$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft File: aj72cYLbsPbM88pBN4wBGYBq6b0.mft (raw, json) Hash identifier: Nh0RkxDozGVw96b1hKEfPj1cTzY6xqgOMYJy5geCB90= Subject key identifier: 54:F5:F9:FD:7A:6D:10:70:95:73:73:4E:E2:6A:98:CC:FC:C3:0F:D5 Authority key identifier: 6A:3E:F6:71:82:DB:B0:F6:CC:F3:CA:41:37:8C:01:19:80:6A:E9:BD Certificate issuer: /CN=A91A0A2E/serialNumber=6A3EF67182DBB0F6CCF3CA41378C0119806AE9BD Certificate serial: 67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft Manifest number: 64 Signing time: Sat 23 Aug 2025 07:15:41 +0000 Manifest this update: Sat 23 Aug 2025 07:15:40 +0000 Manifest next update: Sat 30 Aug 2025 07:15:40 +0000 Files and hashes: 1: aj72cYLbsPbM88pBN4wBGYBq6b0.crl (hash: ix0AlWG7LG2Vugr1yuIqiwWR2+bc9jnD23jDDFMMKfc=) 2: FDE6938CE90C11EFB9D98326C4F9AE02.roa (hash: EQY90pkMKZS20T7XhciTL191HbTMnbpWtQHaja8QyGI=) 3: F449A3FCE9C811EF9972A934C4F9AE02.roa (hash: 7MwfNHRXASMEn22ZfT4zj9oG/ZQKY9GDP1pjifjdSXI=) 4: FD63D5BEE90C11EFB9D98326C4F9AE02.roa (hash: XHfUu+5yh0x5y1fbUjOYEtUpMyJC2J2Z1oZf8nnZcak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.crl rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0A2E, serialNumber=6A3EF67182DBB0F6CCF3CA41378C0119806AE9BD Validity Not Before: Aug 23 07:15:40 2025 GMT Not After : Aug 30 07:15:40 2025 GMT Subject: CN=68a96a9d-deac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:32:24:e6:b6:6c:16:02:37:7e:d9:5a:1b:ae: 1b:93:79:30:f9:3f:12:cf:e0:33:35:a9:08:61:67: e1:0a:d0:57:ff:02:a4:a6:77:55:86:6e:b3:ec:b6: 0e:80:30:58:38:8a:20:5a:67:22:f3:74:2c:1e:0b: ce:07:86:bc:b0:eb:d0:0d:b8:3c:4b:e4:b4:0f:c4: a3:76:27:c6:b4:f8:42:c1:00:3e:b1:e6:23:ac:b2: 43:ba:61:45:f5:e3:e7:17:cb:65:42:b3:f1:d7:ee: 5c:b3:2a:97:eb:3e:4b:2d:e4:14:3d:03:13:9e:18: 1a:a7:9d:d0:92:91:d3:fd:f1:55:5d:73:75:57:d9: 28:cf:0a:3f:ff:0b:9e:d0:ee:74:cb:bd:da:40:60: 10:b3:33:1b:cc:33:27:ef:be:41:4d:b2:e4:ec:e8: d5:3a:e7:67:b2:21:89:5f:e4:42:a0:97:0b:97:71: 4f:86:98:92:c2:26:05:61:66:ab:e4:0e:21:ce:25: a5:e0:23:9b:a7:f7:9c:b5:c6:af:e6:b9:85:63:7c: d6:1a:0a:df:5d:86:71:00:83:a3:16:93:34:03:41: 67:46:ad:91:7e:c8:80:17:b1:81:72:63:1c:dd:00: a0:2f:ef:ea:91:7a:5f:0d:6e:bd:2b:44:9f:f0:98: bf:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:F5:F9:FD:7A:6D:10:70:95:73:73:4E:E2:6A:98:CC:FC:C3:0F:D5 X509v3 Authority Key Identifier: