$ rpki-client -vvf rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft File: aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft (raw, json) Hash identifier: /u8dVEBquz8qc0OO5+/e0pKxxyJXp7WGKt7liR5iMJU= Subject key identifier: 86:B6:6A:AF:6D:AB:B1:DE:90:8A:0D:57:1D:C6:37:9C:BB:58:F8:84 Authority key identifier: 69:05:41:86:79:F4:3C:A8:88:CB:23:BF:2B:CB:2B:E6:99:C0:C3:66 Certificate issuer: /CN=A9183010/serialNumber=6905418679F43CA888CB23BF2BCB2BE699C0C366 Certificate serial: 34B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft Manifest number: 34AE Signing time: Fri 22 Aug 2025 15:09:40 +0000 Manifest this update: Fri 22 Aug 2025 15:09:40 +0000 Manifest next update: Fri 29 Aug 2025 15:09:40 +0000 Files and hashes: 1: aQVBhnn0PKiIyyO_K8sr5pnAw2Y.crl (hash: FRq/bU2g6aQuzhsgr9XUx0ld3qrV+7tdbAfh74NQSlE=) 2: 99144F3C03DB11F09FBAF32DC4F9AE02.roa (hash: 2QPhy8okP7a5b727IcPA6kh/C7CWYx/FM2MEQeDTjxM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.crl rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:09:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13494 (0x34b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183010, serialNumber=6905418679F43CA888CB23BF2BCB2BE699C0C366 Validity Not Before: Aug 22 15:09:40 2025 GMT Not After : Aug 29 15:09:40 2025 GMT Subject: CN=68a88834-ee3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4c:8f:6c:07:8d:cf:09:e0:4d:14:5e:a3:6d: f1:bd:f4:3e:e3:cf:34:d4:8f:ad:a5:62:b8:63:b8: b2:6a:9a:8a:e5:b5:b1:1d:27:aa:f1:07:b2:da:05: d9:4f:0e:15:59:9e:f1:a7:8e:15:d2:5d:29:74:e7: ef:6f:b6:cf:7d:1c:6a:03:fb:72:a5:47:ec:22:d1: 42:87:7b:fa:31:5f:9f:1c:f2:94:62:5d:24:85:d2: 48:97:08:28:93:85:47:0c:22:74:c0:8c:62:00:84: d7:94:e5:e3:f5:eb:10:6c:8b:e1:cc:79:59:0e:81: fb:35:e8:fe:bf:6c:d0:b9:14:53:da:31:63:1f:a4: 5a:57:0a:48:34:71:fc:fa:3d:c0:a2:8b:2c:8a:5e: 70:c4:86:ec:d1:8f:05:15:ac:0e:11:f6:74:4d:fe: fc:95:d7:d0:ee:2e:9f:fb:34:db:c6:1f:31:b0:4c: d3:28:24:20:34:d0:a6:4a:ba:8c:42:84:39:7c:60: 10:de:ea:33:85:06:df:f2:3a:e8:d5:c4:98:56:16: 3c:ac:b8:8a:b1:5f:e0:35:01:d3:3a:23:fe:3a:ec: 9c:1b:d2:c2:86:a2:e7:c8:e9:ce:a4:b1:fa:ac:10: d0:44:95:f8:7c:aa:47:d2:74:66:fa:1f:89:3c:06: 6d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:B6:6A:AF:6D:AB:B1:DE:90:8A:0D:57:1D:C6:37:9C:BB:58:F8:84 X509v3 Authority Key Identifier: keyid:69:05:41:86:79:F4:3C:A8:88:CB:23:BF:2B:CB:2B:E6:99:C0:C3:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:53:e2:27:b6:30:c0:1d:6e:b3:fa:c4:45:57:bd:2e:cc:3c: 72:0c:84:c2:65:ac:64:a4:d9:5f:76:cb:fd:12:4c:5a:d4:96: 06:aa:e8:a4:97:e4:e9:d5:93:62:ca:02:1d:87:87:23:2e:10: ac:17:d0:02:fc:a6:6b:07:0b:ed:4a:37:90:94:ff:ec:7b:36: 8c:2c:ad:19:36:b3:51:67:e7:88:40:ca:7b:b0:b9:c1:bb:b9: 3c:e0:5d:cc:cb:87:14:c2:a2:5d:ef:01:d4:1b:d3:b8:4c:9a: 16:24:f4:e9:c4:aa:4f:e3:8e:d1:05:5c:98:1f:cd:c3:b0:c2: a1:06:69:5e:50:05:aa:0a:19:d0:c7:b3:fb:39:f7:12:20:f4: 60:61:50:ad:45:1f:2e:06:af:d9:70:66:ce:c5:d2:61:f2:c0: ae:5a:81:20:01:f0:38:7b:5f:3b:93:a8:d5:c2:e4:60:58:18: cb:29:40:0d:25:0b:f0:c1:f1:ad:e0:bb:a7:6f:68:46:ee:5d: 6f:91:59:de:f3:20:de:e2:a7:ba:a0:a4:25:4a:ac:fa:47:96: f8:90:77:5c:4a:6b:ac:4a:d7:47:57:19:e5:74:2b:8f:0d:c6: 84:ff:08:8e:5e:16:5c:90:2a:6f:64:bb:a2:5b:32:8c:5b:2a: 60:fb:58:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODMwMTAxMTAvBgNVBAUTKDY5MDU0MTg2NzlGNDNDQTg4OENCMjNCRjJCQ0IyQkU2 OTlDMEMzNjYwHhcNMjUwODIyMTUwOTQwWhcNMjUwODI5MTUwOTQwWjAYMRYwFAYD VQQDEw02OGE4ODgzNC1lZTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwUyPbAeNzwngTRReo23xvfQ+48801I+tpWK4Y7iyapqK5bWxHSeq8Qey2gXZ Tw4VWZ7xp44V0l0pdOfvb7bPfRxqA/typUfsItFCh3v6MV+fHPKUYl0khdJIlwgo k4VHDCJ0wIxiAITXlOXj9esQbIvhzHlZDoH7Nej+v2zQuRRT2jFjH6RaVwpINHH8 +j3Aoossil5wxIbs0Y8FFawOEfZ0Tf78ldfQ7i6f+zTbxh8xsEzTKCQgNNCmSrqM QoQ5fGAQ3uozhQbf8jro1cSYVhY8rLiKsV/gNQHTOiP+OuycG9LChqLnyOnOpLH6 rBDQRJX4fKpH0nRm+h+JPAZtqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIa2aq9t q7HekIoNVx3GN5y7WPiEMB8GA1UdIwQYMBaAFGkFQYZ59DyoiMsjvyvLK+aZwMNm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzAxMC81RjFEREIxMjFE QTMxMUUyOTNCMTlFOTgwOEIwMkNEMi9hUVZCaG5uMFBLaUl5eU9fSzhzcjVwbkF3 MlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FRVkJobm4wUEtpSXl5T19LOHNyNXBuQXcyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzAxMC81RjFEREIxMjFEQTMxMUUyOTNCMTlFOTgwOEIwMkNEMi9hUVZCaG5uMFBL aUl5eU9fSzhzcjVwbkF3MlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUU+IntjDAHW6z+sRFV70uzDxyDITCZaxkpNlfdsv9Ekxa1JYGquik l+Tp1ZNiygIdh4cjLhCsF9AC/KZrBwvtSjeQlP/sezaMLK0ZNrNRZ+eIQMp7sLnB u7k84F3My4cUwqJd7wHUG9O4TJoWJPTpxKpP447RBVyYH83DsMKhBmleUAWqChnQ x7P7OfcSIPRgYVCtRR8uBq/ZcGbOxdJh8sCuWoEgAfA4e187k6jVwuRgWBjLKUAN JQvwwfGt4Lunb2hG7l1vkVne8yDe4qe6oKQlSqz6R5b4kHdcSmusStdHVxnldCuP DcaE/wiOXhZckCpvZLuiWzKMWypg+1h2 -----END CERTIFICATE-----Generated at Sun Aug 24 00:16:08 2025 by rpki-client