$ rpki-client -vvf rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft File: aZoPjRWjT1mVbLSADGxEBNwOvV0.mft (raw, json) Hash identifier: mTB1AFJGtgaX1H0cYEZe7d2lD8xFyb3oPv0pO+EP4HI= Subject key identifier: 2A:86:2D:D2:07:FC:0D:3C:65:8C:FA:45:73:1D:01:25:CC:CE:09:CC Authority key identifier: 69:9A:0F:8D:15:A3:4F:59:95:6C:B4:80:0C:6C:44:04:DC:0E:BD:5D Certificate issuer: /CN=A915C1FE/serialNumber=699A0F8D15A34F59956CB4800C6C4404DC0EBD5D Certificate serial: 34DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft Manifest number: 34BE Signing time: Fri 22 Aug 2025 15:20:00 +0000 Manifest this update: Fri 22 Aug 2025 15:19:59 +0000 Manifest next update: Fri 29 Aug 2025 15:19:59 +0000 Files and hashes: 1: aZoPjRWjT1mVbLSADGxEBNwOvV0.crl (hash: 7/Wg6JuTbeiPPm/3mQokDaFGQShNb2h4DnqRgPCTzF8=) 2: 6BC5DC4AB10511E591A3E484C4F9AE02.roa (hash: lhbAPGcQQjVfLeBPPvSfLGakAoAsie+moEAIzx57Z0Y=) 3: 6A9E6940B10511E591A3E484C4F9AE02.roa (hash: 1AXC4CdSqCeZreg7Kdx8zTNNLCij2RY2Acpk7gs3UmA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.crl rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:19:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13533 (0x34dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C1FE, serialNumber=699A0F8D15A34F59956CB4800C6C4404DC0EBD5D Validity Not Before: Aug 22 15:19:59 2025 GMT Not After : Aug 29 15:19:59 2025 GMT Subject: CN=68a88a9f-039d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:55:61:d0:6f:05:4d:f8:6f:3d:33:2e:a9:e7: 6d:e3:17:68:51:21:cc:52:5c:6a:b1:e5:99:0b:7f: 78:97:83:67:79:87:4f:57:c5:b3:ce:3e:1c:43:b3: 70:fa:3e:f9:ec:58:0b:06:72:57:2e:53:07:09:59: 72:a0:5f:93:41:d4:79:d6:41:5c:c2:fa:74:e5:84: ea:c8:68:20:d0:86:1f:8d:97:45:41:79:a9:57:b7: bc:5a:59:60:e6:c3:95:fc:0d:db:3c:2e:39:4f:ad: c9:0b:c6:45:62:71:da:74:0d:0f:f2:41:9f:6b:c0: d1:a8:4d:a0:73:b8:49:81:22:0d:8c:e7:5f:98:58: 75:04:7e:f0:dd:95:1b:83:03:4c:48:7a:02:3f:1b: 10:4e:7f:f9:7f:19:e4:7a:22:ad:69:8b:29:9b:3e: a9:cd:1a:4c:35:b3:c0:23:f4:6f:18:3d:d1:09:ac: 27:fb:2c:97:74:91:d1:9e:64:4b:b6:cd:fc:3a:89: 5b:5b:06:40:7c:cf:ce:c8:0b:56:37:f3:8f:8c:05: 17:a9:fc:fb:ed:b3:0a:36:03:c1:c8:de:5c:7e:00: f1:ef:98:8e:37:7c:f1:cd:11:bc:1d:02:9a:45:fa: 47:1f:81:ff:17:f4:04:72:72:ac:3e:44:4b:cd:d9: f8:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:86:2D:D2:07:FC:0D:3C:65:8C:FA:45:73:1D:01:25:CC:CE:09:CC X509v3 Authority Key Identifier: