$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft File: acgZi9o_0JBT9CVT1z7qFRIdJBw.mft (raw, json) Hash identifier: oDMpZZsPrF+BCYraz1MRgRl4laX07t1GBrm1Q/v1nlw= Subject key identifier: 0A:39:CC:BA:76:F5:76:8B:E8:ED:AE:DF:38:9C:F8:CA:B7:F3:3C:64 Authority key identifier: 69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C Certificate issuer: /CN=A91E4F66/serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C Certificate serial: 0B7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft Manifest number: 0B70 Signing time: Sun 10 Aug 2025 19:04:49 +0000 Manifest this update: Sun 10 Aug 2025 19:04:49 +0000 Manifest next update: Sun 17 Aug 2025 19:04:49 +0000 Files and hashes: 1: acgZi9o_0JBT9CVT1z7qFRIdJBw.crl (hash: eI/hJEfcLB7gnMNWKeFVZKcgWpqs4RE/TfBEKbAM4I8=) 2: A3BE70CCD5AE11EE909D5C40C4F9AE02.roa (hash: DCdzc1/cFwoy1fQS4+Xq6wnV0SacHN4E20l5F9bDJjA=) 3: C53629FEEACE11EEA8513D34C4F9AE02.roa (hash: rs8L3xzWNeMTaODdfG7gScPAqvq7Bu7zItiDdkrEqpw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2942 (0xb7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4F66, serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C Validity Not Before: Aug 10 19:04:49 2025 GMT Not After : Aug 17 19:04:49 2025 GMT Subject: CN=6898ed51-216f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7a:72:d2:b2:04:1d:05:2d:9b:1a:0c:4f:36: 92:1d:2b:1a:28:4e:26:8c:e0:5b:c8:b2:ae:70:c5: fd:d0:34:ab:4e:b7:4a:7f:06:24:5b:a1:69:d1:7e: 8b:ae:59:96:0b:29:7e:db:82:9b:ac:59:bb:ec:f7: 18:bf:c4:fe:dc:1f:5b:3b:e2:ef:79:16:f1:58:92: 5c:48:9c:4d:72:d1:d8:7b:3d:f1:8d:57:5a:ed:fd: 79:c8:df:db:02:9a:57:a4:dd:07:8f:f7:b1:67:eb: 5f:42:93:91:66:71:3e:af:0b:63:94:af:0a:bc:5c: 10:63:9b:dc:91:6e:95:94:17:88:76:71:5c:88:5b: 65:57:f1:92:63:10:8d:19:10:85:cc:b4:2d:cf:d6: 08:c0:06:60:c6:06:f6:0f:53:38:75:46:61:eb:d5: 60:99:21:62:d1:59:67:1c:99:2b:6c:4f:f1:6b:18: d4:42:1a:bb:c5:bf:62:f1:93:16:86:c1:fd:bd:cc: 18:67:90:91:29:7d:d0:f5:3b:00:67:00:f7:40:ef: 8b:cb:67:3a:03:73:33:9a:c2:1f:29:83:68:23:cf: 4f:86:6e:09:b4:6e:2f:36:0d:7f:b5:a1:e8:53:84: bb:ba:7f:68:02:9f:cd:8f:57:03:30:72:7e:b9:a4: ef:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:39:CC:BA:76:F5:76:8B:E8:ED:AE:DF:38:9C:F8:CA:B7:F3:3C:64 X509v3 Authority Key Identifier: keyid:69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:42:ac:b9:66:c9:12:b7:da:21:58:c3:93:1e:87:80:0f:54: 