$ rpki-client -vvf rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.mft File: aamToYghmKytXxzqNQZrr0nn1dA.mft (raw, json) Hash identifier: gEnnFTjvx5EjkPgMPnHgJMAp2G9EM4/ZtcLk2V431c0= Subject key identifier: 79:84:B1:81:0B:8E:52:4E:A8:8E:D2:23:7E:E7:A5:9C:A8:8E:5B:5A Authority key identifier: 69:A9:93:A1:88:21:98:AC:AD:5F:1C:EA:35:06:6B:AF:49:E7:D5:D0 Certificate issuer: /CN=A912B23F/serialNumber=69A993A1882198ACAD5F1CEA35066BAF49E7D5D0 Certificate serial: 010D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aamToYghmKytXxzqNQZrr0nn1dA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.mft Manifest number: 010A Signing time: Mon 11 Aug 2025 05:11:56 +0000 Manifest this update: Mon 11 Aug 2025 05:11:55 +0000 Manifest next update: Mon 18 Aug 2025 05:11:55 +0000 Files and hashes: 1: aamToYghmKytXxzqNQZrr0nn1dA.crl (hash: fMMRMhxJod6230+mUk4osTldfJXpNT0+PKV7koFJIIE=) 2: 78585C5EB6E011EFBB3E2A0DC4F9AE02.roa (hash: 2WiCb7OZQZBwQByr0Alkw/fK8rpNuPrkGWgpzt7qSeU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.crl rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aamToYghmKytXxzqNQZrr0nn1dA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 269 (0x10d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B23F, serialNumber=69A993A1882198ACAD5F1CEA35066BAF49E7D5D0 Validity Not Before: Aug 11 05:11:55 2025 GMT Not After : Aug 18 05:11:55 2025 GMT Subject: CN=68997b9c-f529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9d:b1:fc:e6:4d:1c:d8:8d:a0:ff:ae:4b:b7: 59:88:b6:6c:b0:36:37:0f:40:c7:90:5f:0b:aa:14: a3:bd:ed:bb:2f:43:e0:eb:f0:a8:2a:ee:02:11:d7: ca:9c:d7:69:a1:99:17:3a:5c:26:90:4e:d9:03:5a: a8:25:26:80:18:39:0f:21:c1:f4:ba:08:b4:63:8d: c9:0d:c6:a8:3f:57:4d:3b:d3:e2:bb:09:5e:16:08: 1f:18:00:73:c0:b3:7b:d1:10:c2:7b:0a:42:2f:4f: 33:ec:97:bb:83:7c:b6:96:56:89:95:ae:f0:b1:b0: b4:e8:c2:81:5c:23:bf:b4:11:9d:51:95:a2:59:74: 94:00:26:05:a8:a8:eb:e2:a9:7e:6d:9b:62:a7:48: 1c:d9:0e:33:0f:fa:3b:aa:cc:80:90:ef:5f:a9:79: d7:9c:20:66:46:e9:d9:8e:26:e7:ed:aa:d8:f6:86: f8:56:8f:51:b6:ef:54:c4:79:a6:9e:09:ec:0f:42: 73:d1:ed:56:8f:44:a8:b1:04:35:fb:21:0e:1b:09: c5:0e:83:21:71:35:85:69:4d:f5:d1:0a:51:f2:a7: 88:e1:ae:6f:83:21:05:26:cd:d0:3b:84:f1:7c:97: 7e:88:d8:95:c3:ff:7b:ce:4f:e6:97:44:22:00:62: 67:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:84:B1:81:0B:8E:52:4E:A8:8E:D2:23:7E:E7:A5:9C:A8:8E:5B:5A X509v3 Authority Key Identifier: keyid:69:A9:93:A1:88:21:98:AC:AD:5F:1C:EA:35:06:6B:AF:49:E7:D5:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aamToYghmKytXxzqNQZrr0nn1dA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:c4:d1:a5:82:7d:0d:09:ea:1d:7f:35:cf:9d:04:c8:bd:61: c1:b3:bc:80:58:89:61:71:ea:0a:44:4a:0a:fc:be:e1:7b:df: 56:e5:6b:5b:b6:37:c5:ef:56:7d:df:18:d5:9b:1e:1c:dd:d2: 83:08:88:8d:aa:56:e0:2e:18:42:79:e5:40:91:19:77:8c:33: 07:4f:9d:7b:c1:ad:91:27:ab:b6:93:5a:29:7f:84:2d:ab:33: f7:3c:b5:00:1b:2d:b2:8d:74:ab:33:be:c1:48:ff:93:d0:6c: a2:cb:f3:7f:ce:e8:58:d9:6a:d6:59:95:d5:fa:19:94:3b:55: cb:7d:ee:18:d3:a7:83:65:72:78:95:d4:e1:0a:d1:f2:63:43: 45:c5:9b:ef:a3:80:a7:55:1a:9c:0f:b5:36:24:d4:a4:3d:9d: d9:fe:0c:c5:af:93:9c:02:ad:62:63:a8:fe:ff:7d:1f:29:26: 9e:9c:5a:de:f4:37:ad:7b:9f:bd:8c:aa:57:84:2a:9c:e8:2e: d6:5a:99:c0:5d:e0:b8:dd:56:49:61:02:24:67:6f:73:89:a7: 93:3b:67:3e:65:31:fb:bf:2c:92:3b:a6:21:c2:d4:11:38:70: f9:58:73:8d:1e:b4:7a:df:f8:24:49:32:4b:7c:a1:1c:8d:7b: 61:fc:3c:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIyM0YxMTAvBgNVBAUTKDY5QTk5M0ExODgyMTk4QUNBRDVGMUNFQTM1MDY2QkFG NDlFN0Q1RDAwHhcNMjUwODExMDUxMTU1WhcNMjUwODE4MDUxMTU1WjAYMRYwFAYD VQQDEw02ODk5N2I5Yy1mNTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZ2x/OZNHNiNoP+uS7dZiLZssDY3D0DHkF8LqhSjve27L0Pg6/CoKu4CEdfK nNdpoZkXOlwmkE7ZA1qoJSaAGDkPIcH0ugi0Y43JDcaoP1dNO9PiuwleFggfGABz wLN70RDCewpCL08z7Je7g3y2llaJla7wsbC06MKBXCO/tBGdUZWiWXSUACYFqKjr 4ql+bZtip0gc2Q4zD/o7qsyAkO9fqXnXnCBmRunZjibn7arY9ob4Vo9Rtu9UxHmm ngnsD0Jz0e1Wj0SosQQ1+yEOGwnFDoMhcTWFaU310QpR8qeI4a5vgyEFJs3QO4Tx fJd+iNiVw/97zk/ml0QiAGJn7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHmEsYEL jlJOqI7SI37npZyojltaMB8GA1UdIwQYMBaAFGmpk6GIIZisrV8c6jUGa69J59XQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjIzRi82NzBDMkYyQ0Uy OUYxMUVFQjY4MkM2MTFDNEY5QUUwMi9hYW1Ub1lnaG1LeXRYeHpxTlFacnIwbm4x ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FhbVRvWWdobUt5dFh4enFOUVpycjBubjFkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjIzRi82NzBDMkYyQ0UyOUYxMUVFQjY4MkM2MTFDNEY5QUUwMi9hYW1Ub1lnaG1L eXRYeHpxTlFacnIwbm4xZEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgxNGlgn0NCeodfzXPnQTIvWHBs7yAWIlhceoKREoK/L7he99W5Wtb tjfF71Z93xjVmx4c3dKDCIiNqlbgLhhCeeVAkRl3jDMHT517wa2RJ6u2k1opf4Qt qzP3PLUAGy2yjXSrM77BSP+T0Gyiy/N/zuhY2WrWWZXV+hmUO1XLfe4Y06eDZXJ4 ldThCtHyY0NFxZvvo4CnVRqcD7U2JNSkPZ3Z/gzFr5OcAq1iY6j+/30fKSaenFre 9Dete5+9jKpXhCqc6C7WWpnAXeC43VZJYQIkZ29ziaeTO2c+ZTH7vyySO6YhwtQR OHD5WHONHrR63/gkSTJLfKEcjXth/DwA -----END CERTIFICATE-----Generated at Mon Aug 11 07:30:15 2025 by rpki-client