$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.mft File: aK0NBHD2rG8Zxk7vQJTuC7WHHto.mft (raw, json) Hash identifier: Ir1SkDSJfcmHMWxP1xSD3Ai0KByIHBBYMDcag6KyazE= Subject key identifier: 76:C2:47:76:0A:F4:A2:D7:6C:B4:AE:A2:0A:4A:70:7A:8B:8B:60:1D Authority key identifier: 68:AD:0D:04:70:F6:AC:6F:19:C6:4E:EF:40:94:EE:0B:B5:87:1E:DA Certificate issuer: /CN=A91A5208/serialNumber=68AD0D0470F6AC6F19C64EEF4094EE0BB5871EDA Certificate serial: 72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK0NBHD2rG8Zxk7vQJTuC7WHHto.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.mft Manifest number: 6D Signing time: Sat 23 Aug 2025 07:14:08 +0000 Manifest this update: Sat 23 Aug 2025 07:14:07 +0000 Manifest next update: Sat 30 Aug 2025 07:14:07 +0000 Files and hashes: 1: aK0NBHD2rG8Zxk7vQJTuC7WHHto.crl (hash: 84FqiXZITfPusQfJTJzndpIFHE3sSpHX+JSUgD+iryw=) 2: FF9C9380E84D11EFBDF0C033C4F9AE02.roa (hash: C95CWdcWS0/9Z9oU15qyADSExZ8oTkF5cAIWUUfMLiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.crl rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK0NBHD2rG8Zxk7vQJTuC7WHHto.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 114 (0x72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5208, serialNumber=68AD0D0470F6AC6F19C64EEF4094EE0BB5871EDA Validity Not Before: Aug 23 07:14:07 2025 GMT Not After : Aug 30 07:14:07 2025 GMT Subject: CN=68a96a40-522c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1a:36:f8:92:5b:ad:95:b7:d3:b4:29:6e:50: b4:97:0b:ec:27:bd:37:9f:4e:3c:1e:3a:3e:00:3e: b8:b9:c3:84:dd:1b:9c:64:e5:5b:bf:ce:8c:84:a8: b2:23:fa:b0:6c:d3:c8:74:ef:ff:c1:42:45:4a:cc: 3e:fe:1c:28:3f:1d:d0:48:0d:96:50:4f:cb:db:31: f1:bb:e4:97:e7:7f:a7:c7:97:c7:1e:1e:99:75:d3: e6:63:24:5d:96:cb:20:6d:de:94:ca:2f:93:ab:62: 7a:e7:21:8f:93:83:e0:4a:c0:81:39:32:88:fc:ef: 97:a4:d4:32:89:ab:39:ce:a2:22:4b:84:e6:15:20: 0c:2d:be:4c:22:78:b0:e8:49:dc:11:4c:38:8b:cf: a8:b7:3e:8e:56:ea:be:9b:60:79:50:fd:78:c4:d1: 1a:90:6b:e2:6e:8b:95:17:74:a5:23:26:27:25:d3: df:d0:49:60:5b:d6:36:ea:75:7d:ee:89:c6:74:69: 83:d1:36:ff:38:5e:ac:57:83:8c:1d:22:01:42:d5: 4e:66:c4:ae:98:10:9b:40:a1:e1:4b:61:01:c7:0d: 34:fc:f3:55:45:03:68:9f:2c:63:76:12:a3:a0:cf: 60:85:ac:2f:2e:85:15:54:22:9b:ec:bf:7a:13:f4: f7:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:C2:47:76:0A:F4:A2:D7:6C:B4:AE:A2:0A:4A:70:7A:8B:8B:60:1D X509v3 Authority Key Identifier: keyid:68:AD:0D:04:70:F6:AC:6F:19:C6:4E:EF:40:94:EE:0B:B5:87:1E:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK0NBHD2rG8Zxk7vQJTuC7WHHto.