$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.mft File: 148wkE5135TOt1lmr4OOdj6ol2I.mft (raw, json) Hash identifier: d3bBAH33LH+LVNFMv7QW9cY66ZkplElpPJz7b3G5DDM= Subject key identifier: 24:0D:DA:4F:5C:1C:01:5F:41:64:50:38:E3:B2:64:9C:CF:95:CF:FA Authority key identifier: D7:8F:30:90:4E:75:DF:94:CE:B7:59:66:AF:83:8E:76:3E:A8:97:62 Certificate issuer: /CN=A91CE403/serialNumber=D78F30904E75DF94CEB75966AF838E763EA89762 Certificate serial: E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/148wkE5135TOt1lmr4OOdj6ol2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.mft Manifest number: E6 Signing time: Sat 09 Aug 2025 05:48:57 +0000 Manifest this update: Sat 09 Aug 2025 05:48:57 +0000 Manifest next update: Sat 16 Aug 2025 05:48:57 +0000 Files and hashes: 1: 148wkE5135TOt1lmr4OOdj6ol2I.crl (hash: cTeBI/3if/VqXPOHVvLzBTIbgEyZcvGHqwJct8MMg54=) 2: B74BF7F018BF11EFB54AFB20C4F9AE02.roa (hash: 3q4SG/qlGVDYq4EV5cqZmr+jLzfEittQVkz7pS+z/KE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.crl rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/148wkE5135TOt1lmr4OOdj6ol2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 232 (0xe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE403, serialNumber=D78F30904E75DF94CEB75966AF838E763EA89762 Validity Not Before: Aug 9 05:48:57 2025 GMT Not After : Aug 16 05:48:57 2025 GMT Subject: CN=6896e149-bd6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8d:5a:25:35:66:26:b7:01:f2:ba:32:e6:7f: 8b:d3:6e:9b:10:75:89:08:fc:37:33:26:45:0e:4a: 11:04:6d:a0:eb:cd:71:dc:b8:ab:53:ec:a9:89:57: e8:6a:f0:96:f2:3a:c2:ab:3e:66:5e:6a:af:b9:45: eb:c2:85:2d:88:8c:c5:c3:c8:ac:76:e1:fa:d2:6d: 13:87:73:6e:b2:6b:6c:4f:59:ef:56:0a:2f:39:2f: 95:15:7c:75:b4:49:29:39:43:05:6a:a1:23:89:06: d5:e3:0f:05:88:59:34:d9:36:23:c1:fc:57:a7:cf: b2:47:50:c7:70:13:fa:ff:e0:11:30:a8:c4:e5:6a: b3:44:e9:5e:13:b4:fe:29:c8:55:82:47:73:15:cb: 54:40:c4:27:30:00:37:0d:3b:e0:4e:ba:08:91:10: 63:f9:49:0e:6d:ce:41:e9:25:99:16:03:9b:c5:4a: fc:39:f4:aa:50:f3:05:6f:f9:b9:1d:95:83:91:07: dd:3f:47:d8:3a:72:e3:48:c4:cd:7e:c3:4c:c4:76: 3c:91:60:7b:c9:36:42:a6:01:60:2d:ab:a6:38:8d: ab:f2:ba:7a:d2:7d:03:f7:8f:ec:6b:14:97:d7:43: b6:88:ce:6a:26:ac:f9:87:77:f0:e2:11:65:87:55: 62:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:0D:DA:4F:5C:1C:01:5F:41:64:50:38:E3:B2:64:9C:CF:95:CF:FA X509v3 Authority Key Identifier: keyid:D7:8F:30:90:4E:75:DF:94:CE:B7:59:66:AF:83:8E:76:3E:A8:97:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/148wkE5135TOt1lmr4OOdj6ol2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:f6:33:c4:4c:22:6a:7a:66:65:e5:f5:23:05:d3:37:3c:08: 5b:08:ec:0a:ce:13:8e:30:05:aa:a7:2b:7e:8f:31:cc:ef:6b: 25:65:22:b1:bf:24:8a:b8:bb:cd:f2:d5:c3:52:fe:64:03:de: ab:a4:7f:99:f9:5e:e0:f9:d1:34:e5:bb:e5:b4:2a:74:c4:25: 7a:10:49:70:74:e0:45:d0:85:d0:e2:b3:d9:61:3f:0c:62:d6: 70:0d:db:41:a2:9c:c1:2d:65:0b:bc:b3:66:03:41:8e:a5:cd: cf:0e:ce:f4:71:17:c4:94:95:4b:84:62:86:41:d2:19:7b:6a: 7a:e4:52:6c:65:3d:0a:c2:d8:3d:85:b7:44:5a:41:d8:de:ea: a4:6b:36:c0:f5:49:ae:d6:63:78:cd:8c:1f:22:a4:00:97:10: 68:12:b3:a5:35:b9:d7:71:56:bf:22:32:d8:76:c1:dc:9d:a2: 54:db:82:59:82:46:da:32:aa:4a:79:a9:c3:08:99:bb:86:5a: a2:41:18:92:28:0e:a6:c9:0f:c9:ab:e1:4e:62:60:2d:33:a4: b9:fa:20:1d:c4:bc:7b:83:80:f3:b8:4e:4c:7a:0f:ec:09:fa: a4:3e:9b:5e:fa:d0:a9:7b:53:96:db:b0:e4:a6:d8:2b:55:a9: 84:e0:88:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U0MDMxMTAvBgNVBAUTKEQ3OEYzMDkwNEU3NURGOTRDRUI3NTk2NkFGODM4RTc2 M0VBODk3NjIwHhcNMjUwODA5MDU0ODU3WhcNMjUwODE2MDU0ODU3WjAYMRYwFAYD VQQDEw02ODk2ZTE0OS1iZDZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyI1aJTVmJrcB8roy5n+L026bEHWJCPw3MyZFDkoRBG2g681x3LirU+ypiVfo avCW8jrCqz5mXmqvuUXrwoUtiIzFw8isduH60m0Th3NusmtsT1nvVgovOS+VFXx1 tEkpOUMFaqEjiQbV4w8FiFk02TYjwfxXp8+yR1DHcBP6/+ARMKjE5WqzROleE7T+ KchVgkdzFctUQMQnMAA3DTvgTroIkRBj+UkObc5B6SWZFgObxUr8OfSqUPMFb/m5 HZWDkQfdP0fYOnLjSMTNfsNMxHY8kWB7yTZCpgFgLaumOI2r8rp60n0D94/saxSX 10O2iM5qJqz5h3fw4hFlh1VigwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCQN2k9c HAFfQWRQOOOyZJzPlc/6MB8GA1UdIwQYMBaAFNePMJBOdd+UzrdZZq+DjnY+qJdi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTQwMy84MDIwNzJFODE4 QkUxMUVGQURBN0U1MURDNEY5QUUwMi8xNDh3a0U1MTM1VE90MWxtcjRPT2RqNm9s MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE0OHdrRTUxMzVUT3QxbG1yNE9PZGo2b2wySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTQwMy84MDIwNzJFODE4QkUxMUVGQURBN0U1MURDNEY5QUUwMi8xNDh3a0U1MTM1 VE90MWxtcjRPT2RqNm9sMkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA89jPETCJqemZl5fUjBdM3PAhbCOwKzhOOMAWqpyt+jzHM72slZSKx vySKuLvN8tXDUv5kA96rpH+Z+V7g+dE05bvltCp0xCV6EElwdOBF0IXQ4rPZYT8M YtZwDdtBopzBLWULvLNmA0GOpc3PDs70cRfElJVLhGKGQdIZe2p65FJsZT0Kwtg9 hbdEWkHY3uqkazbA9Umu1mN4zYwfIqQAlxBoErOlNbnXcVa/IjLYdsHcnaJU24JZ gkbaMqpKeanDCJm7hlqiQRiSKA6myQ/Jq+FOYmAtM6S5+iAdxLx7g4DzuE5Meg/s CfqkPpte+tCpe1OW27DkptgrVamE4Ihk -----END CERTIFICATE-----Generated at Sat Aug 9 14:29:18 2025 by rpki-client