$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft File: ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft (raw, json) Hash identifier: lD1pei3JelevlavzdzFIWFMfPL1lnQmXDKChnpvf1jY= Subject key identifier: E9:DD:2E:1F:30:F0:A0:B1:9F:AA:09:E7:D4:DE:72:69:89:F7:D0:FD Authority key identifier: 6B:22:F9:07:91:05:A4:DE:BC:B0:9C:C1:B9:00:96:08:5C:66:2D:44 Certificate issuer: /CN=A91A6ABE/serialNumber=6B22F9079105A4DEBCB09CC1B90096085C662D44 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ayL5B5EFpN68sJzBuQCWCFxmLUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft Manifest number: 0A Signing time: Sat 23 Aug 2025 08:22:20 +0000 Manifest this update: Sat 23 Aug 2025 08:22:20 +0000 Manifest next update: Sat 30 Aug 2025 08:22:20 +0000 Files and hashes: 1: ayL5B5EFpN68sJzBuQCWCFxmLUQ.crl (hash: TCQLm/e0ezkns9qid9lO4w0k4cbnaFpd8WkNUJYQqEo=) 2: EADAF6B2743E11F0ABAB020EC4F9AE02.roa (hash: DO6Lqvv7scio2IxWyOXEPbCtP6wMb/dg39O5KOuqeJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.crl rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ayL5B5EFpN68sJzBuQCWCFxmLUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:22:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6ABE, serialNumber=6B22F9079105A4DEBCB09CC1B90096085C662D44 Validity Not Before: Aug 23 08:22:20 2025 GMT Not After : Aug 30 08:22:20 2025 GMT Subject: CN=68a97a3c-1d14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c9:a9:1b:24:dd:77:30:db:68:93:31:c1:58: 9a:27:63:af:2b:6d:18:da:e3:b6:d6:de:ca:f1:07: 1b:87:37:94:e9:90:bf:42:b5:90:02:20:e4:1d:3d: 63:b0:b5:a2:e5:ff:06:f8:bb:47:f4:7b:d4:a6:1b: 1a:27:e6:ab:df:18:db:38:3e:5c:73:7a:fe:e5:45: 0e:9f:b3:e1:29:8e:8b:dd:c1:34:9f:b1:e8:05:e4: 30:fc:41:77:04:77:86:35:00:ee:e0:2e:17:d3:bd: 9d:03:10:03:fc:6a:96:92:11:bf:05:7d:9a:00:38: aa:94:c4:35:9e:d0:1e:33:c5:29:09:38:e4:06:49: aa:14:bb:f7:dd:68:c0:76:8e:21:24:3e:c1:40:98: b1:a8:c8:fe:c2:3a:fe:e8:e5:20:31:e9:66:43:af: bf:c6:94:2c:8b:76:70:cd:85:72:d1:62:31:47:6e: e8:86:19:fd:3c:fe:d6:09:62:f4:49:80:64:58:f4: 3d:f4:5b:61:84:8f:c4:0d:e7:59:89:f7:10:2f:22: 2a:a1:85:d8:35:c8:e8:ee:4b:7a:82:5b:3e:e4:ca: c1:e8:b2:eb:8c:76:82:03:ab:6c:10:0e:cf:84:97: d9:ca:3c:27:73:19:e2:81:4c:97:c0:f9:09:09:97: c5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:DD:2E:1F:30:F0:A0:B1:9F:AA:09:E7:D4:DE:72:69:89:F7:D0:FD X509v3 Authority Key Identifier: