$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft File: aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft (raw, json) Hash identifier: Lx3EO2Cyg7swuiqPjqjY7FY/jb3X672KxKgRGWx94Y4= Subject key identifier: CE:A9:48:09:0B:47:00:E7:13:33:8C:39:BB:D0:46:EA:7A:D8:B7:49 Authority key identifier: 68:6A:00:57:16:4D:14:38:EC:59:58:6D:A8:BA:A5:46:5F:D8:29:C7 Certificate issuer: /CN=A91EA9BD/serialNumber=686A0057164D1438EC59586DA8BAA5465FD829C7 Certificate serial: 30DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aGoAVxZNFDjsWVhtqLqlRl_YKcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft Manifest number: 30D8 Signing time: Fri 22 Aug 2025 15:28:53 +0000 Manifest this update: Fri 22 Aug 2025 15:28:53 +0000 Manifest next update: Fri 29 Aug 2025 15:28:53 +0000 Files and hashes: 1: aGoAVxZNFDjsWVhtqLqlRl_YKcc.crl (hash: 7c0NbCApsGGgrhJKlSQ7PUhK4ToWngJTj1JHqPb3sIs=) 2: 93C0837AA52911EC9D2DAE83C4F9AE02.roa (hash: QijzfOAskdpqspHv2hl6DWJmVGpVIoUXprNfU2Pxi8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.crl rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aGoAVxZNFDjsWVhtqLqlRl_YKcc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:28:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12508 (0x30dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA9BD, serialNumber=686A0057164D1438EC59586DA8BAA5465FD829C7 Validity Not Before: Aug 22 15:28:53 2025 GMT Not After : Aug 29 15:28:53 2025 GMT Subject: CN=68a88cb5-b9df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:78:30:59:a3:07:96:7e:17:14:c9:11:33:46: b1:9b:ad:da:ca:7e:ce:21:cb:81:09:4d:92:cf:f6: 3b:07:5c:3f:6b:20:ab:46:61:cd:bf:61:01:0d:dc: b3:66:80:46:94:38:37:c6:13:f2:03:a0:87:b6:3e: 95:15:16:53:16:0b:ff:e2:13:d4:16:86:d4:2b:fa: 61:e2:ea:fd:4c:7f:10:7f:83:7a:44:a4:a3:22:03: a6:d3:fd:cd:7e:1b:9b:f8:0d:59:77:f0:cf:db:8c: 02:b2:c6:74:b9:20:27:c6:cf:99:a1:4c:9f:44:ff: c4:50:67:36:99:d0:f2:c0:33:f0:aa:82:36:56:bd: 72:b1:24:33:da:d4:13:5c:41:f0:51:61:6a:f0:77: ad:67:34:2e:7a:62:23:c3:e9:1a:1b:41:36:c9:d7: 4c:06:9e:fe:5c:d8:03:29:fa:1f:50:92:81:f4:1e: 68:a5:12:63:53:11:c5:fb:3a:98:34:27:42:ab:2c: 67:2e:a6:d6:75:b6:4d:a4:da:7f:5e:78:ab:c6:e9: 77:1c:d6:9e:89:2f:58:0f:30:4b:c4:fd:21:5c:90: cb:20:ed:55:e3:bf:0e:15:43:72:70:e2:51:ea:6c: d6:36:b0:cb:28:02:7b:e6:5b:20:10:73:c1:d4:9a: d4:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:A9:48:09:0B:47:00:E7:13:33:8C:39:BB:D0:46:EA:7A:D8:B7:49 X509v3 Authority Key Identifier: keyid:68:6A:00:57:16:4D:14:38:EC:59:58:6D:A8:BA:A5:46:5F:D8:29:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aGoAVxZNFDjsWVhtqLqlRl_YKcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:36:d5:84:4f:a6:62:75:45:df:66:f1:da:6c:03:eb:94:27: 87:87:45:cd:48:99:6b:f2:ad:86:90:7d:ca:9d:57:bb:48:31: 7f:b6:a2:fe:7d:32:65:02:2f:6f:f6:52:54:de:bc:c7:a7:4f: c5:f4:8d:b0:d6:3f:da:d7:d4:f2:02:f3:b1:36:94:da:39:d7: 23:c9:c3:54:8e:50:02:ef:a3:21:52:27:a9:c9:e7:03:32:16: 8f:3f:4a:b3:d4:9f:c2:89:6b:66:07:65:ae:bd:2c:35:d5:5b: a7:a9:9c:3c:d8:88:39:44:ad:e4:28:f6:e2:b5:a1:61:bd:93: 0c:7d:d2:16:d3:5a:58:92:3b:06:3c:94:26:17:15:bf:7b:c6: 14:a9:1d:2e:d3:e1:b3:fe:fa:72:2a:c0:db:2f:5c:d7:7e:00: fc:65:d4:bb:4e:11:98:21:77:90:13:77:43:51:6a:9f:a7:dd: 63:e1:c6:05:93:ab:2f:88:dc:06:23:ed:b2:00:5c:78:d2:dd: 0f:67:70:50:d6:8f:63:41:42:9b:c5:b4:2c:6f:42:05:86:47: 72:55:80:cc:5a:14:9d:c7:39:89:5d:06:06:49:73:d3:44:59: 42:d0:ec:a0:fb:f9:a5:db:a5:10:cc:8d:8d:ee:0b:70:35:97: b1:6c:d4:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMNwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5QkQxMTAvBgNVBAUTKDY4NkEwMDU3MTY0RDE0MzhFQzU5NTg2REE4QkFBNTQ2 NUZEODI5QzcwHhcNMjUwODIyMTUyODUzWhcNMjUwODI5MTUyODUzWjAYMRYwFAYD VQQDEw02OGE4OGNiNS1iOWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA63gwWaMHln4XFMkRM0axm63ayn7OIcuBCU2Sz/Y7B1w/ayCrRmHNv2EBDdyz ZoBGlDg3xhPyA6CHtj6VFRZTFgv/4hPUFobUK/ph4ur9TH8Qf4N6RKSjIgOm0/3N fhub+A1Zd/DP24wCssZ0uSAnxs+ZoUyfRP/EUGc2mdDywDPwqoI2Vr1ysSQz2tQT XEHwUWFq8HetZzQuemIjw+kaG0E2yddMBp7+XNgDKfofUJKB9B5opRJjUxHF+zqY NCdCqyxnLqbWdbZNpNp/Xnirxul3HNaeiS9YDzBLxP0hXJDLIO1V478OFUNycOJR 6mzWNrDLKAJ75lsgEHPB1JrUmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM6pSAkL RwDnEzOMObvQRup62LdJMB8GA1UdIwQYMBaAFGhqAFcWTRQ47FlYbai6pUZf2CnH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTlCRC8wM0I4MEYzOERG NUMxMUUyOTcyQTk0Mjc1OTExRUEzMi9hR29BVnhaTkZEanNXVmh0cUxxbFJsX1lL Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FHb0FWeFpORkRqc1dWaHRxTHFsUmxfWUtjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTlCRC8wM0I4MEYzOERGNUMxMUUyOTcyQTk0Mjc1OTExRUEzMi9hR29BVnhaTkZE anNXVmh0cUxxbFJsX1lLY2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkNtWET6ZidUXfZvHabAPrlCeHh0XNSJlr8q2GkH3KnVe7SDF/tqL+ fTJlAi9v9lJU3rzHp0/F9I2w1j/a19TyAvOxNpTaOdcjycNUjlAC76MhUiepyecD MhaPP0qz1J/CiWtmB2WuvSw11VunqZw82Ig5RK3kKPbitaFhvZMMfdIW01pYkjsG PJQmFxW/e8YUqR0u0+Gz/vpyKsDbL1zXfgD8ZdS7ThGYIXeQE3dDUWqfp91j4cYF k6sviNwGI+2yAFx40t0PZ3BQ1o9jQUKbxbQsb0IFhkdyVYDMWhSdxzmJXQYGSXPT RFlC0Oyg+/ml26UQzI2N7gtwNZexbNT8 -----END CERTIFICATE-----Generated at Sat Aug 23 20:59:51 2025 by rpki-client