$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft File: raez5kKEQOUk2gaDhqHt8yH4gR4.mft (raw, json) Hash identifier: xCAtC26LLpWbp5t6qOkSyZhBHoqWgH+NQFHT3743UFg= Subject key identifier: 43:48:A5:3C:30:D6:3E:25:F5:AD:1F:2D:87:2D:4E:69:07:14:39:25 Authority key identifier: AD:A7:B3:E6:42:84:40:E5:24:DA:06:83:86:A1:ED:F3:21:F8:81:1E Certificate issuer: /CN=A91D7103/serialNumber=ADA7B3E6428440E524DA068386A1EDF321F8811E Certificate serial: 0177 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft Manifest number: 0171 Signing time: Sat 09 Aug 2025 04:11:15 +0000 Manifest this update: Sat 09 Aug 2025 04:11:14 +0000 Manifest next update: Sat 16 Aug 2025 04:11:14 +0000 Files and hashes: 1: raez5kKEQOUk2gaDhqHt8yH4gR4.crl (hash: TWxRJrbuSWfz7dhi2QH4Gf7Rwzy4Xlfc4G80FF1fUSs=) 2: EFB54FEC42D211EE9D8A0832C4F9AE02.roa (hash: wUxQPb5MXG1WoNfvu2qlWFFygupmyl9Dg9T+dYAheO4=) 3: 1E35039C42D511EEAE5F803AC4F9AE02.roa (hash: 7+kogSfoA5KHnVdL5HUL3JnEUIAqvGpgOMdM8vTSlLs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.crl rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 375 (0x177) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7103, serialNumber=ADA7B3E6428440E524DA068386A1EDF321F8811E Validity Not Before: Aug 9 04:11:14 2025 GMT Not After : Aug 16 04:11:14 2025 GMT Subject: CN=6896ca63-5f4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f3:83:14:c7:7d:9c:11:a4:3b:b8:3e:57:8d: 39:80:99:23:ce:79:83:89:d5:ae:e5:fa:11:ba:40: 83:8f:61:6f:29:d1:d8:24:61:fc:37:43:c1:fe:7c: 71:c7:2d:c1:7e:8b:cd:bd:0d:de:9b:5e:2d:f1:68: 64:a3:55:26:d3:d4:d7:9e:0b:42:f6:20:ec:45:6a: f2:a1:5b:08:73:b0:d6:d0:b6:c9:bc:00:49:80:77: 3a:c8:6e:96:58:7a:9e:9c:8c:80:b3:4f:1c:41:c9: ed:7d:11:3a:30:5b:e0:9b:c7:41:36:2a:af:80:6f: 1d:88:2f:c1:74:f1:77:cb:90:66:21:61:a9:cd:ff: 0a:1c:68:98:e2:f1:ec:91:0b:c8:6f:29:37:76:4d: c7:92:38:6b:ef:a8:36:8e:75:7c:e9:64:f8:f7:74: 98:1b:53:88:e7:a0:38:e5:d7:81:25:75:66:0e:4c: 12:d9:16:1e:95:f4:98:fc:fc:ed:d1:7e:05:92:a4: 00:f8:1c:3a:8e:95:71:d5:40:d3:be:d2:1a:e6:94: 34:3b:b3:b3:c4:fc:84:e7:ed:42:87:1a:00:a4:22: af:e7:54:a8:c9:cd:b5:b9:b4:72:8e:74:79:25:2f: e8:72:05:f9:12:57:8b:fd:df:92:57:06:99:3f:0d: 18:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:48:A5:3C:30:D6:3E:25:F5:AD:1F:2D:87:2D:4E:69:07:14:39:25 X509v3 Authority Key Identifier: keyid:AD:A7:B3:E6:42:84:40:E5:24:DA:06:83:86:A1:ED:F3:21:F8:81:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:c1:11:61:94:cd:2d:a3:8b:e3:df:9f:3f:f0:f2:a0:b5:3d: 