$ rpki-client -vvf rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.mft File: v02AE9uXuO8A-M6Mbb6vsFHhlLw.mft (raw, json) Hash identifier: RxC9y5gZcftHFk/+H6cgOGAyHo7N1xUVC47b839DyaA= Subject key identifier: 3E:5D:34:4B:35:FB:92:DC:E2:D3:AC:A5:8A:0B:1A:88:CC:91:9F:6A Authority key identifier: BF:4D:80:13:DB:97:B8:EF:00:F8:CE:8C:6D:BE:AF:B0:51:E1:94:BC Certificate issuer: /CN=A9191BBF/serialNumber=BF4D8013DB97B8EF00F8CE8C6DBEAFB051E194BC Certificate serial: 0654 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v02AE9uXuO8A-M6Mbb6vsFHhlLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.mft Manifest number: 064B Signing time: Fri 22 Aug 2025 22:49:40 +0000 Manifest this update: Fri 22 Aug 2025 22:49:40 +0000 Manifest next update: Fri 29 Aug 2025 22:49:40 +0000 Files and hashes: 1: v02AE9uXuO8A-M6Mbb6vsFHhlLw.crl (hash: 6/RMe7l03uGuOcoxODCm5RN3O+c3J/ZSsvc8WJHF3vs=) 2: 4482148613E611EE8ECA2D3CC4F9AE02.roa (hash: XTSBtrIecRC5bRQ4gGFFZQkO+lSp1UBH8SdLLnw+dpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.crl rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v02AE9uXuO8A-M6Mbb6vsFHhlLw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:49:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1620 (0x654) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191BBF, serialNumber=BF4D8013DB97B8EF00F8CE8C6DBEAFB051E194BC Validity Not Before: Aug 22 22:49:40 2025 GMT Not After : Aug 29 22:49:40 2025 GMT Subject: CN=68a8f404-4a84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a4:14:9c:42:f2:36:06:b4:4f:b9:8a:59:fa: 6f:29:fa:3e:ce:01:c5:f7:f9:81:18:79:d0:45:7b: 4b:6e:30:bf:23:1d:49:25:9f:4d:f4:9a:9c:f0:d9: 97:37:c8:59:d8:92:cd:51:32:13:aa:30:5c:93:41: 0c:00:77:ca:d5:1c:9b:8f:bb:99:b4:1d:cf:a2:f0: 74:4e:6a:aa:d3:f4:0a:f4:76:00:4a:d2:46:12:1f: cc:3d:ee:30:a3:dc:f9:5c:ff:8b:d7:87:19:ba:35: 60:87:49:aa:bf:a8:ca:fe:c2:b6:5f:a7:6b:e7:f6: e0:e5:02:d5:55:4d:ce:60:af:bd:08:3d:b3:72:87: a6:5b:ad:5a:22:a2:f4:42:24:62:5f:03:ad:cb:c5: 3d:02:96:3f:7c:92:be:9b:19:c2:9d:68:87:6e:aa: c2:12:4e:ea:af:c1:72:25:e9:6f:5e:30:63:6e:5f: 87:8e:e6:50:2c:1a:6c:09:d1:95:98:df:cf:76:3e: f6:d3:e8:e9:96:1e:8c:35:6e:00:c7:e9:cf:f6:f6: 23:67:a5:43:6e:f7:9a:19:dd:73:de:da:a3:e4:c7: 9a:76:54:9a:54:b1:6e:73:1d:f3:f7:d0:0f:13:83: 66:b9:3d:2e:61:42:76:14:04:47:7c:27:b3:30:2b: 99:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:5D:34:4B:35:FB:92:DC:E2:D3:AC:A5:8A:0B:1A:88:CC:91:9F:6A X509v3 Authority Key Identifier: