$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft File: AwfvDynPItsJcPUIPAI8KqDW9Rc.mft (raw, json) Hash identifier: AytxlYgRgnVvbxmVcH64lw94k7M1TvbSMWgU6v9bo+Y= Subject key identifier: 56:0C:48:12:3D:79:E0:35:FD:09:78:DF:A8:74:3D:8D:0A:BE:C4:9D Authority key identifier: 03:07:EF:0F:29:CF:22:DB:09:70:F5:08:3C:02:3C:2A:A0:D6:F5:17 Certificate issuer: /CN=A91D8704/serialNumber=0307EF0F29CF22DB0970F5083C023C2AA0D6F517 Certificate serial: 08C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwfvDynPItsJcPUIPAI8KqDW9Rc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft Manifest number: 08C2 Signing time: Fri 22 Aug 2025 20:35:15 +0000 Manifest this update: Fri 22 Aug 2025 20:35:14 +0000 Manifest next update: Fri 29 Aug 2025 20:35:14 +0000 Files and hashes: 1: AwfvDynPItsJcPUIPAI8KqDW9Rc.crl (hash: OIA9l/ubkTCGrqt/qNhwCPYgN0GlqZZ4c460y2X/C7U=) 2: B1AAC5B2BC4111EA9A5B2786C4F9AE02.roa (hash: RBbk8UhQUJAo0+DivNUUdglkSzsFknX4rSnxZW8gCTk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.crl rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwfvDynPItsJcPUIPAI8KqDW9Rc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:35:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2249 (0x8c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8704, serialNumber=0307EF0F29CF22DB0970F5083C023C2AA0D6F517 Validity Not Before: Aug 22 20:35:14 2025 GMT Not After : Aug 29 20:35:14 2025 GMT Subject: CN=68a8d482-0f93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b8:75:aa:1e:f8:6f:90:02:45:ca:69:60:cb: 5f:cf:6e:0e:91:73:ce:4e:41:d6:ae:78:5b:ec:2b: e2:53:4e:cd:99:31:31:e9:1e:90:34:de:f7:50:18: 7c:18:ee:25:4c:ec:9d:f3:2a:a4:e0:e7:fe:c7:25: 2c:8b:3a:10:39:3e:af:23:ee:66:b2:ca:f2:fc:bd: 69:41:6d:ae:9d:e7:e3:b6:b4:75:27:c6:5d:53:1b: 55:a0:16:f8:8a:b8:78:65:02:17:0a:f9:77:4f:8a: 22:b5:02:6b:2b:a7:2e:b5:97:6b:4f:1e:9c:66:7b: 92:ba:8d:83:cc:6c:7f:4e:3d:3d:24:2a:db:1d:f3: 40:bf:bc:cd:8b:ad:4f:76:78:ff:6f:8b:35:d8:bd: 20:14:b8:21:37:5d:ee:bb:fa:a6:c2:c1:36:6f:7a: c4:42:6c:a1:9f:b1:57:ef:20:a5:d3:b1:8d:2e:86: 59:fb:7b:9d:17:96:6b:b0:3a:8c:b5:d3:cf:fd:7c: 35:e9:4b:d2:33:ae:fa:53:9f:b5:49:78:b0:1c:5e: e9:70:21:ab:c1:1d:61:66:2d:94:6e:7d:cd:d6:06: ab:ad:8a:ee:cc:b2:f7:94:7e:d4:17:09:b5:f0:b3: 8d:f9:56:65:ed:82:64:b2:5e:d8:a2:de:31:0b:8c: ce:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:0C:48:12:3D:79:E0:35:FD:09:78:DF:A8:74:3D:8D:0A:BE:C4:9D X509v3 Authority Key Identifier: keyid:03:07:EF:0F:29:CF:22:DB:09:70:F5:08:3C:02:3C:2A:A0:D6:F5:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwfvDynPItsJcPUIPAI8KqDW9Rc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:01:2e:f6:f2:0c:70:ad:3b:5a:9c:25:db:96:7b:37:83:90: c4:41:77:d3:2f:4c:e9:c8:c3:48:7c:d3:23:a0:5d:35:96:eb: 0e:07:f3:20:a5:30:18:4e:05:f3:b6:77:ab:c0:3f:04:ee:a5: 14:8a:cc:72:50:b0:09:fa:f2:e0:b7:28:f1:95:c7:74:7c:56: d0:2d:bd:57:0a:ae:54:8d:2b:f5:61:1f:6a:70:e8:78:8f:92: f3:b3:ef:f2:42:48:ec:eb:39:d6:60:5e:10:10:fb:6e:71:81: 31:0f:ae:94:d0:96:ff:d9:ba:87:c1:23:4f:0e:3a:da:81:94: 06:52:f5:0b:ff:48:17:b8:ef:bb:22:4d:a9:62:ae:16:79:51: 29:fa:28:e8:5b:f2:1f:ac:82:87:0d:a3:3c:e3:2d:32:eb:25: ec:fa:83:00:69:e3:7e:ce:61:ea:51:f1:41:9d:ce:c1:ae:8f: 4b:2a:d4:df:ee:b7:8c:b2:56:41:84:a7:42:91:82:cc:9c:31: 46:81:4d:6c:6c:ea:42:fd:8b:59:01:3a:e0:1c:95:1c:e5:04: fb:f6:7b:63:84:7a:f7:f0:22:d4:34:ae:c0:c8:f6:56:3d:fa: c2:1b:82:5b:f8:48:49:11:3c:56:bb:9e:c9:7c:c7:98:41:a8: 3a:68:aa:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg3MDQxMTAvBgNVBAUTKDAzMDdFRjBGMjlDRjIyREIwOTcwRjUwODNDMDIzQzJB QTBENkY1MTcwHhcNMjUwODIyMjAzNTE0WhcNMjUwODI5MjAzNTE0WjAYMRYwFAYD VQQDEw02OGE4ZDQ4Mi0wZjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzbh1qh74b5ACRcppYMtfz24OkXPOTkHWrnhb7CviU07NmTEx6R6QNN73UBh8 GO4lTOyd8yqk4Of+xyUsizoQOT6vI+5mssry/L1pQW2unefjtrR1J8ZdUxtVoBb4 irh4ZQIXCvl3T4oitQJrK6cutZdrTx6cZnuSuo2DzGx/Tj09JCrbHfNAv7zNi61P dnj/b4s12L0gFLghN13uu/qmwsE2b3rEQmyhn7FX7yCl07GNLoZZ+3udF5ZrsDqM tdPP/Xw16UvSM676U5+1SXiwHF7pcCGrwR1hZi2Ubn3N1garrYruzLL3lH7UFwm1 8LON+VZl7YJksl7Yot4xC4zO3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFYMSBI9 eeA1/Ql436h0PY0KvsSdMB8GA1UdIwQYMBaAFAMH7w8pzyLbCXD1CDwCPCqg1vUX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODcwNC81NjU1QUM5OEJD MEMxMUVBOTFFMDlCNjhDNEY5QUUwMi9Bd2Z2RHluUEl0c0pjUFVJUEFJOEtxRFc5 UmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F3ZnZEeW5QSXRzSmNQVUlQQUk4S3FEVzlSYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODcwNC81NjU1QUM5OEJDMEMxMUVBOTFFMDlCNjhDNEY5QUUwMi9Bd2Z2RHluUEl0 c0pjUFVJUEFJOEtxRFc5UmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEAS728gxwrTtanCXblns3g5DEQXfTL0zpyMNIfNMjoF01lusOB/Mg pTAYTgXztnerwD8E7qUUisxyULAJ+vLgtyjxlcd0fFbQLb1XCq5UjSv1YR9qcOh4 j5Lzs+/yQkjs6znWYF4QEPtucYExD66U0Jb/2bqHwSNPDjragZQGUvUL/0gXuO+7 Ik2pYq4WeVEp+ijoW/IfrIKHDaM84y0y6yXs+oMAaeN+zmHqUfFBnc7Bro9LKtTf 7reMslZBhKdCkYLMnDFGgU1sbOpC/YtZATrgHJUc5QT79ntjhHr38CLUNK7AyPZW PfrCG4Jb+EhJETxWu57JfMeYQag6aKqH -----END CERTIFICATE-----Generated at Sat Aug 23 17:57:43 2025 by rpki-client