$ rpki-client -vvf rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.mft File: aSE1YIaDdV6U2OylfYsLNY7OFxg.mft (raw, json) Hash identifier: iT2uEy6yqZwuG6MHC7ZHNjFxHKOfBKSQyigrkBGm14s= Subject key identifier: 3B:D2:0F:73:7C:78:55:A8:C9:D5:68:66:AF:63:E4:11:9B:5C:7F:DE Authority key identifier: 69:21:35:60:86:83:75:5E:94:D8:EC:A5:7D:8B:0B:35:8E:CE:17:18 Certificate issuer: /CN=A9198996/serialNumber=692135608683755E94D8ECA57D8B0B358ECE1718 Certificate serial: 0382 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aSE1YIaDdV6U2OylfYsLNY7OFxg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.mft Manifest number: 035F Signing time: Sat 23 Aug 2025 01:18:42 +0000 Manifest this update: Sat 23 Aug 2025 01:18:42 +0000 Manifest next update: Sat 30 Aug 2025 01:18:42 +0000 Files and hashes: 1: aSE1YIaDdV6U2OylfYsLNY7OFxg.crl (hash: NW84wGwzdpr796zSPJFSThLiKSqEHPm5gaAbuP7W+ek=) 2: EFEEF8165BB211EE88BB1945C4F9AE02.roa (hash: pBp+3YEZO1rLrx0bvICmu2Gq4WoxGLfmXIpKccpgGw8=) 3: 593105685BB711EE8E69584CC4F9AE02.roa (hash: uvitL8GneMzjmVuJsx1eXtiAdiTmVIZbzsGZDaPZNkE=) 4: D0D44F9A7A7311EF9B70B061C4F9AE02.roa (hash: rOMU6+JJyASa3UMEbMc1nVoiFLnAmgt++mEA6n5GZvo=) 5: 3E6E7A0C5FFB11EDBDF5A627C4F9AE02.roa (hash: U81ppJdJPa/NwEizA2XDkKKg4D0+UWmO8vP3Sd1xBj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.crl rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aSE1YIaDdV6U2OylfYsLNY7OFxg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:18:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 898 (0x382) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198996, serialNumber=692135608683755E94D8ECA57D8B0B358ECE1718 Validity Not Before: Aug 23 01:18:42 2025 GMT Not After : Aug 30 01:18:42 2025 GMT Subject: CN=68a916f2-6de4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:53:84:0e:7e:7d:a0:1a:c8:6b:43:86:e2:60: 06:d8:72:51:b9:88:7a:21:be:17:e0:7d:18:99:93: 9c:06:4a:d5:2f:d2:83:a4:7d:30:f6:64:2c:d4:a6: 40:e1:38:92:6c:1d:a3:0f:66:d2:68:13:f2:3c:ad: 22:f2:9c:01:02:c6:bb:1c:5a:cf:59:a4:80:7d:26: 74:06:78:a4:f6:a6:00:cf:6c:28:5a:a0:9e:94:dd: 70:73:aa:5a:b9:81:82:5a:0b:9c:ce:f5:e5:05:71: 6d:f9:63:05:1b:67:9d:34:0f:d4:7e:3a:55:4e:99: d8:4c:8c:0d:06:17:9e:dd:e9:5e:e2:99:3f:ae:82: eb:96:57:1e:1c:28:04:97:39:53:04:c5:f7:6a:17: 49:34:ff:07:92:db:97:eb:a9:a0:d1:aa:dc:42:1f: 2a:75:15:17:79:82:3a:9c:73:01:e8:16:c8:2a:f0: e2:04:c1:9f:c7:6f:77:aa:08:60:d9:47:13:e0:65: 5b:dd:cf:af:62:f7:7e:d3:14:35:eb:3d:50:4d:42: 91:1f:de:af:1d:e7:55:3a:36:df:87:c7:d2:1e:b3: a3:38:23:74:74:ea:da:23:3d:a8:d6:92:94:5a:41: 18:87:c8:db:71:2b:c7:05:7f:ef:ed:d6:30:7a:5e: 3b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:D2:0F:73:7C:78:55:A8:C9:D5:68:66:AF:63:E4:11:9B:5C:7F:DE