$ rpki-client -vvf rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft File: aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft (raw, json) Hash identifier: y+BejfEmPkDPGw7BY1UjoiJOLGhMOYreV8Yk4q0j4kU= Subject key identifier: 03:CE:3C:72:31:57:FB:B0:64:BA:13:BC:16:A4:B4:39:EF:B2:D8:7F Authority key identifier: 69:6A:F4:FE:03:66:13:D6:51:B5:E2:9A:09:D4:FE:71:B5:55:A4:49 Certificate issuer: /CN=A91A80F9/serialNumber=696AF4FE036613D651B5E29A09D4FE71B555A449 Certificate serial: 0CCE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWr0_gNmE9ZRteKaCdT-cbVVpEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft Manifest number: 0CC6 Signing time: Fri 22 Aug 2025 18:15:13 +0000 Manifest this update: Fri 22 Aug 2025 18:15:13 +0000 Manifest next update: Fri 29 Aug 2025 18:15:13 +0000 Files and hashes: 1: aWr0_gNmE9ZRteKaCdT-cbVVpEk.crl (hash: y83cyNNBOnE62q2dxl7FzKREXbe9lpVycoMXWzOrTwA=) 2: 3EF3C6EEF8B511EAAD434755C4F9AE02.roa (hash: 2oxrZykX6FImkgj0+sEn3YTkG/5Ks+ROCEDtHP8d+xs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.crl rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWr0_gNmE9ZRteKaCdT-cbVVpEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:15:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3278 (0xcce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A80F9, serialNumber=696AF4FE036613D651B5E29A09D4FE71B555A449 Validity Not Before: Aug 22 18:15:13 2025 GMT Not After : Aug 29 18:15:13 2025 GMT Subject: CN=68a8b3b1-874b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:94:26:f0:70:74:60:ca:78:43:51:dc:fc:03: e6:e6:40:05:4a:6f:fa:1f:71:30:ba:62:c4:28:d5: 46:13:35:ea:f2:24:0e:fc:ae:c4:a1:a2:17:e7:43: f8:22:44:25:28:3e:f6:45:95:f8:ad:b7:15:1b:1e: c0:61:4c:fa:cb:76:be:13:cc:2e:7c:cf:5a:7a:6e: c3:90:62:1d:ff:40:a6:c4:7d:dc:37:37:29:4c:ef: bf:ad:ed:1b:34:bb:27:24:12:a8:a4:e0:7f:72:8a: f8:9d:c0:07:74:8c:1d:69:cd:7f:9f:1d:52:76:15: 00:a0:8c:4e:1b:84:a5:7f:0f:02:1f:6b:11:40:69: 36:15:20:99:d2:7c:bb:9a:6d:f7:f3:15:e6:9b:68: 7b:dd:da:5f:72:0b:8b:b9:0f:28:f4:7a:be:59:9f: 6c:12:d7:66:56:af:4e:c1:85:a8:88:7d:85:47:20: 3e:a2:67:df:13:48:8f:20:d7:84:22:5f:7e:2b:38: 35:87:ba:67:71:5e:be:7d:b1:83:40:36:9a:8f:66: 19:81:d7:d1:69:b7:70:ea:70:96:a5:1e:14:2b:90: c4:da:48:91:f7:1a:85:1b:db:b4:66:bd:50:e4:2b: da:c7:88:ca:2e:16:f7:69:a3:c5:f1:bb:8f:7f:2c: c4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:CE:3C:72:31:57:FB:B0:64:BA:13:BC:16:A4:B4:39:EF:B2:D8:7F X509v3 Authority Key Identifier: