$ rpki-client -vvf rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft File: sumTicSsA0jYrsh1t0aJ0E5wyDo.mft (raw, json) Hash identifier: bBmbfdNoet39Ope/Nf1QUCOhSBRMmN4sMw/PC8uMSJY= Subject key identifier: 3B:17:24:29:25:5B:32:9E:D6:46:8D:5F:2E:4A:92:CC:C3:2E:C3:F0 Authority key identifier: B2:E9:93:89:C4:AC:03:48:D8:AE:C8:75:B7:46:89:D0:4E:70:C8:3A Certificate issuer: /CN=A91E77A1/serialNumber=B2E99389C4AC0348D8AEC875B74689D04E70C83A Certificate serial: 07A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sumTicSsA0jYrsh1t0aJ0E5wyDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft Manifest number: 07A0 Signing time: Tue 12 Aug 2025 21:42:54 +0000 Manifest this update: Tue 12 Aug 2025 21:42:54 +0000 Manifest next update: Tue 19 Aug 2025 21:42:54 +0000 Files and hashes: 1: sumTicSsA0jYrsh1t0aJ0E5wyDo.crl (hash: XxWJB8dIRcktbI5+YcTrTx3VcDdqJ0zUGhwWF0wNS1s=) 2: 4F7AD592169311EB89C20F1DC4F9AE02.roa (hash: 1PaL5t22VHHOGdbUhH+qGnaUlXQ1MvnbAc80idZHNIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.crl rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sumTicSsA0jYrsh1t0aJ0E5wyDo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 21:42:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1960 (0x7a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E77A1, serialNumber=B2E99389C4AC0348D8AEC875B74689D04E70C83A Validity Not Before: Aug 12 21:42:54 2025 GMT Not After : Aug 19 21:42:54 2025 GMT Subject: CN=689bb55e-b090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:cd:56:54:90:3f:cb:dc:11:05:d0:87:c2:19: 86:49:5b:c8:a9:b8:c1:7d:52:12:42:37:7e:90:5d: 96:40:8b:6f:a5:ea:15:09:26:30:74:7a:29:00:93: 78:05:27:da:68:ee:70:f7:ea:98:77:85:83:4e:d1: 31:34:8f:52:99:0b:06:e1:40:df:85:1d:91:64:28: e1:5f:f1:b8:36:09:28:64:cd:df:4c:0a:47:e7:08: 44:3d:e9:77:f6:83:42:32:9f:8b:e6:f6:62:80:61: e8:2b:39:68:29:f3:80:42:67:ed:64:0a:d4:a4:ea: d6:03:c7:89:ff:b6:d4:bb:e7:d8:c4:bb:b0:85:8a: 70:23:d6:58:6d:fd:52:c5:8c:4a:1a:e7:4c:6b:00: e1:c9:cb:0d:ad:56:20:84:6d:f5:72:77:8c:7b:e0: 57:6a:cb:93:c4:d9:f8:db:10:8c:d3:be:01:21:64: 07:1a:08:14:7a:55:da:b0:7c:34:8d:2b:4b:7c:70: 81:c2:84:17:b5:0a:57:85:4c:87:7e:aa:67:8c:3c: 1e:dd:14:b3:80:fc:c0:7f:02:28:a0:38:75:8e:4a: 3a:fb:75:a6:1a:ec:cd:fb:a4:4c:8e:31:7c:81:32: 99:7f:c4:8c:9e:a3:77:8c:91:71:f9:3e:53:26:6c: 45:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:17:24:29:25:5B:32:9E:D6:46:8D:5F:2E:4A:92:CC:C3:2E:C3:F0 X509v3 Authority Key Identifier: keyid:B2:E9:93:89:C4:AC:03:48:D8:AE:C8:75:B7:46:89:D0:4E:70:C8:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sumTicSsA0jYrsh1t0aJ0E5wyDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:fa:71:bd:1d:b8:a3:67:2c:51:23:6d:dd:17:b2:d6:fb:47: 9f:c1:72:49:31:5f:f0:17:27:de:8e:48:be:84:05:48:3a:4b: 3f:a5:4e:73:46:65:9b:fe:c4:07:01:55:64:05:fd:f9:0f:54: 8b:3a:48:09:a3:a4:a8:c8:d3:27:5e:22:ff:d5:2d:09:3f:04: 74:bf:46:54:9a:18:ea:13:ae:56:8a:a3:f9:2c:94:20:ab:8e: 04:ad:63:5e:df:50:fd:6f:8b:89:19:7c:ea:c0:c9:25:94:09: d0:d2:dd:24:2d:63:6c:24:bb:5b:0c:48:3d:06:79:9f:b7:03: e8:91:cd:2a:73:88:71:08:a7:5c:5e:c6:6d:d1:e2:70:ac:13: 80:49:70:79:57:14:b7:37:db:be:c7:ea:a5:0f:b6:4d:b0:aa: e2:eb:3c:ba:e3:09:e7:80:c5:27:ff:19:93:b9:e4:22:71:09: 4d:cc:97:44:9f:b8:a0:ee:b9:a6:5d:4f:ba:2d:fa:f9:bf:6e: 95:1c:d7:be:5a:9d:18:c4:41:c8:07:08:d3:19:64:fa:b6:3b: d1:cf:75:0f:c9:2b:60:f6:5d:96:eb:76:8f:3a:f2:29:d6:4d: 49:05:4a:11:7e:4d:67:58:34:16:bb:f5:eb:c0:4b:30:07:0c: 6d:73:00:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc3QTExMTAvBgNVBAUTKEIyRTk5Mzg5QzRBQzAzNDhEOEFFQzg3NUI3NDY4OUQw NEU3MEM4M0EwHhcNMjUwODEyMjE0MjU0WhcNMjUwODE5MjE0MjU0WjAYMRYwFAYD VQQDEw02ODliYjU1ZS1iMDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0M1WVJA/y9wRBdCHwhmGSVvIqbjBfVISQjd+kF2WQItvpeoVCSYwdHopAJN4 BSfaaO5w9+qYd4WDTtExNI9SmQsG4UDfhR2RZCjhX/G4NgkoZM3fTApH5whEPel3 9oNCMp+L5vZigGHoKzloKfOAQmftZArUpOrWA8eJ/7bUu+fYxLuwhYpwI9ZYbf1S xYxKGudMawDhycsNrVYghG31cneMe+BXasuTxNn42xCM074BIWQHGggUelXasHw0 jStLfHCBwoQXtQpXhUyHfqpnjDwe3RSzgPzAfwIooDh1jko6+3WmGuzN+6RMjjF8 gTKZf8SMnqN3jJFx+T5TJmxFrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDsXJCkl WzKe1kaNXy5KkszDLsPwMB8GA1UdIwQYMBaAFLLpk4nErANI2K7IdbdGidBOcMg6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzdBMS9CNUMyN0E4QzE2 OTExMUVCQUFCMzA0MUJDNEY5QUUwMi9zdW1UaWNTc0Ewallyc2gxdDBhSjBFNXd5 RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N1bVRpY1NzQTBqWXJzaDF0MGFKMEU1d3lEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzdBMS9CNUMyN0E4QzE2OTExMUVCQUFCMzA0MUJDNEY5QUUwMi9zdW1UaWNTc0Ew allyc2gxdDBhSjBFNXd5RG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBd+nG9HbijZyxRI23dF7LW+0efwXJJMV/wFyfejki+hAVIOks/pU5z RmWb/sQHAVVkBf35D1SLOkgJo6SoyNMnXiL/1S0JPwR0v0ZUmhjqE65WiqP5LJQg q44ErWNe31D9b4uJGXzqwMkllAnQ0t0kLWNsJLtbDEg9BnmftwPokc0qc4hxCKdc XsZt0eJwrBOASXB5VxS3N9u+x+qlD7ZNsKri6zy64wnngMUn/xmTueQicQlNzJdE n7ig7rmmXU+6Lfr5v26VHNe+Wp0YxEHIBwjTGWT6tjvRz3UPyStg9l2W63aPOvIp 1k1JBUoRfk1nWDQWu/XrwEswBwxtcwAV -----END CERTIFICATE-----Generated at Wed Aug 13 00:37:59 2025 by rpki-client