keyid:6A:3E:F6:71:82:DB:B0:F6:CC:F3:CA:41:37:8C:01:19:80:6A:E9:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:d2:38:ca:bd:e6:5e:bd:83:b2:a4:21:e4:12:29:fb:04:6e: 17:d4:90:8d:4d:d6:5d:27:03:1d:be:a0:6e:0b:02:c0:b7:dd: e2:01:b4:fd:0c:7d:a3:9e:b0:cc:2a:f8:e4:69:18:e0:30:d0: 0b:98:1e:49:99:05:21:45:47:65:ce:91:56:8b:04:02:e1:8a: e6:b7:9c:a9:fe:98:3d:76:97:9a:6b:f5:e4:0a:61:c5:31:a2: e7:a1:dd:c9:59:ba:8d:24:a4:88:25:ad:63:d6:b4:f3:84:12: d7:d1:7a:ce:78:33:bd:c5:70:82:39:0e:f4:59:50:80:3d:50: e2:d1:7f:6a:1c:8f:84:65:c2:fc:4b:5f:c1:82:3d:2c:20:1b: e2:e7:ce:6a:9c:9d:fb:08:ef:10:23:4b:07:c3:4e:13:6c:f4: 36:29:2d:90:c7:4c:27:98:cb:ed:f7:94:47:f2:ad:57:a8:ca: a2:9b:2b:6d:ef:78:3f:0b:97:ba:73:ca:03:0b:b3:f6:af:f0: 92:b8:3c:7c:5d:7c:2d:a2:a9:74:d2:45:81:ed:13:22:8b:09: 7d:39:cd:8d:fb:b0:09:db:4c:5b:68:a6:c7:94:0e:fc:99:a6: 0f:0d:0d:ec:cb:6d:98:a5:03:78:bc:75:c9:be:67:d8:58:c0: 75:2a:a6:9d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MEEyRTExMC8GA1UEBRMoNkEzRUY2NzE4MkRCQjBGNkNDRjNDQTQxMzc4QzAxMTk4 MDZBRTlCRDAeFw0yNTA4MjMwNzE1NDBaFw0yNTA4MzAwNzE1NDBaMBgxFjAUBgNV BAMTDTY4YTk2YTlkLWRlYWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIMiTmtmwWAjd+2VobrhuTeTD5PxLP4DM1qQhhZ+EK0Ff/AqSmd1WGbrPstg6A MFg4iiBaZyLzdCweC84Hhryw69ANuDxL5LQPxKN2J8a0+ELBAD6x5iOsskO6YUX1 4+cXy2VCs/HX7lyzKpfrPkst5BQ9AxOeGBqnndCSkdP98VVdc3VX2SjPCj//C57Q 7nTLvdpAYBCzMxvMMyfvvkFNsuTs6NU652eyIYlf5EKglwuXcU+GmJLCJgVhZqvk DiHOJaXgI5un95y1xq/muYVjfNYaCt9dhnEAg6MWkzQDQWdGrZF+yIAXsYFyYxzd AKAv7+qRel8Nbr0rRJ/wmL8vAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVPX5/Xpt EHCVc3NO4mqYzPzDD9UwHwYDVR0jBBgwFoAUaj72cYLbsPbM88pBN4wBGYBq6b0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEwQTJFL0M4MzZDN0IyRTkw QjExRUY4MjE4NTgyNEM0RjlBRTAyL2FqNzJjWUxic1BiTTg4cEJONHdCR1lCcTZi MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYWo3MmNZTGJzUGJNODhwQk40d0JHWUJxNmIwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEw QTJFL0M4MzZDN0IyRTkwQjExRUY4MjE4NTgyNEM0RjlBRTAyL2FqNzJjWUxic1Bi TTg4cEJONHdCR1lCcTZiMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJfSOMq95l69g7KkIeQSKfsEbhfUkI1N1l0nAx2+oG4LAsC33eIBtP0M faOesMwq+ORpGOAw0AuYHkmZBSFFR2XOkVaLBALhiua3nKn+mD12l5pr9eQKYcUx oueh3clZuo0kpIglrWPWtPOEEtfRes54M73FcII5DvRZUIA9UOLRf2ocj4RlwvxL X8GCPSwgG+LnzmqcnfsI7xAjSwfDThNs9DYpLZDHTCeYy+33lEfyrVeoyqKbK23v eD8Ll7pzygMLs/av8JK4PHxdfC2iqXTSRYHtEyKLCX05zY37sAnbTFtopseUDvyZ pg8NDezLbZilA3i8dcm+Z9hYwHUqpp0= -----END CERTIFICATE-----Generated at Sat Aug 23 14:23:43 2025 by rpki-client