keyid:BF:4D:80:13:DB:97:B8:EF:00:F8:CE:8C:6D:BE:AF:B0:51:E1:94:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v02AE9uXuO8A-M6Mbb6vsFHhlLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:94:41:71:dc:5c:dc:cb:74:3e:ce:65:74:28:bf:ef:97:38: b6:e1:a3:2a:f5:4c:a9:e9:3e:2a:cf:7a:23:52:a8:ad:f9:41: 1e:ea:6b:4a:73:50:55:f5:f6:d7:9d:5d:e5:0a:b3:dd:29:75: 9d:97:e2:a5:47:1a:96:20:cb:f3:ae:59:62:f0:72:a9:74:b0: 72:63:44:63:24:0a:1d:6f:21:fa:38:f1:8f:3f:8f:55:f8:1c: b0:65:51:39:65:e5:d2:56:c1:39:5e:4b:b6:4f:ad:2b:16:fd: 9b:77:4c:76:2f:a3:0f:01:c5:4a:7a:7e:d0:3a:6d:e9:d6:68: ce:21:7b:88:b9:af:fd:5f:84:64:28:39:3f:a7:d4:fc:36:b8: 07:3d:41:4d:43:da:7e:7d:93:bf:f3:4b:4b:b6:a9:d9:cd:d4: c7:db:3f:e0:be:82:62:94:89:af:82:55:43:7e:4d:1f:e2:ed: a3:b2:5c:a5:fa:c4:72:b7:bf:25:89:c7:39:0e:6c:7e:0a:f7: 57:5c:12:bd:0e:36:7d:42:b0:cd:ab:9f:9c:4a:d0:2f:54:63: 94:c5:b5:60:f7:0f:a9:a0:38:9d:26:71:87:f0:49:0b:10:31: 8e:e3:dd:d8:2b:51:15:0f:7f:52:d6:fa:ba:44:c1:c8:c4:70: 7a:3e:9c:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFCQkYxMTAvBgNVBAUTKEJGNEQ4MDEzREI5N0I4RUYwMEY4Q0U4QzZEQkVBRkIw NTFFMTk0QkMwHhcNMjUwODIyMjI0OTQwWhcNMjUwODI5MjI0OTQwWjAYMRYwFAYD VQQDEw02OGE4ZjQwNC00YTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA36QUnELyNga0T7mKWfpvKfo+zgHF9/mBGHnQRXtLbjC/Ix1JJZ9N9Jqc8NmX N8hZ2JLNUTITqjBck0EMAHfK1Rybj7uZtB3PovB0Tmqq0/QK9HYAStJGEh/MPe4w o9z5XP+L14cZujVgh0mqv6jK/sK2X6dr5/bg5QLVVU3OYK+9CD2zcoemW61aIqL0 QiRiXwOty8U9ApY/fJK+mxnCnWiHbqrCEk7qr8FyJelvXjBjbl+HjuZQLBpsCdGV mN/Pdj720+jplh6MNW4Ax+nP9vYjZ6VDbveaGd1z3tqj5MeadlSaVLFucx3z99AP E4NmuT0uYUJ2FARHfCezMCuZDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD5dNEs1 +5Lc4tOspYoLGojMkZ9qMB8GA1UdIwQYMBaAFL9NgBPbl7jvAPjOjG2+r7BR4ZS8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUJCRi8xMjZCOTA5QTlE QkQxMUVCOEExRjBCMzJDNEY5QUUwMi92MDJBRTl1WHVPOEEtTTZNYmI2dnNGSGhs THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YwMkFFOXVYdU84QS1NNk1iYjZ2c0ZIaGxMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUJCRi8xMjZCOTA5QTlEQkQxMUVCOEExRjBCMzJDNEY5QUUwMi92MDJBRTl1WHVP OEEtTTZNYmI2dnNGSGhsTHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzlEFx3Fzcy3Q+zmV0KL/vlzi24aMq9Uyp6T4qz3ojUqit+UEe6mtK c1BV9fbXnV3lCrPdKXWdl+KlRxqWIMvzrlli8HKpdLByY0RjJAodbyH6OPGPP49V +BywZVE5ZeXSVsE5Xku2T60rFv2bd0x2L6MPAcVKen7QOm3p1mjOIXuIua/9X4Rk KDk/p9T8NrgHPUFNQ9p+fZO/80tLtqnZzdTH2z/gvoJilImvglVDfk0f4u2jslyl +sRyt78licc5Dmx+CvdXXBK9DjZ9QrDNq5+cStAvVGOUxbVg9w+poDidJnGH8EkL EDGO493YK1EVD39S1vq6RMHIxHB6Ppxw -----END CERTIFICATE-----Generated at Sat Aug 23 21:37:29 2025 by rpki-client