$ rpki-client -vvf rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft File: Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft (raw, json) Hash identifier: rzhfhjjlnrFp7hhceKRAw7+NLnYVQzxUW4BnQojX33E= Subject key identifier: F3:0B:CC:A8:44:6F:D6:59:28:AD:17:2E:10:95:1E:00:35:92:26:69 Authority key identifier: 02:AE:84:F6:11:B7:E8:2F:D7:D6:FF:8F:45:2D:87:25:EF:48:90:88 Certificate issuer: /CN=A91642A0/serialNumber=02AE84F611B7E82FD7D6FF8F452D8725EF489088 Certificate serial: 0CFF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft Manifest number: 0CD7 Signing time: Fri 22 Aug 2025 18:17:20 +0000 Manifest this update: Fri 22 Aug 2025 18:17:19 +0000 Manifest next update: Fri 29 Aug 2025 18:17:19 +0000 Files and hashes: 1: Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl (hash: TNi2I0vVmenlgwEwcb58srGD2E0n8JYjxKgreMxcOzg=) 2: B0B70006B19211EC9EAAD44EC4F9AE02.roa (hash: iAcBe9JsIgejkunApnFizR8kcd9hvKFDEaA+fu50sDE=) 3: AFB0FFCCB19211EC9EAAD44EC4F9AE02.roa (hash: I0QziAIo3oazYojvFNhbt9C/zSWf1Md92KB9f4lH27c=) 4: 0EF0E842839E11EEA1892A12C4F9AE02.roa (hash: CTDwhtj/lvv2X5UcpQAPIBaNmpDgoQygeS9l2k6Fjz0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:17:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3327 (0xcff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91642A0, serialNumber=02AE84F611B7E82FD7D6FF8F452D8725EF489088 Validity Not Before: Aug 22 18:17:19 2025 GMT Not After : Aug 29 18:17:19 2025 GMT Subject: CN=68a8b430-9cfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9d:a2:2b:78:4b:53:75:ff:b0:3a:9f:a2:c3: e2:51:40:69:a0:97:dc:30:64:95:42:77:9a:57:57: 96:bc:22:80:bb:67:cf:f6:33:bc:dd:99:83:d9:66: 60:d5:a8:55:ed:36:6a:d6:39:d3:2a:b6:a2:52:ed: e6:d1:93:9c:a7:8d:20:07:e8:7c:7b:86:2e:17:01: 24:37:40:a3:c7:63:3f:98:54:75:1c:05:ec:6a:4a: 64:a0:fe:eb:3f:c3:77:23:f0:46:61:61:76:36:fc: 0c:c9:72:0f:a3:62:d7:f0:26:3b:71:9d:16:1a:58: e5:42:0d:35:82:99:2f:28:6a:41:28:7a:5d:36:8e: c3:51:34:1f:c6:f8:e2:ed:26:f4:ce:67:1a:4e:46: a0:ae:53:e3:bd:03:60:98:16:4c:02:ca:2b:c1:0f: a6:34:4d:41:36:55:8d:93:4e:ac:92:62:a7:91:4b: 54:fa:a6:17:28:b6:67:f5:9e:06:ed:4b:36:2c:05: e7:eb:46:76:5c:ff:76:16:bc:cb:c4:f3:92:a0:d1: b5:2e:54:24:4e:55:cf:b8:63:bd:5d:f2:cc:ae:76: 68:7c:e7:4e:34:8d:ea:09:73:b5:63:92:da:2e:67: 04:56:48:8a:10:39:02:4e:09:c5:06:96:36:9e:bf: 0b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:0B:CC:A8:44:6F:D6:59:28:AD:17:2E:10:95:1E:00:35:92:26:69 X509v3 Authority Key Identifier: keyid:02:AE:84:F6:11:B7:E8:2F:D7:D6:FF:8F:45:2D:87:25:EF:48:90:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:67:32:c2:79:6e:04:f8:8d:40:0c:0f:a6:ce:2a:44:46:c4: 24:08:5e:c1:f5:a7:f1:64:b0:28:7e:28:c3:55:9b:c1:80:f6: e3:36:66:60:7b:4e:7b:e4:10:09:21:6b:2c:a1:ec:1c:ba:e6: 4b:18:f5:50:6b:8e:6b:a2:ee:73:15:b8:14:67:b8:4a:9a:f0: 51:60:8c:af:87:9a:8f:57:9e:10:40:c5:0b:70:21:ae:99:2c: ef:0c:b4:7c:f0:b4:46:9e:c2:23:d3:53:81:1b:39:30:cc:e2: 09:14:f2:5e:b3:08:01:9f:c2:78:37:8a:a6:99:14:20:d7:2a: b1:e0:0e:75:06:0f:70:bc:3e:ec:26:6f:15:ad:5b:d6:5f:49: ac:7d:86:9c:2c:8c:a0:5a:4b:4b:23:87:5f:7c:94:65:96:18: bd:c5:dd:37:79:72:aa:bc:6c:9b:26:ae:90:c0:71:3c:3e:5e: d9:66:40:a9:81:4e:a9:7b:77:0d:51:b8:d9:8c:1e:24:fc:19: c8:43:2b:a1:51:66:d7:a2:50:e6:21:8f:11:ae:1a:e2:2f:e3: b0:9d:62:d0:d9:7a:85:1b:be:6e:1e:5d:94:3e:75:f1:ca:42: 0d:37:52:43:a5:9f:0f:b9:68:35:de:a7:4a:ea:c7:76:34:92: 2f:af:29:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQyQTAxMTAvBgNVBAUTKDAyQUU4NEY2MTFCN0U4MkZEN0Q2RkY4RjQ1MkQ4NzI1 RUY0ODkwODgwHhcNMjUwODIyMTgxNzE5WhcNMjUwODI5MTgxNzE5WjAYMRYwFAYD VQQDEw02OGE4YjQzMC05Y2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJ2iK3hLU3X/sDqfosPiUUBpoJfcMGSVQneaV1eWvCKAu2fP9jO83ZmD2WZg 1ahV7TZq1jnTKraiUu3m0ZOcp40gB+h8e4YuFwEkN0Cjx2M/mFR1HAXsakpkoP7r P8N3I/BGYWF2NvwMyXIPo2LX8CY7cZ0WGljlQg01gpkvKGpBKHpdNo7DUTQfxvji 7Sb0zmcaTkagrlPjvQNgmBZMAsorwQ+mNE1BNlWNk06skmKnkUtU+qYXKLZn9Z4G 7Us2LAXn60Z2XP92FrzLxPOSoNG1LlQkTlXPuGO9XfLMrnZofOdONI3qCXO1Y5La LmcEVkiKEDkCTgnFBpY2nr8LFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPMLzKhE b9ZZKK0XLhCVHgA1kiZpMB8GA1UdIwQYMBaAFAKuhPYRt+gv19b/j0UthyXvSJCI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDJBMC9DQTdEMTE2MkY2 NzYxMUU5OTBCQUEyMjJDNEY5QUUwMi9BcTZFOWhHMzZDX1gxdi1QUlMySEplOUlr SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FxNkU5aEczNkNfWDF2LVBSUzJISmU5SWtJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDJBMC9DQTdEMTE2MkY2NzYxMUU5OTBCQUEyMjJDNEY5QUUwMi9BcTZFOWhHMzZD X1gxdi1QUlMySEplOUlrSWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYZzLCeW4E+I1ADA+mzipERsQkCF7B9afxZLAofijDVZvBgPbjNmZg e0575BAJIWssoewcuuZLGPVQa45rou5zFbgUZ7hKmvBRYIyvh5qPV54QQMULcCGu mSzvDLR88LRGnsIj01OBGzkwzOIJFPJeswgBn8J4N4qmmRQg1yqx4A51Bg9wvD7s Jm8VrVvWX0msfYacLIygWktLI4dffJRllhi9xd03eXKqvGybJq6QwHE8Pl7ZZkCp gU6pe3cNUbjZjB4k/BnIQyuhUWbXolDmIY8RrhriL+OwnWLQ2XqFG75uHl2UPnXx ykINN1JDpZ8PuWg13qdK6sd2NJIvryky -----END CERTIFICATE-----Generated at Sun Aug 24 00:02:12 2025 by rpki-client