$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft File: AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft (raw, json) Hash identifier: 0htw5mItE8fIOMCFw511ZbFgfpwHMtQZC2UnnR8NGIE= Subject key identifier: 8A:D4:61:C9:A6:21:9A:A5:55:2B:03:CD:C5:D0:AC:86:8B:DD:9A:A1 Authority key identifier: 00:02:41:49:0E:3F:20:98:F7:9D:5C:93:03:7E:BF:F2:B9:56:CF:D7 Certificate issuer: /CN=A91CA1A6/serialNumber=000241490E3F2098F79D5C93037EBFF2B956CFD7 Certificate serial: 0763 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft Manifest number: 074C Signing time: Fri 22 Aug 2025 21:53:43 +0000 Manifest this update: Fri 22 Aug 2025 21:53:43 +0000 Manifest next update: Fri 29 Aug 2025 21:53:43 +0000 Files and hashes: 1: AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl (hash: MqnmTIA16lbN4lZRCTsVZbuH5ttFm6WeLiik+dX3huk=) 2: EEE4C606B5D411ECA20B840AC4F9AE02.roa (hash: 0XMlIXCMAiJZlp7fDiVuLUwSsm0ebLntYydTAPsauDo=) 3: 910A49AAB5CC11ECAE337E78C4F9AE02.roa (hash: 3it6MgHyhXt2fOxKVzUm+aEDZP71P1ra3Nfl+4bBlR4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:53:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1891 (0x763) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA1A6, serialNumber=000241490E3F2098F79D5C93037EBFF2B956CFD7 Validity Not Before: Aug 22 21:53:43 2025 GMT Not After : Aug 29 21:53:43 2025 GMT Subject: CN=68a8e6e7-794b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2f:8e:39:8f:6c:5d:32:ed:60:d1:5a:27:e3: 43:29:72:42:ef:f0:de:cf:65:e0:9e:5c:c2:4f:6c: df:49:54:42:79:f4:57:5a:69:a2:bd:ac:7b:b0:90: 5c:77:bd:05:6a:08:40:68:20:b6:49:b8:41:55:45: d5:72:d3:17:8c:bc:65:c6:93:bc:6d:4c:3f:32:f9: 1e:5b:f7:e5:a5:d6:e8:d1:9f:68:4a:51:87:ac:46: 33:4f:d1:5b:7c:2c:5d:42:68:75:12:a3:67:b1:c3: 45:f4:4c:8e:c2:e4:d8:8d:2e:aa:8f:45:c8:12:b7: cc:02:17:51:f3:5e:d7:35:7b:1b:34:69:bd:60:2f: 77:76:1e:c9:d0:d3:99:e2:ba:fc:c9:0d:47:d4:96: 9b:a7:5a:87:ec:ee:8a:a9:1e:36:4c:50:8a:30:62: 6d:95:62:e4:b2:1a:8c:72:8b:38:95:92:c8:82:cf: 3b:4c:30:cc:3d:32:68:6f:fc:50:61:41:c3:01:72: 37:f5:b4:e7:1c:33:1a:f6:ae:56:80:03:98:f5:49: 35:5d:2d:93:73:40:ad:53:94:85:00:d5:13:dd:ce: 13:4c:de:09:3f:df:a5:1b:d4:19:3d:54:df:6f:a6: f8:21:ea:3f:25:7d:ee:a8:29:40:65:cc:ab:f0:07: a4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:D4:61:C9:A6:21:9A:A5:55:2B:03:CD:C5:D0:AC:86:8B:DD:9A:A1 X509v3 Authority Key Identifier: keyid:00:02:41:49:0E:3F:20:98:F7:9D:5C:93:03:7E:BF:F2:B9:56:CF:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:f7:07:39:a5:82:c2:c7:77:03:11:fb:10:1c:23:01:b5:c7: 2b:09:c7:3d:a4:a7:ba:91:a7:e8:03:b8:47:cc:78:93:41:4d: b2:cd:7b:2a:d1:52:93:89:c1:e6:db:5a:78:de:6d:ba:e5:2c: b5:0e:7c:b7:bf:c1:f6:45:50:35:1d:6d:8b:ca:01:e6:f7:01: 3a:85:d8:c9:a3:3f:35:7e:cb:00:33:99:6c:d5:f2:5d:a9:32: ad:03:d2:9b:c6:33:20:b8:ee:08:88:cd:60:ef:f7:c6:76:4e: 35:80:7d:a8:ad:0f:c5:62:df:4a:d1:d6:a4:e4:8d:5f:51:b5: 40:e5:b2:a0:f7:15:07:52:84:b1:bc:28:ab:21:4a:49:e6:6a: 33:5b:ab:6d:1c:47:96:83:ed:17:b1:43:5d:e9:b2:a7:21:08: f0:07:e0:8e:40:07:8e:2a:33:18:e3:f0:6a:e0:e2:ab:91:32: 0d:e6:4f:f1:b9:68:09:3f:c2:82:28:8f:73:87:ba:99:96:44: 2c:7e:ef:6b:ca:d4:25:9b:f6:79:98:eb:4b:9d:3c:16:bd:a5: bc:9b:87:c0:76:da:b7:29:91:c7:23:5d:6d:9b:d8:35:80:b7: 51:cb:15:58:97:f1:98:b7:a6:a8:45:12:d9:16:9f:e3:26:2b: 65:3a:a6:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ExQTYxMTAvBgNVBAUTKDAwMDI0MTQ5MEUzRjIwOThGNzlENUM5MzAzN0VCRkYy Qjk1NkNGRDcwHhcNMjUwODIyMjE1MzQzWhcNMjUwODI5MjE1MzQzWjAYMRYwFAYD VQQDEw02OGE4ZTZlNy03OTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwy+OOY9sXTLtYNFaJ+NDKXJC7/Dez2XgnlzCT2zfSVRCefRXWmmivax7sJBc d70FaghAaCC2SbhBVUXVctMXjLxlxpO8bUw/MvkeW/flpdbo0Z9oSlGHrEYzT9Fb fCxdQmh1EqNnscNF9EyOwuTYjS6qj0XIErfMAhdR817XNXsbNGm9YC93dh7J0NOZ 4rr8yQ1H1Jabp1qH7O6KqR42TFCKMGJtlWLkshqMcos4lZLIgs87TDDMPTJob/xQ YUHDAXI39bTnHDMa9q5WgAOY9Uk1XS2Tc0CtU5SFANUT3c4TTN4JP9+lG9QZPVTf b6b4Ieo/JX3uqClAZcyr8AeknwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIrUYcmm IZqlVSsDzcXQrIaL3ZqhMB8GA1UdIwQYMBaAFAACQUkOPyCY951ckwN+v/K5Vs/X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTFBNi8zOEQ5M0UxRTNE MzAxMUVCQjNCMkQ2NkVDNEY5QUUwMi9BQUpCU1E0X0lKajNuVnlUQTM2XzhybFd6 OWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FBSkJTUTRfSUpqM25WeVRBMzZfOHJsV3o5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTFBNi8zOEQ5M0UxRTNEMzAxMUVCQjNCMkQ2NkVDNEY5QUUwMi9BQUpCU1E0X0lK ajNuVnlUQTM2XzhybFd6OWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAw9wc5pYLCx3cDEfsQHCMBtccrCcc9pKe6kafoA7hHzHiTQU2yzXsq 0VKTicHm21p43m265Sy1Dny3v8H2RVA1HW2LygHm9wE6hdjJoz81fssAM5ls1fJd qTKtA9KbxjMguO4IiM1g7/fGdk41gH2orQ/FYt9K0dak5I1fUbVA5bKg9xUHUoSx vCirIUpJ5mozW6ttHEeWg+0XsUNd6bKnIQjwB+COQAeOKjMY4/Bq4OKrkTIN5k/x uWgJP8KCKI9zh7qZlkQsfu9rytQlm/Z5mOtLnTwWvaW8m4fAdtq3KZHHI11tm9g1 gLdRyxVYl/GYt6aoRRLZFp/jJitlOqaE -----END CERTIFICATE-----Generated at Sat Aug 23 18:59:26 2025 by rpki-client