$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft File: aVxF2kJFO04LBivxfb9Eclx4g4c.mft (raw, json) Hash identifier: hskp031kJyzGdkgasCULU4FW5lMpoM8F/yQb2AfKlDo= Subject key identifier: AF:E8:33:43:66:4A:4D:8F:3E:1D:01:49:C7:85:61:8B:53:5F:64:5E Authority key identifier: 69:5C:45:DA:42:45:3B:4E:0B:06:2B:F1:7D:BF:44:72:5C:78:83:87 Certificate issuer: /CN=A91DF26F/serialNumber=695C45DA42453B4E0B062BF17DBF44725C788387 Certificate serial: 22AC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aVxF2kJFO04LBivxfb9Eclx4g4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft Manifest number: 22AC Signing time: Fri 22 Aug 2025 14:38:58 +0000 Manifest this update: Fri 22 Aug 2025 14:38:58 +0000 Manifest next update: Fri 29 Aug 2025 14:38:58 +0000 Files and hashes: 1: aVxF2kJFO04LBivxfb9Eclx4g4c.crl (hash: gYrsNRyGXMQ57NHzJM/HSGq+RHjp6oORrrfGi8WY/BQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.crl rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aVxF2kJFO04LBivxfb9Eclx4g4c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8876 (0x22ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF26F, serialNumber=695C45DA42453B4E0B062BF17DBF44725C788387 Validity Not Before: Aug 22 14:38:58 2025 GMT Not After : Aug 29 14:38:58 2025 GMT Subject: CN=68a88102-32c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:76:29:51:c3:c6:fc:a5:9a:1a:15:35:54:af: 1e:5d:2f:1e:e9:c9:94:ba:a6:5a:ef:dd:66:d2:c8: df:54:d4:49:4b:0f:86:25:3a:98:d0:cb:d5:20:5d: 7d:3c:e7:e7:36:72:6e:38:7a:b4:19:31:62:57:32: ef:5d:13:48:ee:81:55:76:ce:67:4f:69:6f:e3:98: b9:14:bc:73:cc:44:fb:33:8d:e9:ae:ac:1b:94:c7: 8d:4e:15:4c:73:61:a8:b4:64:ea:24:ab:0f:54:2c: d0:09:71:28:25:c8:65:a2:9f:b7:0d:12:10:95:2f: ba:9f:7b:b2:31:ce:5a:53:79:2d:45:22:af:86:b4: af:89:ac:c7:e8:b4:3c:f5:ee:70:a3:27:d9:73:ed: 2e:22:3e:ee:92:8b:7b:13:d3:c5:64:2a:de:5f:08: f6:99:f2:f4:65:84:7c:65:92:f9:a7:7d:17:74:f2: 14:c5:24:14:4b:db:0a:7f:55:9e:c9:e1:5b:cc:d8: e3:be:0d:be:45:e9:89:d5:c8:c7:4a:c1:84:24:a3: ac:01:2e:81:77:12:ef:5a:67:df:40:5d:15:6a:68: e6:dd:c2:29:8a:e3:86:89:19:7a:d9:7b:69:fa:4e: c4:5a:87:99:1b:cd:6d:66:33:57:d3:99:5c:69:72: b4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:E8:33:43:66:4A:4D:8F:3E:1D:01:49:C7:85:61:8B:53:5F:64:5E X509v3 Authority Key Identifier: keyid:69:5C:45:DA:42:45:3B:4E:0B:06:2B:F1:7D:BF:44:72:5C:78:83:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aVxF2kJFO04LBivxfb9Eclx4g4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:29:e8:6c:b3:a6:74:22:77:d1:2f:4b:f0:a6:8e:82:2d:3a: 