keyid:69:6A:F4:FE:03:66:13:D6:51:B5:E2:9A:09:D4:FE:71:B5:55:A4:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWr0_gNmE9ZRteKaCdT-cbVVpEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:ad:d6:d6:38:fe:75:b8:ba:79:4d:84:a8:84:54:fc:10:fd: 47:9e:69:b8:78:71:f8:6a:52:41:c7:e9:dd:bf:80:38:ca:03: 3f:fd:ef:f2:c8:e7:63:ad:d4:23:31:d9:e3:5d:70:a2:92:8d: 31:2d:7f:6c:92:fa:1e:90:d9:27:ad:d6:d7:43:d1:59:cd:07: 04:3c:5c:b2:91:f5:62:0f:17:5c:d3:16:86:8a:d4:b2:c1:97: 86:e5:04:97:a8:ed:41:8f:de:9c:a8:29:f0:3c:2c:e0:ff:17: 94:80:3c:59:dd:3a:3d:18:79:0a:94:08:0c:65:84:15:a9:d7: 9c:a0:b2:25:ed:03:d2:6b:e5:86:c6:be:c9:f4:96:84:e0:75: c5:14:80:10:87:90:ff:84:9c:17:e6:51:7b:e5:d0:15:05:5c: a7:7b:19:b3:02:18:f4:33:aa:e0:c3:a8:28:4b:84:c7:b6:c5: c9:02:bd:07:64:e2:c4:b7:8d:9f:b2:b1:ef:e0:15:31:47:8a: 24:93:b6:2a:91:78:51:3e:78:3e:36:1c:80:9b:d5:c1:6c:8f: 55:d3:f2:38:2f:31:2d:31:fc:4d:51:ab:e3:ac:43:47:72:94: 6d:e6:3b:03:33:27:6e:91:02:f4:09:e7:f8:4b:da:79:84:c0: fb:6e:91:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgwRjkxMTAvBgNVBAUTKDY5NkFGNEZFMDM2NjEzRDY1MUI1RTI5QTA5RDRGRTcx QjU1NUE0NDkwHhcNMjUwODIyMTgxNTEzWhcNMjUwODI5MTgxNTEzWjAYMRYwFAYD VQQDEw02OGE4YjNiMS04NzRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwpQm8HB0YMp4Q1Hc/APm5kAFSm/6H3EwumLEKNVGEzXq8iQO/K7EoaIX50P4 IkQlKD72RZX4rbcVGx7AYUz6y3a+E8wufM9aem7DkGId/0CmxH3cNzcpTO+/re0b NLsnJBKopOB/cor4ncAHdIwdac1/nx1SdhUAoIxOG4Slfw8CH2sRQGk2FSCZ0ny7 mm338xXmm2h73dpfcguLuQ8o9Hq+WZ9sEtdmVq9OwYWoiH2FRyA+omffE0iPINeE Il9+Kzg1h7pncV6+fbGDQDaaj2YZgdfRabdw6nCWpR4UK5DE2kiR9xqFG9u0Zr1Q 5Cvax4jKLhb3aaPF8buPfyzEHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAPOPHIx V/uwZLoTvBaktDnvsth/MB8GA1UdIwQYMBaAFGlq9P4DZhPWUbXimgnU/nG1VaRJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODBGOS80OTc3M0FEMEY0 QTQxMUU5OENDNzVFMzdDNEY5QUUwMi9hV3IwX2dObUU5WlJ0ZUthQ2RULWNiVlZw RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FXcjBfZ05tRTlaUnRlS2FDZFQtY2JWVnBFay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODBGOS80OTc3M0FEMEY0QTQxMUU5OENDNzVFMzdDNEY5QUUwMi9hV3IwX2dObUU5 WlJ0ZUthQ2RULWNiVlZwRWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3rdbWOP51uLp5TYSohFT8EP1Hnmm4eHH4alJBx+ndv4A4ygM//e/y yOdjrdQjMdnjXXCiko0xLX9skvoekNknrdbXQ9FZzQcEPFyykfViDxdc0xaGitSy wZeG5QSXqO1Bj96cqCnwPCzg/xeUgDxZ3To9GHkKlAgMZYQVqdecoLIl7QPSa+WG xr7J9JaE4HXFFIAQh5D/hJwX5lF75dAVBVynexmzAhj0M6rgw6goS4THtsXJAr0H ZOLEt42fsrHv4BUxR4okk7YqkXhRPng+NhyAm9XBbI9V0/I4LzEtMfxNUavjrENH cpRt5jsDMydukQL0Cef4S9p5hMD7bpFU -----END CERTIFICATE-----Generated at Sun Aug 24 05:01:19 2025 by rpki-client