$ rpki-client -vvf rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft File: CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft (raw, json) Hash identifier: H2ukI/FazEHH3lb/dItgrGhBL0/Mz/wP7VqN3/7dy4A= Subject key identifier: 3D:8D:EE:F8:4E:17:D4:01:C4:2F:27:2C:72:FB:CD:99:AC:F9:74:9A Authority key identifier: 0B:02:2B:1E:A3:4C:03:7C:51:F6:57:FC:3E:0D:84:A3:C6:18:68:22 Certificate issuer: /CN=A91D890E/serialNumber=0B022B1EA34C037C51F657FC3E0D84A3C6186822 Certificate serial: 094C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft Manifest number: 0945 Signing time: Mon 04 Aug 2025 20:29:47 +0000 Manifest this update: Mon 04 Aug 2025 20:29:47 +0000 Manifest next update: Mon 11 Aug 2025 20:29:47 +0000 Files and hashes: 1: CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl (hash: YeuNierQbo2EZ3QrL/gDt3tKZV5wc/Y7BEEEhT9X4sA=) 2: FDAEEFB0A12A11EAB063A548C4F9AE02.roa (hash: 0cYkjMp/gtYpvp6HxvXFQpX0b09jvpiPKpMRszh/Xsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 20:29:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2380 (0x94c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D890E, serialNumber=0B022B1EA34C037C51F657FC3E0D84A3C6186822 Validity Not Before: Aug 4 20:29:47 2025 GMT Not After : Aug 11 20:29:47 2025 GMT Subject: CN=6891183b-d79c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e2:1c:af:ab:74:a4:59:9f:5b:2c:d5:64:d7: fe:95:b6:47:c3:30:c4:b9:fe:9a:c1:98:c6:d5:62: fa:ad:97:82:ef:f5:0a:ed:73:ab:70:22:0b:8e:c7: ae:83:80:97:bc:a9:45:07:97:08:64:70:a4:50:54: d8:37:e5:6d:cb:46:41:b0:fe:21:1a:3c:e9:f3:84: 6d:f6:81:95:da:58:4e:6a:b7:7c:fb:44:47:2f:25: c5:a1:5e:3c:dd:65:bd:48:d0:2a:ba:f3:e4:0a:d4: 1a:81:83:c5:7f:46:0d:a2:90:eb:01:c2:3e:e0:7d: 99:9f:97:ba:99:39:64:87:b0:2b:f4:82:4f:18:02: 16:a6:91:05:5b:81:f2:03:d9:01:5f:d5:8b:00:37: 95:ad:48:1d:4d:f4:c2:d4:aa:80:1b:3f:82:b0:1d: 53:e3:b8:40:3b:76:c2:c3:d1:16:7e:78:af:eb:f0: eb:2d:7c:a4:8c:1d:5e:f2:f0:07:c6:1f:34:08:f3: 23:3f:60:e8:e1:b4:fc:9a:97:3d:ca:e6:39:48:c4: 68:9b:e5:b1:27:60:19:22:5f:77:9c:35:46:fb:1d: c9:be:6e:32:aa:2b:9e:43:d8:70:48:fe:8f:02:aa: 9e:48:90:9e:7a:af:d4:cb:82:4a:d4:6c:7a:5b:4a: fa:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:8D:EE:F8:4E:17:D4:01:C4:2F:27:2C:72:FB:CD:99:AC:F9:74:9A X509v3 Authority Key Identifier: keyid:0B:02:2B:1E:A3:4C:03:7C:51:F6:57:FC:3E:0D:84:A3:C6:18:68:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:8c:ff:87:64:d1:55:ba:1c:6e:f1:95:3f:e5:b4:d0:7d:e6: 