keyid:69:9A:0F:8D:15:A3:4F:59:95:6C:B4:80:0C:6C:44:04:DC:0E:BD:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:f5:22:35:e5:5b:72:a5:bf:3b:0c:0c:2e:be:1d:8c:1f:c8: a0:b5:69:c3:9f:32:1f:7c:8d:22:4a:ad:16:ab:ef:dc:5f:a0: 3e:3d:f1:20:1e:fd:cf:1b:35:2a:ba:9d:65:11:71:d3:7d:71: 31:91:5c:68:d1:65:6c:c7:19:7b:e0:de:6f:e9:58:18:00:4c: 47:14:2a:1f:5b:d6:f2:97:b5:be:ef:38:b1:92:57:3b:fc:ff: 10:04:8d:91:58:f1:63:0f:5e:5c:f3:09:d2:f8:df:1a:4d:3a: 5d:3c:e1:81:77:6d:e7:3a:21:c4:52:14:74:ff:00:3b:77:3d: 40:ea:2e:32:24:5a:47:45:c8:20:64:19:2d:8c:d5:18:0b:4d: ea:16:2e:16:d9:d7:5d:c1:a8:56:a9:18:00:e4:ca:fd:2e:6e: 2b:f0:ed:d0:e3:2c:10:49:12:cc:6e:af:37:07:3a:e2:eb:e1: a0:17:fc:3f:d3:8a:8f:7e:2b:de:15:6a:66:17:c2:50:91:18: 20:9f:43:01:94:90:f5:3f:cc:25:53:fe:8c:45:ff:3e:6e:a7: ce:ee:70:f9:18:b4:cd:0c:73:d4:5f:01:8b:bd:91:67:e6:bb: 22:73:d3:8b:8a:f9:57:b5:db:fb:a0:89:49:e9:5c:61:a7:ff: e1:5b:39:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUMxRkUxMTAvBgNVBAUTKDY5OUEwRjhEMTVBMzRGNTk5NTZDQjQ4MDBDNkM0NDA0 REMwRUJENUQwHhcNMjUwODIyMTUxOTU5WhcNMjUwODI5MTUxOTU5WjAYMRYwFAYD VQQDEw02OGE4OGE5Zi0wMzlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx1Vh0G8FTfhvPTMuqedt4xdoUSHMUlxqseWZC394l4NneYdPV8Wzzj4cQ7Nw +j757FgLBnJXLlMHCVlyoF+TQdR51kFcwvp05YTqyGgg0IYfjZdFQXmpV7e8Wllg 5sOV/A3bPC45T63JC8ZFYnHadA0P8kGfa8DRqE2gc7hJgSINjOdfmFh1BH7w3ZUb gwNMSHoCPxsQTn/5fxnkeiKtaYspmz6pzRpMNbPAI/RvGD3RCawn+yyXdJHRnmRL ts38OolbWwZAfM/OyAtWN/OPjAUXqfz77bMKNgPByN5cfgDx75iON3zxzRG8HQKa RfpHH4H/F/QEcnKsPkRLzdn40wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCqGLdIH /A08ZYz6RXMdASXMzgnMMB8GA1UdIwQYMBaAFGmaD40Vo09ZlWy0gAxsRATcDr1d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzFGRS9EMTE4QUFCQTFE QUExMUUyQTJFQ0NBQTYwOEIwMkNEMi9hWm9QalJXalQxbVZiTFNBREd4RUJOd092 VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Fab1BqUldqVDFtVmJMU0FER3hFQk53T3ZWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzFGRS9EMTE4QUFCQTFEQUExMUUyQTJFQ0NBQTYwOEIwMkNEMi9hWm9QalJXalQx bVZiTFNBREd4RUJOd092VjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCq9SI15Vtypb87DAwuvh2MH8igtWnDnzIffI0iSq0Wq+/cX6A+PfEg Hv3PGzUqup1lEXHTfXExkVxo0WVsxxl74N5v6VgYAExHFCofW9byl7W+7zixklc7 /P8QBI2RWPFjD15c8wnS+N8aTTpdPOGBd23nOiHEUhR0/wA7dz1A6i4yJFpHRcgg ZBktjNUYC03qFi4W2dddwahWqRgA5Mr9Lm4r8O3Q4ywQSRLMbq83Bzri6+GgF/w/ 04qPfiveFWpmF8JQkRggn0MBlJD1P8wlU/6MRf8+bqfO7nD5GLTNDHPUXwGLvZFn 5rsic9OLivlXtdv7oIlJ6Vxhp//hWzn1 -----END CERTIFICATE-----Generated at Sat Aug 23 18:54:52 2025 by rpki-client