$ rpki-client -vvf rpki.apnic.net/member_repository/A91656C7/5451324A408311F08B03AB65C4F9AE02/e38qjYSvvYwzKp9LTmcJs65_CvY.mft File: e38qjYSvvYwzKp9LTmcJs65_CvY.mft (raw, json) Hash identifier: N2x+pCzO3ZvmLhUZGBLhJQYawn4uRqetxyiiEq+E+iE= Subject key identifier: 13:B3:54:51:77:A9:77:17:0D:8E:9B:8F:11:4D:1A:0D:63:13:84:60 Authority key identifier: 7B:7F:2A:8D:84:AF:BD:8C:33:2A:9F:4B:4E:67:09:B3:AE:7F:0A:F6 Certificate issuer: /CN=A91656C7/serialNumber=7B7F2A8D84AFBD8C332A9F4B4E6709B3AE7F0AF6 Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e38qjYSvvYwzKp9LTmcJs65_CvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91656C7/5451324A408311F08B03AB65C4F9AE02/e38qjYSvvYwzKp9LTmcJs65_CvY.mft Manifest number: 32 Signing time: Sat 23 Aug 2025 07:58:17 +0000 Manifest this update: Sat 23 Aug 2025 07:58:16 +0000 Manifest next update: Sat 30 Aug 2025 07:58:16 +0000 Files and hashes: 1: e38qjYSvvYwzKp9LTmcJs65_CvY.crl (hash: 4clAfMZ04ZDZ2sKphatl7lnsKhjK5nsBQCFZ/IP33aY=) 2: 0930CE00408411F0A6916727C4F9AE02.roa (hash: RmPJ00Uips89e1P+AW2N3rLdF8Pmzlx8rWyUZVnX0RI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91656C7/5451324A408311F08B03AB65C4F9AE02/e38qjYSvvYwzKp9LTmcJs65_CvY.crl rsync://rpki.apnic.net/member_repository/A91656C7/5451324A408311F08B03AB65C4F9AE02/e38qjYSvvYwzKp9LTmcJs65_CvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e38qjYSvvYwzKp9LTmcJs65_CvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:58:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91656C7, serialNumber=7B7F2A8D84AFBD8C332A9F4B4E6709B3AE7F0AF6 Validity Not Before: Aug 23 07:58:16 2025 GMT Not After : Aug 30 07:58:16 2025 GMT Subject: CN=68a97498-efc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:aa:ae:fe:b5:7b:bb:5e:12:23:6b:d4:f3:9b: 8f:d9:7a:f4:09:33:8a:f2:49:b9:b0:2e:68:ad:71: 6d:bf:fb:ac:05:ce:9b:a0:3e:2a:66:a5:99:13:27: 6e:59:da:6e:f2:04:a3:3f:4a:81:09:59:2e:a3:5a: f6:ae:23:72:af:53:f4:9b:7f:a5:67:80:10:61:66: 31:10:15:96:0a:f7:4f:69:0b:01:26:00:e0:87:d1: f1:82:ef:a8:3b:cb:b2:4f:4d:2a:e5:79:01:37:46: 73:2c:ee:24:8c:b7:92:98:7c:8d:c8:4f:7e:a9:ef: de:bb:21:57:ab:74:c4:f8:d0:e6:7f:56:3a:18:ea: d7:b5:83:92:bb:1b:bf:78:2e:a4:87:90:1b:4c:00: 0e:6d:b4:78:75:44:9a:f3:60:0d:a6:97:dc:16:8f: 87:74:45:32:a5:35:80:b5:ae:8a:f4:c1:5c:25:dc: 41:88:36:fa:97:22:2d:0e:6c:1a:60:49:98:40:83: c9:e3:a1:f6:ad:e1:7e:e7:3e:50:b2:dc:af:29:21: 1a:55:59:bb:e7:70:25:35:f3:ee:01:c9:e5:37:c0: cf:1e:66:c0:a9:91:bc:76:c1:1e:84:fd:77:89:e5: 3c:6a:32:a7:d8:c3:3b:ec:8b:a4:30:b4:76:60:f5: e3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:B3:54:51:77:A9:77:17:0D:8E:9B:8F:11:4D:1A:0D:63:13:84:60 X509v3 Authority Key Identifier: keyid:7B:7F:2A:8D:84:AF:BD:8C:33:2A:9F:4B:4E:67:09:B3:AE:7F:0A:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91656C7/5451324A408311F08B03AB65C4F9AE02/e38qjYSvvYwzKp9LTmcJs65_CvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e38qjYSvvYwzKp9LTmcJs65_CvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91656C7/5451324A408311F08B03AB65C4F9AE02/e38qjYSvvYwzKp9LTmcJs65_CvY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:ab:b7:48:d7:05:c1:d6:b4:13:f9:27:34:25:c2:30:2e:d9: c6:ff:d8:08:ab:59:87:3a:d2:41:2a:cb:c4:73:5d:4e:ef:d4: 73:05:fb:c0:d1:46:d6:93:45:fd:13:ba:85:45:3c:fc:0b:b6: 87:f7:3d:54:17:e4:f4:30:2c:d1:3d:66:d8:83:5b:2e:53:22: df:99:04:a1:fa:1b:fa:be:ee:82:37:2b:18:ed:6a:3f:89:11: cc:c2:70:a6:f1:13:ad:41:91:07:96:97:db:65:00:09:ea:06: 1b:f8:ee:e3:6b:2c:b5:e6:db:cb:c5:b9:60:03:da:21:91:cb: d9:ff:4c:86:6f:03:da:91:a2:a6:fc:98:d9:ad:77:28:cf:16: 68:fc:62:e2:21:d1:d8:a2:55:c8:d9:05:c1:83:fd:b6:2c:50: a2:f5:80:a1:d1:4b:2b:80:ed:e5:cd:59:e1:70:9d:e3:c1:75: e6:ec:84:4a:1a:44:c3:78:73:e1:4d:b3:53:7b:4e:18:42:d2: 9f:e7:c1:1d:e5:c9:c9:3f:9a:70:6c:19:56:88:72:0f:e1:be: b2:1f:5b:a9:93:d0:d7:01:dc:d3:e3:52:4f:60:8a:4d:09:42: e4:a3:d9:2a:5e:70:06:2e:3a:7c:b7:a0:97:78:80:0c:1d:10: 24:ab:f5:4a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NTZDNzExMC8GA1UEBRMoN0I3RjJBOEQ4NEFGQkQ4QzMzMkE5RjRCNEU2NzA5QjNB RTdGMEFGNjAeFw0yNTA4MjMwNzU4MTZaFw0yNTA4MzAwNzU4MTZaMBgxFjAUBgNV BAMTDTY4YTk3NDk4LWVmYzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvqq7+tXu7XhIja9Tzm4/ZevQJM4rySbmwLmitcW2/+6wFzpugPipmpZkTJ25Z 2m7yBKM/SoEJWS6jWvauI3KvU/Sbf6VngBBhZjEQFZYK909pCwEmAOCH0fGC76g7 y7JPTSrleQE3RnMs7iSMt5KYfI3IT36p7967IVerdMT40OZ/VjoY6te1g5K7G794 LqSHkBtMAA5ttHh1RJrzYA2ml9wWj4d0RTKlNYC1ror0wVwl3EGINvqXIi0ObBpg SZhAg8njofat4X7nPlCy3K8pIRpVWbvncCU18+4ByeU3wM8eZsCpkbx2wR6E/XeJ 5TxqMqfYwzvsi6QwtHZg9eOpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUE7NUUXep dxcNjpuPEU0aDWMThGAwHwYDVR0jBBgwFoAUe38qjYSvvYwzKp9LTmcJs65/CvYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1NkM3LzU0NTEzMjRBNDA4 MzExRjA4QjAzQUI2NUM0RjlBRTAyL2UzOHFqWVN2dll3ektwOUxUbWNKczY1X0N2 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZTM4cWpZU3Z2WXd6S3A5TFRtY0pzNjVfQ3ZZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1 NkM3LzU0NTEzMjRBNDA4MzExRjA4QjAzQUI2NUM0RjlBRTAyL2UzOHFqWVN2dll3 ektwOUxUbWNKczY1X0N2WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAL+rt0jXBcHWtBP5JzQlwjAu2cb/2AirWYc60kEqy8RzXU7v1HMF+8DR RtaTRf0TuoVFPPwLtof3PVQX5PQwLNE9ZtiDWy5TIt+ZBKH6G/q+7oI3Kxjtaj+J EczCcKbxE61BkQeWl9tlAAnqBhv47uNrLLXm28vFuWAD2iGRy9n/TIZvA9qRoqb8 mNmtdyjPFmj8YuIh0diiVcjZBcGD/bYsUKL1gKHRSyuA7eXNWeFwnePBdebshEoa RMN4c+FNs1N7ThhC0p/nwR3lyck/mnBsGVaIcg/hvrIfW6mT0NcB3NPjUk9gik0J QuSj2SpecAYuOny3oJd4gAwdECSr9Uo= -----END CERTIFICATE-----Generated at Sat Aug 23 15:17:17 2025 by rpki-client