$ rpki-client -vvf rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft File: aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft (raw, json) Hash identifier: asS+GMt3l7+QXin4pbe5EDn3Lu1lAFtE6MiZdOVU454= Subject key identifier: A8:AD:48:4B:3A:69:C1:40:13:40:8B:7B:93:45:D6:8F:B1:CA:3A:D6 Authority key identifier: 68:8B:B0:59:5F:59:5B:71:1E:02:45:0A:CE:E3:B2:6C:11:3B:79:2F Certificate issuer: /CN=A91549ED/serialNumber=688BB0595F595B711E02450ACEE3B26C113B792F Certificate serial: 07CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIuwWV9ZW3EeAkUKzuOybBE7eS8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft Manifest number: 07C4 Signing time: Fri 22 Aug 2025 21:20:49 +0000 Manifest this update: Fri 22 Aug 2025 21:20:49 +0000 Manifest next update: Fri 29 Aug 2025 21:20:49 +0000 Files and hashes: 1: aIuwWV9ZW3EeAkUKzuOybBE7eS8.crl (hash: fLyXpWgLPzIQSg2UuHrTJTdWasYXjEjhKmJg1el+7xI=) 2: 89B3D06E0F9111EBA9B90727C4F9AE02.roa (hash: nNeDg/wlklIxGFoighizLl95GENL1V1dEvF0FUrVfns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.crl rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIuwWV9ZW3EeAkUKzuOybBE7eS8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:20:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1996 (0x7cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91549ED, serialNumber=688BB0595F595B711E02450ACEE3B26C113B792F Validity Not Before: Aug 22 21:20:49 2025 GMT Not After : Aug 29 21:20:49 2025 GMT Subject: CN=68a8df31-b14f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f8:da:cb:49:0f:59:6c:5c:ed:b8:d5:6d:f4: 46:17:e7:21:35:38:c3:a7:39:f5:2d:ad:62:b8:2e: f7:92:07:0e:a5:6a:ff:db:63:b8:3d:55:0d:79:f2: b7:34:41:4a:15:c5:44:0c:10:d0:77:3e:3e:a8:4e: a3:c1:97:a2:91:81:40:80:49:82:5b:d9:09:f6:4f: 10:4e:24:51:65:d7:f5:d5:d6:e5:86:2c:8a:e3:47: 6c:7e:bc:99:5c:34:51:04:fa:3b:6c:ff:93:31:ae: 65:fd:7f:62:67:30:15:a4:6a:80:3a:9e:ac:1c:cb: 2c:e6:3e:4a:f9:07:50:a9:5e:91:37:fe:25:8b:7d: 58:75:d0:9d:bc:89:cb:65:9c:c4:fd:16:31:d0:72: 49:29:48:d1:be:9b:e0:39:b0:fe:9a:78:e8:f2:20: 23:3d:ff:c7:85:79:bc:00:11:e2:65:bd:70:17:59: 4d:34:20:2d:ef:95:27:88:3f:fd:1f:88:1d:b5:4a: dc:57:fb:c1:9c:21:78:72:6c:27:68:2f:be:97:97: b9:b0:f4:dc:e4:3c:f6:b7:5e:a6:c7:34:bc:cf:aa: 02:49:51:db:7a:8d:1f:0d:55:a1:c3:0b:2f:06:28: f7:91:32:18:81:0b:90:2d:d0:ee:27:b7:97:fa:b5: f7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:AD:48:4B:3A:69:C1:40:13:40:8B:7B:93:45:D6:8F:B1:CA:3A:D6 X509v3 Authority Key Identifier: keyid:68:8B:B0:59:5F:59:5B:71:1E:02:45:0A:CE:E3:B2:6C:11:3B:79:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIuwWV9ZW3EeAkUKzuOybBE7eS8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:cc:7d:a6:dd:ea:fb:43:5b:02:57:c8:18:fb:01:66:8f:61: e6:35:a7:60:44:43:1e:9b:0b:29:16:cb:99:03:8c:15:d0:6a: e8:86:74:3a:4a:df:82:32:7c:67:21:32:3c:f3:9c:13:4d:28: e1:46:1d:22:6a:8b:08:f4:02:2d:f0:6f:ed:6f:da:a8:1b:aa: c6:37:e0:17:f8:ed:9b:4d:33:38:cb:f3:a7:15:d4:0a:cb:37: 16:ce:d9:e8:c1:cd:a6:ed:9c:e4:f8:fb:d2:fb:74:49:ed:b2: 8e:0f:84:46:d7:43:a9:26:a3:f0:97:5c:9b:13:80:7e:4e:c9: 40:81:9e:31:50:da:a2:9b:fc:15:79:e2:09:38:13:32:4e:af: 03:bd:01:a7:2f:95:51:6f:d5:6f:c7:24:44:ef:26:2f:bc:0d: 17:e5:52:0c:03:4e:2b:bf:4f:b5:fb:3c:2b:a5:42:b4:6c:e7: 3f:cb:21:2a:f9:85:1e:cb:8d:7b:d6:41:0c:11:16:01:69:0a: 57:23:01:a3:bd:7a:ea:91:e6:61:be:e3:6e:e1:96:36:bc:f9: 3e:4b:ff:ad:f4:34:48:38:bd:15:52:fe:1d:ec:cf:ac:65:d7: 28:00:4f:7e:11:a8:50:17:57:86:38:77:72:fd:26:ff:0d:89: 6d:41:80:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ5RUQxMTAvBgNVBAUTKDY4OEJCMDU5NUY1OTVCNzExRTAyNDUwQUNFRTNCMjZD MTEzQjc5MkYwHhcNMjUwODIyMjEyMDQ5WhcNMjUwODI5MjEyMDQ5WjAYMRYwFAYD VQQDEw02OGE4ZGYzMS1iMTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp/jay0kPWWxc7bjVbfRGF+chNTjDpzn1La1iuC73kgcOpWr/22O4PVUNefK3 NEFKFcVEDBDQdz4+qE6jwZeikYFAgEmCW9kJ9k8QTiRRZdf11dblhiyK40dsfryZ XDRRBPo7bP+TMa5l/X9iZzAVpGqAOp6sHMss5j5K+QdQqV6RN/4li31YddCdvInL ZZzE/RYx0HJJKUjRvpvgObD+mnjo8iAjPf/HhXm8ABHiZb1wF1lNNCAt75UniD/9 H4gdtUrcV/vBnCF4cmwnaC++l5e5sPTc5Dz2t16mxzS8z6oCSVHbeo0fDVWhwwsv Bij3kTIYgQuQLdDuJ7eX+rX32QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKitSEs6 acFAE0CLe5NF1o+xyjrWMB8GA1UdIwQYMBaAFGiLsFlfWVtxHgJFCs7jsmwRO3kv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDlFRC9CNzcxNEI5NjA5 MTgxMUVCOTVGQTI3MzdDNEY5QUUwMi9hSXV3V1Y5WlczRWVBa1VLenVPeWJCRTdl UzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FJdXdXVjlaVzNFZUFrVUt6dU95YkJFN2VTOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDlFRC9CNzcxNEI5NjA5MTgxMUVCOTVGQTI3MzdDNEY5QUUwMi9hSXV3V1Y5Wlcz RWVBa1VLenVPeWJCRTdlUzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8zH2m3er7Q1sCV8gY+wFmj2HmNadgREMemwspFsuZA4wV0GrohnQ6 St+CMnxnITI885wTTSjhRh0iaosI9AIt8G/tb9qoG6rGN+AX+O2bTTM4y/OnFdQK yzcWztnowc2m7Zzk+PvS+3RJ7bKOD4RG10OpJqPwl1ybE4B+TslAgZ4xUNqim/wV eeIJOBMyTq8DvQGnL5VRb9VvxyRE7yYvvA0X5VIMA04rv0+1+zwrpUK0bOc/yyEq +YUey4171kEMERYBaQpXIwGjvXrqkeZhvuNu4ZY2vPk+S/+t9DRIOL0VUv4d7M+s ZdcoAE9+EahQF1eGOHdy/Sb/DYltQYDB -----END CERTIFICATE-----Generated at Sat Aug 23 18:58:52 2025 by rpki-client