$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft File: _g28w89QoeDrA9MSluOfuogMGQU.mft (raw, json) Hash identifier: 2lZMQNE2GuZT8L2KzBruKOpYfAkp5CKpZmHYPyPvjGM= Subject key identifier: 62:DE:EC:B7:3A:C6:9C:C7:67:B7:3F:4A:DC:5D:E4:7A:A9:EE:32:54 Authority key identifier: FE:0D:BC:C3:CF:50:A1:E0:EB:03:D3:12:96:E3:9F:BA:88:0C:19:05 Certificate issuer: /CN=A91F7FEA/serialNumber=FE0DBCC3CF50A1E0EB03D31296E39FBA880C1905 Certificate serial: 0AB3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_g28w89QoeDrA9MSluOfuogMGQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft Manifest number: 0AA5 Signing time: Tue 12 Aug 2025 19:48:38 +0000 Manifest this update: Tue 12 Aug 2025 19:48:38 +0000 Manifest next update: Tue 19 Aug 2025 19:48:38 +0000 Files and hashes: 1: _g28w89QoeDrA9MSluOfuogMGQU.crl (hash: wan3l6tn8Hg2BoDFDQGlIc9AnakJF4TRFpjwG55kt98=) 2: AF5AC6B69E3F11EEA6B6CB0DC4F9AE02.roa (hash: aO7ZzsxjyqFcAzfGikfamjQffULd11X020Rl4PUmMgc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.crl rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_g28w89QoeDrA9MSluOfuogMGQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 19:48:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2739 (0xab3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7FEA, serialNumber=FE0DBCC3CF50A1E0EB03D31296E39FBA880C1905 Validity Not Before: Aug 12 19:48:38 2025 GMT Not After : Aug 19 19:48:38 2025 GMT Subject: CN=689b9a96-c498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:4c:1d:ab:f9:9e:66:26:32:60:10:e3:8e:b5: cb:7b:5c:33:5f:dd:0e:84:fb:8d:fd:86:de:4a:a2: 12:2e:d3:e1:eb:79:61:a4:39:2f:3b:0b:4a:10:f5: 7c:2c:76:c3:b8:7b:79:d5:cc:5e:43:b7:88:00:dc: 39:0a:41:02:bb:34:c3:cd:b6:3a:14:a4:b3:e8:b7: c5:6b:a6:22:c4:8b:db:5c:8d:84:dc:54:4e:29:d6: d9:ef:32:bd:b7:eb:4a:b0:14:08:58:c3:ff:f5:94: b2:78:e8:10:c1:e7:fa:1b:f2:0a:44:d8:d5:d0:f1: db:67:78:57:fd:63:7b:53:47:f4:8d:fa:7e:28:99: 40:df:17:70:1c:19:96:47:c8:86:fe:9c:2e:da:3a: f8:8c:79:26:88:1e:90:d5:0c:f4:60:09:25:c8:0a: 4d:6b:cc:f9:5e:1d:a0:09:ec:ce:1f:c0:ec:03:0c: 2a:4d:6d:42:33:dc:26:86:76:f6:87:b9:7b:8b:4b: 6e:c2:89:8c:35:ca:79:14:59:f8:f6:ed:ac:30:b7: 1e:f3:c0:c3:75:d7:e7:8d:14:e9:3b:4a:c6:0e:4d: 54:97:b3:b1:e6:d2:6b:97:0e:0b:8a:e7:af:f1:2e: 7a:b7:fb:71:49:5e:c0:7a:52:4b:36:a7:b7:c8:4a: 39:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:DE:EC:B7:3A:C6:9C:C7:67:B7:3F:4A:DC:5D:E4:7A:A9:EE:32:54 X509v3 Authority Key Identifier: keyid:FE:0D:BC:C3:CF:50:A1:E0:EB:03:D3:12:96:E3:9F:BA:88:0C:19:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_g28w89QoeDrA9MSluOfuogMGQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:f2:29:14:ea:ae:65:db:23:a0:e5:5f:e4:1f:56:3a:59:b3: 1d:ac:82:8c:97:e0:a0:e4:e6:f3:4f:2b:6d:9d:0f:de:22:44: 28:a8:bb:97:61:d8:f0:5f:1b:0c:3e:13:75:a7:7f:5f:d9:ef: 84:ba:24:99:cd:e3:65:b4:42:d1:4d:3b:8a:5b:d3:4b:12:49: d3:97:d1:64:e9:2c:b4:52:a7:c0:f7:eb:b4:47:e0:36:ec:57: 4b:07:fe:e4:fe:6a:b6:43:e1:6f:0a:62:1c:f0:ae:52:7b:54: bd:2f:95:49:d8:7c:b7:ff:42:b9:c2:bb:28:c1:7c:06:cd:7d: 39:ca:9c:68:1d:0f:cd:33:f1:08:e7:14:71:a4:3e:49:69:72: 41:31:08:26:20:1c:c6:6f:49:a9:f2:30:64:b3:f7:12:1b:90: cc:4b:00:c5:66:a4:82:7c:f3:a4:9d:b3:f7:19:13:aa:8a:94: 65:de:67:4e:95:42:d0:ef:63:50:1a:5c:d1:12:0c:d5:5a:94: 75:a2:69:4f:6d:b7:0d:81:4b:28:78:8b:f6:0a:61:a0:2e:d7: 86:ca:9d:b1:7e:d9:9a:6a:b7:ec:09:01:70:87:52:f0:5a:2e: 3c:2e:2d:45:3a:93:9b:66:60:e9:1d:1a:5f:96:8d:d4:8c:6b: 11:f3:7c:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdGRUExMTAvBgNVBAUTKEZFMERCQ0MzQ0Y1MEExRTBFQjAzRDMxMjk2RTM5RkJB ODgwQzE5MDUwHhcNMjUwODEyMTk0ODM4WhcNMjUwODE5MTk0ODM4WjAYMRYwFAYD VQQDEw02ODliOWE5Ni1jNDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6kwdq/meZiYyYBDjjrXLe1wzX90OhPuN/YbeSqISLtPh63lhpDkvOwtKEPV8 LHbDuHt51cxeQ7eIANw5CkECuzTDzbY6FKSz6LfFa6YixIvbXI2E3FROKdbZ7zK9 t+tKsBQIWMP/9ZSyeOgQwef6G/IKRNjV0PHbZ3hX/WN7U0f0jfp+KJlA3xdwHBmW R8iG/pwu2jr4jHkmiB6Q1Qz0YAklyApNa8z5Xh2gCezOH8DsAwwqTW1CM9wmhnb2 h7l7i0tuwomMNcp5FFn49u2sMLce88DDddfnjRTpO0rGDk1Ul7Ox5tJrlw4Liuev 8S56t/txSV7AelJLNqe3yEo5QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGLe7Lc6 xpzHZ7c/Stxd5Hqp7jJUMB8GA1UdIwQYMBaAFP4NvMPPUKHg6wPTEpbjn7qIDBkF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0ZFQS8xRUUzQUVFQzYw NDgxMUVBOEM2OTBCMzhDNEY5QUUwMi9fZzI4dzg5UW9lRHJBOU1TbHVPZnVvZ01H UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19nMjh3ODlRb2VEckE5TVNsdU9mdW9nTUdRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0ZFQS8xRUUzQUVFQzYwNDgxMUVBOEM2OTBCMzhDNEY5QUUwMi9fZzI4dzg5UW9l RHJBOU1TbHVPZnVvZ01HUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCV8ikU6q5l2yOg5V/kH1Y6WbMdrIKMl+Cg5ObzTyttnQ/eIkQoqLuX YdjwXxsMPhN1p39f2e+EuiSZzeNltELRTTuKW9NLEknTl9Fk6Sy0UqfA9+u0R+A2 7FdLB/7k/mq2Q+FvCmIc8K5Se1S9L5VJ2Hy3/0K5wrsowXwGzX05ypxoHQ/NM/EI 5xRxpD5JaXJBMQgmIBzGb0mp8jBks/cSG5DMSwDFZqSCfPOknbP3GROqipRl3mdO lULQ72NQGlzREgzVWpR1omlPbbcNgUsoeIv2CmGgLteGyp2xftmaarfsCQFwh1Lw Wi48Li1FOpObZmDpHRpflo3UjGsR83z7 -----END CERTIFICATE-----Generated at Wed Aug 13 05:30:34 2025 by rpki-client