$ rpki-client -vvf rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.mft File: aecBsfM0KSOA56u5AcNCYzLGqlo.mft (raw, json) Hash identifier: 5OxXfvUaM23/cc+uHaCG6EZKZAlelOb83Y2J9aXgjxA= Subject key identifier: 44:9D:57:F0:D9:EA:60:B8:D1:CC:5A:0F:7B:12:8A:BE:68:B1:77:23 Authority key identifier: 69:E7:01:B1:F3:34:29:23:80:E7:AB:B9:01:C3:42:63:32:C6:AA:5A Certificate issuer: /CN=A91F44EA/serialNumber=69E701B1F334292380E7ABB901C3426332C6AA5A Certificate serial: 15F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aecBsfM0KSOA56u5AcNCYzLGqlo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.mft Manifest number: 15E9 Signing time: Fri 22 Aug 2025 16:52:29 +0000 Manifest this update: Fri 22 Aug 2025 16:52:29 +0000 Manifest next update: Fri 29 Aug 2025 16:52:29 +0000 Files and hashes: 1: aecBsfM0KSOA56u5AcNCYzLGqlo.crl (hash: UPyvrPgrNfGpG79BArZL60eNYXMMmgLtmScpOTMVA3I=) 2: F6CE4EEC56F911E997D5B40AC4F9AE02.roa (hash: jy3Wft/F/5UxXAXx08sOlZkwBarb1srk+Xi5m/F+Ac0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.crl rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aecBsfM0KSOA56u5AcNCYzLGqlo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:52:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5623 (0x15f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F44EA, serialNumber=69E701B1F334292380E7ABB901C3426332C6AA5A Validity Not Before: Aug 22 16:52:29 2025 GMT Not After : Aug 29 16:52:29 2025 GMT Subject: CN=68a8a04d-9301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:81:df:7d:2f:f7:63:5a:92:45:6a:1d:b1:b7: 75:17:2f:c1:38:a7:1b:fb:23:7a:15:ff:81:4d:d4: 60:e6:7c:e8:2c:60:28:89:44:60:4a:c4:74:85:40: 0f:da:9a:86:c1:ce:ba:f1:6f:a6:aa:c0:42:72:2b: d6:82:61:7f:db:c5:27:a1:df:2f:fe:e7:42:b5:c8: 44:5e:2c:06:c1:69:4b:53:59:3f:fc:90:be:12:19: 02:59:12:01:8d:af:83:83:8c:82:4d:f5:9e:2e:a1: cc:e1:18:f5:4e:34:ca:cc:6e:65:f2:47:fa:d1:d1: 9c:1d:fb:aa:72:7b:05:25:4c:cf:b3:76:7e:15:45: 37:1f:bd:34:7c:b8:e6:10:94:36:f4:62:ad:dd:3e: 61:b1:d2:c7:98:92:6f:30:f8:4e:fb:fa:ab:95:f8: f6:53:61:54:4c:e0:d3:53:4f:03:2f:fe:70:d5:d3: ff:49:48:e9:18:51:db:3f:bb:24:62:40:2c:3b:ae: d2:9c:89:7b:09:45:f0:54:16:2e:e3:50:7f:02:51: db:a3:16:df:9a:3d:1f:af:f5:dd:d4:ba:82:2f:0f: a7:34:e3:b4:06:0d:a4:3b:4b:b0:1b:22:ce:85:5a: 0b:e3:43:a8:83:a2:fb:88:7b:83:45:8a:97:f1:8f: ad:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:9D:57:F0:D9:EA:60:B8:D1:CC:5A:0F:7B:12:8A:BE:68:B1:77:23 X509v3 Authority Key Identifier: keyid:69:E7:01:B1:F3:34:29:23:80:E7:AB:B9:01:C3:42:63:32:C6:AA:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aecBsfM0KSOA56u5AcNCYzLGqlo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:7d:d9:fc:18:f8:b7:57:80:7b:7f:a0:a1:06:59:c0:d2:b4: f6:8e:13:77:70:84:fb:d1:82:7e:02:78:96:9f:85:8a:bc:7b: 9f:19:d5:eb:5c:8c:b8:c1:a8:52:ab:8a:c0:07:b2:50:f5:ff: fc:03:3f:11:a5:cf:0b:b7:5d:04:1b:5d:29:cc:ee:26:24:9c: 81:e5:11:87:b3:41:a6:4a:17:43:76:62:21:b1:37:3c:9e:3b: 18:c6:05:c8:37:57:5e:bd:bf:c6:35:bf:fa:c2:88:cf:87:41: fc:3c:7d:76:16:82:3f:b5:f0:9b:08:5c:55:78:82:1d:1d:37: c0:72:c4:23:0f:32:10:e2:ec:95:01:7a:f1:c9:ee:0b:1b:a9: 02:6b:e7:9c:9e:38:4f:5a:59:9d:15:5d:31:f6:42:4e:b2:48: 9c:03:b3:10:5f:52:ab:6a:0e:8d:46:66:16:9e:6f:6b:c4:cb: a1:14:07:eb:12:3c:ab:f7:74:ab:da:03:23:09:44:b6:92:1a: ef:d8:53:e3:c5:ca:9e:9d:32:4d:59:5c:30:28:fc:56:f6:8c: 63:91:7b:df:19:88:b2:95:8b:37:5a:26:c7:25:75:91:dd:dd: 38:42:ca:df:e6:69:40:29:4e:3e:b7:d1:9f:8f:fd:50:b9:23: f8:f2:f1:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ0RUExMTAvBgNVBAUTKDY5RTcwMUIxRjMzNDI5MjM4MEU3QUJCOTAxQzM0MjYz MzJDNkFBNUEwHhcNMjUwODIyMTY1MjI5WhcNMjUwODI5MTY1MjI5WjAYMRYwFAYD VQQDEw02OGE4YTA0ZC05MzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4oHffS/3Y1qSRWodsbd1Fy/BOKcb+yN6Ff+BTdRg5nzoLGAoiURgSsR0hUAP 2pqGwc668W+mqsBCcivWgmF/28Unod8v/udCtchEXiwGwWlLU1k//JC+EhkCWRIB ja+Dg4yCTfWeLqHM4Rj1TjTKzG5l8kf60dGcHfuqcnsFJUzPs3Z+FUU3H700fLjm EJQ29GKt3T5hsdLHmJJvMPhO+/qrlfj2U2FUTODTU08DL/5w1dP/SUjpGFHbP7sk YkAsO67SnIl7CUXwVBYu41B/AlHboxbfmj0fr/Xd1LqCLw+nNOO0Bg2kO0uwGyLO hVoL40Oog6L7iHuDRYqX8Y+tTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFESdV/DZ 6mC40cxaD3sSir5osXcjMB8GA1UdIwQYMBaAFGnnAbHzNCkjgOeruQHDQmMyxqpa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDRFQS82ODkwMzM5NjJC NDExMUU4ODQ1NzkzODdDNEY5QUUwMi9hZWNCc2ZNMEtTT0E1NnU1QWNOQ1l6TEdx bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FlY0JzZk0wS1NPQTU2dTVBY05DWXpMR3Fsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDRFQS82ODkwMzM5NjJCNDExMUU4ODQ1NzkzODdDNEY5QUUwMi9hZWNCc2ZNMEtT T0E1NnU1QWNOQ1l6TEdxbG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5fdn8GPi3V4B7f6ChBlnA0rT2jhN3cIT70YJ+AniWn4WKvHufGdXr XIy4wahSq4rAB7JQ9f/8Az8Rpc8Lt10EG10pzO4mJJyB5RGHs0GmShdDdmIhsTc8 njsYxgXIN1devb/GNb/6wojPh0H8PH12FoI/tfCbCFxVeIIdHTfAcsQjDzIQ4uyV AXrxye4LG6kCa+ecnjhPWlmdFV0x9kJOskicA7MQX1Krag6NRmYWnm9rxMuhFAfr Ejyr93Sr2gMjCUS2khrv2FPjxcqenTJNWVwwKPxW9oxjkXvfGYiylYs3WibHJXWR 3d04Qsrf5mlAKU4+t9Gfj/1QuSP48vGf -----END CERTIFICATE-----Generated at Sun Aug 24 00:45:32 2025 by rpki-client