$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft File: AXCw4NBuMUc8rBZOSwttIb300jc.mft (raw, json) Hash identifier: 3wVFqVMcUDU9ocCJTM6tiX5ZnK4B3CmsTV3nKpgyu+Y= Subject key identifier: B4:CA:FF:09:5A:8A:F0:A6:BE:70:71:4F:BE:C4:60:07:96:2B:19:A4 Authority key identifier: 01:70:B0:E0:D0:6E:31:47:3C:AC:16:4E:4B:0B:6D:21:BD:F4:D2:37 Certificate issuer: /CN=A91AE9F7/serialNumber=0170B0E0D06E31473CAC164E4B0B6D21BDF4D237 Certificate serial: 1007 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXCw4NBuMUc8rBZOSwttIb300jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft Manifest number: 0FFB Signing time: Fri 22 Aug 2025 17:35:28 +0000 Manifest this update: Fri 22 Aug 2025 17:35:27 +0000 Manifest next update: Fri 29 Aug 2025 17:35:27 +0000 Files and hashes: 1: AXCw4NBuMUc8rBZOSwttIb300jc.crl (hash: v74kG0OhKcr/sPjWyY/rWAGL3rNSH44zJQhSVJx9UB8=) 2: 1585570A544C11E9BDFF2B2DC4F9AE02.roa (hash: jZa47LQUiVvIxoLDSyE/2t1CJaYFtRO42+/jeT3MONo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.crl rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXCw4NBuMUc8rBZOSwttIb300jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:35:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4103 (0x1007) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE9F7, serialNumber=0170B0E0D06E31473CAC164E4B0B6D21BDF4D237 Validity Not Before: Aug 22 17:35:27 2025 GMT Not After : Aug 29 17:35:27 2025 GMT Subject: CN=68a8aa60-697f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:99:b7:ea:8b:1b:8a:e0:67:dc:2e:5f:a1:0e: 93:f6:00:ce:73:de:79:43:2d:3b:ba:a8:6b:1c:9b: 5a:b4:de:3f:3f:8e:83:d2:44:b9:b4:8e:a5:34:00: 23:be:e7:12:f3:d9:1c:03:08:02:3b:84:24:e1:aa: 0b:a2:88:ea:8a:83:76:f7:ff:92:be:9d:8f:3e:89: f9:e9:14:01:42:74:f0:38:8d:6b:26:36:e8:5e:8a: a2:de:2b:3e:7f:6a:89:5e:9b:68:d9:ef:aa:4a:47: 48:a4:c9:de:58:25:ff:8b:f1:39:5a:09:b3:02:3b: 10:05:3d:9c:92:dd:e4:eb:c9:9c:e0:31:04:1a:1e: dc:e0:36:8c:a0:4b:b6:37:1f:04:76:ad:7d:26:2c: 79:27:85:18:3d:0f:8e:27:43:5e:39:1d:32:77:84: 75:8f:44:74:65:9f:61:d6:2c:6f:5a:0d:a7:4e:8d: 86:dd:6a:d6:eb:13:75:62:52:6f:de:3c:a4:a2:91: b3:0d:d4:3a:57:86:36:c0:b6:52:e9:d6:e7:30:78: 2b:2d:5a:36:3f:1b:df:16:e3:ec:a7:de:6a:53:27: c5:84:2b:a7:62:1a:5d:d2:7b:96:ca:53:7c:32:b4: c1:b1:a3:8b:34:d8:44:4a:bb:41:10:36:d2:9f:55: ac:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:CA:FF:09:5A:8A:F0:A6:BE:70:71:4F:BE:C4:60:07:96:2B:19:A4 X509v3 Authority Key Identifier: keyid:01:70:B0:E0:D0:6E:31:47:3C:AC:16:4E:4B:0B:6D:21:BD:F4:D2:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXCw4NBuMUc8rBZOSwttIb300jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:c2:4b:00:29:78:18:84:6b:f4:9a:1b:f8:2a:d0:30:d9:c4: 05:79:5a:56:53:1f:a3:fc:02:23:77:05:04:90:f8:ec:f6:76: 5b:c4:22:60:07:b8:38:24:a4:9b:52:63:7a:eb:9d:1f:e2:be: cb:de:2d:c4:b1:32:c4:b7:e0:75:3c:fb:6d:c5:fb:da:f1:0e: 92:8b:6d:6a:0b:95:53:66:e0:b8:47:49:23:0e:0b:0c:c8:3b: b6:09:dd:67:6b:c0:c1:27:e2:bd:83:fe:32:2d:74:bd:26:52: 75:97:d7:70:93:e2:e7:41:ae:ce:0b:e7:31:63:68:d7:a9:71: 00:28:e3:f4:25:d3:4f:f0:af:d7:67:32:ac:b5:25:09:3a:ab: 3f:4d:ad:aa:5e:37:13:15:86:49:6b:ec:58:5b:2d:3a:76:f5: 5c:31:28:20:94:9c:16:38:b1:b9:f8:6e:73:46:75:8a:a8:b4: a7:be:97:e1:bf:c8:ca:87:cc:51:91:0d:b0:c4:3c:8f:5a:c9: 9d:dd:76:ee:1c:06:7d:b6:99:65:d8:08:a1:a5:4f:a0:dd:e9: 81:aa:e5:76:d7:1c:80:1c:56:fb:2f:24:f0:2b:b3:a8:9c:01: 5e:99:70:f8:71:cc:6c:9b:fd:0b:25:52:5d:ed:c6:49:29:46: 1b:07:6a:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEAcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU5RjcxMTAvBgNVBAUTKDAxNzBCMEUwRDA2RTMxNDczQ0FDMTY0RTRCMEI2RDIx QkRGNEQyMzcwHhcNMjUwODIyMTczNTI3WhcNMjUwODI5MTczNTI3WjAYMRYwFAYD VQQDEw02OGE4YWE2MC02OTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZm36osbiuBn3C5foQ6T9gDOc955Qy07uqhrHJtatN4/P46D0kS5tI6lNAAj vucS89kcAwgCO4Qk4aoLoojqioN29/+Svp2PPon56RQBQnTwOI1rJjboXoqi3is+ f2qJXpto2e+qSkdIpMneWCX/i/E5WgmzAjsQBT2ckt3k68mc4DEEGh7c4DaMoEu2 Nx8Edq19Jix5J4UYPQ+OJ0NeOR0yd4R1j0R0ZZ9h1ixvWg2nTo2G3WrW6xN1YlJv 3jykopGzDdQ6V4Y2wLZS6dbnMHgrLVo2PxvfFuPsp95qUyfFhCunYhpd0nuWylN8 MrTBsaOLNNhESrtBEDbSn1WsHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLTK/wla ivCmvnBxT77EYAeWKxmkMB8GA1UdIwQYMBaAFAFwsODQbjFHPKwWTksLbSG99NI3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTlGNy8zNzlFQzc0MjU0 NEExMUU5QTM1MEMxMjdDNEY5QUUwMi9BWEN3NE5CdU1VYzhyQlpPU3d0dEliMzAw amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FYQ3c0TkJ1TVVjOHJCWk9Td3R0SWIzMDBqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTlGNy8zNzlFQzc0MjU0NEExMUU5QTM1MEMxMjdDNEY5QUUwMi9BWEN3NE5CdU1V YzhyQlpPU3d0dEliMzAwamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYwksAKXgYhGv0mhv4KtAw2cQFeVpWUx+j/AIjdwUEkPjs9nZbxCJg B7g4JKSbUmN6650f4r7L3i3EsTLEt+B1PPttxfva8Q6Si21qC5VTZuC4R0kjDgsM yDu2Cd1na8DBJ+K9g/4yLXS9JlJ1l9dwk+LnQa7OC+cxY2jXqXEAKOP0JdNP8K/X ZzKstSUJOqs/Ta2qXjcTFYZJa+xYWy06dvVcMSgglJwWOLG5+G5zRnWKqLSnvpfh v8jKh8xRkQ2wxDyPWsmd3XbuHAZ9tpll2AihpU+g3emBquV21xyAHFb7LyTwK7Oo nAFemXD4ccxsm/0LJVJd7cZJKUYbB2pU -----END CERTIFICATE-----Generated at Sun Aug 24 02:25:31 2025 by rpki-client