$ rpki-client -vvf rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft File: aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft (raw, json) Hash identifier: SPeshXO8Kw2hb7MzbP2qcZbOGDJPO27+5Zfqka+cEf8= Subject key identifier: 59:FC:8F:78:21:87:BA:AB:6C:33:F6:4C:ED:63:D4:C0:5F:75:8A:AA Authority key identifier: 69:9E:67:42:56:7B:E7:32:9C:C3:A7:86:DE:B7:85:7E:2C:24:20:F9 Certificate issuer: /CN=A9119333/serialNumber=699E6742567BE7329CC3A786DEB7857E2C2420F9 Certificate serial: 22E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft Manifest number: 22A3 Signing time: Fri 22 Aug 2025 15:54:37 +0000 Manifest this update: Fri 22 Aug 2025 15:54:36 +0000 Manifest next update: Fri 29 Aug 2025 15:54:36 +0000 Files and hashes: 1: aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl (hash: MqsFX2MrtHWOE+yxaaEeeMm2nOVxfbeQGyaQB/FYehw=) 2: 443C3AF2D3F611EFB03C5C14C4F9AE02.roa (hash: QalrWEPHK1c0+wAh4Y9v/QxVAuOH9u4KL51JrDmBQPs=) 3: DD73806ED3C811EF9D76942FC4F9AE02.roa (hash: yV/SjGOrZoU6XjMAo/QC3pR5jQlSni/vmLDt0r4ftkA=) 4: 1AC9199AD3CB11EF84052053C4F9AE02.roa (hash: 3g8CG6eXI2y/sKSche4ErWaN1/woBDrqwhgjSA2yZ4o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:54:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8934 (0x22e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119333, serialNumber=699E6742567BE7329CC3A786DEB7857E2C2420F9 Validity Not Before: Aug 22 15:54:36 2025 GMT Not After : Aug 29 15:54:36 2025 GMT Subject: CN=68a892bc-2bdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:15:da:99:11:e0:a9:2e:0d:38:4d:06:09:3a: af:60:da:d7:03:41:83:e7:2f:8f:42:be:9f:ea:39: 47:c3:83:bd:18:8e:07:96:86:d2:aa:c5:c4:c0:37: 5a:52:80:40:14:6a:e0:6a:11:44:bf:46:77:63:13: 73:2b:a5:1b:d8:ec:98:12:21:3e:16:8f:04:2c:d5: 18:1a:16:1f:f8:b4:5b:23:85:01:48:36:29:10:62: 0a:84:74:a3:ec:f4:ba:a5:5e:7b:c6:98:95:6d:70: cf:37:12:4d:bf:77:b8:bf:65:40:47:8e:40:60:8b: a3:27:f0:a2:70:0d:25:43:92:99:c3:67:66:8c:11: ea:a2:94:60:01:5d:31:98:69:ba:2c:bd:31:08:2e: de:8c:cf:21:46:62:a0:e3:5d:90:d1:be:05:04:cb: fe:61:73:e8:97:dd:f1:9a:88:a4:09:44:9c:b9:79: 9b:a2:96:59:18:86:72:19:c1:0a:74:b5:99:d7:d3: c8:6b:3a:02:fe:cc:46:b1:62:ff:e5:66:6b:47:c5: c5:73:3e:4b:3d:23:c7:09:a8:98:53:5c:ff:15:cd: 4d:62:3f:23:8b:e4:bf:a6:b7:0e:da:a4:62:0e:d7: 00:15:77:40:3d:b1:0a:21:86:f8:bd:56:1f:42:bc: d6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:FC:8F:78:21:87:BA:AB:6C:33:F6:4C:ED:63:D4:C0:5F:75:8A:AA X509v3 Authority Key Identifier: keyid:69:9E:67:42:56:7B:E7:32:9C:C3:A7:86:DE:B7:85:7E:2C:24:20:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:4b:3e:11:52:45:09:10:fa:f9:74:6e:76:14:2b:37:d0:b0: ce:ed:3c:91:99:e9:1c:3c:03:df:93:bd:59:78:a1:c0:42:cd: 47:75:b7:f1:a6:8b:8e:15:6a:b9:c8:36:c8:6f:34:a9:7c:cd: 66:52:84:d5:d3:bb:a5:e3:9d:62:a4:82:ec:1b:1b:dd:28:7f: 85:a6:98:4e:ca:86:4b:8b:4d:7a:8d:1a:16:01:71:23:ab:dd: bd:07:44:28:82:0b:e9:e4:b2:af:6b:04:1f:67:4d:46:f1:b3: b6:96:d6:0b:71:05:f3:c2:7b:af:4c:24:26:25:ef:c8:7b:1b: 43:2a:f6:02:6f:18:eb:e0:67:d3:c9:07:ec:db:35:06:01:07: 8c:3c:c0:7f:e2:c3:34:aa:c9:46:09:0c:f7:bd:bf:8f:cb:4e: f3:37:90:39:7b:7c:65:84:3f:7c:c1:98:cb:da:a3:1d:d2:a3: cf:bd:46:16:6f:18:0d:42:ec:ba:95:a4:2a:17:44:89:ee:f3: 22:e8:09:de:1c:da:9c:69:8a:76:72:c6:0b:d7:f2:17:6c:6f: ab:9e:f7:07:43:a9:98:fb:24:5f:cd:99:2a:43:81:47:a6:2f: ce:98:bd:1d:cb:86:61:ef:74:94:07:94:9f:79:92:be:d4:d9: fb:af:6e:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIuYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkzMzMxMTAvBgNVBAUTKDY5OUU2NzQyNTY3QkU3MzI5Q0MzQTc4NkRFQjc4NTdF MkMyNDIwRjkwHhcNMjUwODIyMTU1NDM2WhcNMjUwODI5MTU1NDM2WjAYMRYwFAYD VQQDEw02OGE4OTJiYy0yYmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArxXamRHgqS4NOE0GCTqvYNrXA0GD5y+PQr6f6jlHw4O9GI4HlobSqsXEwDda UoBAFGrgahFEv0Z3YxNzK6Ub2OyYEiE+Fo8ELNUYGhYf+LRbI4UBSDYpEGIKhHSj 7PS6pV57xpiVbXDPNxJNv3e4v2VAR45AYIujJ/CicA0lQ5KZw2dmjBHqopRgAV0x mGm6LL0xCC7ejM8hRmKg412Q0b4FBMv+YXPol93xmoikCUScuXmbopZZGIZyGcEK dLWZ19PIazoC/sxGsWL/5WZrR8XFcz5LPSPHCaiYU1z/Fc1NYj8ji+S/prcO2qRi DtcAFXdAPbEKIYb4vVYfQrzW1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFn8j3gh h7qrbDP2TO1j1MBfdYqqMB8GA1UdIwQYMBaAFGmeZ0JWe+cynMOnht63hX4sJCD5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTMzMy8wNjVEQTNCQUI4 NDQxMUU1QjUzNTdCMkZDNEY5QUUwMi9hWjVuUWxaNzV6S2N3NmVHM3JlRmZpd2tJ UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FaNW5RbFo3NXpLY3c2ZUczcmVGZml3a0lQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTMzMy8wNjVEQTNCQUI4NDQxMUU1QjUzNTdCMkZDNEY5QUUwMi9hWjVuUWxaNzV6 S2N3NmVHM3JlRmZpd2tJUGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDSz4RUkUJEPr5dG52FCs30LDO7TyRmekcPAPfk71ZeKHAQs1Hdbfx pouOFWq5yDbIbzSpfM1mUoTV07ul451ipILsGxvdKH+FpphOyoZLi016jRoWAXEj q929B0Qoggvp5LKvawQfZ01G8bO2ltYLcQXzwnuvTCQmJe/IextDKvYCbxjr4GfT yQfs2zUGAQeMPMB/4sM0qslGCQz3vb+Py07zN5A5e3xlhD98wZjL2qMd0qPPvUYW bxgNQuy6laQqF0SJ7vMi6AneHNqcaYp2csYL1/IXbG+rnvcHQ6mY+yRfzZkqQ4FH pi/OmL0dy4Zh73SUB5SfeZK+1Nn7r27x -----END CERTIFICATE-----Generated at Sat Aug 23 16:30:46 2025 by rpki-client