$ rpki-client -vvf rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.mft File: EAslNUZkaB2quQXO_0pNp0nE64o.mft (raw, json) Hash identifier: 3KExO6NnSj+8QAyt8dYRuRbcywmb6edNZv7WZ8GoDF0= Subject key identifier: 3E:AB:05:D6:1F:3F:D6:29:71:3E:ED:D5:29:0E:C8:5D:7F:AE:A1:CC Authority key identifier: 10:0B:25:35:46:64:68:1D:AA:B9:05:CE:FF:4A:4D:A7:49:C4:EB:8A Certificate issuer: /CN=A91D488C/serialNumber=100B25354664681DAAB905CEFF4A4DA749C4EB8A Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EAslNUZkaB2quQXO_0pNp0nE64o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.mft Manifest number: 15 Signing time: Sat 23 Aug 2025 08:18:58 +0000 Manifest this update: Sat 23 Aug 2025 08:18:57 +0000 Manifest next update: Sat 30 Aug 2025 08:18:57 +0000 Files and hashes: 1: EAslNUZkaB2quQXO_0pNp0nE64o.crl (hash: 5q4uiN9a2310qC/LB2Miw+6R7Pr8wpxzC/DORXbkZys=) 2: 4DA7A7766C6611F0883DC646C4F9AE02.roa (hash: Q+FmthFDMCnpB7Yj2dZxhxoV/SktKs7HXODFGAlvqdE=) 3: 8B9109C06B8911F0A0F62851C4F9AE02.roa (hash: 9jfSP8gh6271KQbI+jNnvgnlMdq0sgOuoX6+h4wU+tM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.crl rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EAslNUZkaB2quQXO_0pNp0nE64o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D488C, serialNumber=100B25354664681DAAB905CEFF4A4DA749C4EB8A Validity Not Before: Aug 23 08:18:57 2025 GMT Not After : Aug 30 08:18:57 2025 GMT Subject: CN=68a97971-b755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:22:ee:45:ce:87:53:f2:8a:e8:09:43:c4:c5: f8:71:14:fb:20:c8:eb:57:7d:7e:d2:c8:2e:f2:67: 86:bf:71:98:5e:7f:e1:b2:c4:d6:51:d0:39:15:0d: 28:14:57:bb:62:0a:4f:e9:12:5f:6b:24:72:14:97: 57:03:f9:a6:cc:e6:09:a1:d4:31:1b:69:23:c8:fb: 5a:95:40:e7:e1:5e:07:75:35:bb:11:a8:2a:58:5b: cf:50:ed:ae:c9:33:6f:4f:6f:81:89:63:4d:02:d8: 3c:b0:47:33:be:a1:fc:d7:c6:86:0c:b5:f0:4c:b5: 29:c2:e0:94:81:f1:b9:68:a7:8d:25:0a:dd:47:d1: 27:7c:c8:50:56:fa:3b:19:b5:ec:d6:d0:96:9b:53: b4:c5:f3:21:06:77:ea:3a:2c:26:9a:90:17:5e:d7: 0b:56:64:d5:a7:5f:14:84:38:cd:e0:7a:57:05:79: 02:3d:a0:d4:a6:da:98:44:b2:a8:0f:94:02:45:d5: a2:de:5c:30:13:47:e2:f6:0b:83:5b:e7:66:02:83: e1:b3:ab:36:5f:8c:4e:00:a7:87:94:b1:c3:16:7c: ab:06:ff:1a:c5:1a:70:b2:c2:0f:e5:06:a8:64:b6: e8:77:00:50:91:68:cb:a1:e8:a8:2b:2b:b6:ed:ac: 98:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:AB:05:D6:1F:3F:D6:29:71:3E:ED:D5:29:0E:C8:5D:7F:AE:A1:CC X509v3 Authority Key Identifier: keyid:10:0B:25:35:46:64:68:1D:AA:B9:05:CE:FF:4A:4D:A7:49:C4:EB:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EAslNUZkaB2quQXO_0pNp0nE64o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:fc:8e:bd:77:a6:c2:d0:02:e9:75:01:cc:04:1b:11:57:aa: b7:30:95:7b:9d:f6:14:15:e8:de:67:45:67:ad:46:1f:ca:eb: 27:3e:08:24:7e:11:4d:12:f7:c6:b9:95:f4:a2:9d:16:5f:d5: ee:28:32:ad:90:59:7b:dd:f9:5f:02:fa:4b:6f:07:b4:52:ff: ff:c1:78:55:0e:ef:c1:51:c9:1a:cb:a9:bb:c7:f2:a1:b3:51: 54:fa:0f:f1:b9:1c:49:b9:5b:3e:1b:4b:8c:10:38:d1:f8:68: ac:02:3d:de:9a:33:55:67:d4:c4:e8:36:d2:93:a5:3d:10:d2: e6:a3:cd:92:fc:e3:5a:50:a1:db:e2:37:50:a2:40:f1:fb:18: c4:5d:85:91:bb:e5:d2:7a:96:98:6b:3c:f5:0c:d4:f7:bc:b3: 09:38:70:4f:9b:5a:ef:cb:0e:58:bd:71:8b:3e:c7:47:27:4c: 99:d4:5c:62:65:6c:41:46:c0:c0:45:ea:15:03:fa:b9:54:42: c5:65:21:d3:bf:c6:23:f8:b9:40:8b:f8:01:b2:b1:47:bd:f9: 2f:55:42:ac:02:e3:8c:86:74:a1:05:22:ff:87:4c:40:7b:55: 3c:62:fc:93:42:15:8b:6e:51:0c:87:80:9c:fb:30:60:9b:a5: 42:1c:10:d2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NDg4QzExMC8GA1UEBRMoMTAwQjI1MzU0NjY0NjgxREFBQjkwNUNFRkY0QTREQTc0 OUM0RUI4QTAeFw0yNTA4MjMwODE4NTdaFw0yNTA4MzAwODE4NTdaMBgxFjAUBgNV BAMTDTY4YTk3OTcxLWI3NTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZIu5FzodT8oroCUPExfhxFPsgyOtXfX7SyC7yZ4a/cZhef+GyxNZR0DkVDSgU V7tiCk/pEl9rJHIUl1cD+abM5gmh1DEbaSPI+1qVQOfhXgd1NbsRqCpYW89Q7a7J M29Pb4GJY00C2DywRzO+ofzXxoYMtfBMtSnC4JSB8blop40lCt1H0Sd8yFBW+jsZ tezW0JabU7TF8yEGd+o6LCaakBde1wtWZNWnXxSEOM3gelcFeQI9oNSm2phEsqgP lAJF1aLeXDATR+L2C4Nb52YCg+GzqzZfjE4Ap4eUscMWfKsG/xrFGnCywg/lBqhk tuh3AFCRaMuh6KgrK7btrJiHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPqsF1h8/ 1ilxPu3VKQ7IXX+uocwwHwYDVR0jBBgwFoAUEAslNUZkaB2quQXO/0pNp0nE64ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0ODhDLzQ2QjAwNTA0NkI4 OTExRjA5NUYxMTAyQkM0RjlBRTAyL0VBc2xOVVprYUIycXVRWE9fMHBOcDBuRTY0 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRUFzbE5VWmthQjJxdVFYT18wcE5wMG5FNjRvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0 ODhDLzQ2QjAwNTA0NkI4OTExRjA5NUYxMTAyQkM0RjlBRTAyL0VBc2xOVVprYUIy cXVRWE9fMHBOcDBuRTY0by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEv8jr13psLQAul1AcwEGxFXqrcwlXud9hQV6N5nRWetRh/K6yc+CCR+ EU0S98a5lfSinRZf1e4oMq2QWXvd+V8C+ktvB7RS///BeFUO78FRyRrLqbvH8qGz UVT6D/G5HEm5Wz4bS4wQONH4aKwCPd6aM1Vn1MToNtKTpT0Q0uajzZL841pQodvi N1CiQPH7GMRdhZG75dJ6lphrPPUM1Pe8swk4cE+bWu/LDli9cYs+x0cnTJnUXGJl bEFGwMBF6hUD+rlUQsVlIdO/xiP4uUCL+AGysUe9+S9VQqwC44yGdKEFIv+HTEB7 VTxi/JNCFYtuUQyHgJz7MGCbpUIcENI= -----END CERTIFICATE-----Generated at Sat Aug 23 11:00:25 2025 by rpki-client