$ rpki-client -vvf rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.mft File: MmYwanA43JsBUyfHJVZAXzn85gs.mft (raw, json) Hash identifier: vIZpqYFguLH5+236jhMMKXDGC428zfxyGIySgIYUn0w= Subject key identifier: 00:DF:F5:CA:42:68:F0:22:53:E0:96:61:F1:66:AD:AA:AA:7D:17:41 Authority key identifier: 32:66:30:6A:70:38:DC:9B:01:53:27:C7:25:56:40:5F:39:FC:E6:0B Certificate issuer: /CN=A91F644E/serialNumber=3266306A7038DC9B015327C72556405F39FCE60B Certificate serial: 1A89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmYwanA43JsBUyfHJVZAXzn85gs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.mft Manifest number: 1A7F Signing time: Mon 04 Aug 2025 16:29:30 +0000 Manifest this update: Mon 04 Aug 2025 16:29:30 +0000 Manifest next update: Mon 11 Aug 2025 16:29:30 +0000 Files and hashes: 1: MmYwanA43JsBUyfHJVZAXzn85gs.crl (hash: /CboMc8GsxSjmTBllaFSwBPKLdB4BiNvheySiauuO7E=) 2: 312DC5B8405E11E7A28FCE45C4F9AE02.roa (hash: arkqSY1NH0JOG5y+n5PhHtwp0RcGV49oD/BwEA9o5TM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.crl rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmYwanA43JsBUyfHJVZAXzn85gs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 16:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6793 (0x1a89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F644E, serialNumber=3266306A7038DC9B015327C72556405F39FCE60B Validity Not Before: Aug 4 16:29:30 2025 GMT Not After : Aug 11 16:29:30 2025 GMT Subject: CN=6890dfea-4861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5b:5e:b2:c6:a9:20:06:ac:80:a8:aa:44:e8: f5:c3:23:0a:cf:ca:90:d9:a5:18:91:00:21:4b:48: c9:bb:68:c2:4f:a0:27:ae:73:c6:59:f9:87:11:5e: 63:6a:ef:e0:f8:e2:66:c8:5f:f2:81:a4:a2:4f:db: 9b:fd:25:07:24:45:a2:57:c9:bb:34:f8:82:ad:f2: 22:61:e9:fd:77:e9:9b:0f:bd:69:2a:b3:14:16:41: 93:2d:98:4e:cd:f9:f3:54:85:2d:35:0d:7a:de:83: 88:a5:e1:6d:79:62:e0:06:35:0d:b4:0e:64:b7:a5: dd:34:dd:1d:0a:82:16:4d:4e:7f:57:3e:99:75:fa: 4e:7f:40:da:11:d4:6a:c4:8d:65:1b:30:29:59:e8: 1e:aa:a9:13:fd:69:84:a4:7d:00:f0:bf:4a:0f:45: b2:d3:0b:c4:d8:b2:bf:2b:8b:6d:d2:32:ca:38:f4: 04:b9:6d:72:21:bc:2f:57:b7:4b:d0:58:cd:f7:81: 14:2d:66:7e:84:fe:c6:4b:59:78:3a:f5:4f:f6:19: db:0d:69:85:9c:68:00:34:97:6c:cc:e8:b8:32:af: 4f:22:1e:77:f3:5d:34:e0:98:bd:9f:5d:6c:4b:31: ef:46:8c:48:a7:46:49:8c:7e:af:8a:7e:e2:8f:14: c0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:DF:F5:CA:42:68:F0:22:53:E0:96:61:F1:66:AD:AA:AA:7D:17:41 X509v3 Authority Key Identifier: keyid:32:66:30:6A:70:38:DC:9B:01:53:27:C7:25:56:40:5F:39:FC:E6:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmYwanA43JsBUyfHJVZAXzn85gs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:64:8b:d9:b4:80:2d:d5:26:0f:7a:31:2a:46:d6:69:60:b2: a5:31:69:52:35:c8:84:98:7d:61:2f:9c:36:47:c1:17:48:e6: 04:e7:e8:41:3a:08:32:d9:47:42:08:ab:6a:ff:c3:f0:da:a5: 6a:a0:e9:0c:73:fa:c1:4a:e1:69:fd:9c:5a:4e:18:04:59:af: ec:aa:cb:4c:69:85:e5:17:87:2a:1c:a2:09:b3:12:92:25:e1: 96:cb:31:8c:ff:41:b8:ee:83:36:2f:c0:9f:ef:29:2d:fc:e8: 98:bb:1b:78:7c:44:07:bc:90:8d:b0:d4:e8:09:5f:88:0e:60: 82:75:5a:8b:4e:8e:c5:9a:dd:25:cc:20:c8:32:1d:96:73:f2: 6c:6f:7a:3c:d3:ee:75:77:55:ce:b7:7c:6d:38:89:53:03:0b: cf:aa:2f:1d:10:f8:b0:27:e5:ab:83:be:80:66:e8:d7:46:4d: 95:b6:11:f7:a1:53:49:59:ab:d7:c0:10:43:c6:db:7e:84:14: 8a:2b:ae:83:e9:7e:4a:5c:ac:89:f4:67:4b:2f:63:cd:59:f2: 93:bd:e9:18:cd:f5:80:27:f9:73:b6:1f:a5:f6:2b:98:e6:e0: 4f:58:6c:7d:93:82:4a:6d:f5:8e:9d:6c:c8:1c:bf:cf:43:0b: 9c:50:97:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY0NEUxMTAvBgNVBAUTKDMyNjYzMDZBNzAzOERDOUIwMTUzMjdDNzI1NTY0MDVG MzlGQ0U2MEIwHhcNMjUwODA0MTYyOTMwWhcNMjUwODExMTYyOTMwWjAYMRYwFAYD VQQDEw02ODkwZGZlYS00ODYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvltessapIAasgKiqROj1wyMKz8qQ2aUYkQAhS0jJu2jCT6AnrnPGWfmHEV5j au/g+OJmyF/ygaSiT9ub/SUHJEWiV8m7NPiCrfIiYen9d+mbD71pKrMUFkGTLZhO zfnzVIUtNQ163oOIpeFteWLgBjUNtA5kt6XdNN0dCoIWTU5/Vz6ZdfpOf0DaEdRq xI1lGzApWegeqqkT/WmEpH0A8L9KD0Wy0wvE2LK/K4tt0jLKOPQEuW1yIbwvV7dL 0FjN94EULWZ+hP7GS1l4OvVP9hnbDWmFnGgANJdszOi4Mq9PIh5381004Ji9n11s SzHvRoxIp0ZJjH6vin7ijxTATQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFADf9cpC aPAiU+CWYfFmraqqfRdBMB8GA1UdIwQYMBaAFDJmMGpwONybAVMnxyVWQF85/OYL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjQ0RS9FNDNCNkU0QTQw NUQxMUU3QjAxQkExNDVDNEY5QUUwMi9NbVl3YW5BNDNKc0JVeWZISlZaQVh6bjg1 Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tWXdhbkE0M0pzQlV5ZkhKVlpBWHpuODVncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjQ0RS9FNDNCNkU0QTQwNUQxMUU3QjAxQkExNDVDNEY5QUUwMi9NbVl3YW5BNDNK c0JVeWZISlZaQVh6bjg1Z3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUZIvZtIAt1SYPejEqRtZpYLKlMWlSNciEmH1hL5w2R8EXSOYE5+hB Oggy2UdCCKtq/8Pw2qVqoOkMc/rBSuFp/ZxaThgEWa/sqstMaYXlF4cqHKIJsxKS JeGWyzGM/0G47oM2L8Cf7ykt/OiYuxt4fEQHvJCNsNToCV+IDmCCdVqLTo7Fmt0l zCDIMh2Wc/Jsb3o80+51d1XOt3xtOIlTAwvPqi8dEPiwJ+Wrg76AZujXRk2VthH3 oVNJWavXwBBDxtt+hBSKK66D6X5KXKyJ9GdLL2PNWfKTvekYzfWAJ/lzth+l9iuY 5uBPWGx9k4JKbfWOnWzIHL/PQwucUJfv -----END CERTIFICATE-----Generated at Wed Aug 6 00:55:52 2025 by rpki-client