$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft File: GAee5DmNZxvWR_yoKieU5QowR70.mft (raw, json) Hash identifier: mY6JHLZkCckWJp8Nj8dg662g2dZXAVoCl4PFtviZrWg= Subject key identifier: F1:CB:20:7D:55:26:53:C3:8D:B6:D4:77:85:95:C5:F4:A0:13:2D:D6 Authority key identifier: 18:07:9E:E4:39:8D:67:1B:D6:47:FC:A8:2A:27:94:E5:0A:30:47:BD Certificate issuer: /CN=A91DFBE1/serialNumber=18079EE4398D671BD647FCA82A2794E50A3047BD Certificate serial: 0A62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft Manifest number: 0A59 Signing time: Fri 22 Aug 2025 19:49:55 +0000 Manifest this update: Fri 22 Aug 2025 19:49:55 +0000 Manifest next update: Fri 29 Aug 2025 19:49:55 +0000 Files and hashes: 1: GAee5DmNZxvWR_yoKieU5QowR70.crl (hash: qYnaQ3VaiqrI2CmCLv81liHpy0eR0VJeEq3bMey2LgM=) 2: F23D65727CAF11ED87752A6BC4F9AE02.roa (hash: 4R+T9ichUclKYc2esjqc1J6rnOewSsSbS/PRV1Yw9jc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.crl rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2658 (0xa62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFBE1, serialNumber=18079EE4398D671BD647FCA82A2794E50A3047BD Validity Not Before: Aug 22 19:49:55 2025 GMT Not After : Aug 29 19:49:55 2025 GMT Subject: CN=68a8c9e3-d451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:43:78:41:7f:ab:a9:f6:c8:b4:d3:9d:e2:78: 9c:68:04:20:c9:29:0a:31:9b:74:2d:f1:c1:9f:ee: f7:1b:01:e8:8d:aa:b7:84:ea:88:75:d0:e8:a7:0b: e6:39:cd:a0:f1:11:a1:d1:b6:c8:1d:93:ab:ad:ca: 1d:54:bd:70:75:6f:1d:aa:3f:3f:81:ba:97:d2:17: 67:07:cf:39:ba:c3:b5:00:b0:f6:f4:92:7c:06:79: 33:41:c3:71:93:33:27:ec:88:22:5a:8e:97:6f:80: b3:76:bf:14:19:be:77:a7:6a:24:13:fc:f1:f3:97: 19:60:b8:f7:e5:47:39:f0:32:d5:b6:75:dc:f6:d4: 82:4c:49:79:5a:8b:59:a9:af:8d:34:03:11:e6:71: 77:2d:6a:5a:85:33:8e:35:cd:07:fd:7b:b6:12:44: eb:f2:15:9c:fb:87:5e:79:8a:a3:3f:c4:5e:9c:a6: 4f:28:05:e8:80:b9:c3:95:3e:eb:d5:a0:1e:50:ee: 21:e9:b2:bc:7b:15:41:38:47:17:37:42:37:82:8a: 55:67:d2:8d:45:0c:30:55:b4:bf:e8:29:d7:f6:bd: 06:ef:6e:d2:48:4b:c4:20:59:74:4d:5d:01:29:be: 55:5c:73:3b:65:c1:e4:be:f0:fd:7d:6e:b2:19:a5: 97:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:CB:20:7D:55:26:53:C3:8D:B6:D4:77:85:95:C5:F4:A0:13:2D:D6 X509v3 Authority Key Identifier: keyid:18:07:9E:E4:39:8D:67:1B:D6:47:FC:A8:2A:27:94:E5:0A:30:47:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:55:53:88:49:ac:d4:d6:8f:ba:f7:22:22:a0:6f:96:ff:19: 