$ rpki-client -vvf rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft File: aK5b6xu35ELO4KfgFAKf9y49tB8.mft (raw, json) Hash identifier: xNePQaO1hQhVUj/z3awxnoxS9klH0b3TTbsTpBKJIVs= Subject key identifier: 29:29:FA:05:84:39:CB:71:C6:DD:B7:D1:5E:D9:71:88:11:33:40:03 Authority key identifier: 68:AE:5B:EB:1B:B7:E4:42:CE:E0:A7:E0:14:02:9F:F7:2E:3D:B4:1F Certificate issuer: /CN=A91104C9/serialNumber=68AE5BEB1BB7E442CEE0A7E014029FF72E3DB41F Certificate serial: 0C24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK5b6xu35ELO4KfgFAKf9y49tB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft Manifest number: 0C19 Signing time: Fri 08 Aug 2025 18:56:53 +0000 Manifest this update: Fri 08 Aug 2025 18:56:52 +0000 Manifest next update: Fri 15 Aug 2025 18:56:52 +0000 Files and hashes: 1: aK5b6xu35ELO4KfgFAKf9y49tB8.crl (hash: mrM4TN+CcDV3lA2nwbwOgbiSg0+FzeQPIh8TQPeSqpI=) 2: 4C1F013E5AF511EFBAB1F86CC4F9AE02.roa (hash: 5YnlbFiESO7UmvUP8KNkIgeb7OYcXBskhmx0foLpcp0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.crl rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK5b6xu35ELO4KfgFAKf9y49tB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3108 (0xc24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91104C9, serialNumber=68AE5BEB1BB7E442CEE0A7E014029FF72E3DB41F Validity Not Before: Aug 8 18:56:52 2025 GMT Not After : Aug 15 18:56:52 2025 GMT Subject: CN=68964874-6ef2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:09:33:a3:26:1b:8c:4b:bd:54:d8:af:41:f0: 4f:ab:42:eb:06:7f:5b:df:2d:4f:b9:2a:82:c2:4a: 05:3e:6f:78:b0:cc:a2:8b:6f:6b:1c:57:0f:b7:ac: c9:f5:22:db:36:62:4c:e9:28:b1:ca:1e:2b:6a:70: e7:d3:95:01:71:8a:f9:6a:e7:41:32:07:10:08:97: cc:aa:5e:17:cc:3e:8e:72:d2:e8:d8:12:d9:4a:b1: ee:91:37:20:8f:57:0a:c8:16:52:1f:11:a6:f6:c1: 2d:a6:00:ea:36:04:af:cd:60:8a:84:e2:49:7e:2d: 9c:0a:00:28:27:fb:32:99:ea:0f:7a:14:d8:fd:31: b3:43:65:2c:c7:5a:d6:2a:1f:83:23:e3:8c:b9:b1: 7b:ce:cf:ec:0e:d2:e5:53:76:34:26:7d:db:88:52: 6e:83:03:de:d9:6e:42:21:b3:9d:b2:4c:bf:73:0c: 17:54:70:af:14:2f:51:1e:6a:3a:12:92:22:13:1b: 3f:4c:09:d4:3a:17:31:64:8d:1b:0d:04:f8:92:0c: b4:fd:ab:8c:f2:8b:1c:99:50:32:b8:7d:ef:60:78: 95:96:fd:bd:80:a4:a8:f0:c1:6c:d6:fe:87:76:49: 89:11:20:1e:98:f0:1d:e8:16:86:24:1b:49:33:e7: cd:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:29:FA:05:84:39:CB:71:C6:DD:B7:D1:5E:D9:71:88:11:33:40:03 X509v3 Authority Key Identifier: keyid:68:AE:5B:EB:1B:B7:E4:42:CE:E0:A7:E0:14:02:9F:F7:2E:3D:B4:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK5b6xu35ELO4KfgFAKf9y49tB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:47:39:38:33:f4:b8:18:0c:73:9e:3f:24:3f:37:1b:7e:28: a0:74:1b:28:f0:2b:ea:86:b0:34:c5:fe:89:34:f9:73:7f:56: ce:d9:18:ee:d5:d0:01:46:b3:9e:25:1f:6b:0d:f2:a8:17:be: 2b:23:0a:5e:de:0f:f0:d9:e5:e9:85:60:ae:f8:7c:71:06:bf: dc:5b:ca:5c:1a:0c:27:9c:17:84:45:ac:a1:1b:0b:b9:51:5b: 95:38:95:b6:47:f6:12:f3:cb:48:49:d0:e6:fb:e7:c4:42:53: 93:56:b6:bd:5b:d1:83:2c:cd:bf:03:1e:35:b8:bc:a7:46:8b: 58:dd:33:2b:a0:92:b6:56:7e:00:2a:f0:56:46:8e:cc:f0:8e: 11:2f:6b:6b:af:8e:8d:7f:e0:a4:66:7d:50:ba:8c:30:a1:f3: 7c:1e:01:a6:49:bc:2e:ad:79:db:84:34:0c:d5:0f:9c:df:a0: 04:18:23:95:a5:b4:58:a5:b9:aa:2e:96:aa:6b:de:8a:e1:25: f5:0e:a3:b6:17:35:4e:fd:50:7c:41:02:cc:b9:a5:d7:20:6b: 7c:7e:ad:35:28:f9:0d:cf:00:8b:1d:9f:75:c0:ab:fc:e6:3d: 94:14:00:b3:d7:a3:5a:c4:8b:af:9d:d6:ea:81:e7:e3:94:c7: 6c:c9:d8:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA0QzkxMTAvBgNVBAUTKDY4QUU1QkVCMUJCN0U0NDJDRUUwQTdFMDE0MDI5RkY3 MkUzREI0MUYwHhcNMjUwODA4MTg1NjUyWhcNMjUwODE1MTg1NjUyWjAYMRYwFAYD VQQDEw02ODk2NDg3NC02ZWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2QkzoyYbjEu9VNivQfBPq0LrBn9b3y1PuSqCwkoFPm94sMyii29rHFcPt6zJ 9SLbNmJM6Sixyh4ranDn05UBcYr5audBMgcQCJfMql4XzD6OctLo2BLZSrHukTcg j1cKyBZSHxGm9sEtpgDqNgSvzWCKhOJJfi2cCgAoJ/symeoPehTY/TGzQ2Usx1rW Kh+DI+OMubF7zs/sDtLlU3Y0Jn3biFJugwPe2W5CIbOdsky/cwwXVHCvFC9RHmo6 EpIiExs/TAnUOhcxZI0bDQT4kgy0/auM8oscmVAyuH3vYHiVlv29gKSo8MFs1v6H dkmJESAemPAd6BaGJBtJM+fNiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCkp+gWE Octxxt230V7ZcYgRM0ADMB8GA1UdIwQYMBaAFGiuW+sbt+RCzuCn4BQCn/cuPbQf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDRDOS8yQUE4QjM4ODE0 QzgxMUVBODdEMTUxNkNDNEY5QUUwMi9hSzViNnh1MzVFTE80S2ZnRkFLZjl5NDl0 QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FLNWI2eHUzNUVMTzRLZmdGQUtmOXk0OXRCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDRDOS8yQUE4QjM4ODE0QzgxMUVBODdEMTUxNkNDNEY5QUUwMi9hSzViNnh1MzVF TE80S2ZnRkFLZjl5NDl0QjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlRzk4M/S4GAxznj8kPzcbfiigdBso8CvqhrA0xf6JNPlzf1bO2Rju 1dABRrOeJR9rDfKoF74rIwpe3g/w2eXphWCu+HxxBr/cW8pcGgwnnBeERayhGwu5 UVuVOJW2R/YS88tISdDm++fEQlOTVra9W9GDLM2/Ax41uLynRotY3TMroJK2Vn4A KvBWRo7M8I4RL2trr46Nf+CkZn1QuowwofN8HgGmSbwurXnbhDQM1Q+c36AEGCOV pbRYpbmqLpaqa96K4SX1DqO2FzVO/VB8QQLMuaXXIGt8fq01KPkNzwCLHZ91wKv8 5j2UFACz16NaxIuvndbqgefjlMdsydhe -----END CERTIFICATE-----Generated at Sun Aug 10 18:15:47 2025 by rpki-client