$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.mft File: m_aWWObA_qLqCOOn_dKtysoTOUk.mft (raw, json) Hash identifier: Lf0ztCBQmPklUFkIx0F4C9nhRMRYdg2qNvmKv8ZhQvA= Subject key identifier: 80:F0:39:19:6F:CC:A7:1C:DC:6C:BC:FE:D4:48:A7:3C:DC:B8:BA:75 Authority key identifier: 9B:F6:96:58:E6:C0:FE:A2:EA:08:E3:A7:FD:D2:AD:CA:CA:13:39:49 Certificate issuer: /CN=A91CC28E/serialNumber=9BF69658E6C0FEA2EA08E3A7FDD2ADCACA133949 Certificate serial: 01F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m_aWWObA_qLqCOOn_dKtysoTOUk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.mft Manifest number: 01F0 Signing time: Sun 03 Aug 2025 02:54:21 +0000 Manifest this update: Sun 03 Aug 2025 02:54:21 +0000 Manifest next update: Sun 10 Aug 2025 02:54:21 +0000 Files and hashes: 1: m_aWWObA_qLqCOOn_dKtysoTOUk.crl (hash: /QFLO9jjnQ3lVxA41bYGb3ACpJiQr414jm8itbMSsf4=) 2: 73E253FC76D011EDBAECD665C4F9AE02.roa (hash: n/BMRPFUHjUzsfa0GoSirwLl0k+pEwLO2kUv8wHTWRI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.crl rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m_aWWObA_qLqCOOn_dKtysoTOUk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 02:54:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 499 (0x1f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC28E, serialNumber=9BF69658E6C0FEA2EA08E3A7FDD2ADCACA133949 Validity Not Before: Aug 3 02:54:21 2025 GMT Not After : Aug 10 02:54:21 2025 GMT Subject: CN=688ecf5d-a7a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:84:99:6e:13:ec:c3:01:3c:d8:ae:68:b6:e6: 17:90:ad:59:f5:c9:69:f6:41:d8:87:8c:5f:08:0c: 0e:9b:82:5b:eb:8e:26:67:d7:16:cd:fb:80:23:24: 19:d8:a9:5d:d2:d2:9d:3b:20:b0:46:85:5a:64:08: 34:6b:96:b2:04:e9:9b:bd:9b:f2:b9:ec:a0:a7:08: b2:5d:18:00:ac:72:fb:81:22:d5:23:34:ef:b9:55: c9:be:87:e8:53:90:0f:a9:bf:71:e1:24:3a:ee:c4: 41:de:e5:0c:aa:43:bc:c0:bd:4f:27:f3:97:d6:33: cd:7a:9e:eb:66:3b:d1:ff:64:40:87:c7:f7:f4:29: c1:ce:c3:f9:78:65:fb:e4:9c:9f:8b:93:40:26:ed: 56:d7:38:c1:d7:51:83:67:83:69:d6:4d:dd:52:ad: f2:e0:50:f7:84:9e:72:81:68:3f:86:cb:c0:fb:05: 68:22:a2:b2:b9:33:36:a2:d4:93:79:26:1c:1d:61: c3:b5:71:2d:15:f8:1b:82:fd:1e:5c:69:b9:46:b8: bb:65:14:d3:ab:55:21:1f:7b:c8:0e:f7:d2:b7:ef: 3f:95:dc:d0:bb:ee:31:85:0f:6c:1e:88:7e:aa:0e: 08:1b:fa:b9:8d:5d:44:f7:ee:97:bc:77:91:59:1b: 9f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:F0:39:19:6F:CC:A7:1C:DC:6C:BC:FE:D4:48:A7:3C:DC:B8:BA:75 X509v3 Authority Key Identifier: keyid:9B:F6:96:58:E6:C0:FE:A2:EA:08:E3:A7:FD:D2:AD:CA:CA:13:39:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m_aWWObA_qLqCOOn_dKtysoTOUk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:bb:d3:d1:0f:7e:c2:33:2e:1d:6b:f1:be:40:be:e6:ef:6c: 1f:dd:23:47:e3:aa:dc:b9:c5:84:0a:df:a4:9c:6a:8d:c0:c7: a2:d1:6f:6a:ce:3e:22:f7:84:94:36:d6:7e:4a:de:77:12:79: 77:63:93:18:84:ed:33:3b:60:5e:a8:4f:92:02:ea:6d:e8:45: 87:ca:53:8f:99:72:ff:27:fc:15:93:f7:dd:86:0f:44:18:b4: 27:57:22:6b:65:1c:56:82:c5:01:80:cb:4a:c2:7a:f2:07:78: 03:22:4b:b3:d3:23:29:36:e3:13:10:33:58:cc:db:d2:1e:53: 79:a3:42:46:6e:e6:95:8d:f8:a4:8a:6c:01:58:8e:87:2e:1b: 7e:a9:6a:fc:79:63:f4:a2:04:1f:be:05:d1:ac:23:e8:fe:6d: 78:4a:45:3f:a9:08:b2:79:9d:07:f2:cb:b5:a9:1a:36:e6:f9: 0c:e8:2a:84:99:25:20:40:54:f6:4b:6c:dc:84:37:34:a5:79: fa:26:ef:20:51:6b:90:65:7b:66:1a:ce:5f:0b:f4:c4:a6:59: b3:72:d2:96:a1:d7:27:a7:6c:e4:09:4b:9b:b7:f4:a4:1a:88: ba:4f:aa:dd:b9:62:30:86:7c:2c:14:61:a5:a6:7a:ca:aa:ee: a1:66:ed:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0MyOEUxMTAvBgNVBAUTKDlCRjY5NjU4RTZDMEZFQTJFQTA4RTNBN0ZERDJBRENB Q0ExMzM5NDkwHhcNMjUwODAzMDI1NDIxWhcNMjUwODEwMDI1NDIxWjAYMRYwFAYD VQQDEw02ODhlY2Y1ZC1hN2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz4SZbhPswwE82K5otuYXkK1Z9clp9kHYh4xfCAwOm4Jb644mZ9cWzfuAIyQZ 2Kld0tKdOyCwRoVaZAg0a5ayBOmbvZvyueygpwiyXRgArHL7gSLVIzTvuVXJvofo U5APqb9x4SQ67sRB3uUMqkO8wL1PJ/OX1jPNep7rZjvR/2RAh8f39CnBzsP5eGX7 5Jyfi5NAJu1W1zjB11GDZ4Np1k3dUq3y4FD3hJ5ygWg/hsvA+wVoIqKyuTM2otST eSYcHWHDtXEtFfgbgv0eXGm5Rri7ZRTTq1UhH3vIDvfSt+8/ldzQu+4xhQ9sHoh+ qg4IG/q5jV1E9+6XvHeRWRufWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIDwORlv zKcc3Gy8/tRIpzzcuLp1MB8GA1UdIwQYMBaAFJv2lljmwP6i6gjjp/3SrcrKEzlJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzI4RS9CNUNBODk2ODc2 Q0QxMUVEOERDNjNBNjRDNEY5QUUwMi9tX2FXV09iQV9xTHFDT09uX2RLdHlzb1RP VWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21fYVdXT2JBX3FMcUNPT25fZEt0eXNvVE9Vay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzI4RS9CNUNBODk2ODc2Q0QxMUVEOERDNjNBNjRDNEY5QUUwMi9tX2FXV09iQV9x THFDT09uX2RLdHlzb1RPVWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHu9PRD37CMy4da/G+QL7m72wf3SNH46rcucWECt+knGqNwMei0W9q zj4i94SUNtZ+St53Enl3Y5MYhO0zO2BeqE+SAupt6EWHylOPmXL/J/wVk/fdhg9E GLQnVyJrZRxWgsUBgMtKwnryB3gDIkuz0yMpNuMTEDNYzNvSHlN5o0JGbuaVjfik imwBWI6HLht+qWr8eWP0ogQfvgXRrCPo/m14SkU/qQiyeZ0H8su1qRo25vkM6CqE mSUgQFT2S2zchDc0pXn6Ju8gUWuQZXtmGs5fC/TEplmzctKWodcnp2zkCUubt/Sk Goi6T6rduWIwhnwsFGGlpnrKqu6hZu07 -----END CERTIFICATE-----Generated at Mon Aug 4 11:25:35 2025 by rpki-client