$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft File: aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft (raw, json) Hash identifier: ba6j8zHlb1zGpwsHjsnNgHQVgTQ3PEYgpppR0X1S39I= Subject key identifier: 1E:96:60:17:7F:69:E9:0F:37:B3:B9:2C:DB:CB:2E:E2:B6:E5:6D:2A Authority key identifier: 69:23:6E:59:96:30:0A:2F:D7:85:EF:85:78:3C:5C:29:C5:B4:E8:74 Certificate issuer: /CN=A91EE5E5/serialNumber=69236E5996300A2FD785EF85783C5C29C5B4E874 Certificate serial: 8B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft Manifest number: 89 Signing time: Sat 23 Aug 2025 06:49:31 +0000 Manifest this update: Sat 23 Aug 2025 06:49:30 +0000 Manifest next update: Sat 30 Aug 2025 06:49:30 +0000 Files and hashes: 1: aSNuWZYwCi_Xhe-FeDxcKcW06HQ.crl (hash: XQVo7naajpHFKn5wSIp32VfWv8qAB95xs6RiEihTXzM=) 2: 1506B298B00711EF863A582EC4F9AE02.roa (hash: PjiKcHZxo3PwYpPFYpla6KazUuXCJGnKHspIakJqo2E=) 3: 4965F84CAFC011EF82BB1055C4F9AE02.roa (hash: jpijFayg1AhLIehVWTrf1nyIqutL0nvGe/8hsMY0L/c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.crl rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:49:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE5E5, serialNumber=69236E5996300A2FD785EF85783C5C29C5B4E874 Validity Not Before: Aug 23 06:49:30 2025 GMT Not After : Aug 30 06:49:30 2025 GMT Subject: CN=68a9647a-997f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c7:94:e1:d1:13:0b:65:7a:2c:d3:8c:04:77: 8b:e4:db:04:37:78:c4:61:0f:15:46:41:4c:25:5f: dd:1c:98:ec:00:98:29:a1:88:3f:d7:27:fa:ac:d9: 11:64:d4:b1:41:4f:42:6b:b1:e3:a3:e6:4c:89:3d: eb:e0:21:0f:32:29:fa:79:b6:eb:80:f1:f8:7c:b7: 80:3c:4e:81:86:bb:2b:36:07:94:17:05:ad:34:6b: 56:5a:33:54:a9:d2:31:ab:f6:26:8a:1d:82:8c:b8: 27:84:9f:4c:97:04:47:78:ed:cf:4c:cb:6e:cf:d0: c2:32:5b:b1:e8:35:f3:ae:ae:89:39:bb:a7:ef:8c: 4c:c5:b0:a1:c1:36:fe:13:72:c4:42:ab:e1:b6:5c: cd:06:d7:06:51:b0:ae:26:11:ee:7c:98:24:c8:c1: 97:a9:34:99:48:d4:c4:00:67:24:d4:a9:70:97:04: 7a:8e:29:32:1e:6a:f5:f8:55:c7:67:82:b2:43:7f: 66:94:c7:9a:d5:f2:b4:77:31:4a:f3:92:08:da:b5: 11:81:b7:6f:1d:25:3a:eb:36:e7:8d:1d:4d:c7:aa: 38:a6:af:53:16:e7:7a:d6:c9:b4:c8:c2:53:d6:d7: ae:b8:b4:97:06:bd:79:39:5b:90:c2:10:11:b9:84: 6b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:96:60:17:7F:69:E9:0F:37:B3:B9:2C:DB:CB:2E:E2:B6:E5:6D:2A X509v3 Authority Key Identifier: keyid:69:23:6E:59:96:30:0A:2F:D7:85:EF:85:78:3C:5C:29:C5:B4:E8:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:ae:ae:69:7e:7c:47:0f:55:d0:31:d6:49:e9:d3:a3:c6:1a: 17:d7:f2:31:0d:80:da:e4:e5:07:b7:38:8f:de:5e:1b:1a:a0: 50:fb:45:7a:a9:c6:d1:73:0c:8f:86:52:73:1d:bb:ef:c3:55: 79:7f:66:a4:42:ab:d0:62:5e:58:a0:72:d5:84:4c:b7:c5:67: 10:38:6a:5e:59:ba:10:db:7c:59:f5:1e:e1:03:93:db:4f:2b: 80:c1:22:66:90:85:f3:37:ab:94:38:96:5c:63:77:11:dc:c4: 11:fe:ac:23:5e:d3:a3:36:7e:c3:ee:49:80:1e:9d:f7:1b:d7: b8:50:f1:20:2b:e3:3d:ca:1f:a8:20:0e:f9:2b:53:0c:81:97: f5:4f:51:51:5c:70:a7:4c:78:b2:05:6d:6d:bd:ba:e4:2a:41: be:37:11:e7:0e:db:d4:e8:0d:72:a9:56:cb:1e:7b:63:b4:37: 61:ed:9a:5e:af:37:0f:c3:11:95:d1:55:71:cf:cf:ac:12:a5: bf:3e:dd:cb:74:23:29:2f:04:c0:6e:cb:9f:41:c0:ec:76:b9: 3a:c9:6a:33:ad:af:c6:5d:b5:2b:7b:97:cf:3d:51:b8:70:17: a6:53:43:5b:96:12:e6:0d:e9:75:bc:50:f8:a5:fe:55:19:77: 52:04:52:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUU1RTUxMTAvBgNVBAUTKDY5MjM2RTU5OTYzMDBBMkZENzg1RUY4NTc4M0M1QzI5 QzVCNEU4NzQwHhcNMjUwODIzMDY0OTMwWhcNMjUwODMwMDY0OTMwWjAYMRYwFAYD VQQDEw02OGE5NjQ3YS05OTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmMeU4dETC2V6LNOMBHeL5NsEN3jEYQ8VRkFMJV/dHJjsAJgpoYg/1yf6rNkR ZNSxQU9Ca7Hjo+ZMiT3r4CEPMin6ebbrgPH4fLeAPE6BhrsrNgeUFwWtNGtWWjNU qdIxq/Ymih2CjLgnhJ9MlwRHeO3PTMtuz9DCMlux6DXzrq6JObun74xMxbChwTb+ E3LEQqvhtlzNBtcGUbCuJhHufJgkyMGXqTSZSNTEAGck1KlwlwR6jikyHmr1+FXH Z4KyQ39mlMea1fK0dzFK85II2rURgbdvHSU66zbnjR1Nx6o4pq9TFud61sm0yMJT 1teuuLSXBr15OVuQwhARuYRrDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB6WYBd/ aekPN7O5LNvLLuK25W0qMB8GA1UdIwQYMBaAFGkjblmWMAov14XvhXg8XCnFtOh0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTVFNS9GMEU3NkUxMkFG QkYxMUVGQTI4QTM2NTRDNEY5QUUwMi9hU051V1pZd0NpX1hoZS1GZUR4Y0tjVzA2 SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2FTTnVXWll3Q2lfWGhlLUZlRHhjS2NXMDZIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTVFNS9GMEU3NkUxMkFGQkYxMUVGQTI4QTM2NTRDNEY5QUUwMi9hU051V1pZd0Np X1hoZS1GZUR4Y0tjVzA2SFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6rq5pfnxHD1XQMdZJ6dOjxhoX1/IxDYDa5OUHtziP3l4bGqBQ+0V6 qcbRcwyPhlJzHbvvw1V5f2akQqvQYl5YoHLVhEy3xWcQOGpeWboQ23xZ9R7hA5Pb TyuAwSJmkIXzN6uUOJZcY3cR3MQR/qwjXtOjNn7D7kmAHp33G9e4UPEgK+M9yh+o IA75K1MMgZf1T1FRXHCnTHiyBW1tvbrkKkG+NxHnDtvU6A1yqVbLHntjtDdh7Zpe rzcPwxGV0VVxz8+sEqW/Pt3LdCMpLwTAbsufQcDsdrk6yWozra/GXbUre5fPPVG4 cBemU0NblhLmDel1vFD4pf5VGXdSBFLJ -----END CERTIFICATE-----Generated at Sat Aug 23 12:16:02 2025 by rpki-client