$ rpki-client -vvf rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.mft File: 99bebnsqx71FDHcVhj6XmVU4Pk4.mft (raw, json) Hash identifier: zLMnpvoS5EnOH9FuNk4G4uyD3STZgsslKuv4n2nUoDs= Subject key identifier: FA:0E:79:80:EC:B4:3E:43:3E:43:56:D8:7C:6F:5D:A6:CF:9A:90:F0 Authority key identifier: F7:D6:DE:6E:7B:2A:C7:BD:45:0C:77:15:86:3E:97:99:55:38:3E:4E Certificate issuer: /CN=A91E33AA/serialNumber=F7D6DE6E7B2AC7BD450C7715863E979955383E4E Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99bebnsqx71FDHcVhj6XmVU4Pk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.mft Manifest number: 15 Signing time: Sat 09 Aug 2025 08:31:34 +0000 Manifest this update: Sat 09 Aug 2025 08:31:33 +0000 Manifest next update: Sat 16 Aug 2025 08:31:33 +0000 Files and hashes: 1: 99bebnsqx71FDHcVhj6XmVU4Pk4.crl (hash: GteYgI+SI6ErUGC32ZWBZ6hDAvSCopVqs+aUFwaw+QI=) 2: E68B45D6596711F094054D6BC4F9AE02.roa (hash: KsrzFIQg6uK84oBVBjzffm7U9gXX448ArNBcSCFz+n0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.crl rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99bebnsqx71FDHcVhj6XmVU4Pk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E33AA, serialNumber=F7D6DE6E7B2AC7BD450C7715863E979955383E4E Validity Not Before: Aug 9 08:31:33 2025 GMT Not After : Aug 16 08:31:33 2025 GMT Subject: CN=68970765-a60f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f9:10:3e:44:4c:81:94:b5:f6:c7:fd:cb:ee: 11:38:4d:2d:06:63:1d:9a:9d:8b:1b:e4:41:fa:30: 6a:61:50:d4:07:08:ab:95:55:72:17:b7:55:33:9a: 5f:fd:37:e5:83:94:48:a8:75:3b:f9:0a:9e:fe:9a: bd:76:47:85:be:f7:e8:b9:7d:81:4b:37:29:4d:ff: e3:7e:93:06:23:fc:56:24:fc:29:cf:c0:a0:02:70: b4:8d:e1:55:1e:c9:9c:c6:92:5d:10:1c:6d:17:b7: 3d:2d:62:3f:e3:9b:f8:0a:a1:16:a2:72:0d:19:41: e8:f2:5d:28:f9:0b:44:4e:11:36:1d:d3:9c:d4:69: cd:f1:60:8a:8e:be:a9:2d:1c:b3:59:2d:14:44:95: ee:79:37:60:92:8d:54:c9:16:41:47:b5:19:81:7b: 85:c7:fa:0e:f0:f2:5e:8e:9c:34:55:e5:e3:9d:d9: da:30:f5:0a:8c:1f:ec:c9:c3:81:e6:ac:05:a2:3a: 11:f9:e7:7e:13:2b:26:a3:dd:1c:96:d1:26:40:5f: 57:eb:93:44:78:63:64:ce:8c:af:6c:02:c7:94:79: db:07:c1:51:2b:0a:d6:a6:03:c6:b2:44:35:0c:83: d7:d3:c1:9d:dc:2e:72:49:e0:d7:0b:b0:37:40:c7: cd:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:0E:79:80:EC:B4:3E:43:3E:43:56:D8:7C:6F:5D:A6:CF:9A:90:F0 X509v3 Authority Key Identifier: keyid:F7:D6:DE:6E:7B:2A:C7:BD:45:0C:77:15:86:3E:97:99:55:38:3E:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99bebnsqx71FDHcVhj6XmVU4Pk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:65:52:53:9f:1c:47:38:8f:23:ff:c2:3f:80:da:48:f2:cf: 