$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft File: tSlwZVVtKyKTSTXnUgcivVMz2k8.mft (raw, json) Hash identifier: IbD+uL/WSsOVCcmyN8rRv/qrqURUh8wTjB+JVP5JIZs= Subject key identifier: 0E:E7:F5:4C:48:3B:83:A1:26:5D:19:4E:CE:2E:11:3E:93:37:30:3F Authority key identifier: B5:29:70:65:55:6D:2B:22:93:49:35:E7:52:07:22:BD:53:33:DA:4F Certificate issuer: /CN=A91CD7A4/serialNumber=B5297065556D2B22934935E7520722BD5333DA4F Certificate serial: 0198 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSlwZVVtKyKTSTXnUgcivVMz2k8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft Manifest number: 0192 Signing time: Thu 07 Aug 2025 03:57:36 +0000 Manifest this update: Thu 07 Aug 2025 03:57:35 +0000 Manifest next update: Thu 14 Aug 2025 03:57:35 +0000 Files and hashes: 1: tSlwZVVtKyKTSTXnUgcivVMz2k8.crl (hash: Nd0eZ2S2XR9T9AqcgI7MO0Ndsojt86q148pnzutgQk4=) 2: 275245323AB511F0AE5E5919C4F9AE02.roa (hash: IHKKhIw85fk9s47CrpZDKzzYoR/RN4XUlJphLrYmJyk=) 3: AD47BEC4320611EE845F4A5AC4F9AE02.roa (hash: P7EwycxEH4BjaRzRhYFgj1fovDv1DxA8C+5endacXNQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.crl rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSlwZVVtKyKTSTXnUgcivVMz2k8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 03:57:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 408 (0x198) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD7A4, serialNumber=B5297065556D2B22934935E7520722BD5333DA4F Validity Not Before: Aug 7 03:57:35 2025 GMT Not After : Aug 14 03:57:35 2025 GMT Subject: CN=6894242f-30be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:93:3c:3f:0f:45:8c:e4:cf:a5:86:fd:26:98: 3b:e7:1b:11:93:04:e1:2a:4c:f1:b6:cf:53:24:a1: bd:54:55:13:df:0f:b0:12:4b:e8:0c:06:f4:b1:2a: 6c:2e:86:d3:20:84:6a:e5:83:4e:f2:cd:10:0e:fb: 44:cc:2a:0d:02:08:11:c6:85:95:11:a9:23:61:ce: ec:37:2c:d1:a3:72:50:b5:5e:dc:6c:ba:da:ae:1f: 65:20:e8:85:f4:59:b0:d3:8d:42:63:94:fc:3f:7d: e2:b8:2d:4e:50:c2:79:d7:57:19:a1:60:fd:0f:1f: 6e:a5:c6:0f:5b:8a:8a:d1:d4:b6:e6:06:62:25:35: 5c:ef:be:d3:3b:03:d7:ef:91:9c:a5:e9:30:d5:9b: bf:b1:cd:3a:f0:ec:98:dc:d5:00:d3:63:0c:8e:48: 4e:d8:90:9d:0e:26:ae:22:c5:23:e1:bf:39:9b:c5: 84:71:63:c4:a9:c2:1a:0e:9e:c0:a1:45:b4:ad:a2: e3:74:bf:7f:32:79:d2:0b:43:9c:62:01:ae:66:35: ed:10:85:2f:40:88:81:63:3d:2c:3f:c2:b9:2d:5d: 02:64:ef:06:6c:e4:bd:bb:10:43:fc:b5:25:60:17: fa:bc:95:91:2e:27:7c:da:43:40:c1:4d:e1:df:ab: 1e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:E7:F5:4C:48:3B:83:A1:26:5D:19:4E:CE:2E:11:3E:93:37:30:3F X509v3 Authority Key Identifier: keyid:B5:29:70:65:55:6D:2B:22:93:49:35:E7:52:07:22:BD:53:33:DA:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSlwZVVtKyKTSTXnUgcivVMz2k8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:76:65:fe:2c:f4:be:b3:d5:c6:8b:c0:6d:c5:ad:4c:f1:0e: 66:2a:09:a5:61:e5:b4:63:7c:8c:be:d6:e1:c7:dc:48:9c:6f: cf:82:4d:88:c3:db:fa:53:26:5d:31:cc:50:15:ac:91:d6:ed: b4:ea:41:a9:d8:60:0f:5b:58:38:26:5c:9d:78:b6:09:5e:af: 8b:95:8b:f8:90:fa:a1:21:c2:49:4b:26:e2:5a:fd:32:b9:81: 95:4b:16:dc:90:cb:a9:90:98:09:6b:a2:51:26:fc:49:73:a2: 7f:05:b3:8b:c7:0b:0c:94:b4:af:eb:b1:1f:f7:be:d8:28:15: 80:82:ac:39:51:03:cc:56:7e:7c:85:e8:7c:70:83:89:2f:87: d5:12:00:b3:4c:ab:0f:32:91:4c:0f:d1:59:66:f1:81:be:b4: 0e:fa:b9:5b:91:b9:8f:d9:69:29:91:05:43:75:8c:34:85:ba: a8:01:f6:fe:f2:58:0f:71:87:a6:42:83:84:8d:9b:53:1f:89: 7b:0d:c5:f0:75:4a:fe:14:62:39:68:d4:27:65:81:11:1c:28: 43:2d:9f:14:85:96:84:24:dc:7c:4c:82:5c:13:62:28:4c:c4: 97:aa:50:2c:e0:03:bc:9d:09:34:6e:72:23:e9:9d:02:e0:47: 24:d2:e6:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Q3QTQxMTAvBgNVBAUTKEI1Mjk3MDY1NTU2RDJCMjI5MzQ5MzVFNzUyMDcyMkJE NTMzM0RBNEYwHhcNMjUwODA3MDM1NzM1WhcNMjUwODE0MDM1NzM1WjAYMRYwFAYD VQQDEw02ODk0MjQyZi0zMGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArpM8Pw9FjOTPpYb9Jpg75xsRkwThKkzxts9TJKG9VFUT3w+wEkvoDAb0sSps LobTIIRq5YNO8s0QDvtEzCoNAggRxoWVEakjYc7sNyzRo3JQtV7cbLrarh9lIOiF 9Fmw041CY5T8P33iuC1OUMJ511cZoWD9Dx9upcYPW4qK0dS25gZiJTVc777TOwPX 75Gcpekw1Zu/sc068OyY3NUA02MMjkhO2JCdDiauIsUj4b85m8WEcWPEqcIaDp7A oUW0raLjdL9/MnnSC0OcYgGuZjXtEIUvQIiBYz0sP8K5LV0CZO8GbOS9uxBD/LUl YBf6vJWRLid82kNAwU3h36se4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA7n9UxI O4OhJl0ZTs4uET6TNzA/MB8GA1UdIwQYMBaAFLUpcGVVbSsik0k151IHIr1TM9pP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDdBNC8zQ0M3MTk5NjEx ODcxMUVFQjM5RkUyNDNDNEY5QUUwMi90U2x3WlZWdEt5S1RTVFhuVWdjaXZWTXoy azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RTbHdaVlZ0S3lLVFNUWG5VZ2NpdlZNejJrOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDdBNC8zQ0M3MTk5NjExODcxMUVFQjM5RkUyNDNDNEY5QUUwMi90U2x3WlZWdEt5 S1RTVFhuVWdjaXZWTXoyazgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNdmX+LPS+s9XGi8Btxa1M8Q5mKgmlYeW0Y3yMvtbhx9xInG/Pgk2I w9v6UyZdMcxQFayR1u206kGp2GAPW1g4JlydeLYJXq+LlYv4kPqhIcJJSybiWv0y uYGVSxbckMupkJgJa6JRJvxJc6J/BbOLxwsMlLSv67Ef977YKBWAgqw5UQPMVn58 heh8cIOJL4fVEgCzTKsPMpFMD9FZZvGBvrQO+rlbkbmP2WkpkQVDdYw0hbqoAfb+ 8lgPcYemQoOEjZtTH4l7DcXwdUr+FGI5aNQnZYERHChDLZ8UhZaEJNx8TIJcE2Io TMSXqlAs4AO8nQk0bnIj6Z0C4Eck0uav -----END CERTIFICATE-----Generated at Sat Aug 9 02:51:01 2025 by rpki-client