$ rpki-client -vvf rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.mft File: V02z1iXehCAuOsnBw9Wwd01reOM.mft (raw, json) Hash identifier: kG3ose/q2v9HlyOv30ym6mo7kQbE5lF4vkRJRvz47Mk= Subject key identifier: 2B:FF:3F:1A:7B:15:46:3C:42:81:0C:68:2D:E6:A5:62:E3:9F:2A:85 Authority key identifier: 57:4D:B3:D6:25:DE:84:20:2E:3A:C9:C1:C3:D5:B0:77:4D:6B:78:E3 Certificate issuer: /CN=A91E33AA/serialNumber=574DB3D625DE84202E3AC9C1C3D5B0774D6B78E3 Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V02z1iXehCAuOsnBw9Wwd01reOM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.mft Manifest number: 1B Signing time: Sat 23 Aug 2025 08:09:18 +0000 Manifest this update: Sat 23 Aug 2025 08:09:18 +0000 Manifest next update: Sat 30 Aug 2025 08:09:18 +0000 Files and hashes: 1: V02z1iXehCAuOsnBw9Wwd01reOM.crl (hash: VFZBnVahZNOG5Z/Oae6GjPR70conPW1JQ8tPolnmxsc=) 2: 900FB71E596711F093280246C4F9AE02.roa (hash: tpoAf7rWotW8KjjlHeClNMLXYiXyuuy+xdTcFAlJiIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.crl rsync://rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V02z1iXehCAuOsnBw9Wwd01reOM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E33AA, serialNumber=574DB3D625DE84202E3AC9C1C3D5B0774D6B78E3 Validity Not Before: Aug 23 08:09:18 2025 GMT Not After : Aug 30 08:09:18 2025 GMT Subject: CN=68a9772e-26e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:eb:75:20:18:26:56:59:2a:63:c2:4c:3b:d5: 54:f2:4b:1b:62:f2:92:27:46:0a:fd:dd:a0:9e:61: 75:74:a8:51:37:72:60:ff:05:de:7a:7c:f8:d0:4c: 34:74:27:9e:22:e7:18:f6:46:60:52:3f:4c:77:18: ab:0f:00:a0:ac:5c:43:5c:3a:4a:6d:20:41:2a:6c: 9a:fd:9e:04:0e:17:6c:8a:22:19:d9:c7:3c:b8:2f: 5c:3b:31:e0:87:96:81:c0:d5:b6:fa:bc:dc:ee:4a: 5a:ea:18:14:b2:0e:0c:1c:a0:54:ca:33:41:16:c6: df:f4:2e:45:03:e3:34:3b:a6:81:bb:b5:d6:ef:75: c1:ac:a4:a9:6c:a4:f1:ef:38:f0:36:81:45:63:e8: 5f:c6:39:23:ea:d2:c7:c9:6e:c7:fc:11:bf:bf:3d: cf:8a:ed:48:a0:dc:85:f2:84:8c:31:c1:cf:46:34: be:38:86:3d:33:df:88:9c:2d:fb:27:0e:4f:89:95: 34:1d:83:92:fa:8e:9a:c0:ac:02:2f:1f:b0:8a:ef: e3:b8:73:96:15:96:21:61:6c:46:f2:ba:bb:5f:5a: e7:e3:ef:fa:7e:c6:61:42:31:68:aa:9e:c3:84:07: c4:9f:73:7e:85:61:89:51:0e:28:a6:07:ef:73:bf: 4e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:FF:3F:1A:7B:15:46:3C:42:81:0C:68:2D:E6:A5:62:E3:9F:2A:85 X509v3 Authority Key Identifier: keyid:57:4D:B3:D6:25:DE:84:20:2E:3A:C9:C1:C3:D5:B0:77:4D:6B:78:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V02z1iXehCAuOsnBw9Wwd01reOM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:66:ab:e0:c6:22:de:96:d6:c0:40:b8:2b:b3:34:ab:46:4d: 