$ rpki-client -vvf rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.mft File: aWYanwY1V84rVDewGIk9fZ_dvtA.mft (raw, json) Hash identifier: O+4Lex2RMB7TmPf71/kLVU8xjoWuv2wuATQ47l7iAKc= Subject key identifier: 2C:79:83:DA:AB:0A:5D:2B:1A:F6:C7:1E:6A:71:35:84:13:33:D5:7E Authority key identifier: 69:66:1A:9F:06:35:57:CE:2B:54:37:B0:18:89:3D:7D:9F:DD:BE:D0 Certificate issuer: /CN=A91431A6/serialNumber=69661A9F063557CE2B5437B018893D7D9FDDBED0 Certificate serial: 0676 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWYanwY1V84rVDewGIk9fZ_dvtA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.mft Manifest number: 066F Signing time: Fri 22 Aug 2025 22:38:43 +0000 Manifest this update: Fri 22 Aug 2025 22:38:42 +0000 Manifest next update: Fri 29 Aug 2025 22:38:42 +0000 Files and hashes: 1: aWYanwY1V84rVDewGIk9fZ_dvtA.crl (hash: tFzseoVeJwvz3du3oMGP0boV2inhcgHwdbF53sPnI0o=) 2: DDCD4C168EC611EBAB7F3476C4F9AE02.roa (hash: vYh53kbQx56u84oKA/xd3ROknCRDM7pHTjRvm9U4uGU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.crl rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWYanwY1V84rVDewGIk9fZ_dvtA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1654 (0x676) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91431A6, serialNumber=69661A9F063557CE2B5437B018893D7D9FDDBED0 Validity Not Before: Aug 22 22:38:42 2025 GMT Not After : Aug 29 22:38:42 2025 GMT Subject: CN=68a8f173-2d42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4d:f7:10:52:14:dc:46:d3:88:26:ef:72:d2: aa:8b:09:13:4a:7e:3a:2f:02:27:95:04:dc:96:37: 68:53:35:69:52:cb:9d:7e:89:cb:2c:68:dd:69:59: c8:91:76:44:70:70:88:e7:e7:ef:8f:e3:90:a8:fa: 6e:c7:4b:6c:43:5d:5c:7a:60:87:a8:68:2b:af:34: c6:f8:21:66:38:52:9a:13:96:5a:3c:0a:06:f2:fb: e9:51:b3:c5:6e:2c:e5:00:f6:b5:33:2f:8c:49:2d: da:59:dd:de:4f:57:75:ec:30:71:51:19:9a:c9:2e: 7f:5d:72:3f:95:51:9a:d4:12:f2:56:60:97:5e:08: 25:5e:e9:e3:47:90:24:58:bd:41:5c:87:a2:8d:56: 0c:c6:14:09:1c:16:fe:64:a3:5a:8a:5d:e5:23:92: a6:e3:8c:79:c2:bf:4e:80:83:64:89:1c:75:f7:9d: 8c:5e:8e:8f:5c:0d:5e:de:b2:70:38:6c:ca:07:2d: 70:96:50:6a:92:08:1a:1e:ee:93:11:21:ea:1e:41: ba:04:e0:f8:03:c3:45:38:51:60:cc:7b:6a:b3:e0: bf:9c:9a:f4:ee:a1:dd:e0:53:d6:69:d6:c5:aa:91: f1:a9:86:0f:5c:8c:72:c8:d5:f4:c7:b2:69:5d:b9: 5a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:79:83:DA:AB:0A:5D:2B:1A:F6:C7:1E:6A:71:35:84:13:33:D5:7E X509v3 Authority Key Identifier: