$ rpki-client -vvf rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft File: A2exVIJlFyUqY-y0w4aTXLe9NA4.mft (raw, json) Hash identifier: Vbg2FCX86o8d3E/KfQMeSefUvw/2wrv1C7VE9dMkFmc= Subject key identifier: 53:8D:8A:EA:32:13:68:66:1C:A5:E0:D0:FD:BE:41:10:97:97:D2:D1 Authority key identifier: 03:67:B1:54:82:65:17:25:2A:63:EC:B4:C3:86:93:5C:B7:BD:34:0E Certificate issuer: /CN=A913CA90/serialNumber=0367B154826517252A63ECB4C386935CB7BD340E Certificate serial: 0483 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft Manifest number: 047F Signing time: Sat 23 Aug 2025 00:17:15 +0000 Manifest this update: Sat 23 Aug 2025 00:17:15 +0000 Manifest next update: Sat 30 Aug 2025 00:17:15 +0000 Files and hashes: 1: A2exVIJlFyUqY-y0w4aTXLe9NA4.crl (hash: 8Ymf9JIRcIpKM5ykpLaWgBNIWSMODJl6qfcfu6XgKEA=) 2: 683A9D3A52EF11EC83A5744EC4F9AE02.roa (hash: keS/qF291Tz7YIPilf3yxYGs5lMrsj9UecsgrxwbjY0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.crl rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:17:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1155 (0x483) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CA90, serialNumber=0367B154826517252A63ECB4C386935CB7BD340E Validity Not Before: Aug 23 00:17:15 2025 GMT Not After : Aug 30 00:17:15 2025 GMT Subject: CN=68a9088b-ddf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:27:29:6b:4f:2a:24:15:98:d3:86:3e:70:76: c5:9d:58:b2:32:5b:54:c2:95:91:c4:ec:96:fc:44: 13:3f:7e:f6:9e:d3:2c:f5:e1:4b:a7:f2:0d:11:7b: 1e:41:6e:86:73:b7:fc:a6:47:9d:ce:40:fe:43:be: 42:13:9d:72:a8:77:6d:12:72:b1:7a:3b:69:95:d9: e8:67:05:b0:c6:b7:9a:4f:c1:c3:5a:70:6d:93:d5: 76:76:73:e2:f8:e3:cc:ad:5b:f2:ba:de:ed:a3:32: 00:50:5b:27:c4:43:e5:00:1a:f6:e3:85:4d:bc:ed: 60:f1:d4:13:83:52:ef:19:89:6a:bd:59:08:31:41: 8f:e6:18:df:48:6a:d2:c4:72:ea:1d:f6:39:85:16: d6:eb:a6:40:59:d6:39:e8:ee:ec:5e:a1:14:02:a6: b3:72:ed:5d:03:b1:d6:08:5b:d1:a3:cf:71:ca:48: ea:7d:2d:bf:cd:17:13:57:12:92:02:84:34:8d:f5: 2d:59:1f:69:7d:1c:13:c8:9a:d1:de:59:7f:39:e5: ca:ec:87:ff:19:58:b2:9a:18:01:73:88:65:12:89: 83:6c:47:ae:5b:41:7b:d0:d4:d8:12:a0:b1:a4:6b: 6f:3a:54:0b:3d:d4:f2:18:2c:e3:b2:3e:b5:9b:7b: bc:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:8D:8A:EA:32:13:68:66:1C:A5:E0:D0:FD:BE:41:10:97:97:D2:D1 X509v3 Authority Key Identifier: keyid:03:67:B1:54:82:65:17:25:2A:63:EC:B4:C3:86:93:5C:B7:BD:34:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:01:bb:41:d2:a7:59:0a:f3:3b:87:68:1a:07:3f:62:ed:0f: 