$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft File: 49O0eIJzzkWSmwmYOr9ktdRNHwg.mft (raw, json) Hash identifier: UgSh0B9+hoQqbnQO8DLJUxLOXL0ulw9KYlIHm2KKhnA= Subject key identifier: 35:A3:B5:DF:E4:21:D1:64:A7:61:63:B7:27:3C:96:92:07:F6:37:0C Authority key identifier: E3:D3:B4:78:82:73:CE:45:92:9B:09:98:3A:BF:64:B5:D4:4D:1F:08 Certificate issuer: /CN=A91FF634/serialNumber=E3D3B4788273CE45929B09983ABF64B5D44D1F08 Certificate serial: 1150 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/49O0eIJzzkWSmwmYOr9ktdRNHwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft Manifest number: 1139 Signing time: Sun 10 Aug 2025 17:16:39 +0000 Manifest this update: Sun 10 Aug 2025 17:16:38 +0000 Manifest next update: Sun 17 Aug 2025 17:16:38 +0000 Files and hashes: 1: 49O0eIJzzkWSmwmYOr9ktdRNHwg.crl (hash: Rx2KIsg9tKJInKuE6w94iqUL2fwrTyePg01r0jSTST0=) 2: 97F937E440BC11EAA2B89432C4F9AE02.roa (hash: YvhnTG1A1W5kz0Vch4cPsIzgbILMaDioP1ySIyj5aeE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.crl rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/49O0eIJzzkWSmwmYOr9ktdRNHwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4432 (0x1150) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF634, serialNumber=E3D3B4788273CE45929B09983ABF64B5D44D1F08 Validity Not Before: Aug 10 17:16:38 2025 GMT Not After : Aug 17 17:16:38 2025 GMT Subject: CN=6898d3f7-1094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:49:3c:2f:ed:f1:39:2c:5b:6b:e6:2e:2b:fe: 9b:dd:70:08:05:46:33:a1:3b:a0:68:e8:36:0e:1c: c8:38:3a:af:56:e1:1f:25:3d:35:2f:bd:e4:3a:cc: ec:be:2e:e9:3f:d7:9d:ff:c0:de:73:55:bc:c1:a4: 56:96:33:2f:d9:f9:88:42:97:2d:49:e7:0a:67:14: 3b:62:e2:1d:b0:f9:d3:b7:64:a8:8f:01:b5:4e:70: b7:06:d1:8d:a2:8d:09:05:3f:52:16:13:a0:87:5b: 99:25:03:f5:2c:54:ff:b6:cb:90:b4:24:b7:a4:73: 55:23:a9:aa:6b:bd:c7:2b:6d:24:bd:ec:b2:7e:7d: 7b:6c:0e:9c:29:ea:13:da:8f:b6:8d:ea:0f:67:5b: 19:e1:d7:d2:b3:01:62:93:1d:b8:58:82:a8:41:b9: cc:a4:9b:a5:f1:d1:6f:71:3f:47:3f:8d:6c:86:ad: 14:ee:5a:09:c2:74:54:6b:c0:46:8b:f6:45:cc:73: 33:12:36:6d:ef:a1:78:02:ef:c8:bc:ce:c7:3d:ee: 5c:0f:e3:6a:88:9c:2e:b6:65:6b:ca:ab:8e:79:c6: 79:8a:e8:58:36:16:ab:7f:e0:a7:5e:6f:d1:70:f9: 01:f2:00:b6:e8:06:fd:07:cd:f3:e3:a4:a1:f8:ac: be:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A3:B5:DF:E4:21:D1:64:A7:61:63:B7:27:3C:96:92:07:F6:37:0C X509v3 Authority Key Identifier: keyid:E3:D3:B4:78:82:73:CE:45:92:9B:09:98:3A:BF:64:B5:D4:4D:1F:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/49O0eIJzzkWSmwmYOr9ktdRNHwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:9c:be:db:e8:fb:68:e2:60:c0:e5:6b:b1:37:4d:22:30:b6: e9:a0:ac:fe:9c:f9:cb:82:9e:03:70:2c:07:b1:c6:64:eb:0b: 53:0c:b6:00:0b:c7:04:42:8a:f9:12:bf:7f:57:7e:06:1f:5d: 46:bd:47:3d:3d:23:f6:fb:71:51:55:19:03:d0:86:9b:dc:5e: bf:a8:87:c7:ac:59:7a:7d:c4:0d:e2:14:b9:7b:98:9f:a9:a2: ad:1b:f0:b1:4e:0b:44:97:72:57:cf:6f:a9:db:40:b6:88:72: 48:08:47:35:70:33:d1:27:8e:51:4b:b6:b7:58:f4:2c:f1:4e: 6d:73:1f:fa:b0:ba:60:43:84:58:1b:f4:b5:f0:cf:db:2f:18: ea:4b:de:99:4b:0a:5a:2b:8d:1d:8f:37:f9:4b:f6:da:3c:31: 35:87:f8:32:0c:6b:fb:a9:3f:f8:15:0c:99:62:c0:c1:e3:b2: 0a:24:81:7f:c7:a4:8a:30:96:a3:05:60:07:53:2a:65:57:34: 7f:98:74:d6:04:0c:d7:16:f7:b7:46:e5:04:c5:89:4d:49:2c: 8d:fd:95:87:0a:74:03:08:16:2a:43:3d:25:38:92:45:1f:ea: 06:79:ab:b4:7e:4c:9a:e9:53:c6:45:87:23:56:5e:21:2f:de: 47:9f:43:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY2MzQxMTAvBgNVBAUTKEUzRDNCNDc4ODI3M0NFNDU5MjlCMDk5ODNBQkY2NEI1 RDQ0RDFGMDgwHhcNMjUwODEwMTcxNjM4WhcNMjUwODE3MTcxNjM4WjAYMRYwFAYD VQQDEw02ODk4ZDNmNy0xMDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvEk8L+3xOSxba+YuK/6b3XAIBUYzoTugaOg2DhzIODqvVuEfJT01L73kOszs vi7pP9ed/8Dec1W8waRWljMv2fmIQpctSecKZxQ7YuIdsPnTt2SojwG1TnC3BtGN oo0JBT9SFhOgh1uZJQP1LFT/tsuQtCS3pHNVI6mqa73HK20kveyyfn17bA6cKeoT 2o+2jeoPZ1sZ4dfSswFikx24WIKoQbnMpJul8dFvcT9HP41shq0U7loJwnRUa8BG i/ZFzHMzEjZt76F4Au/IvM7HPe5cD+NqiJwutmVryquOecZ5iuhYNharf+CnXm/R cPkB8gC26Ab9B83z46Sh+Ky+DQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDWjtd/k IdFkp2Fjtyc8lpIH9jcMMB8GA1UdIwQYMBaAFOPTtHiCc85FkpsJmDq/ZLXUTR8I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjYzNC8xMzI3QTczRTE3 MjkxMUU5OEREMThFMjNDNEY5QUUwMi80OU8wZUlKenprV1Ntd21ZT3I5a3RkUk5I d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ5TzBlSUp6emtXU213bVlPcjlrdGRSTkh3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjYzNC8xMzI3QTczRTE3MjkxMUU5OEREMThFMjNDNEY5QUUwMi80OU8wZUlKenpr V1Ntd21ZT3I5a3RkUk5Id2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPnL7b6Pto4mDA5WuxN00iMLbpoKz+nPnLgp4DcCwHscZk6wtTDLYA C8cEQor5Er9/V34GH11GvUc9PSP2+3FRVRkD0Iab3F6/qIfHrFl6fcQN4hS5e5if qaKtG/CxTgtEl3JXz2+p20C2iHJICEc1cDPRJ45RS7a3WPQs8U5tcx/6sLpgQ4RY G/S18M/bLxjqS96ZSwpaK40djzf5S/baPDE1h/gyDGv7qT/4FQyZYsDB47IKJIF/ x6SKMJajBWAHUyplVzR/mHTWBAzXFve3RuUExYlNSSyN/ZWHCnQDCBYqQz0lOJJF H+oGeau0fkya6VPGRYcjVl4hL95Hn0P4 -----END CERTIFICATE-----Generated at Mon Aug 11 07:31:26 2025 by rpki-client