9c:39:9e:28:c9:49:e7:e6:5c:41:6e:e6:05:8e:49:e6:e4:1b: bb:34:36:52:05:73:22:0d:56:d9:7c:45:46:e3:3b:df:39:39: 43:49:80:83:61:90:15:1e:9d:91:fb:0c:8f:c5:97:fc:93:45: a1:f1:80:55:05:9d:5d:90:a0:c4:77:6a:33:40:53:a1:81:00: 05:ee:f3:a8:06:10:24:ff:23:36:37:a5:39:f8:ec:77:b8:ca: 93:4f:d7:a2:d3:6e:c1:45:53:31:7f:b8:dc:f8:d5:5a:10:e9: 59:7b:ba:9b:68:cb:3b:3d:2b:8d:17:1e:19:33:3a:7c:7b:64: a2:48:de:40:e9:0a:88:1c:06:29:45:b2:cc:1e:05:ee:47:8a: 23:7c:e6:a0:4f:6e:78:3a:a2:c1:67:57:f5:2f:8e:aa:f5:ac: c6:13:a0:11:de:c0:1c:64:d3:76:a2:c5:6e:b3:ac:af:22:7e: 76:a5:d4:61:3f:f7:69:1d:d5:bc:dd:d0:9f:81:0f:6a:2c:6c: 95:a6:65:bb:85:19:91:d0:70:64:23:bb:14:bf:28:eb:3f:92: 08:eb:5f:20:09:72:9b:79:37:fd:39:21:1d:dc:1f:ac:98:9c: be:90:92:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYyNkYxMTAvBgNVBAUTKDY5NUM0NURBNDI0NTNCNEUwQjA2MkJGMTdEQkY0NDcy NUM3ODgzODcwHhcNMjUwODIyMTQzODU4WhcNMjUwODI5MTQzODU4WjAYMRYwFAYD VQQDEw02OGE4ODEwMi0zMmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAynYpUcPG/KWaGhU1VK8eXS8e6cmUuqZa791m0sjfVNRJSw+GJTqY0MvVIF19 POfnNnJuOHq0GTFiVzLvXRNI7oFVds5nT2lv45i5FLxzzET7M43prqwblMeNThVM c2GotGTqJKsPVCzQCXEoJchlop+3DRIQlS+6n3uyMc5aU3ktRSKvhrSviazH6LQ8 9e5woyfZc+0uIj7ukot7E9PFZCreXwj2mfL0ZYR8ZZL5p30XdPIUxSQUS9sKf1We yeFbzNjjvg2+RemJ1cjHSsGEJKOsAS6BdxLvWmffQF0Vamjm3cIpiuOGiRl62Xtp +k7EWoeZG81tZjNX05lcaXK0SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK/oM0Nm Sk2PPh0BSceFYYtTX2ReMB8GA1UdIwQYMBaAFGlcRdpCRTtOCwYr8X2/RHJceIOH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjI2Ri84NDZFQzYyRUE3 OEUxMUU1ODAyNDFCNjJDNEY5QUUwMi9hVnhGMmtKRk8wNExCaXZ4ZmI5RWNseDRn NGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2FWeEYya0pGTzA0TEJpdnhmYjlFY2x4NGc0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjI2Ri84NDZFQzYyRUE3OEUxMUU1ODAyNDFCNjJDNEY5QUUwMi9hVnhGMmtKRk8w NExCaXZ4ZmI5RWNseDRnNGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASKehss6Z0InfRL0vwpo6CLTqcOZ4oyUnn5lxBbuYFjknm5Bu7NDZS BXMiDVbZfEVG4zvfOTlDSYCDYZAVHp2R+wyPxZf8k0Wh8YBVBZ1dkKDEd2ozQFOh gQAF7vOoBhAk/yM2N6U5+Ox3uMqTT9ei027BRVMxf7jc+NVaEOlZe7qbaMs7PSuN Fx4ZMzp8e2SiSN5A6QqIHAYpRbLMHgXuR4ojfOagT254OqLBZ1f1L46q9azGE6AR 3sAcZNN2osVus6yvIn52pdRhP/dpHdW83dCfgQ9qLGyVpmW7hRmR0HBkI7sUvyjr P5II618gCXKbeTf9OSEd3B+smJy+kJKV -----END CERTIFICATE-----Generated at Sun Aug 24 00:47:46 2025 by rpki-client