$ rpki-client -vvf rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft File: aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft (raw, json) Hash identifier: 7A6Z7WUaqVflFtGhQuVXQ19AbP1LABZXY3coIHBiRtg= Subject key identifier: 10:5B:5F:90:10:A1:A6:DD:6A:9F:16:97:0A:C1:C7:60:FF:6E:64:40 Authority key identifier: 68:14:0C:15:82:5E:D5:0A:03:78:10:52:AD:DE:2E:CA:1A:6F:EA:3A Certificate issuer: /CN=A91289A2/serialNumber=68140C15825ED50A03781052ADDE2ECA1A6FEA3A Certificate serial: 03F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBQMFYJe1QoDeBBSrd4uyhpv6jo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft Manifest number: 03F2 Signing time: Sat 23 Aug 2025 00:45:59 +0000 Manifest this update: Sat 23 Aug 2025 00:45:59 +0000 Manifest next update: Sat 30 Aug 2025 00:45:59 +0000 Files and hashes: 1: aBQMFYJe1QoDeBBSrd4uyhpv6jo.crl (hash: 4KUTDMxGLACOK96FSWj35mHs3xCDX/Zxue+qLSL0hYc=) 2: 97E8ACD68E6611EC9EBE626FC4F9AE02.roa (hash: 3IMIlDIIJ2OW6DDbM2+fc2GlxtLv0j04UxGtHanf/68=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.crl rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBQMFYJe1QoDeBBSrd4uyhpv6jo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:45:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1017 (0x3f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91289A2, serialNumber=68140C15825ED50A03781052ADDE2ECA1A6FEA3A Validity Not Before: Aug 23 00:45:59 2025 GMT Not After : Aug 30 00:45:59 2025 GMT Subject: CN=68a90f47-5037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:25:b2:a9:50:6d:31:39:6c:33:b6:38:db:24: cf:f9:88:53:72:15:2d:17:b8:48:92:32:89:18:d0: d7:08:94:34:37:c2:ee:8e:06:cd:b3:b4:ee:8a:df: ed:91:3c:d3:b8:91:4b:45:87:8c:a6:a4:ad:1e:46: 01:48:eb:f4:67:f1:c2:b8:1d:c7:f8:a5:91:76:37: ce:ef:c9:53:35:47:94:6d:72:75:08:80:94:06:04: 5a:1f:10:91:94:97:9a:90:cd:76:1c:e8:b3:df:6b: e8:0a:c3:d9:69:d7:31:06:bc:14:e5:4e:58:03:c2: fc:94:79:47:bc:c7:40:87:ad:cc:8a:e7:8a:cb:76: 5d:d6:6d:46:dc:95:01:1c:dc:09:b9:af:8b:dd:85: 91:04:b4:a3:24:55:ef:02:36:16:0c:20:eb:74:7c: 25:93:4f:45:5b:86:b5:65:2f:53:83:d1:85:12:bf: 86:11:20:04:b9:e6:db:1d:00:38:36:41:00:c6:1b: d9:1f:d2:20:0c:d0:d0:75:cf:0d:a4:ed:b9:37:69: 4c:c7:54:7b:fb:23:1e:b4:23:ee:46:5b:1e:ea:e1: 50:73:fa:b5:f3:97:0a:e5:6d:7e:c4:5a:3d:e3:d1: d5:d6:be:d2:3a:cd:f3:ed:49:24:f7:3f:08:4d:43: 1c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:5B:5F:90:10:A1:A6:DD:6A:9F:16:97:0A:C1:C7:60:FF:6E:64:40 X509v3 Authority Key Identifier: keyid:68:14:0C:15:82:5E:D5:0A:03:78:10:52:AD:DE:2E:CA:1A:6F:EA:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBQMFYJe1QoDeBBSrd4uyhpv6jo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:0a:91:dc:ac:2c:95:13:a9:f7:2f:1d:5d:72:56:3f:8f:75: fc:8a:8b:21:70:5b:5b:cd:91:df:30:00:d1:25:be:ea:5c:8b: b9:3d:c6:de:50:07:5b:d6:16:4c:ad:79:c4:14:77:37:ab:fe: 32:f4:70:0a:5a:a3:aa:e2:d1:6d:cf:35:34:b6:2f:10:b6:78: 67:3c:07:67:a8:14:bc:71:d8:4e:79:2c:c5:16:d0:a4:20:43: 53:ca:d2:2e:0b:12:7d:e1:b9:83:d4:16:06:c3:cb:87:52:13: 27:1d:5c:31:e2:a3:54:74:0e:29:70:59:5b:7b:a4:13:fd:84: 5d:cd:ac:0f:0e:65:18:cd:06:8b:f7:7c:1b:6c:dd:65:9f:06: 5e:6f:57:c0:48:15:f4:f2:f6:f9:c7:e6:bf:12:da:f7:69:17: 5c:80:a2:bd:8e:f0:bd:df:c3:4c:84:2d:21:d2:3d:a8:f4:03: 4a:6b:cf:4e:4f:fc:17:de:02:38:e7:ea:ea:8e:9b:c5:7a:bb: a3:aa:83:04:3b:67:ce:ab:e5:e0:f5:9a:41:fa:8c:46:5f:39: ad:02:34:60:29:c8:25:b4:1a:8d:06:47:76:c9:1e:05:9b:4e: 13:43:e0:87:81:df:ef:66:81:54:3d:b1:ea:15:43:47:9c:57: fc:a2:a9:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg5QTIxMTAvBgNVBAUTKDY4MTQwQzE1ODI1RUQ1MEEwMzc4MTA1MkFEREUyRUNB MUE2RkVBM0EwHhcNMjUwODIzMDA0NTU5WhcNMjUwODMwMDA0NTU5WjAYMRYwFAYD VQQDEw02OGE5MGY0Ny01MDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtiWyqVBtMTlsM7Y42yTP+YhTchUtF7hIkjKJGNDXCJQ0N8LujgbNs7Tuit/t kTzTuJFLRYeMpqStHkYBSOv0Z/HCuB3H+KWRdjfO78lTNUeUbXJ1CICUBgRaHxCR lJeakM12HOiz32voCsPZadcxBrwU5U5YA8L8lHlHvMdAh63MiueKy3Zd1m1G3JUB HNwJua+L3YWRBLSjJFXvAjYWDCDrdHwlk09FW4a1ZS9Tg9GFEr+GESAEuebbHQA4 NkEAxhvZH9IgDNDQdc8NpO25N2lMx1R7+yMetCPuRlse6uFQc/q185cK5W1+xFo9 49HV1r7SOs3z7Ukk9z8ITUMcvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBBbX5AQ oabdap8WlwrBx2D/bmRAMB8GA1UdIwQYMBaAFGgUDBWCXtUKA3gQUq3eLsoab+o6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODlBMi9GQjUyRjY0RThF NjMxMUVDOUUwMTVENkRDNEY5QUUwMi9hQlFNRllKZTFRb0RlQkJTcmQ0dXlocHY2 am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FCUU1GWUplMVFvRGVCQlNyZDR1eWhwdjZqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODlBMi9GQjUyRjY0RThFNjMxMUVDOUUwMTVENkRDNEY5QUUwMi9hQlFNRllKZTFR b0RlQkJTcmQ0dXlocHY2am8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWCpHcrCyVE6n3Lx1dclY/j3X8ioshcFtbzZHfMADRJb7qXIu5Pcbe UAdb1hZMrXnEFHc3q/4y9HAKWqOq4tFtzzU0ti8QtnhnPAdnqBS8cdhOeSzFFtCk IENTytIuCxJ94bmD1BYGw8uHUhMnHVwx4qNUdA4pcFlbe6QT/YRdzawPDmUYzQaL 93wbbN1lnwZeb1fASBX08vb5x+a/Etr3aRdcgKK9jvC938NMhC0h0j2o9ANKa89O T/wX3gI45+rqjpvFerujqoMEO2fOq+Xg9ZpB+oxGXzmtAjRgKcgltBqNBkd2yR4F m04TQ+CHgd/vZoFUPbHqFUNHnFf8oqmY -----END CERTIFICATE-----Generated at Sat Aug 23 19:28:36 2025 by rpki-client