83:f4:17:3a:e1:b5:da:84:8e:99:39:3b:e3:f4:42: 14:80:13:12:cf:4f:a9:42:b1:27:1e:a7:fc:87:c8: 6e:33:a7:71:53:96:87:c1:8b:86:a0:d7:33:4f:ed: c4:78:95:f0:03:46:de:ad:2f:0f:71:27:6c:af:e6: 5a:64:f5:f6:c3:9d:14:a3:65:c0:86:06:d6:9e:0c: e1:11:85:bf:70:77:9c:9a:6e:e5:2d:50:c2:56:08: d4:1c:49:03:51:43:58:6d:f5:0e:22:c2:8a:9e:41: 19:49:db:94:56:b3:24:0e:37:1c:c3:54:8a:5e:f8: 4b:43:92:8c:f8:15:4a:b2:36:24:56:3d:2d:93:92: fb:3a:8a:b3:33:e6:13:d3:f3:35:c9:75:a6:48:72: 85:53:ac:88:16:27:7d:95:37:60:60:44:28:30:fb: 02:82:08:b4:59:97:6f:e0:96:92:5f:3c:56:33:e3: fe:87:f2:22:18:4e:67:ae:11:2a:a9:fc:c8:93:a5: 4e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:10:16:25:BC:1C:25:8D:D2:6C:82:15:8F:AB:50:56:01:C0:5E:C2 X509v3 Authority Key Identifier: keyid:75:D7:5B:DA:51:BC:A0:06:0F:70:81:13:23:4C:41:45:E4:44:42:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dddb2lG8oAYPcIETI0xBReREQho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:df:6f:75:36:c6:9c:dd:6c:f7:1e:eb:26:7c:01:d4:ad:e3: fe:da:4f:95:c4:e2:e8:d9:cb:8e:3c:1a:61:c2:ef:24:b7:e0: d2:51:cc:26:f0:25:3e:ae:12:cc:a6:df:e0:aa:19:73:5c:8c: 46:c3:3b:40:f1:5d:e8:d3:a2:43:29:97:1c:56:55:d6:1f:33: 10:90:a5:54:d7:da:25:3d:04:d2:c3:e5:54:2b:7b:00:06:67: 9f:2d:ae:a3:d6:5b:35:ef:17:13:a8:6e:f2:80:45:92:9d:df: d2:fb:8f:0a:2c:57:2a:50:c5:49:33:d8:ae:81:28:0a:72:fc: 92:c4:db:3a:65:c3:92:81:c7:1c:44:00:fc:5a:51:da:ee:96: 22:f6:70:0c:97:63:9a:04:d0:ae:0d:f8:2d:60:c8:17:fa:60: 3d:63:82:d7:51:24:30:c6:60:25:f0:05:54:96:07:3b:74:2c: fe:83:9d:b0:6d:89:3c:4c:34:95:20:e3:f0:ca:a8:16:8f:81: 6f:42:50:20:b2:79:36:84:f3:c0:d8:9e:a6:9a:27:95:d8:23: f1:d2:b4:c1:e6:a1:23:3b:e8:5b:46:bf:65:0e:2e:8d:40:85: 31:3d:04:18:93:56:17:61:5e:f7:4e:7a:10:87:d8:06:2e:71: 94:d2:d9:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JCNDgxMTAvBgNVBAUTKDc1RDc1QkRBNTFCQ0EwMDYwRjcwODExMzIzNEM0MTQ1 RTQ0NDQyMUEwHhcNMjUwODEwMjAzOTM3WhcNMjUwODE3MjAzOTM3WjAYMRYwFAYD VQQDEw02ODk5MDM4OS03MTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAngwf7qU3i0Ip5u4Y5qkfSyf/VxA+4sLPQ+YjzJdvq5YfHKac+G5RMho1nkU3 0RtNt84Ja6HQ/o8gA+OD9Bc64bXahI6ZOTvj9EIUgBMSz0+pQrEnHqf8h8huM6dx U5aHwYuGoNczT+3EeJXwA0berS8PcSdsr+ZaZPX2w50Uo2XAhgbWngzhEYW/cHec mm7lLVDCVgjUHEkDUUNYbfUOIsKKnkEZSduUVrMkDjccw1SKXvhLQ5KM+BVKsjYk Vj0tk5L7OoqzM+YT0/M1yXWmSHKFU6yIFid9lTdgYEQoMPsCggi0WZdv4JaSXzxW M+P+h/IiGE5nrhEqqfzIk6VOTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJkQFiW8 HCWN0myCFY+rUFYBwF7CMB8GA1UdIwQYMBaAFHXXW9pRvKAGD3CBEyNMQUXkREIa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkI0OC85MEM0NzkxQ0NC QjIxMUVBQTBDQTZBNEFDNEY5QUUwMi9kZGRiMmxHOG9BWVBjSUVUSTB4QlJlUkVR aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RkZGIybEc4b0FZUGNJRVRJMHhCUmVSRVFoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkI0OC85MEM0NzkxQ0NCQjIxMUVBQTBDQTZBNEFDNEY5QUUwMi9kZGRiMmxHOG9B WVBjSUVUSTB4QlJlUkVRaG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDI3291Nsac3Wz3HusmfAHUreP+2k+VxOLo2cuOPBphwu8kt+DSUcwm 8CU+rhLMpt/gqhlzXIxGwztA8V3o06JDKZccVlXWHzMQkKVU19olPQTSw+VUK3sA BmefLa6j1ls17xcTqG7ygEWSnd/S+48KLFcqUMVJM9iugSgKcvySxNs6ZcOSgccc RAD8WlHa7pYi9nAMl2OaBNCuDfgtYMgX+mA9Y4LXUSQwxmAl8AVUlgc7dCz+g52w bYk8TDSVIOPwyqgWj4FvQlAgsnk2hPPA2J6mmieV2CPx0rTB5qEjO+hbRr9lDi6N QIUxPQQYk1YXYV73TnoQh9gGLnGU0tkb -----END CERTIFICATE-----Generated at Mon Aug 11 04:21:20 2025 by rpki-client