$ rpki-client -vvf rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft File: 29rQCQF9kd-0ONcNG41NNIYvBo4.mft (raw, json) Hash identifier: RbdvMsNe0caNr2Mbc8S7o0uVeBjA03sDN1bpa2DtkK8= Subject key identifier: 23:2F:B2:DE:4D:8A:36:2F:EE:A7:45:97:5C:19:BA:78:EC:22:18:0B Authority key identifier: DB:DA:D0:09:01:7D:91:DF:B4:38:D7:0D:1B:8D:4D:34:86:2F:06:8E Certificate issuer: /CN=A91F223F/serialNumber=DBDAD009017D91DFB438D70D1B8D4D34862F068E Certificate serial: 0143 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29rQCQF9kd-0ONcNG41NNIYvBo4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft Manifest number: 013F Signing time: Tue 05 Aug 2025 04:50:27 +0000 Manifest this update: Tue 05 Aug 2025 04:50:26 +0000 Manifest next update: Tue 12 Aug 2025 04:50:26 +0000 Files and hashes: 1: 29rQCQF9kd-0ONcNG41NNIYvBo4.crl (hash: MkeDCsNVL9IoS4ZaUis0WgUJfFocHYjOT4Q94e7Mxuw=) 2: 63E8E1AA8CAA11EE8B20D86EC4F9AE02.roa (hash: FS0NZn6HmMNUVE243zK4MTv8yDH9emQLgpWFOPvCnxU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.crl rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29rQCQF9kd-0ONcNG41NNIYvBo4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 04:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 323 (0x143) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F223F, serialNumber=DBDAD009017D91DFB438D70D1B8D4D34862F068E Validity Not Before: Aug 5 04:50:26 2025 GMT Not After : Aug 12 04:50:26 2025 GMT Subject: CN=68918d93-ee65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:52:a6:8a:1d:4f:9e:f9:dd:63:73:23:85:30: 69:92:6d:5e:3f:24:21:b3:33:b7:04:3e:5e:74:31: 53:e8:1c:ac:d7:aa:43:91:8e:d7:91:65:c9:cc:3f: 71:21:7f:9a:c2:c1:90:dc:42:d7:65:8a:2a:bc:f3: 9b:ee:a1:7f:e1:45:d9:f9:12:ca:60:86:52:e8:5b: be:13:76:6f:27:be:7f:a5:fa:b2:05:7e:47:c6:1b: 82:33:16:f6:93:c1:db:ad:a7:4a:57:f7:81:85:2e: 93:10:5e:09:c6:5c:c1:0c:86:69:ad:cf:bd:ac:d7: 0d:60:01:f6:bb:31:bc:a0:1a:a8:80:56:99:15:f2: d4:b4:68:44:46:fe:24:55:26:da:17:82:88:b2:dd: 75:e3:9a:52:bc:00:5d:1a:ed:b2:05:84:22:30:67: 66:92:e2:f6:3d:35:5c:37:5d:9e:e0:8f:75:14:63: d2:45:46:10:65:4e:41:9b:20:0f:b0:dd:cc:68:89: 69:9a:b2:a0:19:23:2f:56:24:5d:fe:63:dc:c5:a0: e1:9e:97:b3:0c:2f:9d:aa:a7:ee:05:e3:34:90:fa: 0a:da:e2:1a:05:46:0d:0d:c8:ac:40:56:a4:15:f9: 96:0e:a3:e5:a2:96:96:a6:6c:89:b5:e8:43:93:c6: 9d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:2F:B2:DE:4D:8A:36:2F:EE:A7:45:97:5C:19:BA:78:EC:22:18:0B X509v3 Authority Key Identifier: keyid:DB:DA:D0:09:01:7D:91:DF:B4:38:D7:0D:1B:8D:4D:34:86:2F:06:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29rQCQF9kd-0ONcNG41NNIYvBo4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:4d:78:b5:b7:f5:92:95:3f:d9:cc:bb:05:87:c6:d6:31:57: 9d:c5:04:37:7c:a8:ee:5c:ec:7b:0f:05:1e:ae:d4:92:27:12: ca:6e:a2:2c:db:b6:c6:4d:e6:20:9a:71:fa:dc:c3:08:23:89: 46:a9:46:40:48:f4:08:7c:fb:c9:e4:27:bc:6b:db:b9:0a:2e: b2:e6:bd:9a:75:f7:a8:0a:9f:34:fd:4d:3c:46:aa:22:e6:af: 08:88:b5:f2:28:a6:d3:a0:90:62:de:2a:c5:95:e9:a9:57:0b: 05:99:6a:57:e4:61:be:00:ca:c0:10:c2:e2:88:6d:4d:f9:46: 1b:3d:3d:c6:3c:c4:67:55:27:29:8e:97:40:ad:62:81:bd:a0: 42:dc:a1:e7:b3:ad:c7:54:51:62:c8:96:5c:08:05:49:81:11: 3d:cd:48:5d:50:45:bf:5d:34:04:81:2f:60:b2:12:30:57:ba: 72:9d:96:9f:13:f9:36:56:ad:f9:8f:89:62:ba:1a:93:62:c0: ce:97:f7:aa:9e:29:82:e5:89:56:36:6a:e4:26:1b:af:5b:cb: a2:49:dd:28:2c:81:02:59:88:7f:bf:ee:df:85:97:c1:24:a0: 03:9c:68:32:b2:64:e3:d4:a3:e8:78:00:66:1b:42:7b:2b:cf: 10:ad:54:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjIyM0YxMTAvBgNVBAUTKERCREFEMDA5MDE3RDkxREZCNDM4RDcwRDFCOEQ0RDM0 ODYyRjA2OEUwHhcNMjUwODA1MDQ1MDI2WhcNMjUwODEyMDQ1MDI2WjAYMRYwFAYD VQQDEw02ODkxOGQ5My1lZTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3FKmih1PnvndY3MjhTBpkm1ePyQhszO3BD5edDFT6Bys16pDkY7XkWXJzD9x IX+awsGQ3ELXZYoqvPOb7qF/4UXZ+RLKYIZS6Fu+E3ZvJ75/pfqyBX5HxhuCMxb2 k8HbradKV/eBhS6TEF4JxlzBDIZprc+9rNcNYAH2uzG8oBqogFaZFfLUtGhERv4k VSbaF4KIst1145pSvABdGu2yBYQiMGdmkuL2PTVcN12e4I91FGPSRUYQZU5BmyAP sN3MaIlpmrKgGSMvViRd/mPcxaDhnpezDC+dqqfuBeM0kPoK2uIaBUYNDcisQFak FfmWDqPlopaWpmyJtehDk8adTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCMvst5N ijYv7qdFl1wZunjsIhgLMB8GA1UdIwQYMBaAFNva0AkBfZHftDjXDRuNTTSGLwaO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjIzRi8wOTY5MTI3QzhD QUExMUVFODY0REZENkRDNEY5QUUwMi8yOXJRQ1FGOWtkLTBPTmNORzQxTk5JWXZC bzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI5clFDUUY5a2QtME9OY05HNDFOTklZdkJvNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjIzRi8wOTY5MTI3QzhDQUExMUVFODY0REZENkRDNEY5QUUwMi8yOXJRQ1FGOWtk LTBPTmNORzQxTk5JWXZCbzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfTXi1t/WSlT/ZzLsFh8bWMVedxQQ3fKjuXOx7DwUertSSJxLKbqIs 27bGTeYgmnH63MMII4lGqUZASPQIfPvJ5Ce8a9u5Ci6y5r2adfeoCp80/U08Rqoi 5q8IiLXyKKbToJBi3irFlempVwsFmWpX5GG+AMrAEMLiiG1N+UYbPT3GPMRnVScp jpdArWKBvaBC3KHns63HVFFiyJZcCAVJgRE9zUhdUEW/XTQEgS9gshIwV7pynZaf E/k2Vq35j4liuhqTYsDOl/eqnimC5YlWNmrkJhuvW8uiSd0oLIECWYh/v+7fhZfB JKADnGgysmTj1KPoeABmG0J7K88QrVRf -----END CERTIFICATE-----Generated at Wed Aug 6 05:14:49 2025 by rpki-client