$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.mft File: A1Tb4e09meGUXicnS6L2A-tqF4E.mft (raw, json) Hash identifier: zThly9Z2Sm5lGyHLHHKlFqrIU4FGOxh05+MP6LHAkUw= Subject key identifier: 55:61:70:57:61:AA:DC:55:BD:02:18:2A:B4:2B:8A:AF:9C:1E:4A:44 Authority key identifier: 03:54:DB:E1:ED:3D:99:E1:94:5E:27:27:4B:A2:F6:03:EB:6A:17:81 Certificate issuer: /CN=A91D8A67/serialNumber=0354DBE1ED3D99E1945E27274BA2F603EB6A1781 Certificate serial: 012C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A1Tb4e09meGUXicnS6L2A-tqF4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.mft Manifest number: 0128 Signing time: Sat 09 Aug 2025 05:03:15 +0000 Manifest this update: Sat 09 Aug 2025 05:03:15 +0000 Manifest next update: Sat 16 Aug 2025 05:03:15 +0000 Files and hashes: 1: A1Tb4e09meGUXicnS6L2A-tqF4E.crl (hash: UseJaCfYj8oZ0Cz1EMNTWaeQi6bpz+lDpiYRYDr03a8=) 2: DDCCD058B35111EE96186E1EC4F9AE02.roa (hash: uxPFrv/qJkuVD9/YdePXL9+7rk2TcQQl1VlKRTfOD/8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.crl rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A1Tb4e09meGUXicnS6L2A-tqF4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 300 (0x12c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8A67, serialNumber=0354DBE1ED3D99E1945E27274BA2F603EB6A1781 Validity Not Before: Aug 9 05:03:15 2025 GMT Not After : Aug 16 05:03:15 2025 GMT Subject: CN=6896d693-793c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:26:a2:29:64:18:69:9b:b1:a4:41:5e:bc:8f: 50:aa:a7:fc:43:9c:05:2f:e4:3d:dd:da:88:9c:86: ed:58:be:3e:a1:3b:f2:07:32:e2:d0:20:b9:d8:eb: a4:6b:d5:a7:33:17:ba:a9:d9:e4:06:b1:22:b7:74: 57:8f:4d:d1:d1:83:9a:1d:68:ee:af:01:21:90:9b: a0:c6:5e:47:c6:d9:43:90:06:50:41:e6:37:42:06: 0e:86:b3:30:0d:02:87:e6:a7:18:fc:b9:29:2f:25: c9:52:10:ff:4a:70:7f:4b:b4:f8:d3:98:6d:ba:01: 29:ab:9d:83:93:c8:45:1c:27:b8:c0:fe:53:df:ba: 72:68:60:66:cf:25:e0:de:80:48:d5:05:71:de:ed: 2c:f5:04:6b:09:9a:30:1e:03:cb:a3:f5:36:cf:0b: 0c:7a:e1:c5:67:b6:30:cf:ae:ea:06:32:65:4a:d1: 7b:65:1f:f2:1d:cd:73:a0:39:e0:d5:2b:b9:2c:9e: 3b:4d:93:af:0c:43:13:88:1c:0c:0d:e6:8b:fe:8e: 47:b3:f6:a4:14:19:93:d6:e5:55:b2:33:d9:05:c4: e7:88:38:77:a0:12:ce:d7:5f:98:5a:25:d0:67:1a: 62:94:bb:a2:86:07:50:3e:72:b5:93:1c:8d:a6:b7: f6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:61:70:57:61:AA:DC:55:BD:02:18:2A:B4:2B:8A:AF:9C:1E:4A:44 X509v3 Authority Key Identifier: keyid:03:54:DB:E1:ED:3D:99:E1:94:5E:27:27:4B:A2:F6:03:EB:6A:17:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A1Tb4e09meGUXicnS6L2A-tqF4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:66:0f:55:8f:f2:dc:74:b0:9c:aa:4b:3b:17:b2:ce:9e:f0: 95:74:a7:b0:a8:b9:43:1b:96:98:0a:73:6d:fa:d1:8a:b7:88: 51:13:91:5c:c9:27:47:aa:6f:3d:48:1e:3e:3c:8d:39:5c:d3: ca:a6:26:c4:c5:13:22:c1:d5:91:af:7b:13:24:53:36:22:4c: d0:ea:23:1e:52:60:e7:e5:29:84:db:1e:93:bf:5a:1d:02:dd: b1:e1:06:7a:bd:8c:f8:ae:8a:9b:6b:a9:16:97:3b:35:cd:7c: 9e:81:df:31:aa:13:d3:ec:b6:bd:9d:11:aa:a5:54:d3:8f:21: 1a:20:23:00:28:60:65:70:ce:b4:48:00:08:ff:e2:e0:9c:83: 46:c2:25:b6:3c:94:3c:40:23:de:c6:e3:df:1c:a0:0c:d6:b8: 9c:cc:41:a3:9c:4c:21:65:0e:16:5c:33:98:26:e4:bd:39:d5: 0e:4a:9a:39:83:b5:94:9f:d7:b2:f6:60:73:6b:b2:96:e9:91: 58:17:5a:83:71:cf:ac:64:29:5f:27:94:16:28:50:67:b5:24: ea:ec:06:67:1c:61:e6:13:cd:38:1a:40:aa:ab:67:9d:91:25: a2:fd:ca:f3:d9:5b:b8:03:80:a8:da:a8:b7:6b:41:16:a3:10: 02:46:05:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhBNjcxMTAvBgNVBAUTKDAzNTREQkUxRUQzRDk5RTE5NDVFMjcyNzRCQTJGNjAz RUI2QTE3ODEwHhcNMjUwODA5MDUwMzE1WhcNMjUwODE2MDUwMzE1WjAYMRYwFAYD VQQDEw02ODk2ZDY5My03OTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3yaiKWQYaZuxpEFevI9Qqqf8Q5wFL+Q93dqInIbtWL4+oTvyBzLi0CC52Ouk a9WnMxe6qdnkBrEit3RXj03R0YOaHWjurwEhkJugxl5HxtlDkAZQQeY3QgYOhrMw DQKH5qcY/LkpLyXJUhD/SnB/S7T405htugEpq52Dk8hFHCe4wP5T37pyaGBmzyXg 3oBI1QVx3u0s9QRrCZowHgPLo/U2zwsMeuHFZ7Ywz67qBjJlStF7ZR/yHc1zoDng 1Su5LJ47TZOvDEMTiBwMDeaL/o5Hs/akFBmT1uVVsjPZBcTniDh3oBLO11+YWiXQ ZxpilLuihgdQPnK1kxyNprf2fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFVhcFdh qtxVvQIYKrQriq+cHkpEMB8GA1UdIwQYMBaAFANU2+HtPZnhlF4nJ0ui9gPraheB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEE2Ny81NTExQUY2OEIz NTExMUVFOThCQTAyMURDNEY5QUUwMi9BMVRiNGUwOW1lR1VYaWNuUzZMMkEtdHFG NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ExVGI0ZTA5bWVHVVhpY25TNkwyQS10cUY0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEE2Ny81NTExQUY2OEIzNTExMUVFOThCQTAyMURDNEY5QUUwMi9BMVRiNGUwOW1l R1VYaWNuUzZMMkEtdHFGNEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKZg9Vj/LcdLCcqks7F7LOnvCVdKewqLlDG5aYCnNt+tGKt4hRE5Fc ySdHqm89SB4+PI05XNPKpibExRMiwdWRr3sTJFM2IkzQ6iMeUmDn5SmE2x6Tv1od At2x4QZ6vYz4roqba6kWlzs1zXyegd8xqhPT7La9nRGqpVTTjyEaICMAKGBlcM60 SAAI/+LgnINGwiW2PJQ8QCPexuPfHKAM1riczEGjnEwhZQ4WXDOYJuS9OdUOSpo5 g7WUn9ey9mBza7KW6ZFYF1qDcc+sZClfJ5QWKFBntSTq7AZnHGHmE804GkCqq2ed kSWi/crz2Vu4A4Co2qi3a0EWoxACRgUw -----END CERTIFICATE-----Generated at Sat Aug 9 23:27:57 2025 by rpki-client