$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.mft File: 67Vu9aQ9Hla4rmw179-QarhdJ1U.mft (raw, json) Hash identifier: kbJhvEtrpLJY8M6oRKcsh3iNtV5PNvuNl5HUpX516xQ= Subject key identifier: 6D:05:88:9A:8E:E3:B3:93:14:71:BA:A1:CD:C8:EC:F2:76:99:1B:5F Authority key identifier: EB:B5:6E:F5:A4:3D:1E:56:B8:AE:6C:35:EF:DF:90:6A:B8:5D:27:55 Certificate issuer: /CN=A91DC8C8/serialNumber=EBB56EF5A43D1E56B8AE6C35EFDF906AB85D2755 Certificate serial: 0214 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67Vu9aQ9Hla4rmw179-QarhdJ1U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.mft Manifest number: 020F Signing time: Mon 11 Aug 2025 02:18:20 +0000 Manifest this update: Mon 11 Aug 2025 02:18:20 +0000 Manifest next update: Mon 18 Aug 2025 02:18:20 +0000 Files and hashes: 1: 67Vu9aQ9Hla4rmw179-QarhdJ1U.crl (hash: lIEFBhhCTA9E72JP9hyZ8txbGQMtrk31/fYVqvJQMw4=) 2: 376CBBEA504411ED83277887C4F9AE02.roa (hash: T+4lg8d9jLKTS/9QxB/dn+qV3gmWtO4Nms49RgwAEAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.crl rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67Vu9aQ9Hla4rmw179-QarhdJ1U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 02:18:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 532 (0x214) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC8C8, serialNumber=EBB56EF5A43D1E56B8AE6C35EFDF906AB85D2755 Validity Not Before: Aug 11 02:18:20 2025 GMT Not After : Aug 18 02:18:20 2025 GMT Subject: CN=689952ec-1518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:67:02:42:6f:b1:49:80:d2:d3:47:ae:80:64: d5:db:cd:fd:0f:2a:a1:a6:67:fe:1a:e2:3d:78:44: ae:0f:93:ea:8b:31:3b:46:8b:36:44:9b:eb:e3:ef: c3:54:b7:51:f9:39:d7:8c:a1:76:d2:57:28:bb:79: 60:0d:6b:d9:bc:19:05:80:72:d0:b0:eb:5c:e2:3d: 7e:c9:ee:82:3a:ab:a0:73:0f:75:0f:ee:d8:6f:06: 56:e4:3d:0d:0e:48:b5:b1:3e:fa:ef:e2:9b:a7:4f: f2:db:08:ee:0d:63:05:aa:8b:75:fc:d5:f0:e7:e3: 41:38:57:bc:f2:3b:a7:43:32:ac:13:1a:86:87:6b: 54:18:d8:78:f7:dc:fb:79:50:7f:36:3b:d5:cb:64: c1:ce:77:38:cb:42:e6:5a:a2:fd:a0:ee:46:32:ec: 7d:46:43:48:f9:ac:41:aa:b8:76:c4:17:12:b2:a0: 3c:dc:fd:44:04:75:34:f2:aa:9d:e2:7e:aa:67:7b: 78:70:36:c5:da:ff:b4:49:f9:2d:9d:0e:9d:48:65: 9f:a1:11:8a:ef:83:72:04:d8:89:4e:39:d2:3c:6e: d7:b7:26:89:ea:23:a7:de:98:73:b6:5a:ee:53:1c: a6:c8:40:c1:7c:fc:0d:ae:a7:2b:6f:a3:da:13:23: 4f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:05:88:9A:8E:E3:B3:93:14:71:BA:A1:CD:C8:EC:F2:76:99:1B:5F X509v3 Authority Key Identifier: keyid:EB:B5:6E:F5:A4:3D:1E:56:B8:AE:6C:35:EF:DF:90:6A:B8:5D:27:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67Vu9aQ9Hla4rmw179-QarhdJ1U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:c7:e2:03:61:24:94:97:81:47:72:8a:ec:e0:39:45:23:50: 9a:96:69:95:31:d7:6d:42:bb:b2:be:51:8c:ed:ee:d8:81:4e: 35:b2:5b:dc:84:5b:b7:bd:c4:92:96:dd:49:f4:7d:bf:a2:3e: b7:7e:17:bf:4b:94:e1:63:88:d5:37:cf:0e:60:75:4f:98:e7: ca:9a:b7:42:c5:62:bb:d9:6a:ea:2d:4c:e8:e3:91:fb:db:3a: 80:3f:33:9f:c3:88:7b:0e:e0:c2:81:18:5f:97:7b:79:98:78: b7:fc:55:d3:c2:82:54:df:47:12:63:5e:df:c1:09:bf:60:c6: 85:e0:7b:ea:59:b3:f7:9b:75:ef:ff:6f:f5:24:92:ea:cd:a5: 68:be:64:9a:44:8a:b0:14:80:48:e8:38:fe:f5:6c:f9:fd:f5: a7:0e:ca:5b:c4:6f:43:0c:41:4d:55:d0:1d:12:41:80:e0:54: a5:be:56:c2:ad:50:5c:1d:02:e4:ef:9c:df:fa:26:fe:5f:54: 20:9d:cc:f5:7b:aa:40:62:3a:17:09:42:12:6e:c5:fc:48:27: e5:21:91:03:41:71:0e:39:59:91:70:71:c2:ac:6b:fa:60:69: 53:39:03:42:b7:88:d4:43:67:f6:6f:8c:e4:33:7b:f9:6c:aa: dd:af:4a:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM4QzgxMTAvBgNVBAUTKEVCQjU2RUY1QTQzRDFFNTZCOEFFNkMzNUVGREY5MDZB Qjg1RDI3NTUwHhcNMjUwODExMDIxODIwWhcNMjUwODE4MDIxODIwWjAYMRYwFAYD VQQDEw02ODk5NTJlYy0xNTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4mcCQm+xSYDS00eugGTV2839Dyqhpmf+GuI9eESuD5PqizE7Ros2RJvr4+/D VLdR+TnXjKF20lcou3lgDWvZvBkFgHLQsOtc4j1+ye6COqugcw91D+7YbwZW5D0N Dki1sT767+Kbp0/y2wjuDWMFqot1/NXw5+NBOFe88junQzKsExqGh2tUGNh499z7 eVB/NjvVy2TBznc4y0LmWqL9oO5GMux9RkNI+axBqrh2xBcSsqA83P1EBHU08qqd 4n6qZ3t4cDbF2v+0SfktnQ6dSGWfoRGK74NyBNiJTjnSPG7XtyaJ6iOn3phztlru UxymyEDBfPwNrqcrb6PaEyNPzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG0FiJqO 47OTFHG6oc3I7PJ2mRtfMB8GA1UdIwQYMBaAFOu1bvWkPR5WuK5sNe/fkGq4XSdV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzhDOC85OTQ1RkRBNDUw M0YxMUVEQjI1REY2NkFDNEY5QUUwMi82N1Z1OWFROUhsYTRybXcxNzktUWFyaGRK MVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY3VnU5YVE5SGxhNHJtdzE3OS1RYXJoZEoxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzhDOC85OTQ1RkRBNDUwM0YxMUVEQjI1REY2NkFDNEY5QUUwMi82N1Z1OWFROUhs YTRybXcxNzktUWFyaGRKMVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEx+IDYSSUl4FHcors4DlFI1CalmmVMddtQruyvlGM7e7YgU41slvc hFu3vcSSlt1J9H2/oj63fhe/S5ThY4jVN88OYHVPmOfKmrdCxWK72WrqLUzo45H7 2zqAPzOfw4h7DuDCgRhfl3t5mHi3/FXTwoJU30cSY17fwQm/YMaF4HvqWbP3m3Xv /2/1JJLqzaVovmSaRIqwFIBI6Dj+9Wz5/fWnDspbxG9DDEFNVdAdEkGA4FSlvlbC rVBcHQLk75zf+ib+X1Qgncz1e6pAYjoXCUISbsX8SCflIZEDQXEOOVmRcHHCrGv6 YGlTOQNCt4jUQ2f2b4zkM3v5bKrdr0pm -----END CERTIFICATE-----Generated at Wed Aug 13 00:25:16 2025 by rpki-client