$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/aWnCC4aZpI0HLUowZ8_wDV9EfJg.mft File: aWnCC4aZpI0HLUowZ8_wDV9EfJg.mft (raw, json) Hash identifier: jtUkPSuhWChjCbdVRAUSvDOzd8sIe0EX56LNSA72wW0= Subject key identifier: AD:85:0C:CD:AC:32:2A:12:61:56:07:E2:95:75:F7:FD:83:2B:72:62 Authority key identifier: 69:69:C2:0B:86:99:A4:8D:07:2D:4A:30:67:CF:F0:0D:5F:44:7C:98 Certificate issuer: /CN=A91C8BEE/serialNumber=6969C20B8699A48D072D4A3067CFF00D5F447C98 Certificate serial: 073B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnCC4aZpI0HLUowZ8_wDV9EfJg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/aWnCC4aZpI0HLUowZ8_wDV9EfJg.mft Manifest number: 0736 Signing time: Fri 22 Aug 2025 21:54:58 +0000 Manifest this update: Fri 22 Aug 2025 21:54:57 +0000 Manifest next update: Fri 29 Aug 2025 21:54:57 +0000 Files and hashes: 1: aWnCC4aZpI0HLUowZ8_wDV9EfJg.crl (hash: AGjR3EPMSChNCaT9sS+ALqnOC7f6W2stI5qFqjp2Lb0=) 2: DE524D283F0511EBBB4C174FC4F9AE02.roa (hash: zWRikEivlVPteMMOfXpGEHZKMPXoa2S3XawXpPi4Aig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/aWnCC4aZpI0HLUowZ8_wDV9EfJg.crl rsync://rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/aWnCC4aZpI0HLUowZ8_wDV9EfJg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnCC4aZpI0HLUowZ8_wDV9EfJg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:54:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1851 (0x73b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8BEE, serialNumber=6969C20B8699A48D072D4A3067CFF00D5F447C98 Validity Not Before: Aug 22 21:54:57 2025 GMT Not After : Aug 29 21:54:57 2025 GMT Subject: CN=68a8e731-cdec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3f:9a:50:e0:31:9c:13:7d:db:c4:8f:d7:fa: ea:d4:04:cd:1c:96:fd:5a:93:22:5d:81:bb:5d:fd: ba:24:f8:ff:26:0c:77:bd:84:f5:01:47:e6:86:a3: 91:27:72:cf:96:d6:38:f5:4a:35:15:89:a0:17:b6: e3:4c:f3:e1:8f:51:93:d6:5f:93:fd:33:64:73:00: 8b:24:cf:1a:29:6b:f2:69:55:2e:f6:df:a9:8a:e2: 67:ed:73:ca:d3:09:0b:9d:c4:50:a1:29:0e:73:5c: 3e:f2:ae:76:86:a5:9b:32:45:c7:37:82:74:73:ee: b7:8c:cb:47:a9:46:26:bd:dd:bb:49:5e:8a:5d:e0: 74:5f:ff:38:f7:be:dd:f9:1d:5b:65:7b:38:4e:c7: 94:d7:5f:7f:2b:96:22:eb:9b:a9:fc:7e:aa:7d:09: 4d:fc:06:b8:05:41:0b:6e:25:92:8e:0c:c3:2c:80: 0d:11:8e:90:13:6c:be:e7:01:e0:3f:d5:fc:21:08: d4:7f:c6:d0:2e:80:70:a7:63:22:90:03:f2:5e:79: 2d:d2:2e:ac:42:31:cf:a0:83:3c:fa:6b:25:1f:03: 0c:68:36:2c:30:e0:19:fb:ac:c9:8d:12:ab:ce:f7: ee:39:62:aa:10:cb:27:d1:a2:8c:96:87:49:7d:43: 97:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:85:0C:CD:AC:32:2A:12:61:56:07:E2:95:75:F7:FD:83:2B:72:62 X509v3 Authority Key Identifier: keyid:69:69:C2:0B:86:99:A4:8D:07:2D:4A:30:67:CF:F0:0D:5F:44:7C:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/aWnCC4aZpI0HLUowZ8_wDV9EfJg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnCC4aZpI0HLUowZ8_wDV9EfJg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/aWnCC4aZpI0HLUowZ8_wDV9EfJg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:ce:08:5b:16:7e:01:99:bb:67:94:f7:ad:72:3c:dd:73:50: 33:90:e8:dd:92:e1:47:a4:98:8e:02:b7:c9:9b:fe:03:8e:9a: a7:60:60:49:51:15:3b:aa:ac:d2:95:cf:56:db:ce:c2:87:93: d3:63:45:cc:16:dd:d2:fa:a9:6f:0f:b6:52:49:0b:e6:a6:b1: 43:a2:da:1d:a3:59:bf:36:93:9c:72:f6:65:7b:8b:55:92:12: 09:42:8f:98:3e:0f:e6:de:57:e8:1b:b8:46:b2:ba:fb:d8:80: 8b:fa:e8:0a:4d:e8:0a:c8:9c:f1:14:af:16:9a:a2:a0:be:78: 1f:a5:2f:cc:f0:4e:0d:16:db:e1:87:dc:cb:e7:b8:1b:d0:15: 72:52:23:1f:c5:59:4a:c6:0c:d1:6c:49:09:da:7c:bc:1c:71: a0:b2:67:f6:5f:f2:cf:29:0c:8d:f1:0f:40:3c:95:f7:22:75: c9:cd:30:37:ec:65:5e:6a:8c:4c:9b:45:06:52:a5:b7:3a:4b: 15:1a:a8:07:7b:e6:e9:7e:11:58:67:76:a3:ef:01:af:33:a8: 4c:e5:53:86:8b:6c:81:66:d0:c1:ae:5f:22:b7:3f:4b:93:75: 41:ed:92:10:3e:98:5e:53:4e:11:d5:77:50:cd:08:20:ac:e3: f0:2f:df:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhCRUUxMTAvBgNVBAUTKDY5NjlDMjBCODY5OUE0OEQwNzJENEEzMDY3Q0ZGMDBE NUY0NDdDOTgwHhcNMjUwODIyMjE1NDU3WhcNMjUwODI5MjE1NDU3WjAYMRYwFAYD VQQDEw02OGE4ZTczMS1jZGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArz+aUOAxnBN928SP1/rq1ATNHJb9WpMiXYG7Xf26JPj/Jgx3vYT1AUfmhqOR J3LPltY49Uo1FYmgF7bjTPPhj1GT1l+T/TNkcwCLJM8aKWvyaVUu9t+piuJn7XPK 0wkLncRQoSkOc1w+8q52hqWbMkXHN4J0c+63jMtHqUYmvd27SV6KXeB0X/84977d +R1bZXs4TseU119/K5Yi65up/H6qfQlN/Aa4BUELbiWSjgzDLIANEY6QE2y+5wHg P9X8IQjUf8bQLoBwp2MikAPyXnkt0i6sQjHPoIM8+mslHwMMaDYsMOAZ+6zJjRKr zvfuOWKqEMsn0aKMlodJfUOXoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK2FDM2s MioSYVYH4pV19/2DK3JiMB8GA1UdIwQYMBaAFGlpwguGmaSNBy1KMGfP8A1fRHyY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEJFRS82RTA2MjdGODNG MDMxMUVCQkU3NUI0NEJDNEY5QUUwMi9hV25DQzRhWnBJMEhMVW93Wjhfd0RWOUVm SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FXbkNDNGFacEkwSExVb3daOF93RFY5RWZKZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEJFRS82RTA2MjdGODNGMDMxMUVCQkU3NUI0NEJDNEY5QUUwMi9hV25DQzRhWnBJ MEhMVW93Wjhfd0RWOUVmSmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByzghbFn4BmbtnlPetcjzdc1AzkOjdkuFHpJiOArfJm/4DjpqnYGBJ URU7qqzSlc9W287Ch5PTY0XMFt3S+qlvD7ZSSQvmprFDotodo1m/NpOccvZle4tV khIJQo+YPg/m3lfoG7hGsrr72ICL+ugKTegKyJzxFK8WmqKgvngfpS/M8E4NFtvh h9zL57gb0BVyUiMfxVlKxgzRbEkJ2ny8HHGgsmf2X/LPKQyN8Q9APJX3InXJzTA3 7GVeaoxMm0UGUqW3OksVGqgHe+bpfhFYZ3aj7wGvM6hM5VOGi2yBZtDBrl8itz9L k3VB7ZIQPpheU04R1XdQzQggrOPwL9/e -----END CERTIFICATE-----Generated at Sun Aug 24 06:34:45 2025 by rpki-client