$ rpki-client -vvf rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft File: Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft (raw, json) Hash identifier: LVIpVpliJNEbyB1zKiMTwH7sB/Fx002sfhKHKMMbd0g= Subject key identifier: C4:C2:6C:4B:C7:F5:8E:17:92:81:FF:B7:76:04:02:D3:1E:31:71:52 Authority key identifier: 03:1E:29:F2:6E:78:32:81:B7:68:E8:91:08:53:14:4D:F1:EE:55:34 Certificate issuer: /CN=A91805BF/serialNumber=031E29F26E783281B768E8910853144DF1EE5534 Certificate serial: 07B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft Manifest number: 07AA Signing time: Fri 22 Aug 2025 21:29:08 +0000 Manifest this update: Fri 22 Aug 2025 21:29:08 +0000 Manifest next update: Fri 29 Aug 2025 21:29:08 +0000 Files and hashes: 1: Ax4p8m54MoG3aOiRCFMUTfHuVTQ.crl (hash: JoguYlQ1Y+JrLOukqbHCnSfWkzjk4E31F//OeYQalaw=) 2: 67F4BD64519811F092842D60C4F9AE02.roa (hash: 88Jh5coMAVPJSUCnQAmSwbUiu0xU/3P6Y2QChRKwELo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.crl rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:29:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1971 (0x7b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91805BF, serialNumber=031E29F26E783281B768E8910853144DF1EE5534 Validity Not Before: Aug 22 21:29:08 2025 GMT Not After : Aug 29 21:29:08 2025 GMT Subject: CN=68a8e124-807e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:4b:1c:b2:e2:87:22:7e:fd:43:e8:99:5d:bd: 2d:a8:27:fc:98:9c:00:45:92:86:45:56:43:73:3f: 7c:ed:3b:17:09:c7:20:d7:e9:f3:40:2d:6f:d5:ab: 3a:7e:aa:0d:70:c8:75:96:27:fd:22:2e:db:bc:18: 20:e6:c2:00:ca:31:b9:b7:79:e0:91:54:1a:d0:ef: 8c:98:4c:2d:1e:5f:85:87:7a:3e:f3:ff:6b:94:f6: 80:a2:31:b4:bc:31:69:e8:b4:15:34:f9:c7:f5:0e: e7:6b:b3:cd:19:41:0f:71:3b:66:63:9e:21:64:6c: 2c:48:27:9c:97:24:45:f5:20:ba:d9:5e:19:e8:1c: f1:1d:38:f3:c4:6f:03:ef:60:0c:17:cb:92:3a:f7: d0:9e:a2:d1:5c:1a:6f:5c:87:84:b5:85:0e:b4:de: 10:60:2a:bd:99:d9:6f:09:5b:1a:80:25:c4:03:ce: 87:c5:88:3f:5f:28:98:17:7d:a0:f0:5a:8d:4b:5a: 03:03:b5:c9:63:3c:1c:d1:84:fa:19:6e:93:5e:e1: e6:cd:d3:be:05:37:cc:9d:68:d1:c7:9f:cb:36:52: 09:8e:8e:1f:f1:47:08:f0:32:80:f4:c0:0b:cb:54: 76:ce:4e:5a:64:02:cd:fe:7a:02:bb:58:f4:3b:e4: 72:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:C2:6C:4B:C7:F5:8E:17:92:81:FF:B7:76:04:02:D3:1E:31:71:52 X509v3 Authority Key Identifier: keyid:03:1E:29:F2:6E:78:32:81:B7:68:E8:91:08:53:14:4D:F1:EE:55:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:96:90:98:97:60:c1:4c:fd:6f:50:e8:ab:49:5c:50:10:ac: a8:64:57:51:87:8c:cd:e0:4e:9b:01:77:45:2d:42:9e:64:bd: 06:aa:b5:c6:73:6f:67:bd:3f:a3:28:86:57:35:e6:5d:d5:29: 45:94:76:a6:ea:23:b1:9c:1b:ca:78:be:7d:31:7c:74:19:cb: c7:43:5e:4a:25:ba:07:db:0a:85:1f:dd:89:16:62:3f:e9:10: 21:3b:5a:db:58:15:96:1b:64:71:4f:ba:96:2a:10:87:9c:f3: 15:ba:a0:66:40:61:7b:50:53:cb:60:9c:d2:8b:40:26:44:87: dc:2f:09:27:00:33:e0:73:c0:c0:ca:09:7a:e8:d9:49:a2:0e: 3c:f6:58:3b:6b:ab:c6:52:a9:c0:06:c2:01:81:8e:92:4e:a1: 7a:26:41:95:92:e8:14:7e:f7:cb:d7:60:72:aa:1f:75:45:29: 31:99:84:39:72:c7:6e:e1:d4:b6:0d:f1:f9:61:41:e0:b8:a1: 48:19:40:2e:78:31:aa:d1:be:be:48:3e:fb:8c:9c:e8:5c:c5: 96:1f:a3:e9:dc:69:f9:67:61:fd:ce:32:af:34:3f:02:7d:d1: b5:42:20:6f:20:d2:b7:79:18:ba:60:ec:25:0f:96:d4:33:bd: 7a:96:b3:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA1QkYxMTAvBgNVBAUTKDAzMUUyOUYyNkU3ODMyODFCNzY4RTg5MTA4NTMxNDRE RjFFRTU1MzQwHhcNMjUwODIyMjEyOTA4WhcNMjUwODI5MjEyOTA4WjAYMRYwFAYD VQQDEw02OGE4ZTEyNC04MDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2UscsuKHIn79Q+iZXb0tqCf8mJwARZKGRVZDcz987TsXCccg1+nzQC1v1as6 fqoNcMh1lif9Ii7bvBgg5sIAyjG5t3ngkVQa0O+MmEwtHl+Fh3o+8/9rlPaAojG0 vDFp6LQVNPnH9Q7na7PNGUEPcTtmY54hZGwsSCeclyRF9SC62V4Z6BzxHTjzxG8D 72AMF8uSOvfQnqLRXBpvXIeEtYUOtN4QYCq9mdlvCVsagCXEA86HxYg/XyiYF32g 8FqNS1oDA7XJYzwc0YT6GW6TXuHmzdO+BTfMnWjRx5/LNlIJjo4f8UcI8DKA9MAL y1R2zk5aZALN/noCu1j0O+RyWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMTCbEvH 9Y4XkoH/t3YEAtMeMXFSMB8GA1UdIwQYMBaAFAMeKfJueDKBt2jokQhTFE3x7lU0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDVCRi9GMTMzQkRBQzEz RjIxMUVCOUJFRkNENTFDNEY5QUUwMi9BeDRwOG01NE1vRzNhT2lSQ0ZNVVRmSHVW VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F4NHA4bTU0TW9HM2FPaVJDRk1VVGZIdVZUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDVCRi9GMTMzQkRBQzEzRjIxMUVCOUJFRkNENTFDNEY5QUUwMi9BeDRwOG01NE1v RzNhT2lSQ0ZNVVRmSHVWVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+lpCYl2DBTP1vUOirSVxQEKyoZFdRh4zN4E6bAXdFLUKeZL0GqrXG c29nvT+jKIZXNeZd1SlFlHam6iOxnBvKeL59MXx0GcvHQ15KJboH2wqFH92JFmI/ 6RAhO1rbWBWWG2RxT7qWKhCHnPMVuqBmQGF7UFPLYJzSi0AmRIfcLwknADPgc8DA ygl66NlJog489lg7a6vGUqnABsIBgY6STqF6JkGVkugUfvfL12Byqh91RSkxmYQ5 csdu4dS2DfH5YUHguKFIGUAueDGq0b6+SD77jJzoXMWWH6Pp3Gn5Z2H9zjKvND8C fdG1QiBvINK3eRi6YOwlD5bUM716lrOK -----END CERTIFICATE-----Generated at Sat Aug 23 16:37:30 2025 by rpki-client