$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft File: AkIpyBrDU1oh1g4twyqbiL1q2B8.mft (raw, json) Hash identifier: 3AsOefr5nWpyh7OOkGGv+1StV4JtQhH8mI5N/DlH2w4= Subject key identifier: 9F:62:04:0A:D6:60:FB:E4:DC:E0:56:FB:73:0E:14:08:89:FA:06:64 Authority key identifier: 02:42:29:C8:1A:C3:53:5A:21:D6:0E:2D:C3:2A:9B:88:BD:6A:D8:1F Certificate issuer: /CN=A91A0848/serialNumber=024229C81AC3535A21D60E2DC32A9B88BD6AD81F Certificate serial: 021F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft Manifest number: 0209 Signing time: Sat 23 Aug 2025 02:32:29 +0000 Manifest this update: Sat 23 Aug 2025 02:32:29 +0000 Manifest next update: Sat 30 Aug 2025 02:32:29 +0000 Files and hashes: 1: AkIpyBrDU1oh1g4twyqbiL1q2B8.crl (hash: p9+6SZxSyQBlsZdt8vNLCK826QXfFNCcycxnj5t4X4E=) 2: B9D00D3C195A11EE83248835C4F9AE02.roa (hash: TDlTkXNyk/OE7AIzmPKhh2DU+PZI5hEvSUbR0akOStU=) 3: 3B6578C47F4211F084F6C541C4F9AE02.roa (hash: B4BkdpTo1qZHacqSMnVvogHOqStnqdG0ex859T6dd8w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.crl rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:32:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 543 (0x21f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0848, serialNumber=024229C81AC3535A21D60E2DC32A9B88BD6AD81F Validity Not Before: Aug 23 02:32:29 2025 GMT Not After : Aug 30 02:32:29 2025 GMT Subject: CN=68a9283d-3702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:57:0b:72:d6:ed:f6:04:9e:8c:a3:46:ff:90: 23:ae:ef:97:65:b0:e1:e5:42:7f:cf:68:78:4c:ff: 5b:1f:48:cc:4d:b7:20:d5:51:9f:14:17:bd:e4:0a: 44:14:f6:51:d0:81:b8:57:a9:9e:ca:4c:56:21:a0: 04:67:a6:21:84:78:5d:ca:96:a9:a8:09:b7:39:8b: cc:da:c1:9a:e3:d0:52:92:66:41:ce:32:64:03:09: 5b:f1:f5:75:af:a9:62:9f:d5:f6:bd:66:7b:ad:0b: ae:98:8d:fd:8d:22:8c:bc:fc:23:27:d8:06:45:3f: 6d:cf:33:c7:4f:4b:94:cf:6f:a0:96:2c:16:71:43: b1:35:92:34:af:48:4c:5a:37:b2:41:6a:be:28:61: 4f:b3:d2:a7:c3:a1:d0:f7:3e:78:09:bd:1f:44:35: b6:a4:89:8d:eb:ff:29:af:93:43:3b:85:7a:6b:63: dc:e0:f5:ce:cd:9b:0a:9b:f3:11:64:73:a0:82:b8: 82:ef:62:87:62:3f:b5:e2:37:4f:3f:d4:15:1a:a0: 7d:ba:0a:04:83:4c:8b:87:e3:47:b5:1e:c7:3f:2a: 13:47:be:e2:59:a9:e9:10:f8:3f:fd:44:41:0a:c6: e6:24:75:e6:2e:d6:cb:4b:ad:7d:db:e7:cd:e0:a7: a8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:62:04:0A:D6:60:FB:E4:DC:E0:56:FB:73:0E:14:08:89:FA:06:64 X509v3 Authority Key Identifier: