$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft File: AaQS70FsiE9vY38b2oAOtu9nttY.mft (raw, json) Hash identifier: uY8BmHp5q7TcrAxl/ZHT5pAUErdAd45K9vE52WfHcl4= Subject key identifier: 2B:DF:36:CF:C9:C3:C7:C0:0B:66:E9:F3:76:8D:7A:D6:21:6A:49:24 Authority key identifier: 01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6 Certificate issuer: /CN=A91E4845/serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6 Certificate serial: 2245 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft Manifest number: 2211 Signing time: Fri 22 Aug 2025 20:53:34 +0000 Manifest this update: Fri 22 Aug 2025 20:53:33 +0000 Manifest next update: Fri 29 Aug 2025 20:53:33 +0000 Files and hashes: 1: AaQS70FsiE9vY38b2oAOtu9nttY.crl (hash: sRujTP2TY25CiSBVRtE8kNKHsDtjZWQLLtJKc8PXEv4=) 2: 1272CD8E65DB11F0A01C3E60C4F9AE02.roa (hash: EVkIEa29+KtvqbQ6gMLWGo1HWVznSyqTu9iTd0m1oV0=) 3: 11D9E3F865DB11F0A01C3E60C4F9AE02.roa (hash: SkqOP3HGJvJNACUcXS+nN5Zr4p2eXR8/AXO6wYAFnB4=) 4: 756C3370F38611EFBF7CEF35C4F9AE02.roa (hash: du5SamzGoud2VmU4jSD3B3FaKaAiMGpYcMTILdk3Bb0=) 5: 114016CE65DB11F0A01C3E60C4F9AE02.roa (hash: ErUpQfksEEfKD74XB+FFiaOlKOxRk0KEFfC9SCixKUc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:53:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8773 (0x2245) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4845, serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6 Validity Not Before: Aug 22 20:53:33 2025 GMT Not After : Aug 29 20:53:33 2025 GMT Subject: CN=68a8d8cd-8480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5f:04:cd:96:aa:ee:49:09:8d:73:b8:13:5c: 81:9a:e1:4e:b2:a5:ce:52:a3:cf:07:10:18:13:83: bb:eb:2b:2c:41:1d:7a:50:56:11:a5:2d:9c:55:0e: f2:77:fe:e5:b0:26:6c:f4:b4:12:25:9b:24:d1:d6: a9:1f:82:d8:29:48:a7:21:ca:66:18:27:4c:d5:e4: ae:3e:d2:dc:10:36:a5:02:65:8d:d7:74:47:8d:44: 6c:1c:d4:13:22:e2:1f:f0:e6:c7:99:96:ec:ed:03: a1:30:ea:db:0c:97:74:44:2c:a0:14:22:5d:6b:bd: ef:a9:02:9c:40:a7:19:af:d9:96:5b:5e:d5:15:ab: 07:3f:6d:9e:21:d2:53:29:b1:0c:fe:00:b1:6b:fa: 8b:84:68:84:aa:a3:92:33:4c:b3:48:7a:81:ff:76: 9d:6f:9e:7a:6c:61:90:66:e1:49:72:da:f4:98:88: 36:6e:35:72:af:80:ab:b3:b7:61:5d:70:05:61:60: 8f:b2:66:d4:88:51:60:24:72:d6:9c:8c:eb:a7:a6: 07:3c:fa:63:c6:5b:1b:4d:72:cd:80:e2:57:43:d1: 4a:1b:56:bc:b3:b2:9f:a0:b0:16:13:60:ee:8b:b9: a7:a5:46:c6:ee:a0:50:69:f6:16:98:a8:bc:6c:a0: 4a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:DF:36:CF:C9:C3:C7:C0:0B:66:E9:F3:76:8D:7A:D6:21:6A:49:24 