$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/Df2AHulmIu0X31XXqqZMce_5t70.mft File: Df2AHulmIu0X31XXqqZMce_5t70.mft (raw, json) Hash identifier: QwQo77DGXOmwlrwKdGwI8Zx8V8yBdYK+j/4YQnAXduM= Subject key identifier: 47:3E:56:C9:25:0D:82:D1:6A:0A:BD:D8:F8:E5:38:AD:00:64:E7:6C Authority key identifier: 0D:FD:80:1E:E9:66:22:ED:17:DF:55:D7:AA:A6:4C:71:EF:F9:B7:BD Certificate issuer: /CN=A91F4E89/serialNumber=0DFD801EE96622ED17DF55D7AAA64C71EFF9B7BD Certificate serial: 0BA8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Df2AHulmIu0X31XXqqZMce_5t70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/Df2AHulmIu0X31XXqqZMce_5t70.mft Manifest number: 0BA2 Signing time: Sun 10 Aug 2025 18:58:48 +0000 Manifest this update: Sun 10 Aug 2025 18:58:47 +0000 Manifest next update: Sun 17 Aug 2025 18:58:47 +0000 Files and hashes: 1: Df2AHulmIu0X31XXqqZMce_5t70.crl (hash: m/KxX3KKuFLFKva77sGeGx/RtIqyWhUNPjhb/e0mSXc=) 2: 72F52C962AF511EA8C989441C4F9AE02.roa (hash: VUxxRKza4YtkY3CW36/yWhqdjkRvkusFphcVpxC9+Yc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/Df2AHulmIu0X31XXqqZMce_5t70.crl rsync://rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/Df2AHulmIu0X31XXqqZMce_5t70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Df2AHulmIu0X31XXqqZMce_5t70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2984 (0xba8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4E89, serialNumber=0DFD801EE96622ED17DF55D7AAA64C71EFF9B7BD Validity Not Before: Aug 10 18:58:47 2025 GMT Not After : Aug 17 18:58:47 2025 GMT Subject: CN=6898ebe8-18b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b1:bd:30:8e:bd:40:c1:45:d9:5f:09:30:aa: 97:9d:62:5b:37:d9:97:d2:0f:58:23:ed:d2:dd:c6: be:86:58:4c:96:45:a3:90:dc:b3:c8:38:f3:42:18: 02:64:c7:1a:36:b6:40:78:d6:aa:ec:83:42:e3:0a: 58:1f:6e:97:08:8d:1b:b3:44:48:0d:82:47:1b:a2: b7:fd:61:e4:3f:63:89:c3:9f:2d:05:92:5f:4a:45: 77:9c:5c:59:03:1f:8a:ba:8c:9f:a9:0d:e9:f5:7e: 7e:8e:fd:d3:31:73:b1:49:87:06:2c:94:01:c9:9d: 9d:51:cd:f6:74:04:9d:1c:00:c9:f3:4b:77:31:8f: c5:4c:74:3d:8d:f7:c6:1e:12:24:b4:5f:23:5c:fb: 9d:14:66:62:17:24:17:6a:26:74:4e:e8:6d:82:05: ef:e9:65:0a:37:cc:74:d6:da:9f:96:64:0d:b3:1c: 06:fe:e0:4a:96:6a:56:5f:ce:e1:05:7c:ed:ca:35: 7f:4b:6f:15:4a:4d:7f:e0:65:b6:d5:bb:27:8f:03: 8f:10:fb:ca:34:c0:d7:ef:61:42:4e:78:30:6c:c6: e6:94:66:41:c9:e8:b7:7d:70:b8:f0:30:50:e2:eb: 02:eb:08:18:d3:94:16:7c:3d:d7:40:38:48:80:68: 88:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:3E:56:C9:25:0D:82:D1:6A:0A:BD:D8:F8:E5:38:AD:00:64:E7:6C X509v3 Authority Key Identifier: keyid:0D:FD:80:1E:E9:66:22:ED:17:DF:55:D7:AA:A6:4C:71:EF:F9:B7:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/Df2AHulmIu0X31XXqqZMce_5t70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Df2AHulmIu0X31XXqqZMce_5t70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/Df2AHulmIu0X31XXqqZMce_5t70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:52:1d:b9:29:f5:60:29:21:c2:f9:c5:81:fc:50:b8:b8:87: 74:54:70:49:24:ed:eb:08:0f:03:e0:f7:93:cf:bf:f4:95:2a: 8f:35:0a:49:99:ad:6f:a2:e0:af:9c:5d:27:26:95:68:b1:24: 03:e8:0f:e9:cc:b1:fb:c6:06:66:fc:a9:b4:a3:83:77:13:1d: 09:63:c3:06:6b:37:76:ce:60:22:82:e7:74:86:88:2e:85:53: 14:29:46:e4:c3:55:45:1f:11:4f:d1:f9:42:02:35:51:eb:7a: 60:bc:4b:fe:39:00:88:f7:6e:6f:be:bc:22:eb:ec:bc:a1:44: de:36:a4:3b:f8:e4:c8:76:b2:d9:68:0b:74:c2:1e:d6:b0:c0: 59:5b:8a:5b:de:de:35:eb:55:20:a9:08:89:c7:01:ed:05:2c: 3d:57:7f:5c:34:a7:86:9b:29:61:84:91:1b:e1:48:d9:83:00: 20:92:37:0e:ef:1a:b5:e6:da:bb:c8:2e:51:fc:1b:84:d8:0e: 91:4c:5c:77:da:88:7d:4e:54:c3:5c:89:f4:4d:0c:d5:f7:00: 56:53:f7:de:f5:29:ba:2f:a8:6d:08:5e:5a:d7:36:6b:dd:36: a8:0e:d8:d1:22:d5:76:89:f3:80:83:43:77:29:06:7d:07:7e: 10:04:26:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRFODkxMTAvBgNVBAUTKDBERkQ4MDFFRTk2NjIyRUQxN0RGNTVEN0FBQTY0Qzcx RUZGOUI3QkQwHhcNMjUwODEwMTg1ODQ3WhcNMjUwODE3MTg1ODQ3WjAYMRYwFAYD VQQDEw02ODk4ZWJlOC0xOGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqbG9MI69QMFF2V8JMKqXnWJbN9mX0g9YI+3S3ca+hlhMlkWjkNyzyDjzQhgC ZMcaNrZAeNaq7INC4wpYH26XCI0bs0RIDYJHG6K3/WHkP2OJw58tBZJfSkV3nFxZ Ax+KuoyfqQ3p9X5+jv3TMXOxSYcGLJQByZ2dUc32dASdHADJ80t3MY/FTHQ9jffG HhIktF8jXPudFGZiFyQXaiZ0TuhtggXv6WUKN8x01tqflmQNsxwG/uBKlmpWX87h BXztyjV/S28VSk1/4GW21bsnjwOPEPvKNMDX72FCTngwbMbmlGZByei3fXC48DBQ 4usC6wgY05QWfD3XQDhIgGiIiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEc+Vskl DYLRagq92PjlOK0AZOdsMB8GA1UdIwQYMBaAFA39gB7pZiLtF99V16qmTHHv+be9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEU4OS9DNTMzRDcyNDJB RjQxMUVBQTQ4RjE1NDFDNEY5QUUwMi9EZjJBSHVsbUl1MFgzMVhYcXFaTWNlXzV0 NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RmMkFIdWxtSXUwWDMxWFhxcVpNY2VfNXQ3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEU4OS9DNTMzRDcyNDJBRjQxMUVBQTQ4RjE1NDFDNEY5QUUwMi9EZjJBSHVsbUl1 MFgzMVhYcXFaTWNlXzV0NzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmUh25KfVgKSHC+cWB/FC4uId0VHBJJO3rCA8D4PeTz7/0lSqPNQpJ ma1vouCvnF0nJpVosSQD6A/pzLH7xgZm/Km0o4N3Ex0JY8MGazd2zmAigud0hogu hVMUKUbkw1VFHxFP0flCAjVR63pgvEv+OQCI925vvrwi6+y8oUTeNqQ7+OTIdrLZ aAt0wh7WsMBZW4pb3t4161UgqQiJxwHtBSw9V39cNKeGmylhhJEb4UjZgwAgkjcO 7xq15tq7yC5R/BuE2A6RTFx32oh9TlTDXIn0TQzV9wBWU/fe9Sm6L6htCF5a1zZr 3TaoDtjRItV2ifOAg0N3KQZ9B34QBCbW -----END CERTIFICATE-----Generated at Mon Aug 11 04:16:51 2025 by rpki-client