$ rpki-client -vvf rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.mft File: asTBtLaRvs8S3fcmX5Ym1ZrHZsw.mft (raw, json) Hash identifier: tpUnXjwm62tBDoA3QQ+5VBDw6B6XHci8koNbnC34rUU= Subject key identifier: 2A:02:ED:3E:70:13:8B:48:D7:15:72:32:52:0E:B6:70:61:52:F9:9E Authority key identifier: 6A:C4:C1:B4:B6:91:BE:CF:12:DD:F7:26:5F:96:26:D5:9A:C7:66:CC Certificate issuer: /CN=A91D415B/serialNumber=6AC4C1B4B691BECF12DDF7265F9626D59AC766CC Certificate serial: 02EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.mft Manifest number: 02EA Signing time: Sat 23 Aug 2025 01:32:56 +0000 Manifest this update: Sat 23 Aug 2025 01:32:55 +0000 Manifest next update: Sat 30 Aug 2025 01:32:55 +0000 Files and hashes: 1: asTBtLaRvs8S3fcmX5Ym1ZrHZsw.crl (hash: zxA2mkRSKtgLf6Wvsx8ys4Wev/Fh0z7o2mr6l3N6SFM=) 2: A98754E2F1D011ECA4B56760C4F9AE02.roa (hash: dMqJTsYzp1pmPIaM1/eJLOhl+l3EGAIHqHSSCk8rEN0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.crl rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:32:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 750 (0x2ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D415B, serialNumber=6AC4C1B4B691BECF12DDF7265F9626D59AC766CC Validity Not Before: Aug 23 01:32:55 2025 GMT Not After : Aug 30 01:32:55 2025 GMT Subject: CN=68a91a48-1bd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:67:a3:4e:4a:cc:a1:a4:e1:03:32:c2:9b:9b: 29:47:7b:8a:52:c7:13:24:d4:77:3d:18:de:28:2b: dc:af:f5:eb:07:27:73:6e:dd:06:e8:ee:04:e7:40: 99:be:ee:9f:c8:11:55:4a:dc:c2:62:42:3a:4e:a2: 4f:90:6a:56:2e:2b:92:40:47:57:0d:a2:d8:14:00: 43:00:a1:56:c1:eb:cd:8d:b5:d7:c4:bf:52:7b:30: e1:28:55:00:a2:44:9d:8a:d3:44:98:57:6f:97:1d: f1:21:7b:ba:f5:39:16:b2:c9:8d:6c:27:76:47:97: 4f:59:4e:29:8c:79:2d:ed:6d:17:64:07:8e:09:5c: cd:15:8a:4c:e4:56:fd:3f:b6:06:12:74:0f:d6:eb: 94:dd:64:f5:4f:b2:96:5a:5e:26:f6:cf:aa:45:79: 34:58:e2:1b:dc:a4:a9:1b:e2:5a:71:d1:64:f8:c8: dd:56:18:05:30:7c:d2:19:e7:e8:83:d5:bd:c9:03: 53:ef:14:dd:d9:a9:77:4e:4a:fd:3f:01:c7:8a:ad: d6:3c:e4:60:46:87:ce:1a:13:c4:00:98:df:80:0d: 6e:d5:f2:5a:d1:22:f8:7d:3d:26:d9:28:7d:a3:c8: 78:a7:10:58:44:4a:13:35:ee:f1:df:57:d7:e9:17: 71:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:02:ED:3E:70:13:8B:48:D7:15:72:32:52:0E:B6:70:61:52:F9:9E X509v3 Authority Key Identifier: keyid:6A:C4:C1:B4:B6:91:BE:CF:12:DD:F7:26:5F:96:26:D5:9A:C7:66:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:42:39:b4:4e:62:88:fe:a9:1d:f4:7e:49:af:43:ff:15:78: 