7c:b8:34:e0:a6:71:61:cb:07:95:52:54:ee:95:b5:10:0d:57: 23:4e:d6:51:3d:08:8f:c0:11:f4:66:b8:72:74:0f:9e:12:ce: 43:94:22:86:36:86:63:04:8f:c2:0d:15:71:50:54:7f:c0:24: 7e:a0:85:9b:a7:74:ba:f0:8f:d4:d4:03:79:8c:3f:82:f5:fd: 8a:14:35:57:8c:c6:71:d9:4c:70:c0:f3:ad:4f:1c:34:bc:d0: 88:49:3f:55:b5:59:cd:b9:c4:52:30:2e:75:91:19:f7:d1:53: ba:ad:23:48:00:49:51:bc:82:53:2d:02:f9:04:6d:21:04:ce: c2:43:7c:c8:a4:6d:0e:65:cb:68:8a:4a:49:b6:51:41:5a:b9: 38:64:4e:95:5f:d7:43:70:26:48:87:9b:81:02:7e:b1:ee:61: 50:ad:da:a1:24:3e:a1:e9:65:61:f5:f2:86:a4:98:1b:d2:e7: ef:50:e7:cf:1b:64:a9:2b:e9:c9:5f:72:99:8b:74:79:48:ee: eb:f1:e0:ca:6c:1d:3f:d5:99:3b:da:a6:22:c7:b7:4f:13:c7: a5:77:fe:77:9d:98:fb:af:99:32:7e:f9:e4:0a:a5:9f:ea:8f: e1:02:76:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg5MEUxMTAvBgNVBAUTKDBCMDIyQjFFQTM0QzAzN0M1MUY2NTdGQzNFMEQ4NEEz QzYxODY4MjIwHhcNMjUwODA0MjAyOTQ3WhcNMjUwODExMjAyOTQ3WjAYMRYwFAYD VQQDEw02ODkxMTgzYi1kNzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt+Icr6t0pFmfWyzVZNf+lbZHwzDEuf6awZjG1WL6rZeC7/UK7XOrcCILjseu g4CXvKlFB5cIZHCkUFTYN+Vty0ZBsP4hGjzp84Rt9oGV2lhOard8+0RHLyXFoV48 3WW9SNAquvPkCtQagYPFf0YNopDrAcI+4H2Zn5e6mTlkh7Ar9IJPGAIWppEFW4Hy A9kBX9WLADeVrUgdTfTC1KqAGz+CsB1T47hAO3bCw9EWfniv6/DrLXykjB1e8vAH xh80CPMjP2Do4bT8mpc9yuY5SMRom+WxJ2AZIl93nDVG+x3Jvm4yqiueQ9hwSP6P AqqeSJCeeq/Uy4JK1Gx6W0r68QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD2N7vhO F9QBxC8nLHL7zZms+XSaMB8GA1UdIwQYMBaAFAsCKx6jTAN8UfZX/D4NhKPGGGgi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODkwRS84RDQxMzVGRUEx MjkxMUVBQTAyMjc3NDZDNEY5QUUwMi9Dd0lySHFOTUEzeFI5bGY4UGcyRW84WVlh Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N3SXJIcU5NQTN4UjlsZjhQZzJFbzhZWWFDSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODkwRS84RDQxMzVGRUExMjkxMUVBQTAyMjc3NDZDNEY5QUUwMi9Dd0lySHFOTUEz eFI5bGY4UGcyRW84WVlhQ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANjP+HZNFVuhxu8ZU/5bTQfeZ8uDTgpnFhyweVUlTulbUQDVcjTtZR PQiPwBH0ZrhydA+eEs5DlCKGNoZjBI/CDRVxUFR/wCR+oIWbp3S68I/U1AN5jD+C 9f2KFDVXjMZx2UxwwPOtTxw0vNCIST9VtVnNucRSMC51kRn30VO6rSNIAElRvIJT LQL5BG0hBM7CQ3zIpG0OZctoikpJtlFBWrk4ZE6VX9dDcCZIh5uBAn6x7mFQrdqh JD6h6WVh9fKGpJgb0ufvUOfPG2SpK+nJX3KZi3R5SO7r8eDKbB0/1Zk72qYix7dP E8eld/53nZj7r5kyfvnkCqWf6o/hAnbU -----END CERTIFICATE-----Generated at Wed Aug 6 04:10:32 2025 by rpki-client