$ rpki-client -vvf rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft File: CROi4pwkcA4hQx4EweNJf9X5qAA.mft (raw, json) Hash identifier: YQnIKZh4UOyNoqmS5zvM2SF9iE8i3LdqSh1VGXc8og4= Subject key identifier: 07:3C:75:41:47:EA:29:0D:DC:B6:D7:27:58:7E:51:5C:AB:4E:DE:45 Authority key identifier: 09:13:A2:E2:9C:24:70:0E:21:43:1E:04:C1:E3:49:7F:D5:F9:A8:00 Certificate issuer: /CN=A91D65C2/serialNumber=0913A2E29C24700E21431E04C1E3497FD5F9A800 Certificate serial: 0137 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft Manifest number: 012E Signing time: Sat 09 Aug 2025 05:02:12 +0000 Manifest this update: Sat 09 Aug 2025 05:02:12 +0000 Manifest next update: Sat 16 Aug 2025 05:02:12 +0000 Files and hashes: 1: CROi4pwkcA4hQx4EweNJf9X5qAA.crl (hash: I/NjgA9o9TYIpCtJpWWnYiRzHU2k1M+CVe9YSaeToQo=) 2: C3A53484B06011EEA1D18B7FC4F9AE02.roa (hash: 6BXa0l0XZh/eGvl4ynq5V2Aj3lZVf/u92wrWO9e9+lA=) 3: AA134FD6BD1411EE95F45624C4F9AE02.roa (hash: 0ui5S8hmz9C0Ock78UXOuJaT2l8PyKzUulCehXJDbXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.crl rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 311 (0x137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D65C2, serialNumber=0913A2E29C24700E21431E04C1E3497FD5F9A800 Validity Not Before: Aug 9 05:02:12 2025 GMT Not After : Aug 16 05:02:12 2025 GMT Subject: CN=6896d654-5b46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:aa:c9:06:ff:3b:17:9f:ea:a7:94:e0:29:04: 0e:ed:ac:51:66:8a:38:3c:a9:1d:e6:5b:b9:57:9f: 10:e3:ca:e9:48:73:1f:cb:4a:0f:6f:09:c0:88:12: a3:fc:e2:da:f9:e4:80:cc:de:6d:71:71:5a:52:33: b5:77:df:db:33:a1:e7:60:0d:f4:dc:e9:71:ea:06: 50:24:ef:2f:66:71:97:cb:38:98:8d:b2:5d:85:6e: b5:32:88:5d:18:e4:bc:d6:84:ff:9a:ab:11:21:79: 9e:80:3a:97:cc:61:48:e1:25:46:73:41:bd:43:0b: 63:17:0b:d2:d6:74:d7:c6:2d:3a:4a:52:25:50:34: 87:5b:97:08:6c:81:ae:b3:0a:a3:07:20:54:7b:23: ac:b0:d7:26:19:ae:21:9a:ea:66:97:d8:15:b2:35: 97:56:9a:b8:6f:f6:d3:ee:c6:90:70:40:f1:6e:c8: 21:87:59:b7:68:ab:a4:df:61:3f:a3:4e:64:f6:f3: 69:3b:d1:11:40:3a:cb:72:69:15:3c:aa:b7:9b:aa: e6:db:89:76:42:d3:34:a7:57:36:24:c1:8b:6a:52: 61:2b:7a:0c:8f:47:5c:98:a7:6f:01:b1:f1:3a:4b: 1e:75:fd:0a:59:8e:92:4e:11:2d:05:81:b8:b6:9e: d0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:3C:75:41:47:EA:29:0D:DC:B6:D7:27:58:7E:51:5C:AB:4E:DE:45 X509v3 Authority Key Identifier: keyid:09:13:A2:E2:9C:24:70:0E:21:43:1E:04:C1:E3:49:7F:D5:F9:A8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:6a:b0:c6:7b:50:76:d3:0a:3a:ff:63:a9:33:be:e2:11:a5: e6:70:7e:80:d5:17:11:31:53:3b:6e:24:f5:55:c6:1e:77:ff: 7e:ce:19:b5:97:3e:9a:c7:a2:1f:4f:c6:e1:2e:1d:15:47:82: 83:c5:38:cf:35:23:af:38:5a:3f:6a:f4:98:a6:91:a0:d9:ee: 0b:de:8d:27:30:cb:4f:7c:09:69:4b:9c:e6:f5:17:80:03:eb: 34:94:62:8f:24:20:0b:71:83:32:fc:60:02:16:72:43:be:51: 1c:77:47:80:65:29:e0:c9:8f:40:68:56:b7:48:f0:69:08:73: e2:ad:0c:03:3f:1a:43:d4:43:ce:37:91:19:03:a0:c5:62:39: 02:1e:c7:4f:3e:2a:73:4c:1b:f6:ee:5d:7d:ed:80:f9:06:7c: 78:d2:c6:6f:34:84:36:b7:ac:16:e6:6d:1e:39:ac:46:7e:6b: 7b:b2:2f:24:3a:c7:0a:4a:b2:25:4d:d1:6d:4f:2f:41:11:ba: 42:0c:96:da:a0:54:de:92:a9:0f:9a:08:d5:bc:a7:f8:fe:ea: a4:46:e4:9e:7e:8d:ca:bb:52:28:77:5a:50:bd:c8:cf:6c:b1: 6f:1d:42:19:90:4e:ad:88:d7:8a:49:74:62:a7:85:85:85:3e: 8d:c5:d7:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY1QzIxMTAvBgNVBAUTKDA5MTNBMkUyOUMyNDcwMEUyMTQzMUUwNEMxRTM0OTdG RDVGOUE4MDAwHhcNMjUwODA5MDUwMjEyWhcNMjUwODE2MDUwMjEyWjAYMRYwFAYD VQQDEw02ODk2ZDY1NC01YjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8arJBv87F5/qp5TgKQQO7axRZoo4PKkd5lu5V58Q48rpSHMfy0oPbwnAiBKj /OLa+eSAzN5tcXFaUjO1d9/bM6HnYA303Olx6gZQJO8vZnGXyziYjbJdhW61Mohd GOS81oT/mqsRIXmegDqXzGFI4SVGc0G9QwtjFwvS1nTXxi06SlIlUDSHW5cIbIGu swqjByBUeyOssNcmGa4hmupml9gVsjWXVpq4b/bT7saQcEDxbsghh1m3aKuk32E/ o05k9vNpO9ERQDrLcmkVPKq3m6rm24l2QtM0p1c2JMGLalJhK3oMj0dcmKdvAbHx Oksedf0KWY6SThEtBYG4tp7QIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAc8dUFH 6ikN3LbXJ1h+UVyrTt5FMB8GA1UdIwQYMBaAFAkTouKcJHAOIUMeBMHjSX/V+agA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjVDMi83NkVFNzk1Q0Iw NjAxMUVFQkJCRjY1N0NDNEY5QUUwMi9DUk9pNHB3a2NBNGhReDRFd2VOSmY5WDVx QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NST2k0cHdrY0E0aFF4NEV3ZU5KZjlYNXFBQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjVDMi83NkVFNzk1Q0IwNjAxMUVFQkJCRjY1N0NDNEY5QUUwMi9DUk9pNHB3a2NB NGhReDRFd2VOSmY5WDVxQUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCarDGe1B20wo6/2OpM77iEaXmcH6A1RcRMVM7biT1VcYed/9+zhm1 lz6ax6IfT8bhLh0VR4KDxTjPNSOvOFo/avSYppGg2e4L3o0nMMtPfAlpS5zm9ReA A+s0lGKPJCALcYMy/GACFnJDvlEcd0eAZSngyY9AaFa3SPBpCHPirQwDPxpD1EPO N5EZA6DFYjkCHsdPPipzTBv27l197YD5Bnx40sZvNIQ2t6wW5m0eOaxGfmt7si8k OscKSrIlTdFtTy9BEbpCDJbaoFTekqkPmgjVvKf4/uqkRuSefo3Ku1Iod1pQvcjP bLFvHUIZkE6tiNeKSXRip4WFhT6NxddM -----END CERTIFICATE-----Generated at Mon Aug 11 04:25:18 2025 by rpki-client