$ rpki-client -vvf rpki.apnic.net/member_repository/A91F264C/241AC7BE0E1811F0B69B8B38C4F9AE02/76QjuvW_0YkxbmUDHozq9aP_oUs.mft File: 76QjuvW_0YkxbmUDHozq9aP_oUs.mft (raw, json) Hash identifier: gDEGP6FjdH8h/tZqb3cCmSPuN0iULzSls9fob7iTybs= Subject key identifier: DC:FE:19:18:69:28:BD:C4:DE:3E:45:10:91:6F:4D:F0:E8:F4:A5:1B Authority key identifier: EF:A4:23:BA:F5:BF:D1:89:31:6E:65:03:1E:8C:EA:F5:A3:FF:A1:4B Certificate issuer: /CN=A91F264C/serialNumber=EFA423BAF5BFD189316E65031E8CEAF5A3FFA14B Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76QjuvW_0YkxbmUDHozq9aP_oUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F264C/241AC7BE0E1811F0B69B8B38C4F9AE02/76QjuvW_0YkxbmUDHozq9aP_oUs.mft Manifest number: 46 Signing time: Mon 11 Aug 2025 07:43:01 +0000 Manifest this update: Mon 11 Aug 2025 07:43:00 +0000 Manifest next update: Mon 18 Aug 2025 07:43:00 +0000 Files and hashes: 1: 76QjuvW_0YkxbmUDHozq9aP_oUs.crl (hash: PcDGWpGqxCRSxJuplhb//xeFyCokgjygoJB+/36aiw8=) 2: DB5AB9A0195A11F081485C3AC4F9AE02.roa (hash: JaGf75N3pf7IqU+djnr2Hy5ZxGye9c0JY8fFDo/3ks0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F264C/241AC7BE0E1811F0B69B8B38C4F9AE02/76QjuvW_0YkxbmUDHozq9aP_oUs.crl rsync://rpki.apnic.net/member_repository/A91F264C/241AC7BE0E1811F0B69B8B38C4F9AE02/76QjuvW_0YkxbmUDHozq9aP_oUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76QjuvW_0YkxbmUDHozq9aP_oUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F264C, serialNumber=EFA423BAF5BFD189316E65031E8CEAF5A3FFA14B Validity Not Before: Aug 11 07:43:00 2025 GMT Not After : Aug 18 07:43:00 2025 GMT Subject: CN=68999f05-dccf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:89:09:a3:d5:a6:2c:6b:64:4a:c1:76:4b:3b: 0e:75:7c:05:d0:83:fa:ed:c6:74:d8:ae:99:e1:51: 43:db:c7:44:58:b1:f0:57:eb:99:37:f6:44:bb:07: 84:81:b8:fc:28:7e:58:53:17:3e:12:e9:2b:ae:a8: 8a:5f:e2:ff:8c:eb:ae:78:46:7f:a2:4a:d3:e9:b0: 14:23:28:62:ae:b7:50:b0:a1:ae:ca:12:e6:ca:a0: cd:8f:37:08:ac:5c:23:03:6a:72:28:58:7d:ad:91: 66:28:2f:72:c6:86:0b:09:4c:b4:ea:c2:c3:fd:95: 87:47:28:c1:70:76:95:fc:57:d2:6f:3d:4b:fd:21: d5:bc:c0:be:0b:b8:96:a8:de:09:ce:3b:4a:40:7d: 08:a4:fa:32:d1:86:94:f8:97:05:59:48:43:08:e5: 78:eb:87:2b:9e:f6:b3:e1:b4:73:a7:f9:94:63:e9: 0b:dc:06:8d:a5:40:80:81:80:84:b9:0b:c2:08:c2: 74:78:da:b9:b5:a4:e1:9b:8b:99:cd:04:4e:ab:84: 27:6b:71:c0:3a:6f:fb:50:11:c2:da:fe:8e:d5:ee: 42:c7:4b:9a:0c:3d:c7:33:82:89:70:59:8c:3b:aa: 30:56:ae:76:0d:f0:06:07:a2:5d:ea:2f:59:f2:ae: ee:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:FE:19:18:69:28:BD:C4:DE:3E:45:10:91:6F:4D:F0:E8:F4:A5:1B X509v3 Authority Key Identifier: keyid:EF:A4:23:BA:F5:BF:D1:89:31:6E:65:03:1E:8C:EA:F5:A3:FF:A1:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F264C/241AC7BE0E1811F0B69B8B38C4F9AE02/76QjuvW_0YkxbmUDHozq9aP_oUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76QjuvW_0YkxbmUDHozq9aP_oUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F264C/241AC7BE0E1811F0B69B8B38C4F9AE02/76QjuvW_0YkxbmUDHozq9aP_oUs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:71:62:51:4b:f3:ee:dc:83:d6:62:ab:61:5c:57:ca:63:53: 5a:95:4c:fe:31:a5:fa:ab:94:81:61:fb:8e:91:7f:84:ed:5b: 3e:a1:d0:e0:29:e9:15:e7:37:0b:b6:71:b1:0e:9d:9c:f5:16: 4f:c6:3c:5a:1c:92:4e:97:b0:fb:17:e0:1f:34:ba:49:05:1c: 77:ef:7f:79:3c:c4:fe:cc:2d:0b:e5:bc:c9:43:16:e9:09:de: d3:5e:60:ac:7b:e9:35:da:91:18:a4:87:93:a9:88:5f:fe:79: 9a:55:e7:a6:c3:d2:83:57:5d:5e:29:a3:2b:15:01:02:89:13: 56:39:a7:68:ba:60:4b:67:06:e4:8b:62:5c:7b:e6:9d:02:28: a7:fd:43:96:b8:90:07:c4:9b:a3:e2:e8:da:54:35:2b:5a:ee: bb:a0:e1:e4:9b:27:b2:28:4f:66:7b:1d:26:97:65:11:3d:6e: 03:9c:d6:d2:95:45:b4:1f:60:82:3e:d4:21:bf:5d:55:33:f3: 40:2a:91:3b:cd:f0:2c:8d:2e:bd:21:7e:94:84:b7:96:91:28: 75:39:51:ed:e7:8c:65:55:ea:a9:42:5a:40:7b:70:60:37:5b: cc:63:61:eb:3d:fd:e9:82:63:65:de:e9:de:3c:a9:ec:84:19: 5f:0e:51:c1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MjY0QzExMC8GA1UEBRMoRUZBNDIzQkFGNUJGRDE4OTMxNkU2NTAzMUU4Q0VBRjVB M0ZGQTE0QjAeFw0yNTA4MTEwNzQzMDBaFw0yNTA4MTgwNzQzMDBaMBgxFjAUBgNV BAMTDTY4OTk5ZjA1LWRjY2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDpiQmj1aYsa2RKwXZLOw51fAXQg/rtxnTYrpnhUUPbx0RYsfBX65k39kS7B4SB uPwoflhTFz4S6SuuqIpf4v+M6654Rn+iStPpsBQjKGKut1Cwoa7KEubKoM2PNwis XCMDanIoWH2tkWYoL3LGhgsJTLTqwsP9lYdHKMFwdpX8V9JvPUv9IdW8wL4LuJao 3gnOO0pAfQik+jLRhpT4lwVZSEMI5Xjrhyue9rPhtHOn+ZRj6QvcBo2lQICBgIS5 C8IIwnR42rm1pOGbi5nNBE6rhCdrccA6b/tQEcLa/o7V7kLHS5oMPcczgolwWYw7 qjBWrnYN8AYHol3qL1nyru5bAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3P4ZGGko vcTePkUQkW9N8Oj0pRswHwYDVR0jBBgwFoAU76QjuvW/0YkxbmUDHozq9aP/oUsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYyNjRDLzI0MUFDN0JFMEUx ODExRjBCNjlCOEIzOEM0RjlBRTAyLzc2UWp1dldfMFlreGJtVURIb3pxOWFQX29V cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNzZRanV2V18wWWt4Ym1VREhvenE5YVBfb1VzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYy NjRDLzI0MUFDN0JFMEUxODExRjBCNjlCOEIzOEM0RjlBRTAyLzc2UWp1dldfMFlr eGJtVURIb3pxOWFQX29Vcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG5xYlFL8+7cg9Ziq2FcV8pjU1qVTP4xpfqrlIFh+46Rf4TtWz6h0OAp 6RXnNwu2cbEOnZz1Fk/GPFockk6XsPsX4B80ukkFHHfvf3k8xP7MLQvlvMlDFukJ 3tNeYKx76TXakRikh5OpiF/+eZpV56bD0oNXXV4poysVAQKJE1Y5p2i6YEtnBuSL Ylx75p0CKKf9Q5a4kAfEm6Pi6NpUNSta7rug4eSbJ7IoT2Z7HSaXZRE9bgOc1tKV RbQfYII+1CG/XVUz80AqkTvN8CyNLr0hfpSEt5aRKHU5Ue3njGVV6qlCWkB7cGA3 W8xjYes9/emCY2Xe6d48qeyEGV8OUcE= -----END CERTIFICATE-----Generated at Mon Aug 11 13:11:31 2025 by rpki-client