0c:af:7e:a6:90:13:88:90:8d:83:fa:4f:40:db:56:38:1a:81: b9:03:44:bb:e3:ab:a2:6c:02:42:e8:06:1e:66:cf:db:e3:15: 5e:d0:ec:a3:a1:99:bf:e9:77:f8:cb:9e:e7:c4:42:c3:fd:85: ee:e3:3a:20:92:84:1f:2f:9f:6f:dc:dc:b9:5b:75:f1:68:d1: 7a:b9:6b:73:f8:b6:61:94:e5:05:89:8a:fa:b5:2b:49:2a:a7: fc:f2:2a:8d:04:9b:5e:66:06:f1:ce:ca:cd:c4:fa:7b:88:57: 7e:20:7a:81:b6:43:69:1a:84:a9:76:2d:fc:ca:9b:20:69:db: 05:e9:42:fa:2e:9b:42:18:7d:0c:44:52:84:9e:49:70:b2:2a: e4:c3:22:1b:7d:e4:d8:39:3b:3a:b7:82:68:fb:e7:40:a7:eb: 29:49:eb:3d:b9:f5:06:19:1f:5f:7a:dd:50:de:f6:b3:da:8a: c2:98:18:5d:c9:1e:97:14:1b:c7:a0:17:7e:4d:64:b0:7b:b0: b1:b4:0e:47:d3:fd:f6:0d:84:1d:b2:6e:6b:d4:26:f1:e6:76: fb:00:06:82:46:d8:bf:31:e6:32:31:2b:e2:46:9a:2b:de:67: 15:4c:c5:ad -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MzNBQTExMC8GA1UEBRMoRjdENkRFNkU3QjJBQzdCRDQ1MEM3NzE1ODYzRTk3OTk1 NTM4M0U0RTAeFw0yNTA4MDkwODMxMzNaFw0yNTA4MTYwODMxMzNaMBgxFjAUBgNV BAMTDTY4OTcwNzY1LWE2MGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDM+RA+REyBlLX2x/3L7hE4TS0GYx2anYsb5EH6MGphUNQHCKuVVXIXt1Uzml/9 N+WDlEiodTv5Cp7+mr12R4W+9+i5fYFLNylN/+N+kwYj/FYk/CnPwKACcLSN4VUe yZzGkl0QHG0Xtz0tYj/jm/gKoRaicg0ZQejyXSj5C0ROETYd05zUac3xYIqOvqkt HLNZLRREle55N2CSjVTJFkFHtRmBe4XH+g7w8l6OnDRV5eOd2dow9QqMH+zJw4Hm rAWiOhH5534TKyaj3RyW0SZAX1frk0R4Y2TOjK9sAseUedsHwVErCtamA8ayRDUM g9fTwZ3cLnJJ4NcLsDdAx813AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+g55gOy0 PkM+Q1bYfG9dps+akPAwHwYDVR0jBBgwFoAU99bebnsqx71FDHcVhj6XmVU4Pk4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzM0FBLzUyRDlBRDQ2NTk2 NzExRjA4QzQwNzkyQ0M0RjlBRTAyLzk5YmVibnNxeDcxRkRIY1ZoajZYbVZVNFBr NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOTliZWJuc3F4NzFGREhjVmhqNlhtVlU0UGs0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUz M0FBLzUyRDlBRDQ2NTk2NzExRjA4QzQwNzkyQ0M0RjlBRTAyLzk5YmVibnNxeDcx RkRIY1ZoajZYbVZVNFBrNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMplUlOfHEc4jyP/wj+A2kjyzwyvfqaQE4iQjYP6T0DbVjgagbkDRLvj q6JsAkLoBh5mz9vjFV7Q7KOhmb/pd/jLnufEQsP9he7jOiCShB8vn2/c3LlbdfFo 0Xq5a3P4tmGU5QWJivq1K0kqp/zyKo0Em15mBvHOys3E+nuIV34geoG2Q2kahKl2 LfzKmyBp2wXpQvoum0IYfQxEUoSeSXCyKuTDIht95Ng5Ozq3gmj750Cn6ylJ6z25 9QYZH1963VDe9rPaisKYGF3JHpcUG8egF35NZLB7sLG0DkfT/fYNhB2ybmvUJvHm dvsABoJG2L8x5jIxK+JGmiveZxVMxa0= -----END CERTIFICATE-----Generated at Sat Aug 9 14:18:42 2025 by rpki-client