2e:b0:e8:0d:85:15:b3:ab:d2:ee:1d:60:95:e8:af:0b:c7:10: 09:7d:44:ce:c8:f4:48:dd:61:37:76:d1:3e:3b:44:b6:27:cc: ed:72:37:48:a9:c3:95:b3:e1:56:88:59:31:68:f6:96:63:12: e7:1b:c6:80:3f:59:7d:c5:bc:10:49:a5:b9:d5:64:9b:55:c7: a6:a8:d1:58:76:97:d4:87:bd:19:2c:59:bb:b6:39:97:5b:bb: a1:8a:a8:7e:51:5e:8d:a4:47:bb:b8:e8:40:b2:f0:6a:e3:7e: 56:19:6f:30:1e:1d:93:25:73:38:ab:c7:3c:54:99:58:22:46: ff:87:3a:b6:7a:35:84:73:35:ef:5e:ed:a5:a3:1d:46:d5:cd: 4b:16:70:f4:a2:13:f5:5a:46:51:d0:5b:19:0b:0a:0b:7b:e0: 6b:b5:1f:f4:1e:59:d3:09:96:9f:b9:3a:ad:f9:ec:49:99:3f: 8e:d8:9b:8d:bd:bd:17:6a:b8:14:ec:61:b0:56:76:89:ec:24: bf:a8:ef:04:b9:b6:be:50:6f:63:d8:58:40:a0:da:8d:2c:eb: 2a:a7:3f:43:eb:2a:06:e0:3e:c2:ac:e4:9d:7c:55:38:32:59: 13:87:f3:46 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MzNBQTExMC8GA1UEBRMoNTc0REIzRDYyNURFODQyMDJFM0FDOUMxQzNENUIwNzc0 RDZCNzhFMzAeFw0yNTA4MjMwODA5MThaFw0yNTA4MzAwODA5MThaMBgxFjAUBgNV BAMTDTY4YTk3NzJlLTI2ZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCv63UgGCZWWSpjwkw71VTySxti8pInRgr93aCeYXV0qFE3cmD/Bd56fPjQTDR0 J54i5xj2RmBSP0x3GKsPAKCsXENcOkptIEEqbJr9ngQOF2yKIhnZxzy4L1w7MeCH loHA1bb6vNzuSlrqGBSyDgwcoFTKM0EWxt/0LkUD4zQ7poG7tdbvdcGspKlspPHv OPA2gUVj6F/GOSPq0sfJbsf8Eb+/Pc+K7Uig3IXyhIwxwc9GNL44hj0z34icLfsn Dk+JlTQdg5L6jprArAIvH7CK7+O4c5YVliFhbEbyurtfWufj7/p+xmFCMWiqnsOE B8Sfc36FYYlRDiimB+9zv04JAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUK/8/GnsV RjxCgQxoLealYuOfKoUwHwYDVR0jBBgwFoAUV02z1iXehCAuOsnBw9Wwd01reOMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzM0FBLzQ5QTFBODc4NTk2 NzExRjA4QzQwNzkyQ0M0RjlBRTAyL1YwMnoxaVhlaENBdU9zbkJ3OVd3ZDAxcmVP TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVjAyejFpWGVoQ0F1T3NuQnc5V3dkMDFyZU9NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUz M0FBLzQ5QTFBODc4NTk2NzExRjA4QzQwNzkyQ0M0RjlBRTAyL1YwMnoxaVhlaENB dU9zbkJ3OVd3ZDAxcmVPTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMhmq+DGIt6W1sBAuCuzNKtGTS6w6A2FFbOr0u4dYJXorwvHEAl9RM7I 9EjdYTd20T47RLYnzO1yN0ipw5Wz4VaIWTFo9pZjEucbxoA/WX3FvBBJpbnVZJtV x6ao0Vh2l9SHvRksWbu2OZdbu6GKqH5RXo2kR7u46ECy8GrjflYZbzAeHZMlczir xzxUmVgiRv+HOrZ6NYRzNe9e7aWjHUbVzUsWcPSiE/VaRlHQWxkLCgt74Gu1H/Qe WdMJlp+5Oq357EmZP47Ym429vRdquBTsYbBWdonsJL+o7wS5tr5Qb2PYWECg2o0s 6yqnP0PrKgbgPsKs5J18VTgyWROH80Y= -----END CERTIFICATE-----Generated at Sun Aug 24 00:09:34 2025 by rpki-client