05:33:fb:ee:d7:ae:00:a1:f2:43:d2:9b:ab:e0:69:72:f2:e0: d8:af:2c:a7:33:a8:51:7e:07:75:10:25:73:b3:e5:fc:cd:3b: a8:9f:3b:63:9a:a9:88:0c:66:75:15:7a:3d:1a:ba:63:65:73: 54:90:b3:4e:b9:ab:b5:73:72:46:29:8f:fa:ea:e4:45:41:6a: d8:eb:5c:c5:e4:76:38:3e:82:7f:7e:52:a7:c1:d2:be:ff:56: 58:42:5f:18:1c:b9:4f:44:a2:b9:3c:0b:9b:f6:f1:f5:ea:6a: 37:b7:09:e6:c2:2a:00:df:c9:e0:ea:6d:c6:31:ca:61:51:c7: a3:25:e5:b7:b6:af:5d:a4:80:88:e3:67:37:a4:b5:c3:55:7a: 6e:16:19:04:85:be:5f:c6:d3:bf:50:58:f6:a8:95:1a:06:26: 0c:06:e1:b9:97:7c:a9:48:41:16:86:b7:c0:b9:b2:21:8a:1b: 2a:a8:4a:5f:69:6a:08:0b:22:8c:aa:f5:23:26:f8:44:a8:5c: ab:ab:f7:1a:ec:d8:24:81:ad:12:a1:9e:47:4e:95:69:3b:94: 5e:72:a7:10:4a:c0:8e:8e:f8:0b:da:b7:a7:a2:2b:9a:47:14: eb:c2:f8:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC34wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRGNjYxMTAvBgNVBAUTKDY5QzgxOThCREEzRkQwOTA1M0Y0MjU1M0Q3M0VFQTE1 MTIxRDI0MUMwHhcNMjUwODEwMTkwNDQ5WhcNMjUwODE3MTkwNDQ5WjAYMRYwFAYD VQQDEw02ODk4ZWQ1MS0yMTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy3py0rIEHQUtmxoMTzaSHSsaKE4mjOBbyLKucMX90DSrTrdKfwYkW6Fp0X6L rlmWCyl+24KbrFm77PcYv8T+3B9bO+LveRbxWJJcSJxNctHYez3xjVda7f15yN/b AppXpN0Hj/exZ+tfQpORZnE+rwtjlK8KvFwQY5vckW6VlBeIdnFciFtlV/GSYxCN GRCFzLQtz9YIwAZgxgb2D1M4dUZh69VgmSFi0VlnHJkrbE/xaxjUQhq7xb9i8ZMW hsH9vcwYZ5CRKX3Q9TsAZwD3QO+Ly2c6A3MzmsIfKYNoI89Phm4JtG4vNg1/taHo U4S7un9oAp/Nj1cDMHJ+uaTvJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAo5zLp2 9XaL6O2u3zic+Mq38zxkMB8GA1UdIwQYMBaAFGnIGYvaP9CQU/QlU9c+6hUSHSQc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEY2Ni9FNUY2NThBQTM2 OEExMUVBQjU3NDkyNzJDNEY5QUUwMi9hY2daaTlvXzBKQlQ5Q1ZUMXo3cUZSSWRK QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FjZ1ppOW9fMEpCVDlDVlQxejdxRlJJZEpCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEY2Ni9FNUY2NThBQTM2OEExMUVBQjU3NDkyNzJDNEY5QUUwMi9hY2daaTlvXzBK QlQ5Q1ZUMXo3cUZSSWRKQncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqQqy5ZskSt9ohWMOTHoeAD1QFM/vu164AofJD0pur4Gly8uDYryyn M6hRfgd1ECVzs+X8zTuonztjmqmIDGZ1FXo9GrpjZXNUkLNOuau1c3JGKY/66uRF QWrY61zF5HY4PoJ/flKnwdK+/1ZYQl8YHLlPRKK5PAub9vH16mo3twnmwioA38ng 6m3GMcphUcejJeW3tq9dpICI42c3pLXDVXpuFhkEhb5fxtO/UFj2qJUaBiYMBuG5 l3ypSEEWhrfAubIhihsqqEpfaWoICyKMqvUjJvhEqFyrq/ca7Ngkga0SoZ5HTpVp O5RecqcQSsCOjvgL2renoiuaRxTrwviZ -----END CERTIFICATE-----Generated at Mon Aug 11 06:00:40 2025 by rpki-client