$ rpki-client -vvf rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.mft File: aMK1iNFoWlh0LYouGIhl2zEQPPc.mft (raw, json) Hash identifier: hcxOJIcZuwPPTjpofsTsmoUCRPZjVPSO8KyBvEjTPXg= Subject key identifier: F8:7B:9E:24:4C:ED:E7:02:B8:86:11:C3:02:4D:AD:B4:1B:95:40:FD Authority key identifier: 68:C2:B5:88:D1:68:5A:58:74:2D:8A:2E:18:88:65:DB:31:10:3C:F7 Certificate issuer: /CN=A91AADAF/serialNumber=68C2B588D1685A58742D8A2E188865DB31103CF7 Certificate serial: A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMK1iNFoWlh0LYouGIhl2zEQPPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.mft Manifest number: A2 Signing time: Sat 23 Aug 2025 06:31:23 +0000 Manifest this update: Sat 23 Aug 2025 06:31:22 +0000 Manifest next update: Sat 30 Aug 2025 06:31:22 +0000 Files and hashes: 1: aMK1iNFoWlh0LYouGIhl2zEQPPc.crl (hash: kc62KwfFjyZQ7FAEIZ5xACbBY7RttGIsZFCPLL7GFbU=) 2: B2D0D768766011F08F4AF05AC4F9AE02.roa (hash: jw3dgD5r99gdiqJPpFrsCsOclRW/9zVLzwyZyaUhXJg=) 3: 01BA52A28CF411EFAE6F7F10C4F9AE02.roa (hash: EDXTUfDV5y3+rKMOJtb6JOA7sYGQ4kz4K9vrUd4nHN0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.crl rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMK1iNFoWlh0LYouGIhl2zEQPPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:31:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AADAF, serialNumber=68C2B588D1685A58742D8A2E188865DB31103CF7 Validity Not Before: Aug 23 06:31:22 2025 GMT Not After : Aug 30 06:31:22 2025 GMT Subject: CN=68a9603a-77ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:18:ee:12:25:2d:ef:b8:06:d4:ab:9f:f6:85: 54:55:ae:3c:28:2d:79:3c:61:42:16:9f:a0:40:1b: 20:65:77:62:4d:57:ac:09:5c:ff:52:0a:03:16:e5: 7c:e3:02:f4:a5:a8:93:ed:1a:d7:13:bf:53:42:1d: c6:2a:71:25:59:ae:a8:4a:70:d4:3a:16:f0:f1:61: b8:3d:d3:00:c4:38:88:af:af:f2:7e:73:bc:89:6c: 10:6b:85:94:6d:4c:48:55:3e:3f:50:1a:cf:af:80: 95:2d:a2:6c:45:c1:84:d4:f9:10:b2:6c:6f:a9:ef: 3f:0c:0b:51:4a:d0:ee:c9:b0:81:bd:90:1a:b0:0b: b9:4e:85:42:27:16:85:32:13:bf:63:e6:4d:17:88: bf:fa:11:0e:6d:6a:4a:8c:9e:ac:04:14:72:c1:c5: 49:08:7e:38:da:55:f0:cc:35:37:56:e6:d1:34:ea: 79:79:50:53:69:e2:a6:5e:83:6f:00:69:71:bf:8a: bd:18:09:de:1d:2b:55:9b:ad:34:2c:ad:d3:a4:b6: 8f:ff:6b:50:2e:b8:2a:a9:02:80:8d:3a:22:9b:7b: cf:d4:77:fc:c0:74:ec:8e:7c:13:06:ed:e5:0b:08: ce:72:3e:b1:c9:6d:f2:62:68:e5:65:49:17:f7:ed: 22:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:7B:9E:24:4C:ED:E7:02:B8:86:11:C3:02:4D:AD:B4:1B:95:40:FD X509v3 Authority Key Identifier: keyid:68:C2:B5:88:D1:68:5A:58:74:2D:8A:2E:18:88:65:DB:31:10:3C:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMK1iNFoWlh0LYouGIhl2zEQPPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:bb:6c:63:0f:7c:75:83:ce:18:df:09:76:af:67:42:c2:36: 9a:32:f4:a9:2c:04:7d:76:74:2f:1b:f3:44:34:e2:e8:02:54: c1:94:52:cd:46:1b:8e:9d:06:0a:d2:47:dc:7e:63:18:c4:0e: bc:bc:49:77:f1:23:34:4d:4f:96:15:84:10:00:56:79:c2:2b: 60:88:6a:c7:29:04:b3:3c:be:d4:e7:bb:b2:48:a1:90:ed:47: 99:6a:be:bf:ea:e1:95:8c:20:4b:b1:ea:67:6e:b1:e0:cc:7b: 5e:6e:20:62:a8:f7:50:0d:f6:4e:c4:18:9c:8b:cd:46:bf:12: a0:e9:d7:81:f4:b2:24:fc:b8:dc:a4:a6:a7:4e:a3:1a:ba:58: 5e:6a:64:e4:c6:80:aa:5e:9d:a2:8a:c6:bd:a3:86:86:21:04: bd:6c:b6:0d:ff:14:e2:e3:8a:b0:4c:ff:62:27:ef:6b:f9:ef: eb:7c:ca:7c:63:ac:da:32:d7:4a:12:94:f9:7a:44:e1:3a:e7: 02:b5:e2:3f:ad:96:91:87:08:8a:86:c8:78:ae:fc:2e:c2:8b: 7e:a0:a4:87:e6:0c:04:f5:b7:ec:f4:09:62:6b:42:7c:6b:e6: f9:c1:b1:01:49:98:db:e4:00:55:7b:23:c3:64:ec:84:b1:76: 55:02:76:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFEQUYxMTAvBgNVBAUTKDY4QzJCNTg4RDE2ODVBNTg3NDJEOEEyRTE4ODg2NURC MzExMDNDRjcwHhcNMjUwODIzMDYzMTIyWhcNMjUwODMwMDYzMTIyWjAYMRYwFAYD VQQDEw02OGE5NjAzYS03N2ZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsRjuEiUt77gG1Kuf9oVUVa48KC15PGFCFp+gQBsgZXdiTVesCVz/UgoDFuV8 4wL0paiT7RrXE79TQh3GKnElWa6oSnDUOhbw8WG4PdMAxDiIr6/yfnO8iWwQa4WU bUxIVT4/UBrPr4CVLaJsRcGE1PkQsmxvqe8/DAtRStDuybCBvZAasAu5ToVCJxaF MhO/Y+ZNF4i/+hEObWpKjJ6sBBRywcVJCH442lXwzDU3VubRNOp5eVBTaeKmXoNv AGlxv4q9GAneHStVm600LK3TpLaP/2tQLrgqqQKAjToim3vP1Hf8wHTsjnwTBu3l CwjOcj6xyW3yYmjlZUkX9+0iewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPh7niRM 7ecCuIYRwwJNrbQblUD9MB8GA1UdIwQYMBaAFGjCtYjRaFpYdC2KLhiIZdsxEDz3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQURBRi84NzE1OUM5NjhD RjMxMUVGOUYzRUE0MEZDNEY5QUUwMi9hTUsxaU5Gb1dsaDBMWW91R0lobDJ6RVFQ UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FNSzFpTkZvV2xoMExZb3VHSWhsMnpFUVBQYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QURBRi84NzE1OUM5NjhDRjMxMUVGOUYzRUE0MEZDNEY5QUUwMi9hTUsxaU5Gb1ds aDBMWW91R0lobDJ6RVFQUGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAju2xjD3x1g84Y3wl2r2dCwjaaMvSpLAR9dnQvG/NENOLoAlTBlFLN RhuOnQYK0kfcfmMYxA68vEl38SM0TU+WFYQQAFZ5witgiGrHKQSzPL7U57uySKGQ 7UeZar6/6uGVjCBLsepnbrHgzHtebiBiqPdQDfZOxBici81GvxKg6deB9LIk/Ljc pKanTqMaulheamTkxoCqXp2iisa9o4aGIQS9bLYN/xTi44qwTP9iJ+9r+e/rfMp8 Y6zaMtdKEpT5ekThOucCteI/rZaRhwiKhsh4rvwuwot+oKSH5gwE9bfs9Alia0J8 a+b5wbEBSZjb5ABVeyPDZOyEsXZVAnb1 -----END CERTIFICATE-----Generated at Sat Aug 23 16:43:19 2025 by rpki-client