$ rpki-client -vvf rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.mft File: A72QmhoVpFA9-tWUw8bem5RgTmY.mft (raw, json) Hash identifier: RxGx3/dQOn5tTUMDPBbxDDdArhT0CAFrhdmDzwqMUsA= Subject key identifier: 85:21:31:A0:69:B3:4B:F5:57:54:11:D1:96:6E:CE:14:2F:EF:A7:38 Authority key identifier: 03:BD:90:9A:1A:15:A4:50:3D:FA:D5:94:C3:C6:DE:9B:94:60:4E:66 Certificate issuer: /CN=A91D873B/serialNumber=03BD909A1A15A4503DFAD594C3C6DE9B94604E66 Certificate serial: 035C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A72QmhoVpFA9-tWUw8bem5RgTmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.mft Manifest number: 0355 Signing time: Mon 11 Aug 2025 01:11:47 +0000 Manifest this update: Mon 11 Aug 2025 01:11:46 +0000 Manifest next update: Mon 18 Aug 2025 01:11:46 +0000 Files and hashes: 1: A72QmhoVpFA9-tWUw8bem5RgTmY.crl (hash: FwoZGD7GMxNWiIOvbajGhZqn3bo4ea9kAa+/5E5atfg=) 2: E15CC33CD55011EFB17CB022C4F9AE02.roa (hash: YkgVY3NySYm4wFHmOVUk89wTvIIkdJt3TNVnKoMCNEA=) 3: 5409C188C6CB11ECB185E43EC4F9AE02.roa (hash: qkNJcqJasGm5DqRK6RDLwIc76BxJl9ChsFknMyrjOEQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.crl rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A72QmhoVpFA9-tWUw8bem5RgTmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 860 (0x35c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D873B, serialNumber=03BD909A1A15A4503DFAD594C3C6DE9B94604E66 Validity Not Before: Aug 11 01:11:46 2025 GMT Not After : Aug 18 01:11:46 2025 GMT Subject: CN=68994353-7376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:44:0d:14:4b:96:a2:0f:35:a5:f9:f9:8c:55: ae:11:27:c3:d0:fb:61:49:f5:0e:66:a0:ee:46:a6: c7:85:ea:69:cf:4a:24:d2:75:09:a0:62:da:c0:28: 57:13:4a:12:33:74:9c:17:11:43:3c:39:85:33:b8: 59:af:96:32:91:cc:82:e5:f0:8f:1f:a3:f2:c3:0d: 12:76:65:26:f8:c1:9a:3f:50:c7:32:f3:02:e1:36: 6d:38:85:06:11:18:47:bd:2a:d4:d4:22:e5:71:4e: 0f:fd:62:7c:b1:a1:62:54:38:3e:f0:c9:4a:c0:19: d9:60:41:db:c0:e4:82:76:df:8f:9f:6d:d1:62:c3: 28:75:88:1d:51:f4:e8:a1:7c:be:35:85:77:c4:c5: 2d:7a:e5:d1:48:5d:b5:a8:64:ef:1e:e2:0f:82:68: fa:67:5f:a7:3b:3d:74:04:84:9e:16:ff:48:23:bf: d7:bc:7b:6f:30:d7:15:2a:5c:23:47:8c:6e:d0:fb: 87:00:c6:99:95:05:f8:2f:f3:74:8f:b2:41:e4:b6: af:c9:ea:1a:4f:f6:a8:3f:ed:7c:9a:f1:39:df:ab: 2d:08:36:14:77:c7:d1:c6:23:76:1e:f8:aa:71:eb: 0d:a1:90:57:13:28:95:bf:f4:62:69:b3:90:73:b2: 4d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:21:31:A0:69:B3:4B:F5:57:54:11:D1:96:6E:CE:14:2F:EF:A7:38 X509v3 Authority Key Identifier: keyid:03:BD:90:9A:1A:15:A4:50:3D:FA:D5:94:C3:C6:DE:9B:94:60:4E:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A72QmhoVpFA9-tWUw8bem5RgTmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:ec:ee:24:98:69:ab:21:25:46:3f:a7:54:75:6d:8c:e0:8c: 3d:48:a1:c6:52:0d:f9:e2:7a:86:d7:f4:d5:4b:de:38:d9:8c: 54:01:ac:d3:41:3e:48:e0:fe:17:bb:38:b3:48:55:99:25:6e: 88:63:33:ce:47:cf:e3:1c:17:9b:d9:70:7b:2d:6f:20:96:5c: 15:e8:47:1f:b0:15:24:52:14:fd:3d:a7:8f:11:29:ee:7b:f3: 52:cd:a6:d4:c4:bf:39:19:d6:da:81:f2:fd:cd:82:ba:f0:14: d5:31:58:78:cb:8c:ca:e5:9a:cc:6b:a6:3a:71:d4:f2:08:4c: 26:cc:d9:eb:b7:ee:d1:4c:f0:24:f3:2e:4e:d8:6d:a0:1a:4b: a4:f2:23:d6:50:eb:51:83:dd:63:2e:e9:c7:05:b6:4f:32:68: c4:9e:d1:29:d6:81:2c:e1:2c:6e:26:b8:4d:54:c2:7d:d2:a0: 0c:61:3b:27:4b:e2:fb:e8:81:4c:16:54:9b:4a:9e:05:ae:e3: 4b:c0:6a:2c:d0:e7:3d:91:73:d8:fe:8f:c3:d0:c7:38:d2:3a: f8:30:cc:09:e1:90:6a:f5:d5:cf:0b:f8:27:7d:90:3e:4d:a7: 3c:71:5c:cc:e5:b9:fb:5d:24:c6:ff:e4:40:ba:52:7a:7a:40: 59:2e:a3:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg3M0IxMTAvBgNVBAUTKDAzQkQ5MDlBMUExNUE0NTAzREZBRDU5NEMzQzZERTlC OTQ2MDRFNjYwHhcNMjUwODExMDExMTQ2WhcNMjUwODE4MDExMTQ2WjAYMRYwFAYD VQQDEw02ODk5NDM1My03Mzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvUQNFEuWog81pfn5jFWuESfD0PthSfUOZqDuRqbHheppz0ok0nUJoGLawChX E0oSM3ScFxFDPDmFM7hZr5YykcyC5fCPH6Pyww0SdmUm+MGaP1DHMvMC4TZtOIUG ERhHvSrU1CLlcU4P/WJ8saFiVDg+8MlKwBnZYEHbwOSCdt+Pn23RYsModYgdUfTo oXy+NYV3xMUteuXRSF21qGTvHuIPgmj6Z1+nOz10BISeFv9II7/XvHtvMNcVKlwj R4xu0PuHAMaZlQX4L/N0j7JB5LavyeoaT/aoP+18mvE536stCDYUd8fRxiN2Hviq cesNoZBXEyiVv/RiabOQc7JNzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIUhMaBp s0v1V1QR0ZZuzhQv76c4MB8GA1UdIwQYMBaAFAO9kJoaFaRQPfrVlMPG3puUYE5m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODczQi80QTE2QkJEQUM2 MDQxMUVDQUE5NDU5NEJDNEY5QUUwMi9BNzJRbWhvVnBGQTktdFdVdzhiZW01UmdU bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E3MlFtaG9WcEZBOS10V1V3OGJlbTVSZ1RtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODczQi80QTE2QkJEQUM2MDQxMUVDQUE5NDU5NEJDNEY5QUUwMi9BNzJRbWhvVnBG QTktdFdVdzhiZW01UmdUbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAo7O4kmGmrISVGP6dUdW2M4Iw9SKHGUg354nqG1/TVS9442YxUAazT QT5I4P4XuzizSFWZJW6IYzPOR8/jHBeb2XB7LW8gllwV6EcfsBUkUhT9PaePESnu e/NSzabUxL85GdbagfL9zYK68BTVMVh4y4zK5ZrMa6Y6cdTyCEwmzNnrt+7RTPAk 8y5O2G2gGkuk8iPWUOtRg91jLunHBbZPMmjEntEp1oEs4SxuJrhNVMJ90qAMYTsn S+L76IFMFlSbSp4FruNLwGos0Oc9kXPY/o/D0Mc40jr4MMwJ4ZBq9dXPC/gnfZA+ Tac8cVzM5bn7XSTG/+RAulJ6ekBZLqMX -----END CERTIFICATE-----Generated at Mon Aug 11 04:11:00 2025 by rpki-client