keyid:6B:22:F9:07:91:05:A4:DE:BC:B0:9C:C1:B9:00:96:08:5C:66:2D:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ayL5B5EFpN68sJzBuQCWCFxmLUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:c0:8c:58:14:88:31:35:f3:52:5e:cb:5b:c9:7f:4a:8b:31: 88:b0:78:d6:42:99:05:46:16:e5:18:08:ad:8e:8b:14:84:f1: 71:b8:4e:fb:83:d6:64:9c:a9:a5:9d:05:08:fd:41:2b:75:46: 86:fe:bd:a6:75:4b:49:48:15:ee:fc:9f:94:ba:49:5b:dd:80: e3:10:ab:cb:49:2b:ef:d3:3c:64:37:f3:af:c7:d5:73:22:28: 42:11:59:66:90:57:36:b8:74:7a:db:8e:07:76:bc:ef:97:76: cc:77:e7:d3:e5:85:53:28:d0:9f:10:58:3d:33:29:a9:76:f5: c2:3e:35:32:56:c8:d6:43:ec:bc:2b:27:fb:64:6f:f5:e5:60: ea:ae:ca:03:e3:e8:79:a9:3e:98:8a:02:b7:10:55:50:e8:96: 92:29:99:84:72:ac:32:b8:ac:f5:df:ad:22:4d:da:c1:dc:6b: 49:f5:19:15:e6:8a:26:01:0a:93:1a:d2:9f:09:93:b8:6f:fe: 84:42:8b:cd:c6:f2:ae:eb:6e:8c:51:03:1f:bd:44:da:c7:3e: 95:be:7b:ec:51:79:01:c8:7a:ac:40:64:3e:6b:ca:b0:fc:6e: 8b:5a:2f:1f:28:8f:58:ad:2e:f4:aa:ae:f3:2e:db:66:e0:bb: ef:de:99:07 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NkFCRTExMC8GA1UEBRMoNkIyMkY5MDc5MTA1QTRERUJDQjA5Q0MxQjkwMDk2MDg1 QzY2MkQ0NDAeFw0yNTA4MjMwODIyMjBaFw0yNTA4MzAwODIyMjBaMBgxFjAUBgNV BAMTDTY4YTk3YTNjLTFkMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRyakbJN13MNtokzHBWJonY68rbRja47bW3srxBxuHN5TpkL9CtZACIOQdPWOw taLl/wb4u0f0e9SmGxon5qvfGNs4Plxzev7lRQ6fs+EpjovdwTSfsegF5DD8QXcE d4Y1AO7gLhfTvZ0DEAP8apaSEb8FfZoAOKqUxDWe0B4zxSkJOOQGSaoUu/fdaMB2 jiEkPsFAmLGoyP7COv7o5SAx6WZDr7/GlCyLdnDNhXLRYjFHbuiGGf08/tYJYvRJ gGRY9D30W2GEj8QN51mJ9xAvIiqhhdg1yOjuS3qCWz7kysHosuuMdoIDq2wQDs+E l9nKPCdzGeKBTJfA+QkJl8VdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6d0uHzDw oLGfqgnn1N5yaYn30P0wHwYDVR0jBBgwFoAUayL5B5EFpN68sJzBuQCWCFxmLUQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2QUJFLzE1RjVDMTBDNzQz RTExRjA5NEE3QkYwOUM0RjlBRTAyL2F5TDVCNUVGcE42OHNKekJ1UUNXQ0Z4bUxV US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYXlMNUI1RUZwTjY4c0p6QnVRQ1dDRnhtTFVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2 QUJFLzE1RjVDMTBDNzQzRTExRjA5NEE3QkYwOUM0RjlBRTAyL2F5TDVCNUVGcE42 OHNKekJ1UUNXQ0Z4bUxVUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAzAjFgUiDE181Jey1vJf0qLMYiweNZCmQVGFuUYCK2OixSE8XG4TvuD 1mScqaWdBQj9QSt1Rob+vaZ1S0lIFe78n5S6SVvdgOMQq8tJK+/TPGQ386/H1XMi KEIRWWaQVza4dHrbjgd2vO+Xdsx359PlhVMo0J8QWD0zKal29cI+NTJWyNZD7Lwr J/tkb/XlYOquygPj6HmpPpiKArcQVVDolpIpmYRyrDK4rPXfrSJN2sHca0n1GRXm iiYBCpMa0p8Jk7hv/oRCi83G8q7rboxRAx+9RNrHPpW+e+xReQHIeqxAZD5ryrD8 botaLx8oj1itLvSqrvMu22bgu+/emQc= -----END CERTIFICATE-----Generated at Sun Aug 24 00:35:36 2025 by rpki-client