$ rpki-client -vvf rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft File: 31OLuqk3tpugC7J7caS3dubkGf4.mft (raw, json) Hash identifier: fYl/+EEAHOaFiyF/JsjnHPGEK6P815gc9Z6eg2lWI+Q= Subject key identifier: 10:B4:BD:96:14:7D:D0:DD:A5:98:C5:F6:1D:FC:FD:3C:E1:96:3B:C4 Authority key identifier: DF:53:8B:BA:A9:37:B6:9B:A0:0B:B2:7B:71:A4:B7:76:E6:E4:19:FE Certificate issuer: /CN=A9191170/serialNumber=DF538BBAA937B69BA00BB27B71A4B776E6E419FE Certificate serial: 01A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31OLuqk3tpugC7J7caS3dubkGf4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft Manifest number: 01A2 Signing time: Sat 23 Aug 2025 03:24:57 +0000 Manifest this update: Sat 23 Aug 2025 03:24:57 +0000 Manifest next update: Sat 30 Aug 2025 03:24:57 +0000 Files and hashes: 1: 31OLuqk3tpugC7J7caS3dubkGf4.crl (hash: /9pZcm1tmRd1Fc1B/CkCkN9QeZ+l+ofRlaJxlqnAbWA=) 2: 086823BE07B911F0875CC733C4F9AE02.roa (hash: a6qqO3amLPBWrWsiageKzRj9w8Ftk/NLdlmIk76Re5k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.crl rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31OLuqk3tpugC7J7caS3dubkGf4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:24:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 423 (0x1a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191170, serialNumber=DF538BBAA937B69BA00BB27B71A4B776E6E419FE Validity Not Before: Aug 23 03:24:57 2025 GMT Not After : Aug 30 03:24:57 2025 GMT Subject: CN=68a93489-69f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ce:de:0a:f6:3f:e4:0e:4e:37:de:75:ff:06: 86:15:bb:f7:35:2e:78:a2:04:64:73:ff:a4:4b:71: 31:99:df:79:f9:2d:43:25:58:fb:fe:20:57:b0:81: d2:b6:b7:f1:81:51:cf:75:5f:e2:58:98:e0:99:ff: ad:1e:a7:4f:b1:aa:4d:29:a2:1d:c4:75:36:da:ad: a2:cf:e7:46:34:51:69:f6:93:c6:e8:ff:c8:0b:85: cb:ad:c8:d9:62:58:f7:41:10:b9:d1:67:83:f9:2b: ab:cb:87:b2:00:0c:24:16:52:d6:6d:4c:41:81:1e: 55:cb:da:d7:9e:2a:70:b7:75:56:1b:58:c1:46:44: 5f:df:07:87:10:96:d2:e2:db:d8:0e:fb:09:79:3d: 9e:d7:90:45:92:4e:3e:6e:57:61:08:60:f2:ba:28: 6c:31:2d:d2:22:51:2c:59:16:75:de:ab:31:e4:3e: 2f:be:43:f1:90:28:3b:54:2a:1d:06:56:68:ef:d5: f9:8e:c3:c0:83:17:f0:7c:22:46:2d:8f:98:b7:6d: 29:83:26:25:92:9f:a3:5a:7e:1e:dd:38:1f:e9:86: e2:97:b2:8d:5c:f7:87:0e:a4:7d:63:72:51:43:0d: 32:27:d8:88:c2:bc:5e:f7:16:3a:e4:a3:5f:81:a2: ab:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:B4:BD:96:14:7D:D0:DD:A5:98:C5:F6:1D:FC:FD:3C:E1:96:3B:C4 X509v3 Authority Key Identifier: keyid:DF:53:8B:BA:A9:37:B6:9B:A0:0B:B2:7B:71:A4:B7:76:E6:E4:19:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31OLuqk3tpugC7J7caS3dubkGf4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:7e:9f:83:4b:5c:1a:22:ed:5e:7e:08:5e:85:8a:fd:0f:90: 85:05:9b:53:9e:b8:7f:63:a5:d3:dc:18:16:91:eb:e5:00:03: b6:22:23:14:07:37:a8:36:78:95:ea:d9:36:6d:23:e6:6e:3c: ab:31:c4:45:c9:b2:de:ff:36:e7:c5:d8:2a:00:48:69:97:e0: 41:07:71:6d:9c:80:95:b5:08:26:df:33:eb:67:67:04:77:c7: 96:f8:a6:be:17:67:37:9e:e5:b6:7d:90:28:b2:1f:f8:4c:2b: 58:8f:48:22:9c:68:79:88:26:71:5e:48:3a:a4:d2:6f:fd:8d: 09:c0:94:8d:68:c2:c4:ec:a6:d3:7e:e9:c3:0a:e7:92:f7:b6: 76:07:44:0d:f9:84:e4:3c:ba:8c:bc:ed:7e:ef:aa:b1:1b:d1: b6:08:97:3a:eb:86:bd:67:4e:ae:1e:f3:bf:da:f1:7a:06:34: c5:04:f0:d6:23:f6:01:e5:e1:2f:bd:f5:20:f3:3c:77:64:c4: 92:d3:4e:c8:05:e4:18:ca:2b:7e:02:d4:32:68:d8:fe:ea:d0: d9:c1:0c:de:9d:53:57:c1:f1:f6:d3:20:cb:17:ef:93:2a:87: 7e:09:39:b0:9a:ce:d3:53:0b:49:72:e4:ab:38:a5:f8:69:90: 2f:3b:2d:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTExNzAxMTAvBgNVBAUTKERGNTM4QkJBQTkzN0I2OUJBMDBCQjI3QjcxQTRCNzc2 RTZFNDE5RkUwHhcNMjUwODIzMDMyNDU3WhcNMjUwODMwMDMyNDU3WjAYMRYwFAYD VQQDEw02OGE5MzQ4OS02OWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuc7eCvY/5A5ON951/waGFbv3NS54ogRkc/+kS3Exmd95+S1DJVj7/iBXsIHS trfxgVHPdV/iWJjgmf+tHqdPsapNKaIdxHU22q2iz+dGNFFp9pPG6P/IC4XLrcjZ Ylj3QRC50WeD+Sury4eyAAwkFlLWbUxBgR5Vy9rXnipwt3VWG1jBRkRf3weHEJbS 4tvYDvsJeT2e15BFkk4+bldhCGDyuihsMS3SIlEsWRZ13qsx5D4vvkPxkCg7VCod BlZo79X5jsPAgxfwfCJGLY+Yt20pgyYlkp+jWn4e3Tgf6Ybil7KNXPeHDqR9Y3JR Qw0yJ9iIwrxe9xY65KNfgaKruQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBC0vZYU fdDdpZjF9h38/TzhljvEMB8GA1UdIwQYMBaAFN9Ti7qpN7aboAuye3Gkt3bm5Bn+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTE3MC9GMzIzMDhDMjA0 MkExMUVFOTRBODQ5NDFDNEY5QUUwMi8zMU9MdXFrM3RwdWdDN0o3Y2FTM2R1YmtH ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMxT0x1cWszdHB1Z0M3SjdjYVMzZHVia0dmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTE3MC9GMzIzMDhDMjA0MkExMUVFOTRBODQ5NDFDNEY5QUUwMi8zMU9MdXFrM3Rw dWdDN0o3Y2FTM2R1YmtHZjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMfp+DS1waIu1efghehYr9D5CFBZtTnrh/Y6XT3BgWkevlAAO2IiMU BzeoNniV6tk2bSPmbjyrMcRFybLe/zbnxdgqAEhpl+BBB3FtnICVtQgm3zPrZ2cE d8eW+Ka+F2c3nuW2fZAosh/4TCtYj0ginGh5iCZxXkg6pNJv/Y0JwJSNaMLE7KbT funDCueS97Z2B0QN+YTkPLqMvO1+76qxG9G2CJc664a9Z06uHvO/2vF6BjTFBPDW I/YB5eEvvfUg8zx3ZMSS007IBeQYyit+AtQyaNj+6tDZwQzenVNXwfH20yDLF++T Kod+CTmwms7TUwtJcuSrOKX4aZAvOy38 -----END CERTIFICATE-----Generated at Sat Aug 23 16:38:50 2025 by rpki-client