$ rpki-client -vvf rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft File: 1xRtqd4o9btePeL_AMWfyFyZONo.mft (raw, json) Hash identifier: LvRGdbFEE4eAsiIJti6GQf7hQWYf2A9Pq0eNTokML/g= Subject key identifier: E4:FF:F6:82:F3:D3:D9:D5:73:2A:48:E9:9E:9A:C5:A1:3F:B2:C9:17 Authority key identifier: D7:14:6D:A9:DE:28:F5:BB:5E:3D:E2:FF:00:C5:9F:C8:5C:99:38:DA Certificate issuer: /CN=A91D560D/serialNumber=D7146DA9DE28F5BB5E3DE2FF00C59FC85C9938DA Certificate serial: 08BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft Manifest number: 13D5 Signing time: Fri 08 Aug 2025 19:28:57 +0000 Manifest this update: Fri 08 Aug 2025 19:28:56 +0000 Manifest next update: Fri 15 Aug 2025 19:28:56 +0000 Files and hashes: 1: 1xRtqd4o9btePeL_AMWfyFyZONo.crl (hash: eHQLGh3iunNqR/QsQUcwjAhQqr3h3YriU8QHM4oYd/M=) 2: 98DE3894CCE411EFA6203F26C4F9AE02.roa (hash: VEO00g9Wl0SGw0f2i0cGvp6jjnbdvIYaLuu58A6mseU=) 3: 4E0A64703A3811F0ADB0050BC4F9AE02.roa (hash: Vqxb0PYOCR3C6cShr5awy3jVN80kFbWIBGbta/oK5uQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.crl rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2237 (0x8bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D560D, serialNumber=D7146DA9DE28F5BB5E3DE2FF00C59FC85C9938DA Validity Not Before: Aug 8 19:28:56 2025 GMT Not After : Aug 15 19:28:56 2025 GMT Subject: CN=68964ff8-d084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0d:a0:91:a1:91:7b:15:fa:15:80:fb:7b:c7: a9:b3:82:cb:cf:57:6e:e3:65:ff:b1:37:3c:93:25: 39:07:e2:49:58:b8:98:0d:e3:b8:ca:02:09:6b:32: f4:5f:09:86:6b:2a:2e:36:fd:0d:db:6d:3a:ea:00: cc:b2:11:c0:4b:dd:c3:34:1e:2d:b4:c3:a5:1d:45: 5d:e3:79:03:2c:62:08:da:95:86:d9:d4:a3:07:0e: ae:c5:26:29:3a:b7:61:4e:e4:63:fd:a0:4e:41:7c: 91:cd:8b:2f:ed:ce:e1:f9:fa:bf:ae:a2:74:6f:7f: 9c:16:00:9e:33:62:56:64:da:3c:a7:38:60:56:02: 0c:6c:28:99:35:01:6e:08:41:7e:e4:f9:c9:cb:62: 97:37:39:15:b9:53:34:fb:8a:1f:27:36:8c:1a:93: 78:ab:8e:94:0d:56:61:12:f6:73:7c:73:81:d9:03: b3:e6:64:98:4c:fa:c9:a7:ed:6e:2c:6e:56:93:8e: b8:f6:90:24:79:e9:66:b7:10:84:e0:d7:91:21:2f: e6:53:a1:a0:1a:39:19:5c:ee:b4:62:9a:7f:89:ba: 29:cf:df:63:15:3e:8d:bf:86:79:7a:ed:95:91:32: 99:a7:43:2d:d0:6c:b5:e1:a4:11:a8:ac:cd:c6:94: 4c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:FF:F6:82:F3:D3:D9:D5:73:2A:48:E9:9E:9A:C5:A1:3F:B2:C9:17 X509v3 Authority Key Identifier: keyid:D7:14:6D:A9:DE:28:F5:BB:5E:3D:E2:FF:00:C5:9F:C8:5C:99:38:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:ae:fc:f0:2f:e7:68:80:b8:84:37:a7:e3:b9:1e:d6:8e:47: 71:8a:f6:0a:31:22:a7:d9:9c:a6:d3:06:81:99:3f:a2:62:53: 5e:93:53:60:d1:b3:a7:fb:41:f4:bc:a5:57:2c:eb:cd:86:e2: 7a:d2:07:24:c9:2e:9b:2e:f6:f0:70:3a:1b:ce:6c:b3:64:f4: 54:73:aa:c7:93:a8:a5:be:76:2b:75:a6:d0:33:b0:b4:ad:74: 8e:e2:6e:b7:e7:a1:2d:8a:ae:be:db:3f:bb:51:ba:83:10:93: 61:29:2e:49:09:8f:42:be:c5:b0:c2:66:4f:18:ae:49:26:b0: 92:e8:91:5e:a8:a4:f9:8a:5f:55:e9:3e:62:21:ad:a7:56:54: 1c:ac:98:58:3c:a9:0c:db:32:e8:58:82:3b:d7:59:5e:08:c3: 85:43:49:c4:42:7e:9f:80:d4:34:f5:03:5c:cb:ea:c8:4b:91: 02:99:e5:79:db:53:6b:97:7f:61:42:16:77:11:4f:74:42:16: 97:a3:24:41:4d:a6:df:4f:2e:84:5b:1d:e5:32:62:bc:98:40: 28:d7:10:68:4f:a1:8d:5f:af:1f:52:1b:56:42:ad:85:3b:2d: 0e:ab:e3:8e:04:f5:ca:84:d9:1b:f0:0f:d5:b2:7d:11:7e:13: e3:64:de:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU2MEQxMTAvBgNVBAUTKEQ3MTQ2REE5REUyOEY1QkI1RTNERTJGRjAwQzU5RkM4 NUM5OTM4REEwHhcNMjUwODA4MTkyODU2WhcNMjUwODE1MTkyODU2WjAYMRYwFAYD VQQDEw02ODk2NGZmOC1kMDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzQ2gkaGRexX6FYD7e8eps4LLz1du42X/sTc8kyU5B+JJWLiYDeO4ygIJazL0 XwmGayouNv0N22066gDMshHAS93DNB4ttMOlHUVd43kDLGII2pWG2dSjBw6uxSYp OrdhTuRj/aBOQXyRzYsv7c7h+fq/rqJ0b3+cFgCeM2JWZNo8pzhgVgIMbCiZNQFu CEF+5PnJy2KXNzkVuVM0+4ofJzaMGpN4q46UDVZhEvZzfHOB2QOz5mSYTPrJp+1u LG5Wk4649pAkeelmtxCE4NeRIS/mU6GgGjkZXO60Ypp/ibopz99jFT6Nv4Z5eu2V kTKZp0Mt0Gy14aQRqKzNxpRMFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOT/9oLz 09nVcypI6Z6axaE/sskXMB8GA1UdIwQYMBaAFNcUbaneKPW7Xj3i/wDFn8hcmTja MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTYwRC82OEMzRjQ5QTQx RUUxMUVBOUNFQTFGNzVDNEY5QUUwMi8xeFJ0cWQ0bzlidGVQZUxfQU1XZnlGeVpP Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF4UnRxZDRvOWJ0ZVBlTF9BTVdmeUZ5Wk9Oby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTYwRC82OEMzRjQ5QTQxRUUxMUVBOUNFQTFGNzVDNEY5QUUwMi8xeFJ0cWQ0bzli dGVQZUxfQU1XZnlGeVpPTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+rvzwL+dogLiEN6fjuR7WjkdxivYKMSKn2Zym0waBmT+iYlNek1Ng 0bOn+0H0vKVXLOvNhuJ60gckyS6bLvbwcDobzmyzZPRUc6rHk6ilvnYrdabQM7C0 rXSO4m6356Etiq6+2z+7UbqDEJNhKS5JCY9CvsWwwmZPGK5JJrCS6JFeqKT5il9V 6T5iIa2nVlQcrJhYPKkM2zLoWII711leCMOFQ0nEQn6fgNQ09QNcy+rIS5ECmeV5 21Nrl39hQhZ3EU90QhaXoyRBTabfTy6EWx3lMmK8mEAo1xBoT6GNX68fUhtWQq2F Oy0Oq+OOBPXKhNkb8A/Vsn0RfhPjZN6m -----END CERTIFICATE-----Generated at Sun Aug 10 05:38:31 2025 by rpki-client