$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.mft File: d4O93Owt-bn8-48Qm3PU95Shc4Y.mft (raw, json) Hash identifier: sNDkgUc0WPfpNMQ/JMUatWQGvfrxU3PJJlNCLg6RU7A= Subject key identifier: 97:A8:60:09:EC:C3:0D:70:E4:C1:21:38:89:C1:11:CC:C4:B9:D5:0E Authority key identifier: 77:83:BD:DC:EC:2D:F9:B9:FC:FB:8F:10:9B:73:D4:F7:94:A1:73:86 Certificate issuer: /CN=A91EAD63/serialNumber=7783BDDCEC2DF9B9FCFB8F109B73D4F794A17386 Certificate serial: 023C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4O93Owt-bn8-48Qm3PU95Shc4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.mft Manifest number: 0238 Signing time: Sat 09 Aug 2025 02:25:43 +0000 Manifest this update: Sat 09 Aug 2025 02:25:42 +0000 Manifest next update: Sat 16 Aug 2025 02:25:42 +0000 Files and hashes: 1: d4O93Owt-bn8-48Qm3PU95Shc4Y.crl (hash: NnlWxE6AiCTMFHbzBU5UT3tKC7OQGFeNYhIJd6Hcmm4=) 2: 9BA13212344C11ED8F22CB70C4F9AE02.roa (hash: dSvt8WCJ5sX7UlCP0MxYFfwdeu8sA3Ot5FCk8B7masI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.crl rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4O93Owt-bn8-48Qm3PU95Shc4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 572 (0x23c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAD63, serialNumber=7783BDDCEC2DF9B9FCFB8F109B73D4F794A17386 Validity Not Before: Aug 9 02:25:42 2025 GMT Not After : Aug 16 02:25:42 2025 GMT Subject: CN=6896b1a6-aae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ba:fe:73:fa:8e:4b:ca:ab:df:f6:49:1a:ab: 37:17:80:be:7e:d6:eb:62:c1:e2:cf:94:fa:bb:bd: ce:c4:3c:80:50:36:17:8d:50:62:53:4c:24:f1:73: c8:2e:ea:52:da:f7:1a:14:28:49:a0:9f:a0:cf:55: e5:58:cd:a6:40:ce:5f:e2:75:82:4b:ea:4b:1b:cf: 87:4b:e9:3c:ec:d8:52:c5:3c:1d:cb:2b:68:9d:49: 98:51:b6:2e:a8:7c:06:35:e9:aa:81:bb:95:c9:cb: 91:36:89:d5:aa:d5:0a:64:d1:7a:5c:13:57:de:91: 1e:ea:0c:45:57:1a:ca:2c:d0:77:01:f5:d5:09:2d: a4:57:d8:62:74:d5:eb:c7:f5:14:72:03:79:20:8f: c9:a5:00:91:02:31:66:e9:9b:ef:c4:9a:5f:c4:29: 85:12:eb:e1:e9:37:66:e7:aa:a3:29:34:95:70:fb: 03:e1:29:9e:e9:6c:1b:f7:be:32:56:02:84:48:79: 0b:22:07:5f:4f:e2:0f:0c:6b:43:d6:44:49:b4:6c: 3a:12:ce:d2:f5:ea:5c:dc:ea:d5:0c:2b:9b:18:8b: 3d:49:c8:bd:7e:3c:1e:a6:9b:4f:1c:ac:c1:fc:b8: bf:80:39:db:f5:70:69:5c:33:eb:69:5a:91:1a:79: fc:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:A8:60:09:EC:C3:0D:70:E4:C1:21:38:89:C1:11:CC:C4:B9:D5:0E X509v3 Authority Key Identifier: keyid:77:83:BD:DC:EC:2D:F9:B9:FC:FB:8F:10:9B:73:D4:F7:94:A1:73:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4O93Owt-bn8-48Qm3PU95Shc4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:5e:cf:01:24:1d:e3:e1:c2:dd:ee:e9:22:02:cd:76:0a:14: 75:8c:52:dd:2b:a3:9d:f9:eb:4b:c6:96:8e:f2:85:2e:f9:bb: 22:99:da:97:7d:a9:95:c0:89:b6:b8:9b:df:66:b6:5f:ac:45: 0f:ec:32:9b:53:12:8e:77:6b:0d:eb:c5:13:0d:ff:42:be:17: 26:db:28:22:7a:36:e0:9d:7c:d2:64:a6:b8:83:c6:f1:6d:5a: 61:cf:33:43:b4:01:19:d6:be:60:b4:73:9a:9c:98:f4:3b:c2: 91:db:16:21:01:92:80:3d:06:d7:28:7a:9c:6a:63:40:c4:f8: a8:b3:8a:91:44:21:12:41:27:d7:f2:58:28:68:bc:c9:4c:73: 1b:bb:b7:26:9c:91:4b:73:dd:c5:ea:84:4e:bc:36:28:b8:f7: 4a:e5:08:78:b5:11:53:4d:ab:48:23:6e:b6:0c:82:77:01:c8: 7f:2e:a0:10:69:b4:ea:16:71:50:c4:99:96:eb:5a:8b:13:6e: 0e:5a:20:3c:2e:1b:9e:82:8e:b8:48:22:36:61:c9:6c:4f:07: 16:9e:a4:cc:98:c3:79:f5:35:75:9a:3e:59:c5:e5:6c:c4:f0: 9c:8d:1b:82:62:0d:99:24:48:a7:4d:d9:92:26:b3:c1:89:84: 27:8a:09:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFENjMxMTAvBgNVBAUTKDc3ODNCRERDRUMyREY5QjlGQ0ZCOEYxMDlCNzNENEY3 OTRBMTczODYwHhcNMjUwODA5MDIyNTQyWhcNMjUwODE2MDIyNTQyWjAYMRYwFAYD VQQDEw02ODk2YjFhNi1hYWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp7r+c/qOS8qr3/ZJGqs3F4C+ftbrYsHiz5T6u73OxDyAUDYXjVBiU0wk8XPI LupS2vcaFChJoJ+gz1XlWM2mQM5f4nWCS+pLG8+HS+k87NhSxTwdyytonUmYUbYu qHwGNemqgbuVycuRNonVqtUKZNF6XBNX3pEe6gxFVxrKLNB3AfXVCS2kV9hidNXr x/UUcgN5II/JpQCRAjFm6ZvvxJpfxCmFEuvh6Tdm56qjKTSVcPsD4Sme6Wwb974y VgKESHkLIgdfT+IPDGtD1kRJtGw6Es7S9epc3OrVDCubGIs9Sci9fjwepptPHKzB /Li/gDnb9XBpXDPraVqRGnn85QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJeoYAns ww1w5MEhOInBEczEudUOMB8GA1UdIwQYMBaAFHeDvdzsLfm5/PuPEJtz1PeUoXOG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUQ2My9ERDM2NDExODM0 NDcxMUVEQjEwREE0M0FDNEY5QUUwMi9kNE85M093dC1ibjgtNDhRbTNQVTk1U2hj NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q0TzkzT3d0LWJuOC00OFFtM1BVOTVTaGM0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUQ2My9ERDM2NDExODM0NDcxMUVEQjEwREE0M0FDNEY5QUUwMi9kNE85M093dC1i bjgtNDhRbTNQVTk1U2hjNFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHXs8BJB3j4cLd7ukiAs12ChR1jFLdK6Od+etLxpaO8oUu+bsimdqX famVwIm2uJvfZrZfrEUP7DKbUxKOd2sN68UTDf9Cvhcm2ygiejbgnXzSZKa4g8bx bVphzzNDtAEZ1r5gtHOanJj0O8KR2xYhAZKAPQbXKHqcamNAxPios4qRRCESQSfX 8lgoaLzJTHMbu7cmnJFLc93F6oROvDYouPdK5Qh4tRFTTatII262DIJ3Ach/LqAQ abTqFnFQxJmW61qLE24OWiA8Lhuego64SCI2YclsTwcWnqTMmMN59TV1mj5ZxeVs xPCcjRuCYg2ZJEinTdmSJrPBiYQnigl7 -----END CERTIFICATE-----Generated at Sat Aug 9 05:37:45 2025 by rpki-client