51:07:b4:b2:f9:9c:d9:0f:db:e4:41:60:98:b1:b3:fb:b0:52: e8:56:aa:19:66:c3:b2:a8:c3:b5:fe:34:b3:cd:89:52:e3:99: a1:10:a2:a3:92:62:5c:9b:b9:e6:df:d8:53:33:ea:9e:7e:ea: 85:6a:43:d9:20:04:95:15:82:25:dd:56:bc:b4:39:e3:aa:df: b2:6c:6f:77:9b:6f:9c:b4:81:28:73:f4:06:e0:34:53:c7:7f: bf:4f:3d:b2:28:b7:16:73:60:18:2a:a8:f4:15:0a:b0:32:7a: cc:f6:f0:20:28:d9:53:c3:d8:ee:5f:1f:85:9f:25:f7:d7:5b: f0:43:db:ec:bb:24:af:0e:76:8f:ce:9e:e1:b3:29:dc:4e:07: e8:43:b3:ea:19:2d:07:39:1c:d1:44:65:b7:c2:86:17:5f:68: a6:34:27:65:73:f5:ee:fb:f9:84:50:fe:bc:44:52:c4:b3:61: 37:0f:e9:16:48:e1:2b:ea:57:55:7d:71:f1:72:ed:2d:69:b5: e9:e0:7c:8e:03:45:50:66:3c:36:d9:36:bf:19:72:69:9d:c3: 40:e5:c1:93:ce:fe:71:88:06:32:6f:9d:5f:2d:32:f1:67:1b: e2:24:0e:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAu4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQxNUIxMTAvBgNVBAUTKDZBQzRDMUI0QjY5MUJFQ0YxMkRERjcyNjVGOTYyNkQ1 OUFDNzY2Q0MwHhcNMjUwODIzMDEzMjU1WhcNMjUwODMwMDEzMjU1WjAYMRYwFAYD VQQDEw02OGE5MWE0OC0xYmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx2ejTkrMoaThAzLCm5spR3uKUscTJNR3PRjeKCvcr/XrBydzbt0G6O4E50CZ vu6fyBFVStzCYkI6TqJPkGpWLiuSQEdXDaLYFABDAKFWwevNjbXXxL9SezDhKFUA okSditNEmFdvlx3xIXu69TkWssmNbCd2R5dPWU4pjHkt7W0XZAeOCVzNFYpM5Fb9 P7YGEnQP1uuU3WT1T7KWWl4m9s+qRXk0WOIb3KSpG+JacdFk+MjdVhgFMHzSGefo g9W9yQNT7xTd2al3Tkr9PwHHiq3WPORgRofOGhPEAJjfgA1u1fJa0SL4fT0m2Sh9 o8h4pxBYREoTNe7x31fX6RdxOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCoC7T5w E4tI1xVyMlIOtnBhUvmeMB8GA1UdIwQYMBaAFGrEwbS2kb7PEt33Jl+WJtWax2bM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDE1Qi81QzU0MzY4NEYx Q0QxMUVDOTMzOUI5NUZDNEY5QUUwMi9hc1RCdExhUnZzOFMzZmNtWDVZbTFackha c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FzVEJ0TGFSdnM4UzNmY21YNVltMVpySFpzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDE1Qi81QzU0MzY4NEYxQ0QxMUVDOTMzOUI5NUZDNEY5QUUwMi9hc1RCdExhUnZz OFMzZmNtWDVZbTFackhac3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4Qjm0TmKI/qkd9H5Jr0P/FXhRB7Sy+ZzZD9vkQWCYsbP7sFLoVqoZ ZsOyqMO1/jSzzYlS45mhEKKjkmJcm7nm39hTM+qefuqFakPZIASVFYIl3Va8tDnj qt+ybG93m2+ctIEoc/QG4DRTx3+/Tz2yKLcWc2AYKqj0FQqwMnrM9vAgKNlTw9ju Xx+FnyX311vwQ9vsuySvDnaPzp7hsyncTgfoQ7PqGS0HORzRRGW3woYXX2imNCdl c/Xu+/mEUP68RFLEs2E3D+kWSOEr6ldVfXHxcu0tabXp4HyOA0VQZjw22Ta/GXJp ncNA5cGTzv5xiAYyb51fLTLxZxviJA4Y -----END CERTIFICATE-----Generated at Sat Aug 23 17:00:18 2025 by rpki-client