88:19:ac:14:87:4f:27:8f:82:9a:9c:8e:cf:00:ac:f8:37:f2: bd:5e:22:50:e4:06:ae:7e:60:fe:33:c5:7a:ee:a5:3a:20:98: 90:b8:40:50:c9:01:7d:4f:65:a2:03:1a:f1:f6:74:aa:7c:ac: 50:cf:a7:6e:ac:ad:31:4f:05:bc:90:34:2b:95:04:05:90:d7: 33:85:ff:0e:aa:c9:14:c3:97:59:29:19:e7:e9:59:fe:ee:12: a5:2f:47:c8:c5:da:78:e4:38:8d:47:c2:bd:52:c2:b4:48:60: 5e:95:dd:fd:b1:7a:b9:97:d7:6f:dd:5e:b6:cc:b1:d0:da:8e: b4:40:d4:3f:04:43:e1:a2:fd:67:59:99:22:b3:e5:8f:7a:b3: f4:58:f1:e2:1e:44:88:a6:22:92:d3:87:cc:8a:ce:5b:70:ab: 30:20:b7:18:cd:24:5f:29:0f:df:85:38:51:9c:3a:17:46:7d: f5:fd:0b:62:67:c7:ca:cb:ae:7c:cf:4c:dd:e7:d8:1e:7c:c1: 15:91:f6:9b:44:94:9c:d4:24:83:cd:88:00:d6:10:2a:83:30: 4a:65:cb:68:83:aa:88:e3:9d:a9:01:fb:b5:30:6a:f0:75:c2: 29:46:cf:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NBOTAxMTAvBgNVBAUTKDAzNjdCMTU0ODI2NTE3MjUyQTYzRUNCNEMzODY5MzVD QjdCRDM0MEUwHhcNMjUwODIzMDAxNzE1WhcNMjUwODMwMDAxNzE1WjAYMRYwFAYD VQQDEw02OGE5MDg4Yi1kZGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyCcpa08qJBWY04Y+cHbFnViyMltUwpWRxOyW/EQTP372ntMs9eFLp/INEXse QW6Gc7f8pkedzkD+Q75CE51yqHdtEnKxejtpldnoZwWwxreaT8HDWnBtk9V2dnPi +OPMrVvyut7tozIAUFsnxEPlABr244VNvO1g8dQTg1LvGYlqvVkIMUGP5hjfSGrS xHLqHfY5hRbW66ZAWdY56O7sXqEUAqazcu1dA7HWCFvRo89xykjqfS2/zRcTVxKS AoQ0jfUtWR9pfRwTyJrR3ll/OeXK7If/GViymhgBc4hlEomDbEeuW0F70NTYEqCx pGtvOlQLPdTyGCzjsj61m3u8WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFONiuoy E2hmHKXg0P2+QRCXl9LRMB8GA1UdIwQYMBaAFANnsVSCZRclKmPstMOGk1y3vTQO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0E5MC8yNUUzQkJCNDUy RUIxMUVDODk2OUU3NDRDNEY5QUUwMi9BMmV4VklKbEZ5VXFZLXkwdzRhVFhMZTlO QTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EyZXhWSUpsRnlVcVkteTB3NGFUWExlOU5BNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0E5MC8yNUUzQkJCNDUyRUIxMUVDODk2OUU3NDRDNEY5QUUwMi9BMmV4VklKbEZ5 VXFZLXkwdzRhVFhMZTlOQTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGAbtB0qdZCvM7h2gaBz9i7Q+IGawUh08nj4KanI7PAKz4N/K9XiJQ 5AaufmD+M8V67qU6IJiQuEBQyQF9T2WiAxrx9nSqfKxQz6durK0xTwW8kDQrlQQF kNczhf8OqskUw5dZKRnn6Vn+7hKlL0fIxdp45DiNR8K9UsK0SGBeld39sXq5l9dv 3V62zLHQ2o60QNQ/BEPhov1nWZkis+WPerP0WPHiHkSIpiKS04fMis5bcKswILcY zSRfKQ/fhThRnDoXRn31/QtiZ8fKy658z0zd59gefMEVkfabRJSc1CSDzYgA1hAq gzBKZctog6qI452pAfu1MGrwdcIpRs+1 -----END CERTIFICATE-----Generated at Sun Aug 24 07:02:27 2025 by rpki-client