X509v3 Authority Key Identifier: keyid:01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:8d:22:38:a5:ca:e5:f1:d0:d8:b7:7a:b8:62:ca:78:f2:e1: f1:56:9e:3b:60:a7:55:53:d7:46:a9:4b:69:db:5c:ce:34:b6: 6c:b3:1c:a9:e4:4c:2e:c3:19:30:df:f9:10:6d:1a:57:48:fc: 37:87:f9:7d:2f:5a:bd:7a:70:22:6b:dd:07:58:15:33:c8:f4: d3:67:72:9c:ce:9e:df:ed:d0:c1:e1:ce:ac:e2:2b:15:4d:d8: eb:94:19:13:63:5f:0c:5b:54:d0:49:3d:81:49:1b:14:88:d6: 1b:ce:6e:fd:b3:bf:7c:cc:b1:57:ce:1c:02:14:da:98:de:db: be:ed:b2:9a:65:9a:11:de:da:36:7a:6a:6f:31:3a:5c:a3:7d: bb:92:f2:24:6b:69:96:10:d6:a9:8f:74:30:1f:33:86:8d:29: 57:f0:4b:d8:ea:80:57:2c:a1:8f:85:20:39:7d:d0:5c:1b:16: 84:e9:d5:d9:0c:cc:18:72:92:dd:45:9d:9b:be:26:72:be:d6: ee:f0:60:43:d8:b6:bc:e8:b1:cf:53:a3:17:9f:8c:08:5d:ac: 44:90:e8:d7:30:e2:a2:b3:d4:b2:43:c7:81:00:46:31:c6:57: bf:9c:76:58:4b:09:cf:85:4b:42:b8:10:fe:d8:1b:14:4d:bf: 57:66:97:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ4NDUxMTAvBgNVBAUTKDAxQTQxMkVGNDE2Qzg4NEY2RjYzN0YxQkRBODAwRUI2 RUY2N0I2RDYwHhcNMjUwODIyMjA1MzMzWhcNMjUwODI5MjA1MzMzWjAYMRYwFAYD VQQDEw02OGE4ZDhjZC04NDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyF8EzZaq7kkJjXO4E1yBmuFOsqXOUqPPBxAYE4O76yssQR16UFYRpS2cVQ7y d/7lsCZs9LQSJZsk0dapH4LYKUinIcpmGCdM1eSuPtLcEDalAmWN13RHjURsHNQT IuIf8ObHmZbs7QOhMOrbDJd0RCygFCJda73vqQKcQKcZr9mWW17VFasHP22eIdJT KbEM/gCxa/qLhGiEqqOSM0yzSHqB/3adb556bGGQZuFJctr0mIg2bjVyr4Crs7dh XXAFYWCPsmbUiFFgJHLWnIzrp6YHPPpjxlsbTXLNgOJXQ9FKG1a8s7KfoLAWE2Du i7mnpUbG7qBQafYWmKi8bKBKewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCvfNs/J w8fAC2bp83aNetYhakkkMB8GA1UdIwQYMBaAFAGkEu9BbIhPb2N/G9qADrbvZ7bW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDg0NS80MDAxNTNCNkQy RUIxMUU1QjREMTVBNEVDNEY5QUUwMi9BYVFTNzBGc2lFOXZZMzhiMm9BT3R1OW50 dFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FhUVM3MEZzaUU5dlkzOGIyb0FPdHU5bnR0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDg0NS80MDAxNTNCNkQyRUIxMUU1QjREMTVBNEVDNEY5QUUwMi9BYVFTNzBGc2lF OXZZMzhiMm9BT3R1OW50dFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0jSI4pcrl8dDYt3q4Ysp48uHxVp47YKdVU9dGqUtp21zONLZssxyp 5Ewuwxkw3/kQbRpXSPw3h/l9L1q9enAia90HWBUzyPTTZ3Kczp7f7dDB4c6s4isV TdjrlBkTY18MW1TQST2BSRsUiNYbzm79s798zLFXzhwCFNqY3tu+7bKaZZoR3to2 empvMTpco327kvIka2mWENapj3QwHzOGjSlX8EvY6oBXLKGPhSA5fdBcGxaE6dXZ DMwYcpLdRZ2bviZyvtbu8GBD2La86LHPU6MXn4wIXaxEkOjXMOKis9SyQ8eBAEYx xle/nHZYSwnPhUtCuBD+2BsUTb9XZpcm -----END CERTIFICATE-----Generated at Sat Aug 23 19:08:56 2025 by rpki-client