$ rpki-client -vvf rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.mft File: sLiO7pE7KqjXtZU3FT782HAKkUA.mft (raw, json) Hash identifier: Pb0vinJHlgjf3W+w+wsf8xZq8++gBbvkz8Dwx7eKWBc= Subject key identifier: A9:AD:4F:36:AA:5E:C1:13:E5:13:3D:52:72:18:BE:58:8F:A8:33:23 Authority key identifier: B0:B8:8E:EE:91:3B:2A:A8:D7:B5:95:37:15:3E:FC:D8:70:0A:91:40 Certificate issuer: /CN=A91B62A9/serialNumber=B0B88EEE913B2AA8D7B59537153EFCD8700A9140 Certificate serial: 34B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLiO7pE7KqjXtZU3FT782HAKkUA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.mft Manifest number: 34AF Signing time: Fri 22 Aug 2025 15:07:42 +0000 Manifest this update: Fri 22 Aug 2025 15:07:41 +0000 Manifest next update: Fri 29 Aug 2025 15:07:41 +0000 Files and hashes: 1: sLiO7pE7KqjXtZU3FT782HAKkUA.crl (hash: 8gqdkudG8yyAi4DVC/fxZ5xKjgFqJI76aUapgxric1s=) 2: 8146430A45BE11EF92C29882C4F9AE02.roa (hash: t0r89bYo/YLfBIznDm5VJcksHUIZupXS77KseDePVYw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.crl rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLiO7pE7KqjXtZU3FT782HAKkUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:07:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13489 (0x34b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B62A9, serialNumber=B0B88EEE913B2AA8D7B59537153EFCD8700A9140 Validity Not Before: Aug 22 15:07:41 2025 GMT Not After : Aug 29 15:07:41 2025 GMT Subject: CN=68a887be-3c3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:03:32:f0:83:ac:ed:4c:e6:85:27:eb:8a:a1: b7:8a:e8:b6:f1:59:87:f3:62:d1:7e:e2:e3:f6:79: 11:57:83:02:9c:5b:ae:fa:25:43:7c:54:8f:e6:81: 76:da:ba:48:a3:0d:06:e8:51:b0:92:d4:64:6b:5d: e9:2c:0d:0d:c4:f6:78:7f:46:d9:cb:eb:13:cb:ab: 7c:f3:e8:94:9d:5a:0c:c8:b6:c7:77:65:08:7a:0a: cf:91:34:8a:52:d2:90:37:c7:f7:db:3b:03:39:97: b8:fd:63:41:c1:ac:fc:62:6a:cb:3d:e0:12:2d:8d: ae:fe:27:0c:0d:1f:f2:6a:71:c7:1e:4e:4e:a5:f0: 4f:a7:27:94:e2:70:bb:8d:c1:f7:c8:48:37:4b:2a: a0:43:53:b9:8d:10:f3:62:41:dd:50:28:8b:08:be: a5:7c:f0:3f:25:d2:16:66:f2:e0:36:ed:03:a4:d2: 03:5e:ee:73:f7:af:7e:38:1b:f4:dc:ec:f9:93:1d: c8:ef:7b:b8:ce:d2:3e:23:35:c7:af:f2:9d:8b:83: 9f:e1:72:8b:1f:25:2f:a1:9f:0d:28:3c:e1:18:69: c8:7a:b9:61:e3:e7:bc:e3:0a:db:53:d0:f5:f4:27: 63:99:45:0f:4b:05:7a:13:54:18:42:68:1e:69:d0: e7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:AD:4F:36:AA:5E:C1:13:E5:13:3D:52:72:18:BE:58:8F:A8:33:23 X509v3 Authority Key Identifier: keyid:B0:B8:8E:EE:91:3B:2A:A8:D7:B5:95:37:15:3E:FC:D8:70:0A:91:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLiO7pE7KqjXtZU3FT782HAKkUA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:b8:c9:be:86:34:17:1f:01:6d:fa:24:d5:b3:6d:76:b0:8c: 7b:a2:2b:ae:d5:6d:b4:5c:ea:6e:b6:9e:78:d7:09:b0:b6:42: 5d:63:5a:a1:26:40:fa:32:ce:e5:ee:0c:7b:13:fc:e6:1f:b4: f7:fa:fc:73:db:92:ac:54:90:d4:85:bc:00:26:50:fb:61:23: 5c:09:8b:35:99:56:98:7b:bf:ad:e3:4b:df:ae:e0:c5:d8:a1: 73:7c:91:ae:d7:a2:fb:35:ae:28:2b:46:5e:08:de:97:53:9d: 7a:2f:73:4e:24:ed:d0:8e:c4:73:13:d9:ca:42:04:0b:a4:19: a3:fc:7f:c2:01:5e:4d:72:6a:97:44:2a:a4:99:50:d3:05:92: 90:37:3e:38:89:1f:0a:66:d0:52:0d:a2:d5:d7:5b:5e:62:ad: 99:20:8b:1b:31:ec:2a:a8:a0:70:88:69:11:ca:ac:6f:df:09: 19:ea:35:db:4f:fd:26:d3:b4:fb:22:57:93:18:c5:0f:28:e5: 64:b4:77:4e:a3:73:be:2d:85:1f:70:b5:41:89:54:a7:f2:ab: 1c:79:cf:83:4d:4f:51:6a:a2:9d:ea:a2:42:d2:e4:1c:bd:79: 22:f4:40:f4:b9:ea:bf:74:bb:cd:40:ef:18:e7:6b:9d:b5:25: f4:72:c8:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYyQTkxMTAvBgNVBAUTKEIwQjg4RUVFOTEzQjJBQThEN0I1OTUzNzE1M0VGQ0Q4 NzAwQTkxNDAwHhcNMjUwODIyMTUwNzQxWhcNMjUwODI5MTUwNzQxWjAYMRYwFAYD VQQDEw02OGE4ODdiZS0zYzNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtQMy8IOs7UzmhSfriqG3iui28VmH82LRfuLj9nkRV4MCnFuu+iVDfFSP5oF2 2rpIow0G6FGwktRka13pLA0NxPZ4f0bZy+sTy6t88+iUnVoMyLbHd2UIegrPkTSK UtKQN8f32zsDOZe4/WNBwaz8YmrLPeASLY2u/icMDR/yanHHHk5OpfBPpyeU4nC7 jcH3yEg3SyqgQ1O5jRDzYkHdUCiLCL6lfPA/JdIWZvLgNu0DpNIDXu5z969+OBv0 3Oz5kx3I73u4ztI+IzXHr/Kdi4Of4XKLHyUvoZ8NKDzhGGnIerlh4+e84wrbU9D1 9CdjmUUPSwV6E1QYQmgeadDnZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKmtTzaq XsET5RM9UnIYvliPqDMjMB8GA1UdIwQYMBaAFLC4ju6ROyqo17WVNxU+/NhwCpFA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjJBOS9ENzdGOTE0MjFE QTExMUUyQkZDQjMwOTQwOEIwMkNEMi9zTGlPN3BFN0txalh0WlUzRlQ3ODJIQUtr VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NMaU83cEU3S3FqWHRaVTNGVDc4MkhBS2tVQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjJBOS9ENzdGOTE0MjFEQTExMUUyQkZDQjMwOTQwOEIwMkNEMi9zTGlPN3BFN0tx alh0WlUzRlQ3ODJIQUtrVUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmuMm+hjQXHwFt+iTVs212sIx7oiuu1W20XOputp541wmwtkJdY1qh JkD6Ms7l7gx7E/zmH7T3+vxz25KsVJDUhbwAJlD7YSNcCYs1mVaYe7+t40vfruDF 2KFzfJGu16L7Na4oK0ZeCN6XU516L3NOJO3QjsRzE9nKQgQLpBmj/H/CAV5NcmqX RCqkmVDTBZKQNz44iR8KZtBSDaLV11teYq2ZIIsbMewqqKBwiGkRyqxv3wkZ6jXb T/0m07T7IleTGMUPKOVktHdOo3O+LYUfcLVBiVSn8qscec+DTU9RaqKd6qJC0uQc vXki9ED0ueq/dLvNQO8Y52udtSX0csid -----END CERTIFICATE-----Generated at Sat Aug 23 17:17:09 2025 by rpki-client