52:58:5d:c1:d9:4c:1c:cb:19:a0:87:de:42:49:03:5d:d6:b0: 38:c0:94:c6:2a:9c:64:b3:83:95:8e:1c:dd:27:0a:8b:d5:f4: 2c:86:ad:f7:35:8c:24:35:d3:ba:91:8e:cc:2d:7f:d1:5a:91: 77:56:0c:21:0a:1e:09:b0:60:26:ea:c2:71:a3:0a:64:0d:31: 54:46:3e:7b:e9:c4:b5:d2:00:3c:20:28:42:0a:fe:6a:c0:c2: 39:0e:05:63:bf:53:65:e5:dc:2f:92:fc:ca:c8:7c:3d:a5:5d: d3:29:2e:26:f6:ac:c1:b4:99:bb:a1:0b:29:62:da:fe:a2:00: ca:4c:b6:c7:0f:d2:99:1f:ab:58:e7:5a:c8:df:c5:a5:a7:08: dd:60:fe:50:ba:cc:3d:a0:ba:81:7c:df:7a:e6:51:76:f5:dc: 1c:8a:8d:77:19:e3:46:69:1a:a3:a5:7a:b2:0d:3b:69:0b:32: 62:9b:ed:bf:df:cc:26:2f:54:10:07:69:fa:3f:d3:3c:51:85: c4:9a:b6:56:1d:d9:34:06:28:5e:43:d7:a4:27:5f:f1:4d:69: 6e:ba:e2:a9:aa:3b:d4:b5:a6:ba:ed:78:5c:12:47:8b:28:32: f8:a0:cf:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZCRTExMTAvBgNVBAUTKDE4MDc5RUU0Mzk4RDY3MUJENjQ3RkNBODJBMjc5NEU1 MEEzMDQ3QkQwHhcNMjUwODIyMTk0OTU1WhcNMjUwODI5MTk0OTU1WjAYMRYwFAYD VQQDEw02OGE4YzllMy1kNDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwUN4QX+rqfbItNOd4nicaAQgySkKMZt0LfHBn+73GwHojaq3hOqIddDopwvm Oc2g8RGh0bbIHZOrrcodVL1wdW8dqj8/gbqX0hdnB885usO1ALD29JJ8BnkzQcNx kzMn7IgiWo6Xb4Czdr8UGb53p2okE/zx85cZYLj35Uc58DLVtnXc9tSCTEl5WotZ qa+NNAMR5nF3LWpahTOONc0H/Xu2EkTr8hWc+4deeYqjP8RenKZPKAXogLnDlT7r 1aAeUO4h6bK8exVBOEcXN0I3gopVZ9KNRQwwVbS/6CnX9r0G727SSEvEIFl0TV0B Kb5VXHM7ZcHkvvD9fW6yGaWXDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPHLIH1V JlPDjbbUd4WVxfSgEy3WMB8GA1UdIwQYMBaAFBgHnuQ5jWcb1kf8qConlOUKMEe9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkJFMS9BN0U3MUVGNjZF QTYxMUVBQjU0NkI5NjFDNEY5QUUwMi9HQWVlNURtTlp4dldSX3lvS2llVTVRb3dS NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dBZWU1RG1OWnh2V1JfeW9LaWVVNVFvd1I3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RkJFMS9BN0U3MUVGNjZFQTYxMUVBQjU0NkI5NjFDNEY5QUUwMi9HQWVlNURtTlp4 dldSX3lvS2llVTVRb3dSNzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbVVOISazU1o+69yIioG+W/xlSWF3B2Uwcyxmgh95CSQNd1rA4wJTG Kpxks4OVjhzdJwqL1fQshq33NYwkNdO6kY7MLX/RWpF3VgwhCh4JsGAm6sJxowpk DTFURj576cS10gA8IChCCv5qwMI5DgVjv1Nl5dwvkvzKyHw9pV3TKS4m9qzBtJm7 oQspYtr+ogDKTLbHD9KZH6tY51rI38WlpwjdYP5Qusw9oLqBfN965lF29dwcio13 GeNGaRqjpXqyDTtpCzJim+2/38wmL1QQB2n6P9M8UYXEmrZWHdk0BiheQ9ekJ1/x TWluuuKpqjvUtaa67XhcEkeLKDL4oM/U -----END CERTIFICATE-----Generated at Sat Aug 23 19:14:03 2025 by rpki-client