$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.mft File: -apja1w-MMegupdDAVtbEhBMt6g.mft (raw, json) Hash identifier: zRT7yF7NyuMXXQMaXPRqI0uxVzRWSaxCLYoYRYvM/IM= Subject key identifier: 1E:28:E1:95:F3:CB:C6:DD:F1:63:8F:5C:2B:6D:94:9E:7E:C2:8E:8F Authority key identifier: F9:AA:63:6B:5C:3E:30:C7:A0:BA:97:43:01:5B:5B:12:10:4C:B7:A8 Certificate issuer: /CN=A91EE099/serialNumber=F9AA636B5C3E30C7A0BA9743015B5B12104CB7A8 Certificate serial: 018D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.mft Manifest number: 0184 Signing time: Tue 05 Aug 2025 04:07:58 +0000 Manifest this update: Tue 05 Aug 2025 04:07:57 +0000 Manifest next update: Tue 12 Aug 2025 04:07:57 +0000 Files and hashes: 1: -apja1w-MMegupdDAVtbEhBMt6g.crl (hash: WLh3xfAXPn1Wcpgyb9jWawtRNayX3HZ4zJi8qhEsFVA=) 2: F5AA194CB2C911EF91AE9209C4F9AE02.roa (hash: u2g7zPvUKLKfN0HGmqqEcC8SKK5ZutcT7DtbZgDdUks=) 3: 89BDDA4A2F6F11EEB73F3231C4F9AE02.roa (hash: mjOOkG8qUpO+xbmYGSj1aPD8sXpbieWikDw9vb+D/OA=) 4: 804FEC802F6711EEB6EECA5BC4F9AE02.roa (hash: 3Dli7pFjerFJHZdvZGuoM+mTT8Fntf3sMb0Ui6DVQHo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.crl rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 04:07:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 397 (0x18d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE099, serialNumber=F9AA636B5C3E30C7A0BA9743015B5B12104CB7A8 Validity Not Before: Aug 5 04:07:57 2025 GMT Not After : Aug 12 04:07:57 2025 GMT Subject: CN=6891839d-d7b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d9:8b:85:de:b1:4c:3e:4a:ef:02:60:5f:8f: 80:a1:b1:60:da:2b:d0:57:b9:12:18:e5:30:56:70: ca:a2:1a:32:2a:e1:2f:fe:75:cb:13:d7:43:19:35: 1e:c6:3c:5e:49:76:ce:3b:59:56:a2:2f:62:e7:61: 4f:54:65:ad:37:e0:47:2f:54:b9:a0:2d:e1:34:3a: 98:99:e9:09:60:4c:51:a2:91:b7:0b:e4:28:bb:af: 5e:ca:46:d3:d5:64:67:a3:3b:f6:a4:6e:5c:3b:69: f4:6c:41:0d:ce:ad:b3:4e:17:eb:3e:52:91:c3:01: d7:1a:f1:b2:cf:03:c1:86:24:a2:8b:80:7c:fb:2c: a5:13:99:0f:53:f8:9f:15:7a:60:ef:a3:98:80:a2: b9:23:5e:5c:21:53:39:e1:81:17:bb:6d:96:31:eb: 30:5c:59:07:b4:ea:c4:f3:5f:2b:a7:a2:fc:a6:af: 54:06:9c:26:fa:54:7f:62:a6:e0:fe:53:9b:51:e9: 01:00:85:82:29:57:29:a6:ad:72:98:83:30:a4:28: 06:98:b9:37:2a:08:ad:6e:22:49:9b:2d:94:54:be: 7e:db:7b:4c:df:84:8d:fc:e8:44:ce:23:c6:d9:46: 97:e3:fd:e3:90:0b:fb:ce:f3:4e:8b:99:a4:31:ed: 1b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:28:E1:95:F3:CB:C6:DD:F1:63:8F:5C:2B:6D:94:9E:7E:C2:8E:8F X509v3 Authority Key Identifier: keyid:F9:AA:63:6B:5C:3E:30:C7:A0:BA:97:43:01:5B:5B:12:10:4C:B7:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:cf:cb:f5:96:e6:52:02:06:c8:5f:42:39:ef:88:ab:f7:93: fd:96:9b:3e:b6:36:c3:6e:13:24:10:97:2e:95:2c:8e:a7:35: 90:73:cb:8d:be:2a:44:74:36:62:15:22:f9:c6:11:44:74:04: 13:3e:ce:15:47:cd:f0:d0:d9:b1:a1:d9:3a:ab:c6:75:26:9d: c1:ae:97:b0:93:c1:1b:cc:d1:65:3f:d4:a9:0b:40:57:de:56: b1:db:48:55:cb:63:d3:da:04:3a:6e:b9:cc:11:f5:2e:35:b0: 0e:d0:07:25:29:2a:c7:72:cb:59:9c:db:6f:fd:5b:6f:b8:3d: fd:db:5b:19:51:db:9d:79:78:e8:03:78:6e:62:4b:b1:b3:5c: bc:d8:41:d8:fb:ad:50:f4:96:73:eb:10:cc:0f:31:5a:70:4c: c4:3d:61:33:a5:c1:17:e8:ca:49:c6:59:87:99:74:1e:a8:a4: f3:fb:57:c4:31:b4:84:3e:25:16:72:e1:c1:43:87:89:4c:71: 8e:bf:6f:61:48:e8:5c:50:02:44:11:9b:0c:34:7c:99:1e:ff: f5:73:94:5f:ff:a5:93:15:a1:ab:12:d7:50:35:4c:03:31:d5: 4c:2f:f9:f6:de:86:41:ac:64:a7:91:38:84:5b:e6:fe:8c:52: 8c:16:32:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUwOTkxMTAvBgNVBAUTKEY5QUE2MzZCNUMzRTMwQzdBMEJBOTc0MzAxNUI1QjEy MTA0Q0I3QTgwHhcNMjUwODA1MDQwNzU3WhcNMjUwODEyMDQwNzU3WjAYMRYwFAYD VQQDEw02ODkxODM5ZC1kN2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdmLhd6xTD5K7wJgX4+AobFg2ivQV7kSGOUwVnDKohoyKuEv/nXLE9dDGTUe xjxeSXbOO1lWoi9i52FPVGWtN+BHL1S5oC3hNDqYmekJYExRopG3C+Qou69eykbT 1WRnozv2pG5cO2n0bEENzq2zThfrPlKRwwHXGvGyzwPBhiSii4B8+yylE5kPU/if FXpg76OYgKK5I15cIVM54YEXu22WMeswXFkHtOrE818rp6L8pq9UBpwm+lR/Yqbg /lObUekBAIWCKVcppq1ymIMwpCgGmLk3KgitbiJJmy2UVL5+23tM34SN/OhEziPG 2UaX4/3jkAv7zvNOi5mkMe0bnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB4o4ZXz y8bd8WOPXCttlJ5+wo6PMB8GA1UdIwQYMBaAFPmqY2tcPjDHoLqXQwFbWxIQTLeo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTA5OS8wMjIxRDdDRTJG NjcxMUVFODI0QURDNTlDNEY5QUUwMi8tYXBqYTF3LU1NZWd1cGREQVZ0YkVoQk10 NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1hcGphMXctTU1lZ3VwZERBVnRiRWhCTXQ2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTA5OS8wMjIxRDdDRTJGNjcxMUVFODI0QURDNTlDNEY5QUUwMi8tYXBqYTF3LU1N ZWd1cGREQVZ0YkVoQk10NmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcz8v1luZSAgbIX0I574ir95P9lps+tjbDbhMkEJculSyOpzWQc8uN vipEdDZiFSL5xhFEdAQTPs4VR83w0Nmxodk6q8Z1Jp3Brpewk8EbzNFlP9SpC0BX 3lax20hVy2PT2gQ6brnMEfUuNbAO0AclKSrHcstZnNtv/VtvuD3921sZUdudeXjo A3huYkuxs1y82EHY+61Q9JZz6xDMDzFacEzEPWEzpcEX6MpJxlmHmXQeqKTz+1fE MbSEPiUWcuHBQ4eJTHGOv29hSOhcUAJEEZsMNHyZHv/1c5Rf/6WTFaGrEtdQNUwD MdVML/n23oZBrGSnkTiEW+b+jFKMFjKe -----END CERTIFICATE-----Generated at Wed Aug 6 11:10:32 2025 by rpki-client