$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBF27/F1D3E326ABE711EBB85D5147C4F9AE02/0DacIB93rzjycCn7IkbEOF0njKI.mft File: 0DacIB93rzjycCn7IkbEOF0njKI.mft (raw, json) Hash identifier: DWCByucwQkXcTixWunZJSm6rIdne6Yl3+aaiTwNUQAo= Subject key identifier: 48:C4:AE:99:50:44:DC:38:F7:C6:AD:A3:FA:F3:5A:4B:2A:A1:EE:3D Authority key identifier: D0:36:9C:20:1F:77:AF:38:F2:70:29:FB:22:46:C4:38:5D:27:8C:A2 Certificate issuer: /CN=A91EBF27/serialNumber=D0369C201F77AF38F27029FB2246C4385D278CA2 Certificate serial: 0617 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DacIB93rzjycCn7IkbEOF0njKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBF27/F1D3E326ABE711EBB85D5147C4F9AE02/0DacIB93rzjycCn7IkbEOF0njKI.mft Manifest number: 0617 Signing time: Sun 10 Aug 2025 22:51:32 +0000 Manifest this update: Sun 10 Aug 2025 22:51:31 +0000 Manifest next update: Sun 17 Aug 2025 22:51:31 +0000 Files and hashes: 1: 0DacIB93rzjycCn7IkbEOF0njKI.crl (hash: bC4SN/hWdkNKyFnHyjn9/2twy7zg9tqs2JtoFsrdsTA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBF27/F1D3E326ABE711EBB85D5147C4F9AE02/0DacIB93rzjycCn7IkbEOF0njKI.crl rsync://rpki.apnic.net/member_repository/A91EBF27/F1D3E326ABE711EBB85D5147C4F9AE02/0DacIB93rzjycCn7IkbEOF0njKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DacIB93rzjycCn7IkbEOF0njKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1559 (0x617) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBF27, serialNumber=D0369C201F77AF38F27029FB2246C4385D278CA2 Validity Not Before: Aug 10 22:51:31 2025 GMT Not After : Aug 17 22:51:31 2025 GMT Subject: CN=68992273-9382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f8:82:5d:de:03:2e:14:9b:b2:52:d3:97:f7: 9e:81:79:98:5c:a2:b7:24:fa:d3:c6:18:b2:86:2d: cb:03:ee:37:d2:4f:a6:23:a6:5b:52:a2:1f:bf:8d: 74:83:7d:7c:aa:ac:89:a2:87:f7:d2:f0:b8:04:7b: a1:4c:54:52:1c:e3:82:e5:a7:24:b6:f2:d4:46:59: 3e:e7:66:44:a3:ca:75:26:bf:58:c2:2e:76:7b:d0: f0:60:9f:e7:9c:5f:a8:3f:9b:a1:46:27:b0:c1:fb: e7:e6:3a:c6:2b:6e:01:2d:4f:cb:2e:0e:06:26:60: 25:38:25:5a:ce:1c:b4:ee:df:e4:a7:36:34:50:bd: 81:fa:e2:26:e4:cd:e8:d2:7c:9a:e7:a9:69:ea:76: 01:1e:ef:b9:a8:04:66:d7:40:63:42:ff:c1:67:4a: d3:4e:1e:8b:aa:7d:ac:40:73:5e:0d:f6:a8:79:03: 5c:f7:93:70:31:87:bc:90:a0:85:6e:de:48:39:3c: ca:41:6c:22:35:cb:89:d3:36:11:d3:35:93:df:9d: 46:aa:55:c0:12:74:91:e8:d3:1d:fb:f0:81:45:8f: f1:c2:12:dc:02:bf:c6:57:7b:33:23:fc:2c:78:91: 93:c3:66:7d:83:df:2e:84:ee:ea:05:a5:fb:7b:fc: d9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:C4:AE:99:50:44:DC:38:F7:C6:AD:A3:FA:F3:5A:4B:2A:A1:EE:3D X509v3 Authority Key Identifier: keyid:D0:36:9C:20:1F:77:AF:38:F2:70:29:FB:22:46:C4:38:5D:27:8C:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBF27/F1D3E326ABE711EBB85D5147C4F9AE02/0DacIB93rzjycCn7IkbEOF0njKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DacIB93rzjycCn7IkbEOF0njKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBF27/F1D3E326ABE711EBB85D5147C4F9AE02/0DacIB93rzjycCn7IkbEOF0njKI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:96:64:39:16:61:3e:59:7f:db:88:b1:6a:2b:a4:a4:a7:db: 6d:4e:e0:29:67:93:0c:fe:85:36:62:9c:cb:1b:c6:16:94:9a: 11:76:ca:48:83:6c:72:71:76:ac:85:59:bf:37:4b:1e:e5:02: 64:a1:89:91:50:6c:8e:f6:97:1b:0a:25:fb:58:21:e4:70:35: aa:3f:ec:48:e5:3c:79:8c:09:2b:41:58:70:fd:ba:66:bf:39: bc:93:a3:5c:0c:8f:e8:39:4d:63:10:ec:86:43:fc:f1:bf:4f: a2:0a:74:b0:5a:3c:5e:76:f7:4d:b4:73:3a:67:fb:f7:8c:f5: fc:45:82:db:7d:ae:57:c0:71:5e:79:ab:b4:91:30:dd:c9:33: b0:fa:68:eb:ec:a7:1b:dd:d6:5d:07:bc:95:ac:65:82:bb:4d: 41:bf:12:c6:dc:f3:fe:cc:8f:f3:dc:23:82:ba:d9:d3:dc:95: 9f:2b:75:f5:16:39:cb:d6:38:e9:7e:8a:90:f7:0e:e1:ea:50: cc:e0:6c:f9:7e:f1:da:aa:88:5c:85:ee:6e:ee:a4:9f:05:19: db:d0:33:d4:4c:d1:e8:43:d3:5d:b7:76:77:d9:a1:32:b3:15: a5:d7:5a:8a:a0:97:f2:50:f2:98:7c:3a:08:39:e6:d4:6c:db: 4a:b5:78:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJGMjcxMTAvBgNVBAUTKEQwMzY5QzIwMUY3N0FGMzhGMjcwMjlGQjIyNDZDNDM4 NUQyNzhDQTIwHhcNMjUwODEwMjI1MTMxWhcNMjUwODE3MjI1MTMxWjAYMRYwFAYD VQQDEw02ODk5MjI3My05MzgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4fiCXd4DLhSbslLTl/eegXmYXKK3JPrTxhiyhi3LA+430k+mI6ZbUqIfv410 g318qqyJoof30vC4BHuhTFRSHOOC5acktvLURlk+52ZEo8p1Jr9Ywi52e9DwYJ/n nF+oP5uhRiewwfvn5jrGK24BLU/LLg4GJmAlOCVazhy07t/kpzY0UL2B+uIm5M3o 0nya56lp6nYBHu+5qARm10BjQv/BZ0rTTh6Lqn2sQHNeDfaoeQNc95NwMYe8kKCF bt5IOTzKQWwiNcuJ0zYR0zWT351GqlXAEnSR6NMd+/CBRY/xwhLcAr/GV3szI/ws eJGTw2Z9g98uhO7qBaX7e/zZ4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEjErplQ RNw498ato/rzWksqoe49MB8GA1UdIwQYMBaAFNA2nCAfd6848nAp+yJGxDhdJ4yi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkYyNy9GMUQzRTMyNkFC RTcxMUVCQjg1RDUxNDdDNEY5QUUwMi8wRGFjSUI5M3J6anljQ243SWtiRU9GMG5q S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBEYWNJQjkzcnpqeWNDbjdJa2JFT0YwbmpLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkYyNy9GMUQzRTMyNkFCRTcxMUVCQjg1RDUxNDdDNEY5QUUwMi8wRGFjSUI5M3J6 anljQ243SWtiRU9GMG5qS0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNlmQ5FmE+WX/biLFqK6Skp9ttTuApZ5MM/oU2YpzLG8YWlJoRdspI g2xycXashVm/N0se5QJkoYmRUGyO9pcbCiX7WCHkcDWqP+xI5Tx5jAkrQVhw/bpm vzm8k6NcDI/oOU1jEOyGQ/zxv0+iCnSwWjxedvdNtHM6Z/v3jPX8RYLbfa5XwHFe eau0kTDdyTOw+mjr7Kcb3dZdB7yVrGWCu01BvxLG3PP+zI/z3COCutnT3JWfK3X1 FjnL1jjpfoqQ9w7h6lDM4Gz5fvHaqohche5u7qSfBRnb0DPUTNHoQ9Ndt3Z32aEy sxWl11qKoJfyUPKYfDoIOebUbNtKtXi3 -----END CERTIFICATE-----Generated at Mon Aug 11 04:20:21 2025 by rpki-client