X509v3 Authority Key Identifier: keyid:69:21:35:60:86:83:75:5E:94:D8:EC:A5:7D:8B:0B:35:8E:CE:17:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aSE1YIaDdV6U2OylfYsLNY7OFxg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:a8:e4:50:0d:2e:38:7b:3e:c9:34:e1:8e:1b:f8:71:4d:43: 3b:ff:71:2a:d1:b6:eb:05:dc:3c:8d:97:2a:e6:5d:08:f1:e9: 31:cd:c3:f4:4d:ff:b2:dd:60:72:1e:16:7f:23:2c:45:0e:b8: 78:f0:c9:f0:6c:ed:6a:e6:31:10:48:d5:66:37:67:83:bb:c5: 20:e3:8d:21:46:6b:18:33:14:2a:fa:86:36:76:ad:49:e7:7e: 0f:40:62:26:c7:df:4f:53:65:fc:8a:fd:d5:13:ac:45:7f:9c: 2b:55:e3:fa:45:32:61:45:a2:ac:d5:ca:be:da:ef:95:79:e0: 92:08:72:66:f4:67:9b:88:50:f0:73:ac:e3:72:ac:42:8d:4f: ce:7d:79:68:9a:70:be:49:70:78:60:8f:27:3f:e0:19:fd:ec: 34:35:66:4d:e9:e9:05:38:e6:67:7d:8b:c1:30:5c:94:26:cb: db:df:52:a3:4d:f9:5a:80:a5:dc:d0:8b:1d:a8:50:38:ec:6e: 0e:75:cb:6f:92:48:72:09:a4:1c:a1:9d:2a:78:a6:30:0e:9c: 3d:9c:13:44:c5:09:e6:a7:5f:ab:0f:77:a0:e9:e5:96:7c:71: 3f:f9:74:b2:91:e6:d2:60:05:db:3c:48:60:5c:9e:0c:99:1b: f5:50:fb:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg5OTYxMTAvBgNVBAUTKDY5MjEzNTYwODY4Mzc1NUU5NEQ4RUNBNTdEOEIwQjM1 OEVDRTE3MTgwHhcNMjUwODIzMDExODQyWhcNMjUwODMwMDExODQyWjAYMRYwFAYD VQQDEw02OGE5MTZmMi02ZGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmFOEDn59oBrIa0OG4mAG2HJRuYh6Ib4X4H0YmZOcBkrVL9KDpH0w9mQs1KZA 4TiSbB2jD2bSaBPyPK0i8pwBAsa7HFrPWaSAfSZ0Bnik9qYAz2woWqCelN1wc6pa uYGCWguczvXlBXFt+WMFG2edNA/UfjpVTpnYTIwNBhee3ele4pk/roLrllceHCgE lzlTBMX3ahdJNP8HktuX66mg0arcQh8qdRUXeYI6nHMB6BbIKvDiBMGfx293qghg 2UcT4GVb3c+vYvd+0xQ16z1QTUKRH96vHedVOjbfh8fSHrOjOCN0dOraIz2o1pKU WkEYh8jbcSvHBX/v7dYwel47JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDvSD3N8 eFWoydVoZq9j5BGbXH/eMB8GA1UdIwQYMBaAFGkhNWCGg3VelNjspX2LCzWOzhcY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODk5Ni82NjAzMEY1RUQw NjAxMUVDQkE0MEZDODNDNEY5QUUwMi9hU0UxWUlhRGRWNlUyT3lsZllzTE5ZN09G eGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FTRTFZSWFEZFY2VTJPeWxmWXNMTlk3T0Z4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODk5Ni82NjAzMEY1RUQwNjAxMUVDQkE0MEZDODNDNEY5QUUwMi9hU0UxWUlhRGRW NlUyT3lsZllzTE5ZN09GeGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjqORQDS44ez7JNOGOG/hxTUM7/3Eq0bbrBdw8jZcq5l0I8ekxzcP0 Tf+y3WByHhZ/IyxFDrh48MnwbO1q5jEQSNVmN2eDu8Ug440hRmsYMxQq+oY2dq1J 534PQGImx99PU2X8iv3VE6xFf5wrVeP6RTJhRaKs1cq+2u+VeeCSCHJm9GebiFDw c6zjcqxCjU/OfXlomnC+SXB4YI8nP+AZ/ew0NWZN6ekFOOZnfYvBMFyUJsvb31Kj TflagKXc0IsdqFA47G4OdctvkkhyCaQcoZ0qeKYwDpw9nBNExQnmp1+rD3eg6eWW fHE/+XSykebSYAXbPEhgXJ4MmRv1UPva -----END CERTIFICATE-----Generated at Sat Aug 23 19:38:04 2025 by rpki-client