$ rpki-client -vvf rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft File: AQtAe3X24zjzr7WajWJxXDwC7PQ.mft (raw, json) Hash identifier: abJDdw1yF2BJHwYU9/13C+H67cMIh0/wmobaspJAEb4= Subject key identifier: 86:AB:5C:1E:F3:31:DF:22:35:A0:8F:C2:DF:E3:C7:7C:1A:59:97:BF Authority key identifier: 01:0B:40:7B:75:F6:E3:38:F3:AF:B5:9A:8D:62:71:5C:3C:02:EC:F4 Certificate issuer: /CN=A9132EC7/serialNumber=010B407B75F6E338F3AFB59A8D62715C3C02ECF4 Certificate serial: 16FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQtAe3X24zjzr7WajWJxXDwC7PQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft Manifest number: 16EB Signing time: Fri 22 Aug 2025 16:45:57 +0000 Manifest this update: Fri 22 Aug 2025 16:45:56 +0000 Manifest next update: Fri 29 Aug 2025 16:45:56 +0000 Files and hashes: 1: AQtAe3X24zjzr7WajWJxXDwC7PQ.crl (hash: D1FULGI6JRxsf+Mm2wWzO9DZEGXx0gvwDDitkrcO0qM=) 2: 0D4F5906FA7911E7B85F4E7EC4F9AE02.roa (hash: 822Cv07i81nzITiBp8oPidqObRAFnQ5Dsa+D8sFZUvo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.crl rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQtAe3X24zjzr7WajWJxXDwC7PQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:45:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5886 (0x16fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132EC7, serialNumber=010B407B75F6E338F3AFB59A8D62715C3C02ECF4 Validity Not Before: Aug 22 16:45:56 2025 GMT Not After : Aug 29 16:45:56 2025 GMT Subject: CN=68a89ec4-4f47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ef:a7:86:25:dc:a8:0e:dd:3f:3d:aa:c3:c2: 73:44:e7:1c:37:cc:98:2e:12:00:df:53:e0:5e:a2: 23:45:93:69:a4:66:fa:5b:4d:b6:bd:24:89:30:b7: 74:9a:a9:dd:d6:35:a9:f3:1b:aa:48:5e:fc:ff:3c: b8:e4:c4:e9:aa:97:3d:c4:f0:fe:96:d3:54:ec:96: 95:a2:0c:84:8a:da:47:2e:58:28:54:9e:2e:5d:72: f0:b1:35:63:23:d1:5f:79:a2:43:67:f6:8c:29:56: 4c:cc:8f:19:ab:83:ea:e5:25:8a:e6:37:32:04:26: c4:71:cc:26:d7:c4:bd:13:d6:62:e6:f2:a7:3b:ac: d6:fc:6f:f5:fe:99:92:04:4e:1c:22:33:c4:c0:30: d3:04:ef:57:67:21:c2:f8:21:2a:ed:a1:7a:4e:25: 50:af:2c:6f:31:95:37:f4:83:a4:36:a6:d4:49:ed: da:29:7a:38:7d:5e:8d:43:c2:4d:1f:f8:a1:40:71: c9:22:46:cc:9c:34:d5:21:d1:7f:0a:1b:95:68:45: 11:d3:42:96:55:07:a0:a0:22:05:a6:9d:c5:7a:9d: 6d:85:a5:91:f6:48:66:2f:ab:53:08:de:23:5b:d7: 71:50:aa:2d:31:c5:d9:01:ea:cf:0d:bc:1f:10:a3: 59:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:AB:5C:1E:F3:31:DF:22:35:A0:8F:C2:DF:E3:C7:7C:1A:59:97:BF X509v3 Authority Key Identifier: keyid:01:0B:40:7B:75:F6:E3:38:F3:AF:B5:9A:8D:62:71:5C:3C:02:EC:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQtAe3X24zjzr7WajWJxXDwC7PQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:bb:a0:a7:2d:76:b6:0e:30:6d:b2:54:06:83:fd:4e:39:bd: 75:3f:10:54:3d:73:67:a7:a3:66:b6:79:a3:ae:c9:bf:5a:53: e8:e6:28:ea:cd:ff:3f:a5:84:4e:30:c5:2c:ac:3a:7c:5c:63: f1:9b:64:47:2e:7e:44:b1:8a:c5:4c:d8:25:eb:78:ba:57:67: 31:33:b9:6d:70:47:e1:a2:ce:0d:c4:60:f5:1e:8a:27:a2:4d: 81:0d:87:79:73:bd:88:ad:70:be:1b:5b:76:e6:b9:8e:c5:b9: 7b:e1:c1:d6:ed:62:cd:15:1b:35:42:96:1b:a1:49:f9:8e:d3: 1d:0b:08:c2:96:84:d4:f7:fc:3e:c4:8c:cb:03:53:55:e8:df: 40:b0:f0:38:4d:b1:19:0a:35:53:96:0a:c9:69:e7:71:c2:6b: 2f:39:d1:f5:2d:40:d7:8a:c2:5b:dc:8e:43:27:34:ff:fb:6e: e7:4a:b7:54:62:f8:20:00:fd:c1:ba:57:c8:f2:bb:0f:d3:64: 95:53:04:79:b8:75:11:a3:f2:fb:54:b5:66:1b:71:b0:30:43: da:c3:eb:64:a8:7c:f0:fe:89:db:39:f1:90:f0:2d:78:d6:19: f1:ea:93:d1:8c:32:eb:44:51:62:f4:b9:4a:ac:26:77:45:aa: b5:0b:5f:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFv4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJFQzcxMTAvBgNVBAUTKDAxMEI0MDdCNzVGNkUzMzhGM0FGQjU5QThENjI3MTVD M0MwMkVDRjQwHhcNMjUwODIyMTY0NTU2WhcNMjUwODI5MTY0NTU2WjAYMRYwFAYD VQQDEw02OGE4OWVjNC00ZjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAte+nhiXcqA7dPz2qw8JzROccN8yYLhIA31PgXqIjRZNppGb6W022vSSJMLd0 mqnd1jWp8xuqSF78/zy45MTpqpc9xPD+ltNU7JaVogyEitpHLlgoVJ4uXXLwsTVj I9FfeaJDZ/aMKVZMzI8Zq4Pq5SWK5jcyBCbEccwm18S9E9Zi5vKnO6zW/G/1/pmS BE4cIjPEwDDTBO9XZyHC+CEq7aF6TiVQryxvMZU39IOkNqbUSe3aKXo4fV6NQ8JN H/ihQHHJIkbMnDTVIdF/ChuVaEUR00KWVQegoCIFpp3Fep1thaWR9khmL6tTCN4j W9dxUKotMcXZAerPDbwfEKNZ5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIarXB7z Md8iNaCPwt/jx3waWZe/MB8GA1UdIwQYMBaAFAELQHt19uM486+1mo1icVw8Auz0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkVDNy8yOTM0NzI2QUZB NzgxMUU3OUNCNjA4N0RDNEY5QUUwMi9BUXRBZTNYMjR6anpyN1dhaldKeFhEd0M3 UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FRdEFlM1gyNHpqenI3V2FqV0p4WER3QzdQUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkVDNy8yOTM0NzI2QUZBNzgxMUU3OUNCNjA4N0RDNEY5QUUwMi9BUXRBZTNYMjR6 anpyN1dhaldKeFhEd0M3UFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3u6CnLXa2DjBtslQGg/1OOb11PxBUPXNnp6Nmtnmjrsm/WlPo5ijq zf8/pYROMMUsrDp8XGPxm2RHLn5EsYrFTNgl63i6V2cxM7ltcEfhos4NxGD1Hoon ok2BDYd5c72IrXC+G1t25rmOxbl74cHW7WLNFRs1QpYboUn5jtMdCwjCloTU9/w+ xIzLA1NV6N9AsPA4TbEZCjVTlgrJaedxwmsvOdH1LUDXisJb3I5DJzT/+27nSrdU YvggAP3BulfI8rsP02SVUwR5uHURo/L7VLVmG3GwMEPaw+tkqHzw/onbOfGQ8C14 1hnx6pPRjDLrRFFi9LlKrCZ3Raq1C1/r -----END CERTIFICATE-----Generated at Sun Aug 24 00:20:59 2025 by rpki-client