$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft File: aXYgUV57Huisfz9tE76uumLE7ak.mft (raw, json) Hash identifier: tbeDoGAH1dl3d8o/dyk3TKzCdp8CpIKl89dZxpaTjow= Subject key identifier: 2F:61:70:11:29:F4:A6:33:8D:70:FF:29:16:B5:BE:88:39:51:77:82 Authority key identifier: 69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9 Certificate issuer: /CN=A91DE2AE/serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9 Certificate serial: 0212 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft Manifest number: 01FE Signing time: Sat 23 Aug 2025 02:39:37 +0000 Manifest this update: Sat 23 Aug 2025 02:39:37 +0000 Manifest next update: Sat 30 Aug 2025 02:39:37 +0000 Files and hashes: 1: aXYgUV57Huisfz9tE76uumLE7ak.crl (hash: LAFNZPXK7L5+drKi1zEB2Z9eqvh/h0Rk4vnADlfpM1o=) 2: 38E45CE08C2511EDB64DB410C4F9AE02.roa (hash: cR87tK+M2QvPpStj15TUAHSw7pMeZSCsKtclKhkYsV4=) 3: F3B716768F2F11EE86964D62C4F9AE02.roa (hash: Ez3fMRvxWFNiR5F6idq+GUYygoYJpqIuMgbojOp3vAE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:39:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 530 (0x212) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE2AE, serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9 Validity Not Before: Aug 23 02:39:37 2025 GMT Not After : Aug 30 02:39:37 2025 GMT Subject: CN=68a929e9-d42d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:83:ec:aa:3e:d9:94:ce:35:d8:45:ba:ed:02: 72:ee:38:d1:de:46:d9:ac:e2:11:93:12:0b:eb:03: af:8b:3f:04:fb:f9:e4:fe:b3:1c:f6:f6:55:96:88: 10:54:6a:f4:eb:a1:5e:0f:71:e1:a4:69:77:a9:2d: 08:75:52:db:93:42:47:5a:ef:49:cc:28:b1:5d:02: 9d:1b:be:89:a1:49:0c:6a:2e:3d:2b:4d:63:b1:1c: 9f:a4:ea:10:d6:58:f6:bd:f3:f5:63:a6:40:ce:df: c9:82:25:3f:21:80:7d:36:83:2f:f1:87:ea:09:73: c0:4c:96:ac:a8:c1:02:02:84:33:b4:6d:b4:87:82: e8:7c:27:ad:dc:61:cc:3b:53:9c:3b:12:bc:cf:ee: 69:e8:13:10:16:5e:23:b8:e9:fa:bd:ec:3f:45:f8: 52:b2:78:dd:c1:25:fd:ad:0e:dc:61:b8:53:b5:3d: c1:ba:9b:12:1a:6e:1d:63:e2:a3:16:90:80:a4:36: b9:b4:05:ff:87:c1:a8:0a:0a:49:f1:a9:e8:92:8a: 07:09:98:da:26:76:76:e6:fd:d9:e3:73:84:75:8d: cb:30:c9:d8:54:32:4b:34:bc:2b:7e:b1:4c:ca:60: 52:2d:2e:38:1c:78:5c:22:1b:02:f6:cd:30:1e:05: ba:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:61:70:11:29:F4:A6:33:8D:70:FF:29:16:B5:BE:88:39:51:77:82 X509v3 Authority Key Identifier: keyid:69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:05:8f:ad:c7:a6:0e:1a:88:ce:63:9d:0e:76:65:4f:71:a8: 3e:38:77:18:e5:b2:d2:a8:bc:11:9c:13:be:8f:fc:d9:58:cc: 4c:84:37:ba:2e:fe:fb:ec:2c:ce:f6:40:ae:37:90:66:1b:9c: af:f2:e2:ff:85:fb:f7:22:5f:f1:bb:b3:8a:3a:79:d1:a9:4c: f9:a1:49:9d:cd:64:e0:97:68:d5:0e:ed:e3:fd:d7:96:9d:c9: 66:9e:4e:db:7c:6c:13:ff:9e:40:98:c9:7c:99:f9:04:66:69: 32:62:01:0a:bd:a9:47:e0:b5:64:cf:50:a5:a6:a1:05:c6:84: 66:c8:80:ed:6b:e6:0c:c3:bd:11:79:88:ae:b3:2f:4f:f3:93: a8:7f:6a:88:fa:ed:d0:79:0f:d7:de:bc:0d:eb:66:c5:c4:17: ee:da:7b:5a:0f:35:14:1a:48:df:b9:39:aa:53:a8:9c:f3:84: 89:62:75:96:74:6b:16:7a:1b:b2:db:7b:3a:83:b8:be:ef:c3: 06:34:3e:76:a5:64:70:c6:85:40:d6:8b:a8:13:b7:f3:a2:46: 91:96:1a:5a:2d:48:b8:0d:1e:ff:8f:df:a7:9b:0e:8e:77:26: a9:81:3d:9b:35:be:89:cd:36:7f:25:66:77:11:fa:a8:24:ef: 63:4f:da:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUyQUUxMTAvBgNVBAUTKDY5NzYyMDUxNUU3QjFFRThBQzdGM0Y2RDEzQkVBRUJB NjJDNEVEQTkwHhcNMjUwODIzMDIzOTM3WhcNMjUwODMwMDIzOTM3WjAYMRYwFAYD VQQDEw02OGE5MjllOS1kNDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0IPsqj7ZlM412EW67QJy7jjR3kbZrOIRkxIL6wOviz8E+/nk/rMc9vZVlogQ VGr066FeD3HhpGl3qS0IdVLbk0JHWu9JzCixXQKdG76JoUkMai49K01jsRyfpOoQ 1lj2vfP1Y6ZAzt/JgiU/IYB9NoMv8YfqCXPATJasqMECAoQztG20h4LofCet3GHM O1OcOxK8z+5p6BMQFl4juOn6vew/RfhSsnjdwSX9rQ7cYbhTtT3BupsSGm4dY+Kj FpCApDa5tAX/h8GoCgpJ8anokooHCZjaJnZ25v3Z43OEdY3LMMnYVDJLNLwrfrFM ymBSLS44HHhcIhsC9s0wHgW62QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC9hcBEp 9KYzjXD/KRa1vog5UXeCMB8GA1UdIwQYMBaAFGl2IFFeex7orH8/bRO+rrpixO2p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTJBRS9DNzBGRUEyQThD MjAxMUVEQURENUM4MDlDNEY5QUUwMi9hWFlnVVY1N0h1aXNmejl0RTc2dXVtTEU3 YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FYWWdVVjU3SHVpc2Z6OXRFNzZ1dW1MRTdhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTJBRS9DNzBGRUEyQThDMjAxMUVEQURENUM4MDlDNEY5QUUwMi9hWFlnVVY1N0h1 aXNmejl0RTc2dXVtTEU3YWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiBY+tx6YOGojOY50OdmVPcag+OHcY5bLSqLwRnBO+j/zZWMxMhDe6 Lv777CzO9kCuN5BmG5yv8uL/hfv3Il/xu7OKOnnRqUz5oUmdzWTgl2jVDu3j/deW nclmnk7bfGwT/55AmMl8mfkEZmkyYgEKvalH4LVkz1ClpqEFxoRmyIDta+YMw70R eYiusy9P85Oof2qI+u3QeQ/X3rwN62bFxBfu2ntaDzUUGkjfuTmqU6ic84SJYnWW dGsWehuy23s6g7i+78MGND52pWRwxoVA1ouoE7fzokaRlhpaLUi4DR7/j9+nmw6O dyapgT2bNb6JzTZ/JWZ3EfqoJO9jT9rv -----END CERTIFICATE-----Generated at Sat Aug 23 13:42:04 2025 by rpki-client