$ rpki-client -vvf rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.mft File: aWkfVRZJUvL08f7oBKoVg1_-htU.mft (raw, json) Hash identifier: u6YHukqMhUnR99whZQZPi2t6nNZW1cGQdrx94iq0AXA= Subject key identifier: B8:38:57:71:0B:CE:50:6F:31:A7:A5:8B:93:25:53:BA:4C:EA:05:D7 Authority key identifier: 69:69:1F:55:16:49:52:F2:F4:F1:FE:E8:04:AA:15:83:5F:FE:86:D5 Certificate issuer: /CN=A91A618B/serialNumber=69691F55164952F2F4F1FEE804AA15835FFE86D5 Certificate serial: 09F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWkfVRZJUvL08f7oBKoVg1_-htU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.mft Manifest number: 09F3 Signing time: Fri 22 Aug 2025 19:59:53 +0000 Manifest this update: Fri 22 Aug 2025 19:59:52 +0000 Manifest next update: Fri 29 Aug 2025 19:59:52 +0000 Files and hashes: 1: aWkfVRZJUvL08f7oBKoVg1_-htU.crl (hash: o5n/mr+KuvRLIveJwjSc1ivF7/Tz/nHuB4qZGahZGdc=) 2: 594ECE96804011EA9B73BC62C4F9AE02.roa (hash: EKd9VQ360ebUJ8WlZXHE7k1r87p0QtlOPC8jxoN1cJc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.crl rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWkfVRZJUvL08f7oBKoVg1_-htU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:59:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2553 (0x9f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A618B, serialNumber=69691F55164952F2F4F1FEE804AA15835FFE86D5 Validity Not Before: Aug 22 19:59:52 2025 GMT Not After : Aug 29 19:59:52 2025 GMT Subject: CN=68a8cc39-aa44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:68:96:6e:01:a9:ce:1e:c5:79:27:fe:95:fd: 00:34:e2:e5:9c:df:6f:d7:08:2f:d8:fb:c8:29:d6: 69:81:d5:3c:04:82:2b:1b:2a:f2:b5:73:ac:73:f2: df:ba:1f:9f:a3:bd:66:e8:19:32:7d:a5:b0:9c:27: 3a:bc:e5:34:87:20:fa:b6:d5:f6:85:e8:91:51:87: 71:63:50:aa:89:97:4a:dd:c6:78:a2:32:71:cc:4d: 76:54:a5:d7:b0:d3:3f:a7:59:b2:38:6a:f4:89:11: 92:04:8c:ab:b9:61:cf:fa:ad:14:66:fd:08:b9:fb: 0a:19:87:d8:60:7c:e3:84:05:e5:e3:89:18:c4:9b: 43:b5:e8:16:00:04:d1:72:af:a9:a1:b0:6d:a4:1a: 92:ba:cb:f4:a4:56:aa:cd:42:33:23:38:e1:3a:72: 13:21:55:6a:bd:e6:18:15:31:c5:28:b1:ca:66:eb: 84:e0:b5:95:2a:2c:97:ca:2c:96:03:ee:09:82:b8: 78:ee:63:b1:d8:03:ad:88:cf:ed:21:e4:fa:e3:d6: 6e:2e:fc:34:f0:12:14:c8:c6:8d:45:b3:d7:51:45: 46:ce:57:90:e6:90:c7:f1:7d:47:41:e8:49:01:ad: 18:b7:b3:7a:85:07:79:aa:4c:e4:e1:20:5d:fc:f1: a6:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:38:57:71:0B:CE:50:6F:31:A7:A5:8B:93:25:53:BA:4C:EA:05:D7 X509v3 Authority Key Identifier: keyid:69:69:1F:55:16:49:52:F2:F4:F1:FE:E8:04:AA:15:83:5F:FE:86:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWkfVRZJUvL08f7oBKoVg1_-htU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:49:d4:73:02:f6:c4:3f:74:4d:82:c9:75:bf:37:69:fb:5e: 99:d9:41:01:ff:0e:98:f0:5a:ce:b2:5d:dd:76:5c:54:67:3a: cf:c3:ee:eb:7b:ee:6c:80:f8:98:a7:95:09:0c:48:cb:20:33: 41:aa:7d:15:72:4d:9b:2d:94:e2:9f:e0:cc:62:2e:9e:40:e6: bb:e5:70:8f:ff:29:c6:e8:bd:18:1b:8a:fc:bc:14:29:c4:e6: 6d:cb:0f:94:09:69:9e:75:5b:7b:f3:b5:61:02:da:86:84:5f: 53:31:6a:fc:b5:22:7a:68:90:bb:ee:a9:9e:01:4e:17:dd:49: 7a:d3:0d:bd:c3:dc:bb:1a:7d:d4:7d:1a:e2:0e:1b:c5:d9:78: 73:99:77:30:ef:7d:c1:d3:63:be:07:c7:56:d7:c1:92:e3:b4: 2f:67:91:bf:00:5a:86:72:08:30:86:85:4c:db:68:f6:61:46: af:f5:5a:c6:c2:77:7f:53:92:81:3b:57:06:c2:5b:db:4a:40: 10:10:15:9f:d0:2c:51:fd:1e:8a:19:e2:4e:e3:ac:60:50:78: d1:ec:17:a2:2f:61:17:2c:d2:0e:01:7d:34:2e:96:e8:4d:4d: f3:9a:c0:3b:35:93:e5:11:74:36:5f:cd:7b:10:9f:a7:e2:1b: 1d:2e:07:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTYxOEIxMTAvBgNVBAUTKDY5NjkxRjU1MTY0OTUyRjJGNEYxRkVFODA0QUExNTgz NUZGRTg2RDUwHhcNMjUwODIyMTk1OTUyWhcNMjUwODI5MTk1OTUyWjAYMRYwFAYD VQQDEw02OGE4Y2MzOS1hYTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAomiWbgGpzh7FeSf+lf0ANOLlnN9v1wgv2PvIKdZpgdU8BIIrGyrytXOsc/Lf uh+fo71m6BkyfaWwnCc6vOU0hyD6ttX2heiRUYdxY1CqiZdK3cZ4ojJxzE12VKXX sNM/p1myOGr0iRGSBIyruWHP+q0UZv0IufsKGYfYYHzjhAXl44kYxJtDtegWAATR cq+pobBtpBqSusv0pFaqzUIzIzjhOnITIVVqveYYFTHFKLHKZuuE4LWVKiyXyiyW A+4Jgrh47mOx2AOtiM/tIeT649ZuLvw08BIUyMaNRbPXUUVGzleQ5pDH8X1HQehJ Aa0Yt7N6hQd5qkzk4SBd/PGm4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLg4V3EL zlBvMaeli5MlU7pM6gXXMB8GA1UdIwQYMBaAFGlpH1UWSVLy9PH+6ASqFYNf/obV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjE4Qi85QkEyQjI1NDgw M0YxMUVBOTdCNDNENjJDNEY5QUUwMi9hV2tmVlJaSlV2TDA4ZjdvQktvVmcxXy1o dFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FXa2ZWUlpKVXZMMDhmN29CS29WZzFfLWh0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjE4Qi85QkEyQjI1NDgwM0YxMUVBOTdCNDNENjJDNEY5QUUwMi9hV2tmVlJaSlV2 TDA4ZjdvQktvVmcxXy1odFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9SdRzAvbEP3RNgsl1vzdp+16Z2UEB/w6Y8FrOsl3ddlxUZzrPw+7r e+5sgPiYp5UJDEjLIDNBqn0Vck2bLZTin+DMYi6eQOa75XCP/ynG6L0YG4r8vBQp xOZtyw+UCWmedVt787VhAtqGhF9TMWr8tSJ6aJC77qmeAU4X3Ul60w29w9y7Gn3U fRriDhvF2XhzmXcw733B02O+B8dW18GS47QvZ5G/AFqGcggwhoVM22j2YUav9VrG wnd/U5KBO1cGwlvbSkAQEBWf0CxR/R6KGeJO46xgUHjR7BeiL2EXLNIOAX00Lpbo TU3zmsA7NZPlEXQ2X817EJ+n4hsdLgcT -----END CERTIFICATE-----Generated at Sat Aug 23 21:16:43 2025 by rpki-client