$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.mft File: K99csyKL7Ic-zuddZ1g1RlOCNJI.mft (raw, json) Hash identifier: U+BFhiwEXw0HoLCQ1YuhM6ENQSXjNd4+J55eBH3CXVY= Subject key identifier: 58:25:C4:48:B6:A4:16:C0:96:CB:4B:40:2B:5C:89:51:9D:22:4B:33 Authority key identifier: 2B:DF:5C:B3:22:8B:EC:87:3E:CE:E7:5D:67:58:35:46:53:82:34:92 Certificate issuer: /CN=A91D8100/serialNumber=2BDF5CB3228BEC873ECEE75D6758354653823492 Certificate serial: 07EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K99csyKL7Ic-zuddZ1g1RlOCNJI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.mft Manifest number: 07E0 Signing time: Sun 10 Aug 2025 21:05:46 +0000 Manifest this update: Sun 10 Aug 2025 21:05:45 +0000 Manifest next update: Sun 17 Aug 2025 21:05:45 +0000 Files and hashes: 1: K99csyKL7Ic-zuddZ1g1RlOCNJI.crl (hash: DCzljSaDB5xv8WzO6xMIC6uw+XAOZoCntNwpWhnTsdU=) 2: 353932A29B3111EEAFB64748C4F9AE02.roa (hash: 9uk0usjnIlSyDjwPsAY9kObLcGremCDO3bEAYN35jzU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.crl rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K99csyKL7Ic-zuddZ1g1RlOCNJI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2026 (0x7ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8100, serialNumber=2BDF5CB3228BEC873ECEE75D6758354653823492 Validity Not Before: Aug 10 21:05:45 2025 GMT Not After : Aug 17 21:05:45 2025 GMT Subject: CN=689909a9-a33f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a6:86:d5:e1:fb:d7:65:ed:06:d4:42:7b:81: 43:41:59:65:72:78:41:3f:a6:ef:6c:cb:18:b5:1f: 74:ed:15:b4:f1:74:47:56:c3:38:7e:f4:81:74:c6: e2:b6:10:aa:89:5b:50:37:82:a5:e6:19:cf:c1:c8: da:a6:8f:80:99:94:2d:91:09:f9:32:c6:a1:99:5c: ed:12:e5:35:64:80:1e:86:c1:2f:a6:23:c4:d3:fd: 36:6c:9b:bb:0d:a5:24:92:f7:1b:f3:71:17:12:36: d4:4d:db:80:36:75:ab:94:19:53:e2:05:02:ca:0c: 1f:2a:be:b9:1a:b5:7c:3a:fc:ee:e4:78:70:c7:16: d9:c6:3c:4f:a1:0e:9a:ad:16:53:aa:b0:67:8f:55: 55:cd:a7:29:91:09:f2:25:db:fc:13:f1:cb:14:92: 51:1c:21:98:1c:62:1b:d3:1f:82:16:7c:91:1d:68: e1:41:27:4a:d7:ca:c5:f0:a7:a9:71:d4:17:f3:ca: 2e:4b:f5:cb:a0:e3:64:6e:56:ae:02:20:0e:9f:a8: e5:e7:49:91:ec:18:84:c2:15:54:30:32:01:6b:c1: 2c:5e:1d:cc:e5:f8:45:80:7f:a7:40:7e:3d:37:c0: a1:88:16:41:0f:a5:97:f3:57:ff:74:90:a4:5b:78: 30:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:25:C4:48:B6:A4:16:C0:96:CB:4B:40:2B:5C:89:51:9D:22:4B:33 X509v3 Authority Key Identifier: