$ rpki-client -vvf rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.mft File: aMIYjATCDkkjq7YttIckmDVLSv0.mft (raw, json) Hash identifier: SJSN8q5h0eDii2a5lbA7J2XKPq2qeRW6BjOeI9iSBUs= Subject key identifier: 8C:C8:E9:04:33:C5:BA:F3:A3:20:83:25:1F:ED:DD:BA:BA:FF:91:B9 Authority key identifier: 68:C2:18:8C:04:C2:0E:49:23:AB:B6:2D:B4:87:24:98:35:4B:4A:FD Certificate issuer: /CN=A911750B/serialNumber=68C2188C04C20E4923ABB62DB4872498354B4AFD Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aMIYjATCDkkjq7YttIckmDVLSv0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.mft Manifest number: 27 Signing time: Sat 23 Aug 2025 08:01:19 +0000 Manifest this update: Sat 23 Aug 2025 08:01:18 +0000 Manifest next update: Sat 30 Aug 2025 08:01:18 +0000 Files and hashes: 1: aMIYjATCDkkjq7YttIckmDVLSv0.crl (hash: wm3LRNwF/Qh4ApjtQSyKt99VW0E7NCqKrK4K9nt1kpw=) 2: CC9D872A468D11F0A82C5E5EC4F9AE02.roa (hash: WRJujiiFl5+2lSEzqzn6bhm3g2H9MHSY7ug8yl3Oc8g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.crl rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aMIYjATCDkkjq7YttIckmDVLSv0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911750B, serialNumber=68C2188C04C20E4923ABB62DB4872498354B4AFD Validity Not Before: Aug 23 08:01:18 2025 GMT Not After : Aug 30 08:01:18 2025 GMT Subject: CN=68a9754e-9eca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ba:03:89:3b:4e:62:0f:4a:3f:40:df:2a:5e: a3:72:eb:7a:d2:68:64:12:d3:3a:5c:f3:64:2e:0e: 8f:f7:c8:1a:d0:02:11:b5:3d:0d:43:b4:98:bb:9c: a3:65:ad:36:8c:14:28:c4:2e:65:eb:eb:2b:aa:bf: fe:e0:04:fc:35:9a:0f:2d:b5:38:1e:6e:e5:4c:8e: 1c:ba:b0:77:6d:74:ae:45:72:53:b0:45:21:05:99: 57:f6:11:f5:84:a6:ea:a0:0b:3f:21:48:f9:c4:f5: 52:df:a4:35:e5:ab:19:b5:6c:b4:14:c4:66:eb:e2: 55:63:0e:e8:3f:ee:b5:b5:62:54:0d:d4:26:c8:dd: b4:6d:86:a0:e3:96:ca:b5:cc:07:20:86:b3:79:4c: 38:48:0f:a4:fa:c4:8f:db:20:89:bb:69:a3:de:97: c2:6e:81:bb:bf:64:c3:b4:90:5f:89:a8:7e:f9:d0: 69:7d:0c:3e:9d:07:35:71:3c:85:53:30:c5:34:a7: df:d7:5c:45:f9:ea:cf:02:b3:42:61:c0:a1:bf:c1: b5:f5:a7:1a:fc:a9:1b:8c:c4:26:55:81:2b:5e:81: 56:6b:50:c0:8a:a4:e4:7d:b9:3e:ad:4b:e2:ab:2c: 60:df:75:3a:89:1d:7b:8b:25:a1:ce:57:77:4f:7f: 91:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:C8:E9:04:33:C5:BA:F3:A3:20:83:25:1F:ED:DD:BA:BA:FF:91:B9 X509v3 Authority Key Identifier: keyid:68:C2:18:8C:04:C2:0E:49:23:AB:B6:2D:B4:87:24:98:35:4B:4A:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aMIYjATCDkkjq7YttIckmDVLSv0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:c0:16:6d:02:63:a8:31:fa:4f:74:49:f6:a2:fe:a6:c6:6d: 