$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft File: AwUYVzXgl--zaoYGU7JTq-n-EVw.mft (raw, json) Hash identifier: IyNIPGTu0Bqo9Mv/QPA3UmPepNJ6+X7G8Lu/0P1VKw8= Subject key identifier: C8:DB:16:5B:02:E1:06:DE:FD:E7:A6:4B:14:4E:E1:6D:D0:BD:60:D5 Authority key identifier: 03:05:18:57:35:E0:97:EF:B3:6A:86:06:53:B2:53:AB:E9:FE:11:5C Certificate issuer: /CN=A91AEE40/serialNumber=0305185735E097EFB36A860653B253ABE9FE115C Certificate serial: 02AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft Manifest number: 02A2 Signing time: Sat 23 Aug 2025 01:49:27 +0000 Manifest this update: Sat 23 Aug 2025 01:49:27 +0000 Manifest next update: Sat 30 Aug 2025 01:49:27 +0000 Files and hashes: 1: AwUYVzXgl--zaoYGU7JTq-n-EVw.crl (hash: HLEfGTOIQjE3StGkamaEx1jVzF0B9SZPrsUvLV3vS3w=) 2: 411831E23FC011F097A38852C4F9AE02.roa (hash: jz8AloENe0TPp9OJIqM52pwRF95JvO77nx4Ot9bcENs=) 3: 485DCAA8418111F093EDEF69C4F9AE02.roa (hash: N98ZAqtSjhk7d30tVEfzffIJ5/FjeJUTPsh4dCjO5no=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.crl rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:49:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 682 (0x2aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEE40, serialNumber=0305185735E097EFB36A860653B253ABE9FE115C Validity Not Before: Aug 23 01:49:27 2025 GMT Not After : Aug 30 01:49:27 2025 GMT Subject: CN=68a91e27-d067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e3:29:e7:68:4b:c0:32:0d:a3:08:6c:3b:72: b9:af:5a:24:33:be:8e:cd:c3:40:2b:3b:42:76:d5: 35:5a:0d:a1:ce:4d:b5:79:b1:70:a1:11:77:e3:6c: b3:31:30:b3:f1:88:2a:cf:46:39:9e:23:8e:c1:e7: 7f:fd:6c:95:ba:97:e3:d8:48:a0:d7:30:33:c1:8a: c9:ac:62:14:c1:77:0b:d6:82:25:e1:0f:98:3e:d4: f3:fe:fa:da:bd:3e:75:f6:89:a3:2f:96:97:e3:02: fd:5e:39:81:06:60:87:5a:da:07:d8:da:87:a6:82: 6d:28:6e:88:1b:07:29:ac:92:b6:2f:c6:ff:10:cc: 89:96:f5:21:d1:01:8d:b1:3c:0d:8b:88:62:78:62: 78:ff:de:58:18:c9:a4:2e:2f:22:08:07:b9:36:a3: 7d:ac:2d:00:4a:39:37:25:9c:da:34:d7:91:3c:3c: 3f:de:1c:0e:54:1f:61:44:c9:96:9a:37:db:af:6f: de:71:bb:ed:e5:9c:27:62:7e:bc:ef:61:45:38:42: 8f:0e:67:3a:d3:7c:57:be:c8:5e:ae:dd:23:4d:70: f0:86:e1:3f:84:85:a6:47:7f:8f:34:81:81:70:3d: a0:e9:55:e1:ab:a0:c3:94:03:80:b2:8a:d6:3d:12: 04:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:DB:16:5B:02:E1:06:DE:FD:E7:A6:4B:14:4E:E1:6D:D0:BD:60:D5 X509v3 Authority Key Identifier: keyid:03:05:18:57:35:E0:97:EF:B3:6A:86:06:53:B2:53:AB:E9:FE:11:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:76:45:a2:4c:e6:a3:c4:53:4a:76:1b:2f:a4:70:1b:24:5f: 99:8d:a6:43:62:42:e7:3a:2c:4e:37:7f:31:04:f0:32:b9:45: 10:d0:42:f9:9b:fc:18:ee:c9:04:e2:37:24:9e:df:f2:03:38: 73:dc:02:35:81:f4:ef:86:bd:a8:2f:2e:29:33:10:0d:2c:30: 09:40:fd:66:ac:9a:19:e4:e3:ba:f7:45:13:eb:3e:c6:d9:5e: b3:06:7f:25:2f:d7:26:cd:2f:d7:71:02:9f:b1:19:0a:93:c3: d6:6d:86:c1:65:13:71:27:be:b3:b6:8c:b8:3f:25:0b:ad:1e: db:fc:e1:21:30:05:92:ae:4b:07:9d:7a:46:86:f1:1a:a8:49: b1:c5:d9:d6:20:19:df:f6:5a:9e:04:0d:49:ea:d6:04:b9:46: 36:e8:a7:66:7a:f3:95:6b:d6:f4:b1:12:9e:87:74:20:2e:13: e1:e8:99:5b:5e:1b:94:2b:b2:1c:ff:a0:f3:57:8a:54:5d:44: 3e:69:21:aa:12:0f:70:b8:7a:f9:2a:b6:74:8c:85:95:3b:a5: 25:cb:5f:84:d5:54:56:40:a9:1e:1e:0c:45:5c:5c:3d:ab:af: 81:0f:19:7d:9c:f1:af:73:c3:28:8b:84:e8:7b:e3:35:43:1e: 20:a1:5f:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVFNDAxMTAvBgNVBAUTKDAzMDUxODU3MzVFMDk3RUZCMzZBODYwNjUzQjI1M0FC RTlGRTExNUMwHhcNMjUwODIzMDE0OTI3WhcNMjUwODMwMDE0OTI3WjAYMRYwFAYD VQQDEw02OGE5MWUyNy1kMDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApOMp52hLwDINowhsO3K5r1okM76OzcNAKztCdtU1Wg2hzk21ebFwoRF342yz MTCz8Ygqz0Y5niOOwed//WyVupfj2Eig1zAzwYrJrGIUwXcL1oIl4Q+YPtTz/vra vT519omjL5aX4wL9XjmBBmCHWtoH2NqHpoJtKG6IGwcprJK2L8b/EMyJlvUh0QGN sTwNi4hieGJ4/95YGMmkLi8iCAe5NqN9rC0ASjk3JZzaNNeRPDw/3hwOVB9hRMmW mjfbr2/ecbvt5ZwnYn6872FFOEKPDmc603xXvshert0jTXDwhuE/hIWmR3+PNIGB cD2g6VXhq6DDlAOAsorWPRIElQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMjbFlsC 4Qbe/eemSxRO4W3QvWDVMB8GA1UdIwQYMBaAFAMFGFc14Jfvs2qGBlOyU6vp/hFc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUU0MC8wRUVDMjlGODBG MzAxMUVEQjM1NjhBODRDNEY5QUUwMi9Bd1VZVnpYZ2wtLXphb1lHVTdKVHEtbi1F VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F3VVlWelhnbC0temFvWUdVN0pUcS1uLUVWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RUU0MC8wRUVDMjlGODBGMzAxMUVEQjM1NjhBODRDNEY5QUUwMi9Bd1VZVnpYZ2wt LXphb1lHVTdKVHEtbi1FVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfdkWiTOajxFNKdhsvpHAbJF+ZjaZDYkLnOixON38xBPAyuUUQ0EL5 m/wY7skE4jcknt/yAzhz3AI1gfTvhr2oLy4pMxANLDAJQP1mrJoZ5OO690UT6z7G 2V6zBn8lL9cmzS/XcQKfsRkKk8PWbYbBZRNxJ76ztoy4PyULrR7b/OEhMAWSrksH nXpGhvEaqEmxxdnWIBnf9lqeBA1J6tYEuUY26KdmevOVa9b0sRKeh3QgLhPh6Jlb XhuUK7Ic/6DzV4pUXUQ+aSGqEg9wuHr5KrZ0jIWVO6Uly1+E1VRWQKkeHgxFXFw9 q6+BDxl9nPGvc8Moi4Toe+M1Qx4goV/w -----END CERTIFICATE-----Generated at Sat Aug 23 23:56:08 2025 by rpki-client