$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/awKSxgJwici6idjGWhozDUiLCiw.mft File: awKSxgJwici6idjGWhozDUiLCiw.mft (raw, json) Hash identifier: IEhfw46uK/cnrMT3+YxtVc7ipMb4fPtfbz14U7fdvs8= Subject key identifier: 96:F8:88:12:51:A7:17:55:57:46:22:05:0E:6E:55:61:31:55:AD:DF Authority key identifier: 6B:02:92:C6:02:70:89:C8:BA:89:D8:C6:5A:1A:33:0D:48:8B:0A:2C Certificate issuer: /CN=A91D0B0E/serialNumber=6B0292C6027089C8BA89D8C65A1A330D488B0A2C Certificate serial: B1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/awKSxgJwici6idjGWhozDUiLCiw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/awKSxgJwici6idjGWhozDUiLCiw.mft Manifest number: AD Signing time: Sat 23 Aug 2025 06:22:52 +0000 Manifest this update: Sat 23 Aug 2025 06:22:52 +0000 Manifest next update: Sat 30 Aug 2025 06:22:52 +0000 Files and hashes: 1: awKSxgJwici6idjGWhozDUiLCiw.crl (hash: O/Cw4g9/+Xva+sEPe69fNzIoFRGvm6laPjKBU2eQjYo=) 2: 17782970808311EFBB9C2A46C4F9AE02.roa (hash: p+Li5x5IRkEHLsrKLMYZtCUY4xOsEsGyH8peATkiJDE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/awKSxgJwici6idjGWhozDUiLCiw.crl rsync://rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/awKSxgJwici6idjGWhozDUiLCiw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/awKSxgJwici6idjGWhozDUiLCiw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:22:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 177 (0xb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0B0E, serialNumber=6B0292C6027089C8BA89D8C65A1A330D488B0A2C Validity Not Before: Aug 23 06:22:52 2025 GMT Not After : Aug 30 06:22:52 2025 GMT Subject: CN=68a95e3c-7070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ec:97:be:25:52:40:b8:38:fd:4c:44:d0:a5: 6a:41:1d:3a:07:16:aa:d7:8c:25:10:ae:32:fc:0c: fc:29:4f:2b:6a:8a:b1:62:be:8c:a4:79:c1:fe:5c: 93:11:30:a9:e6:79:03:79:04:45:19:33:c8:7e:42: 4d:19:9d:f9:4f:47:60:f1:76:86:52:b0:e7:bc:be: 32:e6:c6:77:df:0a:7d:15:79:24:ad:1a:0c:18:fa: ea:66:1b:75:6a:36:c8:fa:43:5c:98:63:a6:97:90: 2f:e8:2e:45:5e:01:ef:22:34:30:54:d6:ee:b8:3a: 9e:14:4b:d6:35:42:d9:31:18:1a:77:10:75:4a:e3: 52:f3:56:90:0c:8b:dc:02:08:73:e2:d4:01:f3:30: bd:ec:4b:a6:a4:65:8b:e7:14:19:89:6f:6f:ed:a6: 22:2a:61:5e:df:29:17:59:84:76:88:35:23:3f:20: 26:c5:13:a3:aa:d3:0a:cc:e5:0a:eb:18:7a:3c:22: 2a:05:1c:66:cc:18:08:d9:f5:96:eb:82:7c:e9:a8: 28:53:a7:1c:dc:3b:86:be:9e:76:6d:22:f3:0b:14: 42:00:b5:93:c9:e3:c6:bc:6a:fb:5c:fb:81:89:e2: ae:4a:6b:db:11:a8:ea:c9:2c:28:bf:50:23:30:ca: e6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:F8:88:12:51:A7:17:55:57:46:22:05:0E:6E:55:61:31:55:AD:DF X509v3 Authority Key Identifier: keyid:6B:02:92:C6:02:70:89:C8:BA:89:D8:C6:5A:1A:33:0D:48:8B:0A:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/awKSxgJwici6idjGWhozDUiLCiw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/awKSxgJwici6idjGWhozDUiLCiw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/awKSxgJwici6idjGWhozDUiLCiw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:e3:2e:d8:63:a3:71:83:f1:2e:ae:07:58:08:52:3c:f9:3b: ee:05:da:36:51:98:04:ee:b6:fb:2a:55:12:b2:24:26:36:a7: 4d:16:77:03:83:d9:35:5f:e7:76:68:c1:6c:26:a9:d0:ba:52: ed:ca:8c:65:a4:54:cd:2c:e1:fd:d3:4e:fb:b3:cb:aa:e7:8e: 66:d9:39:3b:83:66:0c:f4:11:de:e7:18:3d:0f:6f:e6:1c:f2: 03:6b:66:66:b4:35:27:9c:26:ab:11:a9:47:45:b4:7b:5a:3b: a1:93:e1:84:f5:87:bc:30:86:f3:d2:a5:d7:33:bb:47:49:f1: cb:38:4a:dc:68:8c:cb:10:bd:84:1d:61:f8:c3:33:c3:90:b6: 54:a2:52:63:9e:6a:30:62:7a:04:e6:ba:0f:9a:3d:ff:40:8c: 89:af:ec:6b:10:94:ea:89:e4:6c:6e:05:25:bd:ad:ab:26:b3: 61:dc:4b:6d:7d:fc:ee:39:03:bb:9c:34:ab:1a:a5:56:75:74: ac:64:73:8b:11:1e:01:08:07:1c:e9:a0:ac:95:c9:88:ca:cc: 29:0b:e0:91:f4:0d:f5:4c:e9:f2:fe:41:ee:a8:b1:0f:79:42: 32:aa:1c:f8:b2:72:08:c9:d7:f3:b2:26:0a:d5:e8:af:39:e0: f8:dd:61:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBCMEUxMTAvBgNVBAUTKDZCMDI5MkM2MDI3MDg5QzhCQTg5RDhDNjVBMUEzMzBE NDg4QjBBMkMwHhcNMjUwODIzMDYyMjUyWhcNMjUwODMwMDYyMjUyWjAYMRYwFAYD VQQDEw02OGE5NWUzYy03MDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvuyXviVSQLg4/UxE0KVqQR06Bxaq14wlEK4y/Az8KU8raoqxYr6MpHnB/lyT ETCp5nkDeQRFGTPIfkJNGZ35T0dg8XaGUrDnvL4y5sZ33wp9FXkkrRoMGPrqZht1 ajbI+kNcmGOml5Av6C5FXgHvIjQwVNbuuDqeFEvWNULZMRgadxB1SuNS81aQDIvc Aghz4tQB8zC97EumpGWL5xQZiW9v7aYiKmFe3ykXWYR2iDUjPyAmxROjqtMKzOUK 6xh6PCIqBRxmzBgI2fWW64J86agoU6cc3DuGvp52bSLzCxRCALWTyePGvGr7XPuB ieKuSmvbEajqySwov1AjMMrmhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJb4iBJR pxdVV0YiBQ5uVWExVa3fMB8GA1UdIwQYMBaAFGsCksYCcInIuonYxloaMw1Iiwos MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEIwRS80NEJDQTYzMjgw NjkxMUVGODg3QjcwM0NDNEY5QUUwMi9hd0tTeGdKd2ljaTZpZGpHV2hvekRVaUxD aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2F3S1N4Z0p3aWNpNmlkakdXaG96RFVpTENpdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEIwRS80NEJDQTYzMjgwNjkxMUVGODg3QjcwM0NDNEY5QUUwMi9hd0tTeGdKd2lj aTZpZGpHV2hvekRVaUxDaXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCh4y7YY6Nxg/EurgdYCFI8+TvuBdo2UZgE7rb7KlUSsiQmNqdNFncD g9k1X+d2aMFsJqnQulLtyoxlpFTNLOH90077s8uq545m2Tk7g2YM9BHe5xg9D2/m HPIDa2ZmtDUnnCarEalHRbR7Wjuhk+GE9Ye8MIbz0qXXM7tHSfHLOErcaIzLEL2E HWH4wzPDkLZUolJjnmowYnoE5roPmj3/QIyJr+xrEJTqieRsbgUlva2rJrNh3Ett ffzuOQO7nDSrGqVWdXSsZHOLER4BCAcc6aCslcmIyswpC+CR9A31TOny/kHuqLEP eUIyqhz4snIIydfzsiYK1eivOeD43WFG -----END CERTIFICATE-----Generated at Sat Aug 23 21:34:41 2025 by rpki-client