95:99:b3:ff:18:17:eb:98:3f:2b:09:f8:6c:c3:17:b8:f6:01: 37:78:ef:fa:1c:c9:a2:7e:2b:31:9e:0c:0f:4d:7c:94:86:0d: 4b:6a:2b:f0:80:cc:4c:e2:7e:05:cd:c9:4a:99:6b:78:fa:c6: d5:86:70:25:ef:2b:2a:5c:91:4d:45:c5:36:02:ac:ce:13:81: 0e:03:90:f3:44:87:97:8e:9d:6d:ab:f9:76:cd:62:c7:f0:df: b1:30:80:2c:92:20:fe:a5:74:d2:48:ff:30:41:42:0f:42:ba: c2:1d:9f:fa:74:52:14:b6:6b:eb:63:9c:0f:e9:7b:95:d7:ca: 13:d4:01:d5:08:82:f0:2b:dd:43:1e:5f:17:54:2e:ac:64:fb: 3b:b1:d1:a5:49:b8:a2:56:15:51:ca:12:4c:6f:37:9f:53:67: d6:c8:fb:52:a9:99:f8:c7:e5:94:c4:19:21:fc:2a:37:a1:d8: 5e:f9:78:4f:2b:b7:3f:ee:b0:11:f9:1c:62:3f:5b:72:99:f9: 82:65:b9:a1:bb:7c:6c:ef:fd:a0:6a:b3:df:04:91:68:1a:48: f8:b0:ab:06:d1:00:cd:09:d4:20:71:7d:cb:e9:41:a7:8a:f2: 43:7a:43:a6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NzUwQjExMC8GA1UEBRMoNjhDMjE4OEMwNEMyMEU0OTIzQUJCNjJEQjQ4NzI0OTgz NTRCNEFGRDAeFw0yNTA4MjMwODAxMThaFw0yNTA4MzAwODAxMThaMBgxFjAUBgNV BAMTDTY4YTk3NTRlLTllY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsugOJO05iD0o/QN8qXqNy63rSaGQS0zpc82QuDo/3yBrQAhG1PQ1DtJi7nKNl rTaMFCjELmXr6yuqv/7gBPw1mg8ttTgebuVMjhy6sHdtdK5FclOwRSEFmVf2EfWE puqgCz8hSPnE9VLfpDXlqxm1bLQUxGbr4lVjDug/7rW1YlQN1CbI3bRthqDjlsq1 zAcghrN5TDhID6T6xI/bIIm7aaPel8Jugbu/ZMO0kF+JqH750Gl9DD6dBzVxPIVT MMU0p9/XXEX56s8Cs0JhwKG/wbX1pxr8qRuMxCZVgStegVZrUMCKpOR9uT6tS+Kr LGDfdTqJHXuLJaHOV3dPf5EHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjMjpBDPF uvOjIIMlH+3durr/kbkwHwYDVR0jBBgwFoAUaMIYjATCDkkjq7YttIckmDVLSv0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3NTBCLzVCMUMxRkFFNDY4 QzExRjA4NEI2QTUzOUM0RjlBRTAyL2FNSVlqQVRDRGtranE3WXR0SWNrbURWTFN2 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYU1JWWpBVENEa2tqcTdZdHRJY2ttRFZMU3YwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3 NTBCLzVCMUMxRkFFNDY4QzExRjA4NEI2QTUzOUM0RjlBRTAyL2FNSVlqQVRDRGtr anE3WXR0SWNrbURWTFN2MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC3AFm0CY6gx+k90Sfai/qbGbZWZs/8YF+uYPysJ+GzDF7j2ATd47/oc yaJ+KzGeDA9NfJSGDUtqK/CAzEzifgXNyUqZa3j6xtWGcCXvKypckU1FxTYCrM4T gQ4DkPNEh5eOnW2r+XbNYsfw37EwgCySIP6ldNJI/zBBQg9CusIdn/p0UhS2a+tj nA/pe5XXyhPUAdUIgvAr3UMeXxdULqxk+zux0aVJuKJWFVHKEkxvN59TZ9bI+1Kp mfjH5ZTEGSH8Kjeh2F75eE8rtz/usBH5HGI/W3KZ+YJluaG7fGzv/aBqs98EkWga SPiwqwbRAM0J1CBxfcvpQaeK8kN6Q6Y= -----END CERTIFICATE-----Generated at Sat Aug 23 21:29:47 2025 by rpki-client