$ rpki-client -vvf rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.mft File: peado7v7jl3TlkjmpD4A-nI95lg.mft (raw, json) Hash identifier: hQEe6ER6PlnKgp52m1SlA3d7UU6M8nhPiZCxdd5hJxE= Subject key identifier: A7:86:DC:B2:45:FE:30:15:27:75:2B:2B:41:92:4D:37:6A:2B:46:E3 Authority key identifier: A5:E6:9D:A3:BB:FB:8E:5D:D3:96:48:E6:A4:3E:00:FA:72:3D:E6:58 Certificate issuer: /CN=A91190B4/serialNumber=A5E69DA3BBFB8E5DD39648E6A43E00FA723DE658 Certificate serial: 0AD5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peado7v7jl3TlkjmpD4A-nI95lg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.mft Manifest number: 0ACD Signing time: Fri 22 Aug 2025 19:36:17 +0000 Manifest this update: Fri 22 Aug 2025 19:36:16 +0000 Manifest next update: Fri 29 Aug 2025 19:36:16 +0000 Files and hashes: 1: peado7v7jl3TlkjmpD4A-nI95lg.crl (hash: MLFFDytwe28V5JTz7GgWTPv8+/TpcEwxy+pUA2HoQ8g=) 2: 55BC5674573F11EAA8901D3EC4F9AE02.roa (hash: GpKaeFCXgLqKWUd4/mw0J3pe4Cuty7kr/IEGoWg6an0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.crl rsync://rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peado7v7jl3TlkjmpD4A-nI95lg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:36:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2773 (0xad5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91190B4, serialNumber=A5E69DA3BBFB8E5DD39648E6A43E00FA723DE658 Validity Not Before: Aug 22 19:36:16 2025 GMT Not After : Aug 29 19:36:16 2025 GMT Subject: CN=68a8c6b1-8549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d9:be:c1:5a:1f:68:55:20:1f:7a:a6:3b:1e: 6d:4a:bf:0c:fc:cd:aa:f6:7b:3d:a8:26:47:3e:44: 56:2c:2f:8a:9f:84:ca:cf:0e:1f:c2:b6:ee:1d:95: 53:78:f7:a6:7a:99:93:9c:aa:c9:98:c2:f3:62:cc: 0a:76:18:f2:7e:e0:f6:86:01:a1:63:21:1a:90:9d: f4:57:83:60:98:4e:ea:46:eb:07:63:24:b8:39:59: 75:fa:77:a6:d3:a8:11:91:bd:5a:81:8e:17:d7:4f: 19:06:24:e9:9e:70:52:fe:27:64:14:0c:84:20:bc: 4a:ae:13:12:f4:fe:e6:04:8a:df:37:05:d5:87:b0: 47:b7:6f:fe:4a:b3:96:8a:ae:8b:47:51:03:49:43: 72:05:5f:15:fa:85:d8:2a:02:0e:64:73:84:26:40: 4b:24:c2:a9:58:b8:4e:e2:db:d3:a0:ed:d3:b1:58: b7:00:d4:73:55:89:5d:00:0c:0f:22:d7:f7:d3:80: ee:a7:58:c8:b9:25:5e:8c:c8:7d:27:32:b7:a2:35: 84:65:75:28:b3:79:bb:ad:0b:75:fc:4f:b0:d5:f8: 96:e1:51:13:38:11:7a:dd:5b:84:de:8e:9f:b8:4b: 1d:7d:ad:0f:de:78:a4:04:91:1b:49:d7:50:59:3e: c3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:86:DC:B2:45:FE:30:15:27:75:2B:2B:41:92:4D:37:6A:2B:46:E3 X509v3 Authority Key Identifier: keyid:A5:E6:9D:A3:BB:FB:8E:5D:D3:96:48:E6:A4:3E:00:FA:72:3D:E6:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peado7v7jl3TlkjmpD4A-nI95lg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:60:ee:1d:99:73:1f:ec:4d:ec:5c:ec:ad:ad:e0:d8:6f:38: 46:33:c0:cd:99:c8:19:d1:d9:53:79:11:26:93:45:15:77:5d: b3:eb:c6:dc:46:91:fe:d7:fd:87:a9:a8:1e:b5:29:ed:c2:5c: af:be:01:d4:a4:d8:8d:0f:77:cf:5a:90:f7:fe:2c:78:5d:0f: 51:e1:87:86:82:11:06:52:44:ca:e8:ad:0c:2d:5e:fd:65:f9: 9b:93:d2:f7:34:0e:14:2c:c6:f3:d2:4a:ae:73:11:69:5a:e4: 35:cc:71:7a:e8:84:50:5c:dd:91:ab:bc:0e:0a:27:99:28:15: de:da:0e:39:a4:62:7b:f0:5d:c6:69:25:0a:8f:d5:89:1d:b0: 65:9e:6f:49:68:77:aa:a3:24:91:74:ea:8a:bd:17:38:df:7a: 30:94:c3:dd:55:9e:d0:f7:0a:dd:e0:e4:e9:e0:50:1e:d3:57: 6d:5f:4e:de:41:71:58:1b:e8:5c:c7:65:dc:5b:ba:62:5d:1a: 83:e3:5f:74:65:4d:f6:86:53:35:d3:3b:6d:ea:a8:d2:f2:01: fb:55:81:4d:b1:ba:02:d1:81:d9:69:34:53:04:48:e2:b4:f6: 89:0b:d4:43:15:76:77:68:7e:8c:fd:bc:ea:30:31:ed:a7:8f: b2:c4:aa:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCtUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkwQjQxMTAvBgNVBAUTKEE1RTY5REEzQkJGQjhFNUREMzk2NDhFNkE0M0UwMEZB NzIzREU2NTgwHhcNMjUwODIyMTkzNjE2WhcNMjUwODI5MTkzNjE2WjAYMRYwFAYD VQQDEw02OGE4YzZiMS04NTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0tm+wVofaFUgH3qmOx5tSr8M/M2q9ns9qCZHPkRWLC+Kn4TKzw4fwrbuHZVT ePemepmTnKrJmMLzYswKdhjyfuD2hgGhYyEakJ30V4NgmE7qRusHYyS4OVl1+nem 06gRkb1agY4X108ZBiTpnnBS/idkFAyEILxKrhMS9P7mBIrfNwXVh7BHt2/+SrOW iq6LR1EDSUNyBV8V+oXYKgIOZHOEJkBLJMKpWLhO4tvToO3TsVi3ANRzVYldAAwP Itf304Dup1jIuSVejMh9JzK3ojWEZXUos3m7rQt1/E+w1fiW4VETOBF63VuE3o6f uEsdfa0P3nikBJEbSddQWT7DYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKeG3LJF /jAVJ3UrK0GSTTdqK0bjMB8GA1UdIwQYMBaAFKXmnaO7+45d05ZI5qQ+APpyPeZY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTBCNC9CQzhDMTBBRTU3 M0MxMUVBQjBBNEUzMzVDNEY5QUUwMi9wZWFkbzd2N2psM1Rsa2ptcEQ0QS1uSTk1 bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BlYWRvN3Y3amwzVGxram1wRDRBLW5JOTVsZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTBCNC9CQzhDMTBBRTU3M0MxMUVBQjBBNEUzMzVDNEY5QUUwMi9wZWFkbzd2N2ps M1Rsa2ptcEQ0QS1uSTk1bGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCYO4dmXMf7E3sXOytreDYbzhGM8DNmcgZ0dlTeREmk0UVd12z68bc RpH+1/2HqagetSntwlyvvgHUpNiND3fPWpD3/ix4XQ9R4YeGghEGUkTK6K0MLV79 Zfmbk9L3NA4ULMbz0kqucxFpWuQ1zHF66IRQXN2Rq7wOCieZKBXe2g45pGJ78F3G aSUKj9WJHbBlnm9JaHeqoySRdOqKvRc433owlMPdVZ7Q9wrd4OTp4FAe01dtX07e QXFYG+hcx2XcW7piXRqD4190ZU32hlM10ztt6qjS8gH7VYFNsboC0YHZaTRTBEji tPaJC9RDFXZ3aH6M/bzqMDHtp4+yxKr9 -----END CERTIFICATE-----Generated at Sun Aug 24 01:00:27 2025 by rpki-client