keyid:02:42:29:C8:1A:C3:53:5A:21:D6:0E:2D:C3:2A:9B:88:BD:6A:D8:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:10:9b:97:5e:bb:27:55:68:ed:09:6a:fd:71:e0:33:aa:80: 0e:11:32:91:f7:33:3c:9c:2d:23:93:9e:16:ca:b2:c0:45:6b: 7e:dc:5f:9b:23:92:5a:0e:02:d1:3c:e9:39:76:8b:ba:b4:6b: 38:3a:f9:da:ff:56:32:cc:e7:6f:c1:87:d1:73:1e:8e:2f:01: 34:cf:37:53:d9:78:7f:4b:c3:50:9d:68:39:93:77:71:e4:f7: 7a:42:96:6b:56:4b:74:31:e2:87:f5:6e:5e:68:a9:ec:4d:2c: 04:1e:e2:2d:55:d9:d0:37:74:cd:e2:65:be:91:38:f6:51:d7: 3d:b5:82:ab:09:88:7a:3f:ca:8a:7e:40:77:4f:58:47:20:46: d9:23:db:bd:0b:7b:d8:07:c6:d5:a9:8e:68:80:52:5b:a0:48: 94:c6:ff:cd:66:8f:fa:f2:8f:8c:ae:96:ca:07:0c:91:cf:74: 91:89:82:68:99:ed:bd:c9:03:30:7b:04:48:43:5b:05:ce:0a: 87:24:d8:86:d7:b7:fa:4e:fa:fe:56:99:c8:67:d8:62:b0:74: 07:d4:d9:9f:aa:43:4f:6c:49:7f:5b:88:60:6e:00:a2:da:38: 23:12:f6:7d:84:ed:95:39:76:07:71:88:d8:ee:37:bc:36:bf: 10:98:c5:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA4NDgxMTAvBgNVBAUTKDAyNDIyOUM4MUFDMzUzNUEyMUQ2MEUyREMzMkE5Qjg4 QkQ2QUQ4MUYwHhcNMjUwODIzMDIzMjI5WhcNMjUwODMwMDIzMjI5WjAYMRYwFAYD VQQDEw02OGE5MjgzZC0zNzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAplcLctbt9gSejKNG/5Ajru+XZbDh5UJ/z2h4TP9bH0jMTbcg1VGfFBe95ApE FPZR0IG4V6meykxWIaAEZ6YhhHhdypapqAm3OYvM2sGa49BSkmZBzjJkAwlb8fV1 r6lin9X2vWZ7rQuumI39jSKMvPwjJ9gGRT9tzzPHT0uUz2+gliwWcUOxNZI0r0hM WjeyQWq+KGFPs9Knw6HQ9z54Cb0fRDW2pImN6/8pr5NDO4V6a2Pc4PXOzZsKm/MR ZHOggriC72KHYj+14jdPP9QVGqB9ugoEg0yLh+NHtR7HPyoTR77iWanpEPg//URB CsbmJHXmLtbLS6192+fN4KeoyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ9iBArW YPvk3OBW+3MOFAiJ+gZkMB8GA1UdIwQYMBaAFAJCKcgaw1NaIdYOLcMqm4i9atgf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDg0OC82NEQ4QjFERTc3 RTQxMUVEOTdGNTkzNERDNEY5QUUwMi9Ba0lweUJyRFUxb2gxZzR0d3lxYmlMMXEy QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FrSXB5QnJEVTFvaDFnNHR3eXFiaUwxcTJCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDg0OC82NEQ4QjFERTc3RTQxMUVEOTdGNTkzNERDNEY5QUUwMi9Ba0lweUJyRFUx b2gxZzR0d3lxYmlMMXEyQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGEJuXXrsnVWjtCWr9ceAzqoAOETKR9zM8nC0jk54WyrLARWt+3F+b I5JaDgLRPOk5dou6tGs4Ovna/1YyzOdvwYfRcx6OLwE0zzdT2Xh/S8NQnWg5k3dx 5Pd6QpZrVkt0MeKH9W5eaKnsTSwEHuItVdnQN3TN4mW+kTj2Udc9tYKrCYh6P8qK fkB3T1hHIEbZI9u9C3vYB8bVqY5ogFJboEiUxv/NZo/68o+MrpbKBwyRz3SRiYJo me29yQMwewRIQ1sFzgqHJNiG17f6Tvr+VpnIZ9hisHQH1NmfqkNPbEl/W4hgbgCi 2jgjEvZ9hO2VOXYHcYjY7je8Nr8QmMWo -----END CERTIFICATE-----Generated at Sun Aug 24 00:49:20 2025 by rpki-client