$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft File: apjAwIy9NBmpCCuGDSm_qXL98qc.mft (raw, json) Hash identifier: NL0v/o3S9kgHsOwmbUoCYEW4lDd8Go6GNJeL6gyQOFU= Subject key identifier: A8:69:4E:68:00:20:04:4E:E0:72:3E:85:6E:75:26:5D:9C:C9:34:13 Authority key identifier: 6A:98:C0:C0:8C:BD:34:19:A9:08:2B:86:0D:29:BF:A9:72:FD:F2:A7 Certificate issuer: /CN=A91A2BD6/serialNumber=6A98C0C08CBD3419A9082B860D29BFA972FDF2A7 Certificate serial: 0459 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apjAwIy9NBmpCCuGDSm_qXL98qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft Manifest number: 0455 Signing time: Sat 23 Aug 2025 00:27:50 +0000 Manifest this update: Sat 23 Aug 2025 00:27:50 +0000 Manifest next update: Sat 30 Aug 2025 00:27:50 +0000 Files and hashes: 1: apjAwIy9NBmpCCuGDSm_qXL98qc.crl (hash: ibni9BIqfIfccn5dNGS+2G0iP4oMKCh0KY5qTOLmrZ8=) 2: 61B3CBDC631911ECAE6AA33DC4F9AE02.roa (hash: /+PqdcGfeQGq1JSsbPZ7utBGw8SAzSRzzxhLFAim1J0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.crl rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apjAwIy9NBmpCCuGDSm_qXL98qc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:27:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1113 (0x459) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2BD6, serialNumber=6A98C0C08CBD3419A9082B860D29BFA972FDF2A7 Validity Not Before: Aug 23 00:27:50 2025 GMT Not After : Aug 30 00:27:50 2025 GMT Subject: CN=68a90b06-743b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a7:ba:0d:83:3b:de:51:fc:a4:dc:e3:58:ef: f0:6d:1e:36:64:fc:5b:8b:d5:4a:20:5d:38:2b:fb: c3:3e:d3:e9:85:c3:60:55:25:6b:2c:3d:7b:91:7f: 04:0f:25:12:67:46:c1:1f:17:3a:34:04:02:bc:5b: 3b:fa:26:cc:39:6c:6e:cb:be:27:3a:d3:9f:27:f0: a3:c2:c3:bc:6d:ff:79:22:41:77:78:9a:ab:a7:50: cd:cd:04:9e:b9:81:3c:7d:02:23:68:b5:6d:96:b9: 0d:2c:76:c9:42:0a:01:60:e0:4b:82:4c:a9:7e:f2: 74:2f:78:95:ab:df:b2:44:08:29:d4:4b:9d:39:53: f1:71:d3:98:64:a4:82:0f:da:4b:f6:98:27:48:3a: ae:f2:c5:a4:55:97:34:a8:b8:96:4b:d1:ea:a4:68: d0:7c:19:98:48:04:6e:be:19:7e:4b:c4:05:ff:1c: 5e:3c:fc:33:2d:06:b1:f9:2e:83:59:5c:76:dc:a4: 34:1a:5b:92:64:8f:4c:cf:1c:91:0b:2f:b0:fe:5b: 43:51:d9:3c:4a:2a:c1:8f:11:3e:28:1c:85:3b:47: 2f:0d:62:48:c7:ae:00:2d:8a:b6:c5:61:9b:5f:1c: 90:ac:11:7a:1a:28:84:11:5f:1a:2a:91:8d:77:42: 9f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:69:4E:68:00:20:04:4E:E0:72:3E:85:6E:75:26:5D:9C:C9:34:13 X509v3 Authority Key Identifier: keyid:6A:98:C0:C0:8C:BD:34:19:A9:08:2B:86:0D:29:BF:A9:72:FD:F2:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apjAwIy9NBmpCCuGDSm_qXL98qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:80:e4:10:3d:16:bc:22:01:f2:57:ae:78:fc:c6:2b:01:1e: 12:7f:ed:90:34:49:6d:48:41:82:a6:c2:33:c2:66:f0:0c:23: 2b:07:57:8e:a4:a9:70:8c:2a:83:7e:ab:81:5e:b0:fa:b2:87: db:c0:0c:f3:5a:30:1d:42:d2:55:4f:af:20:b9:f5:35:b2:d1: ab:4a:30:26:50:69:87:ea:4c:4a:8d:f5:4e:56:65:90:8e:fc: 5d:81:7f:db:43:25:91:0e:05:75:1d:28:0e:66:63:74:9e:67: dd:24:c4:20:41:b2:f7:52:81:6d:a7:1e:5f:9b:5b:85:98:1f: 7f:f2:06:c5:0b:3d:e7:59:78:5a:53:31:09:6a:d1:e9:33:0a: 3a:29:c4:7c:95:e1:f0:8a:fd:ab:31:7b:e0:09:81:57:84:95: c5:59:51:b1:64:d3:38:86:c5:fa:59:81:f2:82:fe:a2:ee:5f: 96:87:4b:08:c2:7e:bf:b3:84:fa:80:e8:e0:a1:44:2c:0d:4a: c1:76:52:b9:41:94:84:0d:30:5a:2d:b8:bb:2b:8d:c4:0f:60: 5f:1b:6b:dc:32:f1:98:41:96:d8:59:2c:c6:6c:93:b1:5c:9d: 36:1d:37:72:31:ac:66:73:59:d4:b2:57:a0:be:92:f9:11:aa: 11:d8:53:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTJCRDYxMTAvBgNVBAUTKDZBOThDMEMwOENCRDM0MTlBOTA4MkI4NjBEMjlCRkE5 NzJGREYyQTcwHhcNMjUwODIzMDAyNzUwWhcNMjUwODMwMDAyNzUwWjAYMRYwFAYD VQQDEw02OGE5MGIwNi03NDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr6e6DYM73lH8pNzjWO/wbR42ZPxbi9VKIF04K/vDPtPphcNgVSVrLD17kX8E DyUSZ0bBHxc6NAQCvFs7+ibMOWxuy74nOtOfJ/CjwsO8bf95IkF3eJqrp1DNzQSe uYE8fQIjaLVtlrkNLHbJQgoBYOBLgkypfvJ0L3iVq9+yRAgp1EudOVPxcdOYZKSC D9pL9pgnSDqu8sWkVZc0qLiWS9HqpGjQfBmYSARuvhl+S8QF/xxePPwzLQax+S6D WVx23KQ0GluSZI9MzxyRCy+w/ltDUdk8SirBjxE+KByFO0cvDWJIx64ALYq2xWGb XxyQrBF6GiiEEV8aKpGNd0KfHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKhpTmgA IARO4HI+hW51Jl2cyTQTMB8GA1UdIwQYMBaAFGqYwMCMvTQZqQgrhg0pv6ly/fKn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkJENi85QzU4NURCMDYz MTUxMUVDQkE1MzY5NjlDNEY5QUUwMi9hcGpBd0l5OU5CbXBDQ3VHRFNtX3FYTDk4 cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FwakF3SXk5TkJtcENDdUdEU21fcVhMOThxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MkJENi85QzU4NURCMDYzMTUxMUVDQkE1MzY5NjlDNEY5QUUwMi9hcGpBd0l5OU5C bXBDQ3VHRFNtX3FYTDk4cWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsgOQQPRa8IgHyV654/MYrAR4Sf+2QNEltSEGCpsIzwmbwDCMrB1eO pKlwjCqDfquBXrD6sofbwAzzWjAdQtJVT68gufU1stGrSjAmUGmH6kxKjfVOVmWQ jvxdgX/bQyWRDgV1HSgOZmN0nmfdJMQgQbL3UoFtpx5fm1uFmB9/8gbFCz3nWXha UzEJatHpMwo6KcR8leHwiv2rMXvgCYFXhJXFWVGxZNM4hsX6WYHygv6i7l+Wh0sI wn6/s4T6gOjgoUQsDUrBdlK5QZSEDTBaLbi7K43ED2BfG2vcMvGYQZbYWSzGbJOx XJ02HTdyMaxmc1nUslegvpL5EaoR2FPc -----END CERTIFICATE-----Generated at Sat Aug 23 17:29:27 2025 by rpki-client