$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1498/B3C8A97CDFB511EEB7AD8F2EC4F9AE02/rc1aTbWZxxrtk9CWqxTK-ggV5hc.mft File: rc1aTbWZxxrtk9CWqxTK-ggV5hc.mft (raw, json) Hash identifier: KmLgiIIHQAav/ayMpEa0NqWlDmeNvOIQvndRBTXh+zk= Subject key identifier: 39:04:40:E9:96:AD:61:DA:89:76:BA:C6:BA:73:A8:66:F3:8E:EC:96 Authority key identifier: AD:CD:5A:4D:B5:99:C7:1A:ED:93:D0:96:AB:14:CA:FA:08:15:E6:17 Certificate issuer: /CN=A91E1498/serialNumber=ADCD5A4DB599C71AED93D096AB14CAFA0815E617 Certificate serial: 0113 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rc1aTbWZxxrtk9CWqxTK-ggV5hc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1498/B3C8A97CDFB511EEB7AD8F2EC4F9AE02/rc1aTbWZxxrtk9CWqxTK-ggV5hc.mft Manifest number: 010E Signing time: Sun 03 Aug 2025 05:22:15 +0000 Manifest this update: Sun 03 Aug 2025 05:22:15 +0000 Manifest next update: Sun 10 Aug 2025 05:22:15 +0000 Files and hashes: 1: rc1aTbWZxxrtk9CWqxTK-ggV5hc.crl (hash: UISeuukpZgCWsbcZNy8FKk7S+05IpMTdppiz35YPAR4=) 2: 6C523164E03F11EE87838439C4F9AE02.roa (hash: SK6ZvVianDlVw+18irRafax8Eg6g34dqTzqJORJNKeQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1498/B3C8A97CDFB511EEB7AD8F2EC4F9AE02/rc1aTbWZxxrtk9CWqxTK-ggV5hc.crl rsync://rpki.apnic.net/member_repository/A91E1498/B3C8A97CDFB511EEB7AD8F2EC4F9AE02/rc1aTbWZxxrtk9CWqxTK-ggV5hc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rc1aTbWZxxrtk9CWqxTK-ggV5hc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 05:22:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 275 (0x113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1498, serialNumber=ADCD5A4DB599C71AED93D096AB14CAFA0815E617 Validity Not Before: Aug 3 05:22:15 2025 GMT Not After : Aug 10 05:22:15 2025 GMT Subject: CN=688ef207-b36d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:8f:8a:06:f8:ff:4a:b2:1c:93:d6:47:ff:b0: a4:6e:05:2a:49:ff:5d:12:c6:ca:1f:68:81:c8:0d: 71:87:6b:3b:61:7e:10:19:95:c9:fd:f2:52:f6:8a: 9e:32:ac:45:17:c3:3b:10:df:bb:d1:89:ee:c6:a4: 8f:28:36:46:e7:9e:cc:32:d9:ae:51:34:ac:d1:03: 9f:ab:e0:8f:76:22:9f:c6:37:4f:2a:68:4c:c2:40: 3c:44:53:6e:cf:59:3c:25:ce:92:2b:84:84:cd:d1: e4:23:4d:87:84:3a:59:8a:7b:60:9a:a5:99:69:76: a4:0f:9a:b8:24:a4:db:fa:89:07:32:44:96:44:30: e9:00:dc:a8:d5:08:c4:c8:5e:5f:67:9d:19:4f:a4: 83:c0:d1:41:0f:c1:23:ac:ce:2f:c0:37:57:63:81: f3:ad:e7:8c:b5:38:f2:c8:4b:f8:f3:8f:41:0c:dc: 8c:2e:55:a0:9e:9b:f9:24:63:92:8b:57:6a:08:0d: 1f:4f:2c:5f:da:21:eb:04:11:1c:24:a8:5e:88:05: cd:fe:a4:4e:84:0a:26:38:30:b9:79:e8:fd:5e:ab: 80:2b:8a:ae:40:30:0a:78:f6:9f:7d:c0:d9:4c:c3: 47:5d:63:6b:f5:0f:61:50:00:bd:34:18:e7:57:88: f4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:04:40:E9:96:AD:61:DA:89:76:BA:C6:BA:73:A8:66:F3:8E:EC:96 X509v3 Authority Key Identifier: keyid:AD:CD:5A:4D:B5:99:C7:1A:ED:93:D0:96:AB:14:CA:FA:08:15:E6:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1498/B3C8A97CDFB511EEB7AD8F2EC4F9AE02/rc1aTbWZxxrtk9CWqxTK-ggV5hc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rc1aTbWZxxrtk9CWqxTK-ggV5hc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1498/B3C8A97CDFB511EEB7AD8F2EC4F9AE02/rc1aTbWZxxrtk9CWqxTK-ggV5hc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:8e:38:a8:73:6c:2d:2a:98:29:3c:e0:69:17:cc:13:23:93: b9:1c:b0:57:eb:f1:84:79:c0:9c:94:ff:46:a1:b4:2d:ad:c6: 60:34:8f:87:33:94:ff:ce:4b:a0:9b:69:38:50:b8:d0:8b:85: 7d:30:df:8a:04:cf:a3:a2:22:76:18:7a:83:0e:71:a8:43:d5: 2e:80:00:7b:fd:bc:56:e2:49:9f:ca:b2:33:1d:57:02:e0:6b: e0:fe:e7:e4:00:af:b0:f3:03:1f:08:f8:93:20:db:b8:26:9f: 86:48:03:83:fd:76:01:7e:ac:de:d1:54:82:2a:a4:48:43:3c: 01:5f:0f:00:5c:78:42:27:3b:37:fb:96:89:46:63:06:e0:62: ba:68:b1:b3:bb:a3:e9:03:a4:a5:c0:6d:76:a9:c1:f2:30:92: 50:b9:30:d4:63:bc:bc:e1:d1:b0:30:7b:72:35:13:67:2d:65: a2:72:a2:3c:03:24:9f:5f:6d:c7:6d:be:35:ce:93:7f:58:c3: 2e:2d:8e:89:91:93:9b:46:96:fb:c5:58:52:40:e7:75:31:6f: 6f:ff:c3:04:54:78:3c:54:54:6c:97:71:11:82:3a:8b:ba:44: 9e:91:0a:f1:51:c9:e4:af:5c:ee:08:b2:db:45:31:43:0d:3f: 03:f9:fb:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE0OTgxMTAvBgNVBAUTKEFEQ0Q1QTREQjU5OUM3MUFFRDkzRDA5NkFCMTRDQUZB MDgxNUU2MTcwHhcNMjUwODAzMDUyMjE1WhcNMjUwODEwMDUyMjE1WjAYMRYwFAYD VQQDEw02ODhlZjIwNy1iMzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3I+KBvj/SrIck9ZH/7CkbgUqSf9dEsbKH2iByA1xh2s7YX4QGZXJ/fJS9oqe MqxFF8M7EN+70YnuxqSPKDZG557MMtmuUTSs0QOfq+CPdiKfxjdPKmhMwkA8RFNu z1k8Jc6SK4SEzdHkI02HhDpZintgmqWZaXakD5q4JKTb+okHMkSWRDDpANyo1QjE yF5fZ50ZT6SDwNFBD8EjrM4vwDdXY4HzreeMtTjyyEv4849BDNyMLlWgnpv5JGOS i1dqCA0fTyxf2iHrBBEcJKheiAXN/qROhAomODC5eej9XquAK4quQDAKePaffcDZ TMNHXWNr9Q9hUAC9NBjnV4j0OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDkEQOmW rWHaiXa6xrpzqGbzjuyWMB8GA1UdIwQYMBaAFK3NWk21mcca7ZPQlqsUyvoIFeYX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTQ5OC9CM0M4QTk3Q0RG QjUxMUVFQjdBRDhGMkVDNEY5QUUwMi9yYzFhVGJXWnh4cnRrOUNXcXhUSy1nZ1Y1 aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JjMWFUYldaeHhydGs5Q1dxeFRLLWdnVjVoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTQ5OC9CM0M4QTk3Q0RGQjUxMUVFQjdBRDhGMkVDNEY5QUUwMi9yYzFhVGJXWnh4 cnRrOUNXcXhUSy1nZ1Y1aGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYjjioc2wtKpgpPOBpF8wTI5O5HLBX6/GEecCclP9GobQtrcZgNI+H M5T/zkugm2k4ULjQi4V9MN+KBM+joiJ2GHqDDnGoQ9UugAB7/bxW4kmfyrIzHVcC 4Gvg/ufkAK+w8wMfCPiTINu4Jp+GSAOD/XYBfqze0VSCKqRIQzwBXw8AXHhCJzs3 +5aJRmMG4GK6aLGzu6PpA6SlwG12qcHyMJJQuTDUY7y84dGwMHtyNRNnLWWicqI8 AySfX23Hbb41zpN/WMMuLY6JkZObRpb7xVhSQOd1MW9v/8MEVHg8VFRsl3ERgjqL ukSekQrxUcnkr1zuCLLbRTFDDT8D+fsA -----END CERTIFICATE-----Generated at Mon Aug 4 16:00:24 2025 by rpki-client