$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.mft File: aU9WG2PafMV3kxY21HiK0rC0riA.mft (raw, json) Hash identifier: y65UNc5gUJXl9XgGoJFyT01waU7KDkeILcO2mcvtExk= Subject key identifier: D8:50:17:C1:6B:40:07:DF:9A:D5:25:4D:2F:21:1B:71:61:49:0C:30 Authority key identifier: 69:4F:56:1B:63:DA:7C:C5:77:93:16:36:D4:78:8A:D2:B0:B4:AE:20 Certificate issuer: /CN=A91A9083/serialNumber=694F561B63DA7CC577931636D4788AD2B0B4AE20 Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aU9WG2PafMV3kxY21HiK0rC0riA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.mft Manifest number: 76 Signing time: Sat 23 Aug 2025 07:05:44 +0000 Manifest this update: Sat 23 Aug 2025 07:05:43 +0000 Manifest next update: Sat 30 Aug 2025 07:05:43 +0000 Files and hashes: 1: aU9WG2PafMV3kxY21HiK0rC0riA.crl (hash: e80mITfIwNcenutSTj6uxylEBjeWHY/BzJnxGZr98bE=) 2: 8DDA6872D25311EF8EBE2767C4F9AE02.roa (hash: AKFJ0EmXDuIFiZbxj+tbIwUPsfALbR27GRMsJeNf4oY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.crl rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aU9WG2PafMV3kxY21HiK0rC0riA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:05:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9083, serialNumber=694F561B63DA7CC577931636D4788AD2B0B4AE20 Validity Not Before: Aug 23 07:05:43 2025 GMT Not After : Aug 30 07:05:43 2025 GMT Subject: CN=68a96848-ff14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:03:c9:22:ec:39:7e:c0:60:ac:48:b7:52:1c: 6a:63:d2:93:7d:94:6e:6f:4b:4f:9e:fe:05:64:36: 92:1d:29:41:93:5e:30:f2:df:7e:42:8f:f6:09:89: 38:09:8c:1f:cc:5b:ba:b9:9d:01:17:cf:98:af:1e: da:c0:90:56:6c:55:10:5a:92:ae:41:41:14:e1:4f: 4a:c2:ba:43:28:e8:ee:e2:6e:b6:ac:4e:79:80:5f: 73:13:a4:a8:c6:ba:1a:57:91:69:db:c0:7a:2f:5a: e3:f5:28:66:a5:52:80:3a:53:9c:a2:6c:cc:b2:4b: 03:6d:4b:56:cc:6b:b9:6e:ef:a3:d5:a5:9d:93:c1: 91:e2:4d:7a:bd:48:47:97:cc:8a:9a:4f:65:8b:2e: 9c:a2:bf:6c:81:af:2f:84:e4:79:2a:7f:53:bd:da: 33:6d:f9:68:25:7f:e3:7c:97:8f:12:fd:27:ae:7c: e1:55:9e:f8:51:6e:ee:51:67:fd:f8:15:50:d8:a8: 2a:03:34:84:b6:66:ad:d0:16:64:5a:8c:d5:cb:2d: 77:85:2b:d1:35:5c:e0:4a:92:b1:a2:21:95:0e:f7: 6c:96:59:6c:de:26:52:2c:37:40:a8:45:2d:af:15: a7:1a:52:32:80:89:54:9b:a2:25:16:61:c0:06:07: 0d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:50:17:C1:6B:40:07:DF:9A:D5:25:4D:2F:21:1B:71:61:49:0C:30 X509v3 Authority Key Identifier: keyid:69:4F:56:1B:63:DA:7C:C5:77:93:16:36:D4:78:8A:D2:B0:B4:AE:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aU9WG2PafMV3kxY21HiK0rC0riA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:ea:63:18:e3:37:2c:5b:97:4d:e6:5a:81:d4:16:bb:38:96: 9b:4e:0d:d3:73:9d:5a:00:3a:36:93:da:76:77:85:25:a3:84: 59:07:19:70:d3:41:c8:14:02:f2:9e:4c:f8:c6:51:f5:1c:16: 59:14:ad:15:3d:cb:23:86:a0:0c:af:6b:a5:1b:91:06:f5:47: 20:98:84:79:77:42:7c:fb:44:75:bb:9c:8a:13:5d:6e:e9:e2: d1:9e:ba:e6:34:2e:96:35:d8:e6:e6:91:e9:9d:f8:d5:c6:a3: 67:69:20:8e:cd:7a:90:81:2b:fe:75:dd:00:99:85:82:c7:d8: 1b:5c:3a:d1:2b:8a:23:e2:30:4e:61:e3:78:3f:f3:2d:d5:e8: a8:a7:be:a7:b8:7d:31:f5:7e:fb:41:54:96:92:a4:d1:9a:a3: b9:c6:57:50:c3:a6:0f:ca:f7:b3:3f:41:78:ce:fe:2a:a5:cb: f5:a9:fc:7e:ec:62:8e:a0:56:05:ef:5e:49:5f:c8:69:3e:fd: 24:8c:4c:d3:39:68:ba:84:fa:6f:cc:f8:e1:c5:03:f5:f5:3c: 32:3b:97:21:c6:ba:79:35:4d:0d:c1:9f:c0:62:b0:38:69:ae: 5f:ea:b9:d3:12:05:9c:d4:80:1e:29:0a:64:a5:73:50:31:2a: b7:95:f8:0f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OTA4MzExMC8GA1UEBRMoNjk0RjU2MUI2M0RBN0NDNTc3OTMxNjM2RDQ3ODhBRDJC MEI0QUUyMDAeFw0yNTA4MjMwNzA1NDNaFw0yNTA4MzAwNzA1NDNaMBgxFjAUBgNV BAMTDTY4YTk2ODQ4LWZmMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEA8ki7Dl+wGCsSLdSHGpj0pN9lG5vS0+e/gVkNpIdKUGTXjDy335Cj/YJiTgJ jB/MW7q5nQEXz5ivHtrAkFZsVRBakq5BQRThT0rCukMo6O7ibrasTnmAX3MTpKjG uhpXkWnbwHovWuP1KGalUoA6U5yibMyySwNtS1bMa7lu76PVpZ2TwZHiTXq9SEeX zIqaT2WLLpyiv2yBry+E5Hkqf1O92jNt+Wglf+N8l48S/SeufOFVnvhRbu5RZ/34 FVDYqCoDNIS2Zq3QFmRajNXLLXeFK9E1XOBKkrGiIZUO92yWWWzeJlIsN0CoRS2v FacaUjKAiVSboiUWYcAGBw1bAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2FAXwWtA B9+a1SVNLyEbcWFJDDAwHwYDVR0jBBgwFoAUaU9WG2PafMV3kxY21HiK0rC0riAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5MDgzL0M4NkNEODA2RDFC MDExRUY4ODMzQzkzM0M0RjlBRTAyL2FVOVdHMlBhZk1WM2t4WTIxSGlLMHJDMHJp QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYVU5V0cyUGFmTVYza3hZMjFIaUswckMwcmlBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 MDgzL0M4NkNEODA2RDFCMDExRUY4ODMzQzkzM0M0RjlBRTAyL2FVOVdHMlBhZk1W M2t4WTIxSGlLMHJDMHJpQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE7qYxjjNyxbl03mWoHUFrs4lptODdNznVoAOjaT2nZ3hSWjhFkHGXDT QcgUAvKeTPjGUfUcFlkUrRU9yyOGoAyva6UbkQb1RyCYhHl3Qnz7RHW7nIoTXW7p 4tGeuuY0LpY12Obmkemd+NXGo2dpII7NepCBK/513QCZhYLH2BtcOtEriiPiME5h 43g/8y3V6Kinvqe4fTH1fvtBVJaSpNGao7nGV1DDpg/K97M/QXjO/iqly/Wp/H7s Yo6gVgXvXklfyGk+/SSMTNM5aLqE+m/M+OHFA/X1PDI7lyHGunk1TQ3Bn8BisDhp rl/qudMSBZzUgB4pCmSlc1AxKreV+A8= -----END CERTIFICATE-----Generated at Sun Aug 24 06:46:27 2025 by rpki-client