keyid:69:66:1A:9F:06:35:57:CE:2B:54:37:B0:18:89:3D:7D:9F:DD:BE:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWYanwY1V84rVDewGIk9fZ_dvtA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:8f:35:b5:0f:a3:12:02:19:90:35:a3:57:c7:96:df:ed:04: b1:57:4e:21:ae:f0:c2:c6:dd:6b:83:6b:88:13:b1:79:4f:0e: 45:c5:a7:0b:d9:b6:6e:31:25:21:f8:7a:1c:c6:3f:62:98:38: 9f:17:59:14:e5:62:aa:26:51:f0:2b:00:a0:9f:61:de:41:51: 54:ec:b0:2f:d5:31:99:09:3f:26:c3:5b:e0:6c:fd:c4:ef:36: ee:44:39:d0:c5:1a:59:ae:e3:8d:60:62:83:75:25:58:c7:92: 8e:7f:8c:01:92:4e:70:a0:56:11:3d:55:9f:00:ee:2e:45:ab: e6:e8:b7:cb:a4:0e:22:37:27:e0:a5:96:23:4a:67:df:e3:df: 4a:e4:26:01:27:ac:46:23:3d:6c:a5:b0:ad:9f:3e:c3:13:1a: 20:8e:f4:01:52:bd:51:80:58:d0:f5:ba:80:f1:bf:14:61:83: e7:f8:60:5e:15:a8:b3:d0:6f:4c:11:71:36:4e:04:1e:51:3b: 9e:0f:10:85:ed:8e:7b:29:7e:99:c1:99:2b:96:96:58:00:fb: e6:bb:b0:4b:73:a5:5d:9e:99:a4:06:8c:60:52:02:30:12:a1: 6d:30:6b:2f:6b:4f:c5:01:ae:32:6f:bf:55:4c:6c:fd:2f:14: c7:a8:31:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMxQTYxMTAvBgNVBAUTKDY5NjYxQTlGMDYzNTU3Q0UyQjU0MzdCMDE4ODkzRDdE OUZEREJFRDAwHhcNMjUwODIyMjIzODQyWhcNMjUwODI5MjIzODQyWjAYMRYwFAYD VQQDEw02OGE4ZjE3My0yZDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyk33EFIU3EbTiCbvctKqiwkTSn46LwInlQTcljdoUzVpUsudfonLLGjdaVnI kXZEcHCI5+fvj+OQqPpux0tsQ11cemCHqGgrrzTG+CFmOFKaE5ZaPAoG8vvpUbPF bizlAPa1My+MSS3aWd3eT1d17DBxURmayS5/XXI/lVGa1BLyVmCXXgglXunjR5Ak WL1BXIeijVYMxhQJHBb+ZKNail3lI5Km44x5wr9OgINkiRx1952MXo6PXA1e3rJw OGzKBy1wllBqkggaHu6TESHqHkG6BOD4A8NFOFFgzHtqs+C/nJr07qHd4FPWadbF qpHxqYYPXIxyyNX0x7JpXblaUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCx5g9qr Cl0rGvbHHmpxNYQTM9V+MB8GA1UdIwQYMBaAFGlmGp8GNVfOK1Q3sBiJPX2f3b7Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzFBNi80NEQ4OTBDQThF QzUxMUVCOTdCMTIwNzRDNEY5QUUwMi9hV1lhbndZMVY4NHJWRGV3R0lrOWZaX2R2 dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FXWWFud1kxVjg0clZEZXdHSWs5ZlpfZHZ0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzFBNi80NEQ4OTBDQThFQzUxMUVCOTdCMTIwNzRDNEY5QUUwMi9hV1lhbndZMVY4 NHJWRGV3R0lrOWZaX2R2dEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvjzW1D6MSAhmQNaNXx5bf7QSxV04hrvDCxt1rg2uIE7F5Tw5FxacL 2bZuMSUh+Hocxj9imDifF1kU5WKqJlHwKwCgn2HeQVFU7LAv1TGZCT8mw1vgbP3E 7zbuRDnQxRpZruONYGKDdSVYx5KOf4wBkk5woFYRPVWfAO4uRavm6LfLpA4iNyfg pZYjSmff499K5CYBJ6xGIz1spbCtnz7DExogjvQBUr1RgFjQ9bqA8b8UYYPn+GBe Faiz0G9MEXE2TgQeUTueDxCF7Y57KX6ZwZkrlpZYAPvmu7BLc6VdnpmkBoxgUgIw EqFtMGsva0/FAa4yb79VTGz9LxTHqDHn -----END CERTIFICATE-----Generated at Sat Aug 23 19:13:14 2025 by rpki-client