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:b3:85:e7:47:2d:7b:b7:07:0a:71:6b:68:0f:3d:9f:31:14: 2c:72:28:b0:d2:3c:10:c4:ce:1a:2b:26:18:08:99:76:d7:78: 8f:f0:fe:53:a3:ef:fa:86:e2:72:3c:09:05:46:bb:2b:cd:c0: a7:63:40:e6:d3:e2:ce:4c:7b:33:f9:f7:65:91:ab:cf:23:31: 93:63:5c:10:75:e7:e9:70:e4:31:ab:8c:9e:82:97:0d:3b:5b: c0:a5:d1:bf:29:16:ad:06:18:64:0f:4b:f5:5e:2f:e9:86:f8: 8c:f1:f9:28:bb:22:26:a9:de:d5:5c:ed:30:0f:8f:6e:35:d2: a8:63:41:72:a4:fa:20:0d:f3:80:83:08:41:85:f9:3f:ad:c0: 49:c9:66:de:ae:52:1c:c6:d5:92:36:34:29:d2:dc:0a:6c:ad: 29:5a:05:28:c3:6d:9c:c5:31:56:ab:64:47:99:e8:b9:bb:c8: 43:47:8e:eb:a3:93:28:34:de:11:8e:9e:e1:ca:50:ae:44:9c: 50:a0:15:cc:6f:f9:1b:e1:77:95:da:86:37:9d:ad:7a:b6:61: 01:21:7d:42:29:9d:43:a8:14:5d:03:70:78:64:81:de:80:a2: dc:d4:79:d2:16:7e:2c:33:12:e5:db:98:81:f0:07:5e:6b:05: b3:18:8a:52 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NTIwODExMC8GA1UEBRMoNjhBRDBEMDQ3MEY2QUM2RjE5QzY0RUVGNDA5NEVFMEJC NTg3MUVEQTAeFw0yNTA4MjMwNzE0MDdaFw0yNTA4MzAwNzE0MDdaMBgxFjAUBgNV BAMTDTY4YTk2YTQwLTUyMmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/Gjb4klutlbfTtCluULSXC+wnvTefTjweOj4APri5w4TdG5xk5Vu/zoyEqLIj +rBs08h07//BQkVKzD7+HCg/HdBIDZZQT8vbMfG75Jfnf6fHl8ceHpl10+ZjJF2W yyBt3pTKL5OrYnrnIY+Tg+BKwIE5Moj875ek1DKJqznOoiJLhOYVIAwtvkwieLDo SdwRTDiLz6i3Po5W6r6bYHlQ/XjE0RqQa+Jui5UXdKUjJicl09/QSWBb1jbqdX3u icZ0aYPRNv84XqxXg4wdIgFC1U5mxK6YEJtAoeFLYQHHDTT881VFA2ifLGN2EqOg z2CFrC8uhRVUIpvsv3oT9PcdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdsJHdgr0 otdstK6iCkpweouLYB0wHwYDVR0jBBgwFoAUaK0NBHD2rG8Zxk7vQJTuC7WHHtow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1MjA4LzlFMjg1NTdFRTRF RTExRUZCMUVENzYwRUM0RjlBRTAyL2FLME5CSEQyckc4WnhrN3ZRSlR1QzdXSEh0 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYUswTkJIRDJyRzhaeGs3dlFKVHVDN1dISHRvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1 MjA4LzlFMjg1NTdFRTRFRTExRUZCMUVENzYwRUM0RjlBRTAyL2FLME5CSEQyckc4 WnhrN3ZRSlR1QzdXSEh0by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAASzhedHLXu3Bwpxa2gPPZ8xFCxyKLDSPBDEzhorJhgImXbXeI/w/lOj 7/qG4nI8CQVGuyvNwKdjQObT4s5MezP592WRq88jMZNjXBB15+lw5DGrjJ6Clw07 W8Cl0b8pFq0GGGQPS/VeL+mG+Izx+Si7Iiap3tVc7TAPj2410qhjQXKk+iAN84CD CEGF+T+twEnJZt6uUhzG1ZI2NCnS3ApsrSlaBSjDbZzFMVarZEeZ6Lm7yENHjuuj kyg03hGOnuHKUK5EnFCgFcxv+Rvhd5XahjedrXq2YQEhfUIpnUOoFF0DcHhkgd6A otzUedIWfiwzEuXbmIHwB15rBbMYilI= -----END CERTIFICATE-----Generated at Sun Aug 24 03:15:54 2025 by rpki-client