keyid:2B:DF:5C:B3:22:8B:EC:87:3E:CE:E7:5D:67:58:35:46:53:82:34:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K99csyKL7Ic-zuddZ1g1RlOCNJI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:c7:9b:8e:04:bf:bf:73:ca:90:56:cc:4f:a8:90:ee:a3:49: 84:57:fc:9f:d7:14:ce:c4:84:d9:92:46:02:9b:48:7e:a1:c0: c9:50:a0:1e:0a:95:32:39:4c:3e:74:42:ed:38:38:0a:58:63: 3b:d6:99:f2:8b:a7:bc:1e:56:0a:98:76:e6:3b:b9:44:97:58: 0d:54:f0:4a:4a:ea:42:6e:05:c7:e2:c2:2a:f3:7c:50:99:c2: 50:6c:37:b8:e5:ab:c1:d3:c5:a0:af:09:23:9a:cd:24:94:ea: a4:cc:45:70:da:6e:1d:ec:93:87:08:9c:dc:de:9b:53:e8:4b: f2:f7:22:98:33:31:c4:8b:b4:29:ce:ff:59:70:db:c6:c7:fe: fd:9f:74:81:53:f3:d7:93:49:09:9e:9e:c8:a5:7d:8a:e8:df: c4:ce:58:cc:eb:9c:e1:06:c9:5f:04:78:8d:4f:13:79:34:2b: 59:2f:e8:e3:1b:fe:ae:db:72:ae:d0:4b:3f:ab:b4:5f:3a:46: c3:59:ac:5b:f5:9e:b4:0a:7a:fa:5d:c8:57:af:3f:54:33:7e: a7:99:1f:a6:19:20:c4:70:81:e1:ec:df:f8:63:6b:50:74:db: 14:fa:22:e8:bb:11:b8:4e:c5:71:ca:30:36:36:e7:0b:de:b6: 11:ab:09:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgxMDAxMTAvBgNVBAUTKDJCREY1Q0IzMjI4QkVDODczRUNFRTc1RDY3NTgzNTQ2 NTM4MjM0OTIwHhcNMjUwODEwMjEwNTQ1WhcNMjUwODE3MjEwNTQ1WjAYMRYwFAYD VQQDEw02ODk5MDlhOS1hMzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyqaG1eH712XtBtRCe4FDQVllcnhBP6bvbMsYtR907RW08XRHVsM4fvSBdMbi thCqiVtQN4Kl5hnPwcjapo+AmZQtkQn5MsahmVztEuU1ZIAehsEvpiPE0/02bJu7 DaUkkvcb83EXEjbUTduANnWrlBlT4gUCygwfKr65GrV8Ovzu5HhwxxbZxjxPoQ6a rRZTqrBnj1VVzacpkQnyJdv8E/HLFJJRHCGYHGIb0x+CFnyRHWjhQSdK18rF8Kep cdQX88ouS/XLoONkblauAiAOn6jl50mR7BiEwhVUMDIBa8EsXh3M5fhFgH+nQH49 N8ChiBZBD6WX81f/dJCkW3gwXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFglxEi2 pBbAlstLQCtciVGdIkszMB8GA1UdIwQYMBaAFCvfXLMii+yHPs7nXWdYNUZTgjSS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODEwMC9BQUM3MkUwQ0ZD Q0UxMUVBOEMxOUQ4N0ZDNEY5QUUwMi9LOTljc3lLTDdJYy16dWRkWjFnMVJsT0NO SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s5OWNzeUtMN0ljLXp1ZGRaMWcxUmxPQ05KSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODEwMC9BQUM3MkUwQ0ZDQ0UxMUVBOEMxOUQ4N0ZDNEY5QUUwMi9LOTljc3lLTDdJ Yy16dWRkWjFnMVJsT0NOSkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/x5uOBL+/c8qQVsxPqJDuo0mEV/yf1xTOxITZkkYCm0h+ocDJUKAe CpUyOUw+dELtODgKWGM71pnyi6e8HlYKmHbmO7lEl1gNVPBKSupCbgXH4sIq83xQ mcJQbDe45avB08Wgrwkjms0klOqkzEVw2m4d7JOHCJzc3ptT6Evy9yKYMzHEi7Qp zv9ZcNvGx/79n3SBU/PXk0kJnp7IpX2K6N/EzljM65zhBslfBHiNTxN5NCtZL+jj G/6u23Ku0Es/q7RfOkbDWaxb9Z60Cnr6XchXrz9UM36nmR+mGSDEcIHh7N/4Y2tQ dNsU+iLouxG4TsVxyjA2NucL3rYRqwla -----END CERTIFICATE-----Generated at Mon Aug 11 04:15:27 2025 by rpki-client