1f:53:54:5a:62:80:1b:98:ef:06:f4:82:77:70:b1:17:ff:45: 0b:19:05:2e:21:73:ba:15:ed:a2:3e:a5:88:55:6a:19:e2:3e: 99:b3:dd:6a:4f:e9:39:ed:22:8c:23:65:5b:de:00:0e:f2:62: 5e:14:69:59:60:c2:af:80:91:fb:f6:e1:25:85:6c:da:22:5f: 92:bf:e2:c5:27:fa:e8:b1:fa:01:45:f0:63:29:40:7e:47:25: 21:7c:fd:84:4f:4f:d6:0b:d4:ab:01:a0:5a:fb:7e:b6:7b:fb: fd:af:c8:83:7c:98:a6:15:b0:7b:af:90:fc:d9:0e:66:66:59: 82:b7:5d:41:89:a1:e6:0c:f0:16:cb:d9:8c:fd:ed:37:82:34: 9a:6a:31:c4:46:a4:dd:10:6c:0a:f1:3a:82:90:4a:d9:e3:39: dc:78:ad:32:2e:c8:4c:fd:d0:c5:49:32:f2:73:b0:59:81:1e: e3:7f:85:2d:43:4e:fa:18:44:a2:d5:0b:20:4b:db:6d:4e:0a: 3f:20:80:07:bd:e0:79:8a:28:2f:37:9d:b9:67:60:7e:22:13: 4e:f5:fb:6c:3f:d7:c6:74:ec:06:21:17:cf:eb:ca:b7:49:5d: f9:fd:01:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDcxMDMxMTAvBgNVBAUTKEFEQTdCM0U2NDI4NDQwRTUyNERBMDY4Mzg2QTFFREYz MjFGODgxMUUwHhcNMjUwODA5MDQxMTE0WhcNMjUwODE2MDQxMTE0WjAYMRYwFAYD VQQDEw02ODk2Y2E2My01ZjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxvODFMd9nBGkO7g+V405gJkjznmDidWu5foRukCDj2FvKdHYJGH8N0PB/nxx xy3BfovNvQ3em14t8Whko1Um09TXngtC9iDsRWryoVsIc7DW0LbJvABJgHc6yG6W WHqenIyAs08cQcntfRE6MFvgm8dBNiqvgG8diC/BdPF3y5BmIWGpzf8KHGiY4vHs kQvIbyk3dk3Hkjhr76g2jnV86WT493SYG1OI56A45deBJXVmDkwS2RYelfSY/Pzt 0X4FkqQA+Bw6jpVx1UDTvtIa5pQ0O7OzxPyE5+1ChxoApCKv51Soyc21ubRyjnR5 JS/ocgX5EleL/d+SVwaZPw0Y+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFENIpTww 1j4l9a0fLYctTmkHFDklMB8GA1UdIwQYMBaAFK2ns+ZChEDlJNoGg4ah7fMh+IEe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzEwMy83QUI4MTEyQTQy RDIxMUVFQjdDNEQwMUVDNEY5QUUwMi9yYWV6NWtLRVFPVWsyZ2FEaHFIdDh5SDRn UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JhZXo1a0tFUU9VazJnYURocUh0OHlINGdSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzEwMy83QUI4MTEyQTQyRDIxMUVFQjdDNEQwMUVDNEY5QUUwMi9yYWV6NWtLRVFP VWsyZ2FEaHFIdDh5SDRnUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1wRFhlM0to4vj358/8PKgtT0fU1RaYoAbmO8G9IJ3cLEX/0ULGQUu IXO6Fe2iPqWIVWoZ4j6Zs91qT+k57SKMI2Vb3gAO8mJeFGlZYMKvgJH79uElhWza Il+Sv+LFJ/rosfoBRfBjKUB+RyUhfP2ET0/WC9SrAaBa+362e/v9r8iDfJimFbB7 r5D82Q5mZlmCt11BiaHmDPAWy9mM/e03gjSaajHERqTdEGwK8TqCkErZ4znceK0y LshM/dDFSTLyc7BZgR7jf4UtQ076GESi1QsgS9ttTgo/IIAHveB5iigvN525Z2B+ IhNO9ftsP9fGdOwGIRfP68q3SV35/QGj -----END CERTIFICATE-----Generated at Sat Aug 9 15:09:50 2025 by rpki-client