$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft File: evNKJg5qKenXvIqxrCZW4Ue4iiI.mft (raw, json) Hash identifier: aFubDTr57W7B2FF8EdXjnsXbutoCsg0lmRMucRXFJ38= Subject key identifier: 14:F5:0D:B5:25:8E:7E:32:EE:63:04:75:1D:2B:87:03:98:C2:B7:2C Authority key identifier: 7A:F3:4A:26:0E:6A:29:E9:D7:BC:8A:B1:AC:26:56:E1:47:B8:8A:22 Certificate issuer: /CN=A91A4D1F/serialNumber=7AF34A260E6A29E9D7BC8AB1AC2656E147B88A22 Certificate serial: 0242 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft Manifest number: 0223 Signing time: Sat 23 Aug 2025 02:24:26 +0000 Manifest this update: Sat 23 Aug 2025 02:24:26 +0000 Manifest next update: Sat 30 Aug 2025 02:24:26 +0000 Files and hashes: 1: evNKJg5qKenXvIqxrCZW4Ue4iiI.crl (hash: T6RJ3s90qL6WwIlVPEi7BQSpZoKakWYPae6f1BqLC7Y=) 2: A1740AE6F44A11EFBDAE4F7BC4F9AE02.roa (hash: zcojx0ZkQFta/eHlUHGOuBKvCSA32o0JspTRYlkMoDI=) 3: 881750D0E04511EF8BD5FA0EC4F9AE02.roa (hash: PAN71XRdBizmCnmbth6bc3U7C1SlwCeBKZgyo5Yoesk=) 4: 870547C4E04511EF8BD5FA0EC4F9AE02.roa (hash: ercDyfbZZj81eG2rt4VTnpYu27D4sWw7nv/fhjhfp3g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.crl rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:24:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 578 (0x242) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4D1F, serialNumber=7AF34A260E6A29E9D7BC8AB1AC2656E147B88A22 Validity Not Before: Aug 23 02:24:26 2025 GMT Not After : Aug 30 02:24:26 2025 GMT Subject: CN=68a9265a-53a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:64:ac:11:e3:fb:76:95:13:f5:4f:f4:cb:92: b5:b4:b7:53:7c:52:8f:01:f3:b9:95:a8:bc:bd:ef: b6:7d:1a:e4:9d:39:a3:5e:3a:bf:b4:b7:f1:5f:87: 5f:33:e8:41:d8:f0:a6:a6:49:20:dd:23:97:f7:1f: d7:45:9f:82:39:73:10:3a:17:13:67:cc:ff:80:ff: aa:84:1e:e6:f5:0e:1c:6c:97:a4:25:24:91:e7:19: 28:05:2e:c9:e0:07:f7:2c:03:42:dd:ea:40:c5:e8: 81:13:97:7a:9c:7b:b0:95:97:7a:8d:85:54:75:27: f0:d9:45:a2:2d:86:a9:c5:0e:6e:28:2a:fa:dc:43: 4c:a6:d5:7f:d7:a8:9b:84:4b:0e:6d:cc:2c:a7:17: 88:58:63:c3:a9:b9:56:c1:8b:a9:7e:55:74:06:f4: c5:36:17:cf:94:4d:b6:ab:21:80:7d:19:a2:fd:43: 12:75:db:03:4a:11:cb:28:8d:94:53:be:fb:71:4b: 1e:c4:8d:74:e3:8b:e9:47:5a:33:56:54:9d:2e:0f: 2e:64:da:c6:a1:b6:69:c9:f4:18:c4:94:16:8b:83: 7d:66:ab:89:14:0a:32:a8:82:53:18:09:bd:17:21: b4:49:f9:3b:31:a0:4a:67:48:8e:df:1b:cb:d3:dc: 14:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:F5:0D:B5:25:8E:7E:32:EE:63:04:75:1D:2B:87:03:98:C2:B7:2C X509v3 Authority Key Identifier: keyid:7A:F3:4A:26:0E:6A:29:E9:D7:BC:8A:B1:AC:26:56:E1:47:B8:8A:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:47:d9:dc:21:00:6d:b0:eb:9e:01:58:1a:9e:f1:97:13:ab: 8e:7f:fd:a8:e8:5c:39:01:66:44:c2:88:36:1d:e2:87:da:5a: f2:d2:8f:51:c3:21:26:fa:21:92:d3:b2:a1:11:69:b2:a4:fd: 91:ba:89:47:a7:0d:8a:5a:3d:4c:40:ff:22:f8:d7:ca:99:72: 91:71:ce:e3:63:41:ce:a0:4c:05:95:75:79:53:a2:bd:cf:0a: 4c:de:bd:d0:95:4e:b6:59:c4:5c:30:b5:4c:a9:c7:91:c6:c8: 92:84:b3:80:7d:fa:20:35:0c:53:c0:f6:c8:a5:63:e7:c7:ee: ab:73:c6:11:13:ca:1f:df:2f:a8:37:0c:db:d9:c0:5e:31:2b: b3:a1:7a:48:95:a1:1e:23:d9:6f:2f:24:69:d6:4f:87:49:69: b1:35:0d:3a:c7:c4:c0:09:da:36:35:8f:13:76:ab:1a:13:99: 92:7c:3b:14:b4:42:ae:82:13:50:a6:60:ff:91:4d:99:6d:cd: ed:81:ef:44:f5:cc:83:10:cc:51:a4:43:18:ca:a8:e3:84:e3: 9e:6e:ce:cc:a0:7f:f8:83:1b:3a:d9:1b:c8:da:e7:1c:90:61: 53:bc:6a:06:42:87:0d:90:f1:d4:a3:22:b1:18:2d:80:97:c6: 52:02:a5:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTREMUYxMTAvBgNVBAUTKDdBRjM0QTI2MEU2QTI5RTlEN0JDOEFCMUFDMjY1NkUx NDdCODhBMjIwHhcNMjUwODIzMDIyNDI2WhcNMjUwODMwMDIyNDI2WjAYMRYwFAYD VQQDEw02OGE5MjY1YS01M2E1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvmSsEeP7dpUT9U/0y5K1tLdTfFKPAfO5lai8ve+2fRrknTmjXjq/tLfxX4df M+hB2PCmpkkg3SOX9x/XRZ+COXMQOhcTZ8z/gP+qhB7m9Q4cbJekJSSR5xkoBS7J 4Af3LANC3epAxeiBE5d6nHuwlZd6jYVUdSfw2UWiLYapxQ5uKCr63ENMptV/16ib hEsObcwspxeIWGPDqblWwYupflV0BvTFNhfPlE22qyGAfRmi/UMSddsDShHLKI2U U777cUsexI1044vpR1ozVlSdLg8uZNrGobZpyfQYxJQWi4N9ZquJFAoyqIJTGAm9 FyG0Sfk7MaBKZ0iO3xvL09wUnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBT1DbUl jn4y7mMEdR0rhwOYwrcsMB8GA1UdIwQYMBaAFHrzSiYOainp17yKsawmVuFHuIoi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEQxRi80OTE1MkE0NDY4 MDQxMUVEQTJEMkJEM0NDNEY5QUUwMi9ldk5LSmc1cUtlblh2SXF4ckNaVzRVZTRp aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V2TktKZzVxS2VuWHZJcXhyQ1pXNFVlNGlpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEQxRi80OTE1MkE0NDY4MDQxMUVEQTJEMkJEM0NDNEY5QUUwMi9ldk5LSmc1cUtl blh2SXF4ckNaVzRVZTRpaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASR9ncIQBtsOueAVganvGXE6uOf/2o6Fw5AWZEwog2HeKH2lry0o9R wyEm+iGS07KhEWmypP2RuolHpw2KWj1MQP8i+NfKmXKRcc7jY0HOoEwFlXV5U6K9 zwpM3r3QlU62WcRcMLVMqceRxsiShLOAffogNQxTwPbIpWPnx+6rc8YRE8of3y+o Nwzb2cBeMSuzoXpIlaEeI9lvLyRp1k+HSWmxNQ06x8TACdo2NY8TdqsaE5mSfDsU tEKughNQpmD/kU2Zbc3tge9E9cyDEMxRpEMYyqjjhOOebs7MoH/4gxs62RvI2ucc kGFTvGoGQocNkPHUoyKxGC2Al8ZSAqUa -----END CERTIFICATE-----Generated at Sun Aug 24 04:56:46 2025 by rpki-client