$ rpki-client -vvf rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft File: MAeESqoZm6nIjWQEw9_oduHjn8Y.mft (raw, json) Hash identifier: 9jvshgxmaYYhipTCCFCZ8qzhHrokV45M58PB/YnTlBE= Subject key identifier: 13:C0:12:2A:A7:A5:89:6C:E4:E9:78:5E:61:13:9A:00:E3:63:D2:51 Authority key identifier: 30:07:84:4A:AA:19:9B:A9:C8:8D:64:04:C3:DF:E8:76:E1:E3:9F:C6 Certificate issuer: /CN=A91E46B1/serialNumber=3007844AAA199BA9C88D6404C3DFE876E1E39FC6 Certificate serial: 14BE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAeESqoZm6nIjWQEw9_oduHjn8Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft Manifest number: 14AA Signing time: Fri 22 Aug 2025 16:59:55 +0000 Manifest this update: Fri 22 Aug 2025 16:59:55 +0000 Manifest next update: Fri 29 Aug 2025 16:59:55 +0000 Files and hashes: 1: MAeESqoZm6nIjWQEw9_oduHjn8Y.crl (hash: O790TUl5ldP9WlFuxKbp4Q1GRdsMT4E1uzYbJNrYD3I=) 2: D0D94718CB8111E89EDE697DC4F9AE02.roa (hash: fzmHVxiTK7D8PG5yindwGef8+csbEOVTRn9jS+V30ac=) 3: 391E6EDE679B11E886728650C4F9AE02.roa (hash: iYa29kjN+8nhwT/98WnKo7Pi7A7FL3PggbbxiD2rxqU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.crl rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAeESqoZm6nIjWQEw9_oduHjn8Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:59:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5310 (0x14be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E46B1, serialNumber=3007844AAA199BA9C88D6404C3DFE876E1E39FC6 Validity Not Before: Aug 22 16:59:55 2025 GMT Not After : Aug 29 16:59:55 2025 GMT Subject: CN=68a8a20b-5ff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:df:fa:b8:a8:1b:07:f6:11:92:18:1c:38:49: 02:86:42:27:b5:94:52:46:6b:ac:2c:95:98:75:ca: 5f:33:8f:9c:b5:05:ac:2a:06:bb:fb:14:5d:02:45: 86:8e:51:e9:bd:ac:5b:30:a6:2b:d5:68:ad:2f:8a: 7e:2f:d2:53:81:f5:7a:30:31:4c:3c:49:9a:0c:53: 68:06:97:76:5a:02:bd:0d:1c:bb:95:a2:1a:9c:99: 62:e6:3b:98:9a:12:d9:fc:c5:29:a2:d8:3a:f0:5f: 64:4f:af:53:22:1b:97:ad:8e:c2:17:d8:d8:f1:a1: 0d:12:88:a9:50:62:b5:48:ef:b2:6f:12:dc:b7:e3: c9:c4:78:64:da:4e:af:7f:41:48:c6:ac:b1:77:99: ab:b1:d9:97:66:1a:93:ad:01:21:b8:fa:ad:99:05: bd:3e:a6:ee:eb:b7:2b:ae:b8:60:11:33:d1:d9:15: 07:61:80:f5:5d:f8:b1:91:36:5c:0c:ee:c9:86:89: a1:da:3b:f6:0e:ea:ca:b6:62:90:e0:b3:fe:cf:73: ed:d9:be:39:92:f6:99:70:7e:29:11:5e:25:94:d7: 32:cd:11:76:e7:72:3f:98:25:57:79:9f:4c:0e:00: 24:9c:99:90:29:e6:f4:93:81:43:f4:d5:5d:30:92: dc:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:C0:12:2A:A7:A5:89:6C:E4:E9:78:5E:61:13:9A:00:E3:63:D2:51 X509v3 Authority Key Identifier: keyid:30:07:84:4A:AA:19:9B:A9:C8:8D:64:04:C3:DF:E8:76:E1:E3:9F:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAeESqoZm6nIjWQEw9_oduHjn8Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:a3:1a:34:cf:73:c6:d3:4b:84:41:6c:18:43:d4:95:4b:79: 63:13:a7:b1:f2:6a:bd:18:29:be:69:00:99:a1:ab:75:5a:cf: b1:24:9e:70:9b:1a:35:84:58:db:40:3e:ad:1e:db:f5:f1:41: b2:79:20:a6:21:0d:ea:99:00:3e:1f:3d:e2:65:d1:f5:7a:80: fe:23:c2:7e:4f:b6:10:ab:15:2c:a1:1e:03:39:c5:65:a4:da: 9c:bd:ad:3e:4f:85:f4:d8:26:ca:28:ef:45:26:6d:00:b5:6e: ea:fd:3d:74:ca:40:e7:c3:2e:f4:c6:dc:21:2f:f2:44:49:f9: 6b:0b:8e:62:ba:77:fe:cb:0b:10:12:28:ed:e0:cb:19:3c:05: c7:b8:2b:44:45:02:78:be:8b:3b:9e:af:a2:a7:66:29:12:73: 9d:a4:d7:59:03:fc:66:11:d8:01:ef:93:3b:9a:d8:d5:41:61: 61:f2:44:66:1e:c4:3d:b0:7e:11:aa:9e:72:b2:ec:2d:5e:cc: cd:53:82:29:8a:63:c8:5f:23:ba:2f:6e:a9:c6:85:cc:df:dd: 2a:75:0f:e8:51:59:7e:ca:b7:55:4e:e0:cf:a2:e3:d8:1e:cb: 87:c5:e7:94:86:d9:66:ce:3f:0b:cd:93:de:9a:eb:04:fd:d3: 19:bc:89:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2QjExMTAvBgNVBAUTKDMwMDc4NDRBQUExOTlCQTlDODhENjQwNEMzREZFODc2 RTFFMzlGQzYwHhcNMjUwODIyMTY1OTU1WhcNMjUwODI5MTY1OTU1WjAYMRYwFAYD VQQDEw02OGE4YTIwYi01ZmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArN/6uKgbB/YRkhgcOEkChkIntZRSRmusLJWYdcpfM4+ctQWsKga7+xRdAkWG jlHpvaxbMKYr1WitL4p+L9JTgfV6MDFMPEmaDFNoBpd2WgK9DRy7laIanJli5juY mhLZ/MUpotg68F9kT69TIhuXrY7CF9jY8aENEoipUGK1SO+ybxLct+PJxHhk2k6v f0FIxqyxd5mrsdmXZhqTrQEhuPqtmQW9Pqbu67crrrhgETPR2RUHYYD1XfixkTZc DO7Jhomh2jv2DurKtmKQ4LP+z3Pt2b45kvaZcH4pEV4llNcyzRF253I/mCVXeZ9M DgAknJmQKeb0k4FD9NVdMJLccQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBPAEiqn pYls5Ol4XmETmgDjY9JRMB8GA1UdIwQYMBaAFDAHhEqqGZupyI1kBMPf6Hbh45/G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDZCMS9GMDBERjM2NjY3 OTcxMUU4QTc4OTFDNDhDNEY5QUUwMi9NQWVFU3FvWm02bklqV1FFdzlfb2R1SGpu OFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01BZUVTcW9abTZuSWpXUUV3OV9vZHVIam44WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDZCMS9GMDBERjM2NjY3OTcxMUU4QTc4OTFDNDhDNEY5QUUwMi9NQWVFU3FvWm02 bklqV1FFdzlfb2R1SGpuOFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAoxo0z3PG00uEQWwYQ9SVS3ljE6ex8mq9GCm+aQCZoat1Ws+xJJ5w mxo1hFjbQD6tHtv18UGyeSCmIQ3qmQA+Hz3iZdH1eoD+I8J+T7YQqxUsoR4DOcVl pNqcva0+T4X02CbKKO9FJm0AtW7q/T10ykDnwy70xtwhL/JESflrC45iunf+ywsQ Eijt4MsZPAXHuCtERQJ4vos7nq+ip2YpEnOdpNdZA/xmEdgB75M7mtjVQWFh8kRm HsQ9sH4Rqp5ysuwtXszNU4IpimPIXyO6L26pxoXM390qdQ/oUVl+yrdVTuDPouPY HsuHxeeUhtlmzj8LzZPemusE/dMZvIny -----END CERTIFICATE-----Generated at Sat Aug 23 10:58:55 2025 by rpki-client