$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft File: RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft (raw, json) Hash identifier: MqY5EeqeSGaOy337jCd4lQDXTCP+C9X3CYmqmlZkdjU= Subject key identifier: CF:E3:52:20:CE:B2:6C:07:96:2A:42:FA:87:AA:E3:F9:60:10:A5:F0 Authority key identifier: 46:00:C1:8D:62:C6:F7:24:D5:C9:55:06:F4:1B:8C:95:FC:39:0D:C0 Certificate issuer: /CN=A91DF31D/serialNumber=4600C18D62C6F724D5C95506F41B8C95FC390DC0 Certificate serial: 0161 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RgDBjWLG9yTVyVUG9BuMlfw5DcA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft Manifest number: 0156 Signing time: Sat 09 Aug 2025 04:39:29 +0000 Manifest this update: Sat 09 Aug 2025 04:39:28 +0000 Manifest next update: Sat 16 Aug 2025 04:39:28 +0000 Files and hashes: 1: RgDBjWLG9yTVyVUG9BuMlfw5DcA.crl (hash: 49Xze1yrJ1Tp8L2qhahFBE3aBs8iiWTn+gGMBXpGzi4=) 2: FA272BC67EBE11EEABD00B4DC4F9AE02.roa (hash: Is2ym6G52Gd8iJAmBag68kzO/t9tRYX/H4mMynU8bi4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.crl rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RgDBjWLG9yTVyVUG9BuMlfw5DcA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF31D, serialNumber=4600C18D62C6F724D5C95506F41B8C95FC390DC0 Validity Not Before: Aug 9 04:39:28 2025 GMT Not After : Aug 16 04:39:28 2025 GMT Subject: CN=6896d100-bc38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:06:d4:10:89:87:dd:69:08:76:8f:3a:1a:f8: a8:15:ca:bb:65:ed:78:18:b2:d7:e2:97:95:20:e9: c2:3b:2e:54:5e:be:cf:0e:a8:09:47:12:24:13:fe: 1d:c4:fb:66:56:4d:73:d7:bf:c8:19:98:cd:c0:56: bc:76:27:83:83:61:c2:80:35:99:b5:4d:f2:48:05: d5:14:80:b8:4d:53:30:1d:d0:e3:be:a7:89:dd:05: 42:f9:7d:83:45:28:04:b3:9c:4d:38:6d:a1:74:14: 56:be:59:b6:5e:37:a1:a3:44:eb:b1:67:21:79:a2: d2:86:b0:0f:e1:3a:f7:ac:ed:8b:7a:a9:52:f3:38: 38:7b:65:ad:80:6a:50:64:e0:19:a4:c3:1a:d1:39: 4d:83:8b:ff:23:8e:8d:11:f4:8d:51:6a:29:38:5a: bd:e6:79:15:b4:4a:15:1c:da:95:09:89:92:be:5d: c7:03:43:1f:46:0b:1a:10:f2:64:36:10:ab:cc:ba: 72:0e:64:bd:f8:4b:9c:e0:3f:70:64:9e:5b:ed:f6: 21:09:bf:8e:59:9e:a6:72:b5:4f:d9:3b:28:48:80: 02:25:67:5c:3d:1c:16:8c:36:f8:9b:c2:36:28:d4: d9:17:96:8c:c5:c7:32:72:ed:f3:f5:29:bc:5b:b5: 0a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:E3:52:20:CE:B2:6C:07:96:2A:42:FA:87:AA:E3:F9:60:10:A5:F0 X509v3 Authority Key Identifier: keyid:46:00:C1:8D:62:C6:F7:24:D5:C9:55:06:F4:1B:8C:95:FC:39:0D:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RgDBjWLG9yTVyVUG9BuMlfw5DcA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:23:73:e8:c4:af:ec:b2:68:d0:87:90:a0:38:e7:96:7f:64: dc:40:cd:72:20:13:77:73:d9:77:4d:2a:73:b0:4d:92:bc:d0: fe:93:37:22:17:60:d1:32:87:a2:8f:61:8d:91:0e:c4:74:1e: 7c:1f:7a:7c:6e:58:f1:c1:43:78:5c:54:3f:3b:e0:89:09:79: 64:88:26:da:c8:55:11:1a:e7:25:03:bb:88:7c:7d:28:8d:ea: c7:e2:5b:09:15:12:c6:af:71:12:93:90:85:c8:de:44:7b:bb: 3a:98:aa:22:fe:31:f0:a2:37:be:90:e9:1c:68:bb:16:dd:b0: 21:c2:4b:58:06:34:54:95:f9:1d:5d:66:56:d2:f6:d7:62:8b: 9f:f3:06:02:eb:c3:07:79:79:4b:88:0f:0d:e4:d1:ca:d4:0f: 22:9c:c4:53:62:3d:d6:a4:a7:96:2d:c0:76:65:98:bd:fb:71: 3c:37:e3:bb:79:f2:5a:b3:1d:22:fe:15:72:fa:65:9f:37:d9: df:f7:c2:13:34:c8:1b:64:5d:2d:eb:6b:ca:68:97:67:90:b6: 1e:4f:63:e5:f3:1b:0e:87:a3:44:0f:1c:f1:05:ff:eb:24:89: f4:1a:64:61:3f:8c:81:b8:5f:0a:c9:23:37:f7:67:a0:82:79: 23:3e:d2:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYzMUQxMTAvBgNVBAUTKDQ2MDBDMThENjJDNkY3MjRENUM5NTUwNkY0MUI4Qzk1 RkMzOTBEQzAwHhcNMjUwODA5MDQzOTI4WhcNMjUwODE2MDQzOTI4WjAYMRYwFAYD VQQDEw02ODk2ZDEwMC1iYzM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxwbUEImH3WkIdo86GvioFcq7Ze14GLLX4peVIOnCOy5UXr7PDqgJRxIkE/4d xPtmVk1z17/IGZjNwFa8dieDg2HCgDWZtU3ySAXVFIC4TVMwHdDjvqeJ3QVC+X2D RSgEs5xNOG2hdBRWvlm2Xjeho0TrsWcheaLShrAP4Tr3rO2LeqlS8zg4e2WtgGpQ ZOAZpMMa0TlNg4v/I46NEfSNUWopOFq95nkVtEoVHNqVCYmSvl3HA0MfRgsaEPJk NhCrzLpyDmS9+Euc4D9wZJ5b7fYhCb+OWZ6mcrVP2TsoSIACJWdcPRwWjDb4m8I2 KNTZF5aMxccycu3z9Sm8W7UKgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/jUiDO smwHlipC+oeq4/lgEKXwMB8GA1UdIwQYMBaAFEYAwY1ixvck1clVBvQbjJX8OQ3A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjMxRC8wNTVBQjU0NDdE RjcxMUVFODdCN0Q0MzBDNEY5QUUwMi9SZ0RCaldMRzl5VFZ5VlVHOUJ1TWxmdzVE Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JnREJqV0xHOXlUVnlWVUc5QnVNbGZ3NURjQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjMxRC8wNTVBQjU0NDdERjcxMUVFODdCN0Q0MzBDNEY5QUUwMi9SZ0RCaldMRzl5 VFZ5VlVHOUJ1TWxmdzVEY0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqI3PoxK/ssmjQh5CgOOeWf2TcQM1yIBN3c9l3TSpzsE2SvND+kzci F2DRMoeij2GNkQ7EdB58H3p8bljxwUN4XFQ/O+CJCXlkiCbayFURGuclA7uIfH0o jerH4lsJFRLGr3ESk5CFyN5Ee7s6mKoi/jHwoje+kOkcaLsW3bAhwktYBjRUlfkd XWZW0vbXYouf8wYC68MHeXlLiA8N5NHK1A8inMRTYj3WpKeWLcB2ZZi9+3E8N+O7 efJasx0i/hVy+mWfN9nf98ITNMgbZF0t62vKaJdnkLYeT2Pl8xsOh6NEDxzxBf/r JIn0GmRhP4yBuF8KySM392eggnkjPtKo -----END CERTIFICATE-----Generated at Sat Aug 9 14:18:37 2025 by rpki-client