$ rpki-client -vvf rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft File: aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft (raw, json) Hash identifier: wHNUOwDJNSC0Q4U/Sf8NWyTyM/Ou8AJwKovnMdJxkoU= Subject key identifier: 2D:7A:D5:BA:64:87:7F:8B:A5:E0:C2:72:8D:36:6C:31:E7:31:F5:77 Authority key identifier: 68:11:04:90:6C:F9:3D:A4:3B:6C:5B:21:35:A0:24:14:9A:8F:C0:57 Certificate issuer: /CN=A9156751/serialNumber=681104906CF93DA43B6C5B2135A024149A8FC057 Certificate serial: 02E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBEEkGz5PaQ7bFshNaAkFJqPwFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft Manifest number: 02DC Signing time: Sat 23 Aug 2025 01:34:44 +0000 Manifest this update: Sat 23 Aug 2025 01:34:44 +0000 Manifest next update: Sat 30 Aug 2025 01:34:44 +0000 Files and hashes: 1: aBEEkGz5PaQ7bFshNaAkFJqPwFc.crl (hash: 4Hz1ImSlzqUo4vaYWi9LfFiZva/ifAzd/EgZmhF91Ws=) 2: 776724AAF7B711ECAE4F7935C4F9AE02.roa (hash: t6gPHMURjmA0yTxJeNB9SOwe/egrKymREeoN93WnBuU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.crl rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBEEkGz5PaQ7bFshNaAkFJqPwFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 736 (0x2e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156751, serialNumber=681104906CF93DA43B6C5B2135A024149A8FC057 Validity Not Before: Aug 23 01:34:44 2025 GMT Not After : Aug 30 01:34:44 2025 GMT Subject: CN=68a91ab4-03aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e8:c1:8a:a0:08:50:f3:92:e3:86:30:1e:78: 58:06:7b:87:94:cb:11:95:fa:e4:90:c1:54:eb:56: 74:9c:06:4e:fa:9c:d8:3d:b5:7f:fd:d7:2c:68:ba: b4:7e:59:95:d4:ce:0e:ca:3f:a9:00:ec:e0:e6:81: 93:fa:da:08:67:cf:c2:4a:1e:ee:c6:93:91:ec:c5: d9:61:a3:10:f5:cb:a7:0e:21:46:51:08:e4:09:34: 28:0c:c6:70:86:82:da:e5:d6:39:fa:bd:a8:24:b6: 08:ad:6c:73:ca:61:39:2d:e4:b4:94:d9:67:e5:45: 40:0f:89:b1:a1:63:e9:46:6d:0d:25:43:40:27:b5: a3:7c:0a:f8:b2:f1:2a:e5:af:a9:be:aa:32:9a:76: 5a:dc:03:2a:59:cf:27:a2:25:24:42:08:b9:86:eb: d6:4c:1c:82:e4:22:46:fd:2d:4a:88:d7:6e:08:10: 38:8a:5c:c6:f7:9b:60:f9:f6:15:c8:4e:76:5e:ed: cf:48:87:70:ee:88:fd:10:a1:66:e4:48:10:28:22: 7f:ee:fd:6a:43:d7:12:0c:49:e1:4c:6c:8e:6f:a7: 01:44:e0:cf:70:7b:8b:1d:fb:69:09:8f:4e:25:85: 60:15:c2:46:d8:80:1c:c2:23:29:b4:32:bc:c5:35: a8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:7A:D5:BA:64:87:7F:8B:A5:E0:C2:72:8D:36:6C:31:E7:31:F5:77 X509v3 Authority Key Identifier: keyid:68:11:04:90:6C:F9:3D:A4:3B:6C:5B:21:35:A0:24:14:9A:8F:C0:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBEEkGz5PaQ7bFshNaAkFJqPwFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:6c:46:45:08:65:48:76:dc:26:55:c1:61:eb:40:bc:f9:1e: c8:62:ea:e3:80:9f:9f:bc:1f:93:77:ef:ef:1a:9e:27:9e:84: aa:ab:ba:83:3f:3d:b9:93:69:56:95:87:b3:49:9f:f8:f1:50: aa:d4:69:ab:76:b8:2b:33:9e:3c:17:4e:d3:1b:e9:88:1b:ad: 91:9e:f5:f9:33:87:2c:01:42:22:6f:25:f9:4e:9d:0f:cc:2b: 3d:e1:1a:c0:87:38:4d:04:15:72:8d:e6:84:ed:cf:70:5d:fd: cd:73:71:81:80:6c:1f:17:90:04:f9:3b:3c:88:c5:e8:77:cb: 02:de:2b:5e:37:81:5b:98:84:56:a0:89:2b:e7:dc:3e:54:88: f2:a9:cd:54:75:00:88:a9:90:1a:23:ae:6c:f2:82:da:2c:f6: 51:7a:d0:bd:e3:d3:ee:46:e0:98:4f:fd:16:8e:47:8b:19:de: dc:69:e9:4b:8a:78:8e:bc:77:eb:bf:3a:9c:8d:8a:fa:54:fa: eb:26:c8:1d:b3:95:52:00:a7:b0:d9:78:d5:5d:28:ac:e6:22: 1c:2e:9f:e9:00:37:be:02:77:44:51:68:68:cd:33:5c:4f:5d: 2d:92:db:b8:50:b5:1a:73:4e:38:c1:b1:7e:e3:11:47:4f:9e: 77:4a:83:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY3NTExMTAvBgNVBAUTKDY4MTEwNDkwNkNGOTNEQTQzQjZDNUIyMTM1QTAyNDE0 OUE4RkMwNTcwHhcNMjUwODIzMDEzNDQ0WhcNMjUwODMwMDEzNDQ0WjAYMRYwFAYD VQQDEw02OGE5MWFiNC0wM2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsOjBiqAIUPOS44YwHnhYBnuHlMsRlfrkkMFU61Z0nAZO+pzYPbV//dcsaLq0 flmV1M4Oyj+pAOzg5oGT+toIZ8/CSh7uxpOR7MXZYaMQ9cunDiFGUQjkCTQoDMZw hoLa5dY5+r2oJLYIrWxzymE5LeS0lNln5UVAD4mxoWPpRm0NJUNAJ7WjfAr4svEq 5a+pvqoymnZa3AMqWc8noiUkQgi5huvWTByC5CJG/S1KiNduCBA4ilzG95tg+fYV yE52Xu3PSIdw7oj9EKFm5EgQKCJ/7v1qQ9cSDEnhTGyOb6cBRODPcHuLHftpCY9O JYVgFcJG2IAcwiMptDK8xTWokwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC161bpk h3+LpeDCco02bDHnMfV3MB8GA1UdIwQYMBaAFGgRBJBs+T2kO2xbITWgJBSaj8BX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Njc1MS8wRjg3MDJCQUY3 QjIxMUVDQjJBRTYzMkVDNEY5QUUwMi9hQkVFa0d6NVBhUTdiRnNoTmFBa0ZKcVB3 RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FCRUVrR3o1UGFRN2JGc2hOYUFrRkpxUHdGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Njc1MS8wRjg3MDJCQUY3QjIxMUVDQjJBRTYzMkVDNEY5QUUwMi9hQkVFa0d6NVBh UTdiRnNoTmFBa0ZKcVB3RmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzbEZFCGVIdtwmVcFh60C8+R7IYurjgJ+fvB+Td+/vGp4nnoSqq7qD Pz25k2lWlYezSZ/48VCq1GmrdrgrM548F07TG+mIG62RnvX5M4csAUIibyX5Tp0P zCs94RrAhzhNBBVyjeaE7c9wXf3Nc3GBgGwfF5AE+Ts8iMXod8sC3iteN4FbmIRW oIkr59w+VIjyqc1UdQCIqZAaI65s8oLaLPZRetC949PuRuCYT/0WjkeLGd7caelL iniOvHfrvzqcjYr6VPrrJsgds5VSAKew2XjVXSis5iIcLp/pADe+AndEUWhozTNc T10tktu4ULUac044wbF+4xFHT553SoOl -----END CERTIFICATE-----Generated at Sat Aug 23 17:16:09 2025 by rpki-client