$ rpki-client -vvf rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.mft File: AEu7wBxXH6cPIOpEBQBX2dyeutI.mft (raw, json) Hash identifier: Jyk+vLc65LABxjCuu1TRVt6dcNX2pG3y7O2JfiX0ncE= Subject key identifier: AF:85:1A:A7:40:6A:E7:F0:6F:57:C1:39:18:27:B4:DE:AE:06:60:43 Authority key identifier: 00:4B:BB:C0:1C:57:1F:A7:0F:20:EA:44:05:00:57:D9:DC:9E:BA:D2 Certificate issuer: /CN=A91326B3/serialNumber=004BBBC01C571FA70F20EA44050057D9DC9EBAD2 Certificate serial: 010D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEu7wBxXH6cPIOpEBQBX2dyeutI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.mft Manifest number: 010B Signing time: Sat 23 Aug 2025 05:08:10 +0000 Manifest this update: Sat 23 Aug 2025 05:08:10 +0000 Manifest next update: Sat 30 Aug 2025 05:08:10 +0000 Files and hashes: 1: AEu7wBxXH6cPIOpEBQBX2dyeutI.crl (hash: Etx9fGr5TwghXhI1vHSGdhDm0i6j5cD97bSDA4QQTBg=) 2: C4BA1CE6E69211EE99E71B6AC4F9AE02.roa (hash: y3j/TCNZc4+9GUOHxfPGcXJYdNwoHrgSAKMjnwhnAHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.crl rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEu7wBxXH6cPIOpEBQBX2dyeutI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:08:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 269 (0x10d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91326B3, serialNumber=004BBBC01C571FA70F20EA44050057D9DC9EBAD2 Validity Not Before: Aug 23 05:08:10 2025 GMT Not After : Aug 30 05:08:10 2025 GMT Subject: CN=68a94cba-f60e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:cf:03:2e:ee:b9:c6:cc:ea:9d:8a:1e:f2:03: df:22:9c:98:b3:0e:99:a7:95:8b:c2:ce:00:97:18: 5f:03:ff:43:b8:78:3a:24:9a:3d:01:fa:35:0d:31: 82:e1:3d:43:4f:c2:3a:46:09:69:21:51:2f:b8:1d: d1:45:72:5d:7c:1f:a6:bb:f0:13:63:3c:e6:1e:48: 86:72:80:f0:1c:62:00:cd:2f:19:fd:ad:be:40:67: 9a:b8:3c:37:6a:88:35:2a:a8:d7:e8:f5:9e:ae:a5: a4:74:1f:8a:fc:4c:10:c5:11:a7:16:cb:19:d6:a7: 65:94:44:ae:89:57:c2:b3:9c:1c:4c:2f:02:97:d3: c7:84:8e:14:e9:35:64:68:7e:e4:86:f0:25:01:f7: 89:5a:b8:0a:d1:a3:aa:96:6e:96:43:49:20:67:3f: 60:0e:35:05:04:1c:35:38:47:2c:a1:9b:c8:e1:7f: c8:ea:76:a8:78:68:6d:43:ac:5f:99:82:20:a2:5a: a3:46:ac:76:b4:06:22:63:7d:e2:7a:45:4b:d1:8a: 68:74:c1:7d:33:b9:b9:e6:00:b7:00:2a:56:e9:19: cb:53:5f:0a:20:33:05:d2:67:92:db:fe:9f:4e:e8: a3:cf:3e:fa:ca:95:9f:bc:10:ed:23:d6:aa:22:92: 48:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:85:1A:A7:40:6A:E7:F0:6F:57:C1:39:18:27:B4:DE:AE:06:60:43 X509v3 Authority Key Identifier: keyid:00:4B:BB:C0:1C:57:1F:A7:0F:20:EA:44:05:00:57:D9:DC:9E:BA:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEu7wBxXH6cPIOpEBQBX2dyeutI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:7a:3b:0d:8d:75:7f:7c:61:88:26:d4:5d:fb:87:bf:0f:2e: 78:fc:49:03:5f:24:f8:a3:2c:b2:e3:ad:c6:01:50:39:36:1e: 17:6b:2f:1e:6c:c4:ce:38:89:aa:e3:a6:89:7b:3a:e0:95:b0: 95:a1:3e:2a:c4:99:a1:25:0b:f3:01:bf:df:82:41:50:22:81: 2f:57:a6:6e:b5:eb:61:c9:7c:d8:a6:04:2b:bc:9d:a5:41:e6: c8:15:2b:ae:ad:20:e5:e7:ef:4e:ab:c8:78:a6:20:7e:bb:42: a0:a4:e5:d7:74:00:90:b5:9b:bf:7a:dc:6e:c3:22:e7:7f:14: 03:28:8a:46:3c:7c:6c:96:5e:b3:bd:2b:f4:d4:da:6f:8c:51: ca:56:7d:79:39:ea:a5:82:cd:45:9f:fa:e4:d3:e0:6b:7f:fb: 0c:a9:2e:52:69:82:15:48:6c:44:68:f6:cc:3f:43:c7:f6:cc: f1:ce:3a:df:c6:f7:e2:d7:e9:93:68:89:a1:cb:a6:bf:d7:ae: b1:3f:cf:ea:12:27:4e:6d:04:05:db:af:52:ab:36:f5:b3:10: a8:b3:07:13:b0:e5:b9:5c:e3:34:5f:98:68:c8:9d:cc:3b:41: df:c7:81:1d:9c:78:4d:9d:68:8c:77:eb:43:69:b7:98:45:c8: 92:7f:52:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI2QjMxMTAvBgNVBAUTKDAwNEJCQkMwMUM1NzFGQTcwRjIwRUE0NDA1MDA1N0Q5 REM5RUJBRDIwHhcNMjUwODIzMDUwODEwWhcNMjUwODMwMDUwODEwWjAYMRYwFAYD VQQDEw02OGE5NGNiYS1mNjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoM8DLu65xszqnYoe8gPfIpyYsw6Zp5WLws4AlxhfA/9DuHg6JJo9Afo1DTGC 4T1DT8I6RglpIVEvuB3RRXJdfB+mu/ATYzzmHkiGcoDwHGIAzS8Z/a2+QGeauDw3 aog1KqjX6PWerqWkdB+K/EwQxRGnFssZ1qdllESuiVfCs5wcTC8Cl9PHhI4U6TVk aH7khvAlAfeJWrgK0aOqlm6WQ0kgZz9gDjUFBBw1OEcsoZvI4X/I6naoeGhtQ6xf mYIgolqjRqx2tAYiY33iekVL0YpodMF9M7m55gC3ACpW6RnLU18KIDMF0meS2/6f Tuijzz76ypWfvBDtI9aqIpJInQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK+FGqdA aufwb1fBORgntN6uBmBDMB8GA1UdIwQYMBaAFABLu8AcVx+nDyDqRAUAV9ncnrrS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjZCMy9DRTlGMTZGRUU2 OTExMUVFQkYwNTg5MzJDNEY5QUUwMi9BRXU3d0J4WEg2Y1BJT3BFQlFCWDJkeWV1 dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FFdTd3QnhYSDZjUElPcEVCUUJYMmR5ZXV0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjZCMy9DRTlGMTZGRUU2OTExMUVFQkYwNTg5MzJDNEY5QUUwMi9BRXU3d0J4WEg2 Y1BJT3BFQlFCWDJkeWV1dEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAejsNjXV/fGGIJtRd+4e/Dy54/EkDXyT4oyyy463GAVA5Nh4Xay8e bMTOOImq46aJezrglbCVoT4qxJmhJQvzAb/fgkFQIoEvV6ZutethyXzYpgQrvJ2l QebIFSuurSDl5+9Oq8h4piB+u0KgpOXXdACQtZu/etxuwyLnfxQDKIpGPHxsll6z vSv01NpvjFHKVn15Oeqlgs1Fn/rk0+Brf/sMqS5SaYIVSGxEaPbMP0PH9szxzjrf xvfi1+mTaImhy6a/166xP8/qEidObQQF269Sqzb1sxCoswcTsOW5XOM0X5hoyJ3M O0Hfx4EdnHhNnWiMd+tDabeYRciSf1Jd -----END CERTIFICATE-----Generated at Sat Aug 23 18:23:24 2025 by rpki-client