$ rpki-client -vvf rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.mft File: Aonh4IK22hq6VVKEDAyrAsKjt04.mft (raw, json) Hash identifier: MggD5vOnu+kqF2YJJ1PE+CmC8M1Oi5JHNV4EPFBPfm0= Subject key identifier: D6:90:67:7A:E7:42:1B:3D:D0:4F:42:1F:FB:0B:CD:43:D7:DF:0D:0B Authority key identifier: 02:89:E1:E0:82:B6:DA:1A:BA:55:52:84:0C:0C:AB:02:C2:A3:B7:4E Certificate issuer: /CN=A9144C70/serialNumber=0289E1E082B6DA1ABA5552840C0CAB02C2A3B74E Certificate serial: 95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aonh4IK22hq6VVKEDAyrAsKjt04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.mft Manifest number: 042F Signing time: Sat 09 Aug 2025 01:19:49 +0000 Manifest this update: Sat 09 Aug 2025 01:19:49 +0000 Manifest next update: Sat 16 Aug 2025 01:19:49 +0000 Files and hashes: 1: Aonh4IK22hq6VVKEDAyrAsKjt04.crl (hash: 3J12/dI1XYNn/t3cM2qcp2eAST7ajvFnKmX9R8VN9h0=) 2: F23B6474DCCB11EFA04C156DC4F9AE02.roa (hash: g65ejbm+l69Ptue1On4uxEa8cqbfVm8kgqBG4BRL7rA=) 3: B250F522DCCB11EFB54CD16CC4F9AE02.roa (hash: 9O93tqLrMpLEnAApshkrc2rnOUZiNN8MfYKvWhlISq8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.crl rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aonh4IK22hq6VVKEDAyrAsKjt04.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144C70, serialNumber=0289E1E082B6DA1ABA5552840C0CAB02C2A3B74E Validity Not Before: Aug 9 01:19:49 2025 GMT Not After : Aug 16 01:19:49 2025 GMT Subject: CN=6896a235-0d1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:88:07:76:11:07:17:9d:ec:41:af:38:33:8c: c4:ad:18:2a:51:6f:98:2f:2d:99:89:54:da:1a:76: 32:b8:2e:0d:52:3d:69:cd:22:4f:f9:1a:43:34:59: bd:9b:26:b5:1e:58:48:04:1e:60:68:1c:c3:c1:4d: 2b:37:1e:61:ae:3b:f9:ef:ce:36:df:96:6e:b8:fa: a6:a0:47:05:bf:a6:b6:c8:6a:48:8a:b9:2b:6a:1d: 30:f4:38:78:5f:e7:45:24:64:8e:9f:51:b0:e3:9f: 97:51:14:1f:f0:06:6d:f4:07:d0:a0:01:d5:69:e7: 7b:b8:c8:5d:84:d6:12:fe:91:65:5a:9e:6e:3a:80: 3b:89:ed:de:9b:f4:f7:ca:e3:5c:49:bb:e0:0e:8a: cb:58:02:6c:e6:ee:da:ca:0d:94:bf:1f:00:9c:14: 69:fb:96:3e:33:2d:0b:71:df:a6:89:ae:d6:37:fd: 12:6b:dd:d0:74:b5:90:70:fe:e7:5c:32:ad:d4:a5: a5:c7:a5:da:31:d6:02:e1:59:29:69:d7:a7:c3:8a: 16:99:d4:59:76:a6:fb:9a:01:f1:fc:6c:bb:6a:1d: d3:5f:3c:13:dd:cc:80:45:f0:bf:83:03:96:7d:13: ea:9c:03:e1:82:65:de:88:5a:6f:f2:6c:13:ed:2a: eb:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:90:67:7A:E7:42:1B:3D:D0:4F:42:1F:FB:0B:CD:43:D7:DF:0D:0B X509v3 Authority Key Identifier: keyid:02:89:E1:E0:82:B6:DA:1A:BA:55:52:84:0C:0C:AB:02:C2:A3:B7:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aonh4IK22hq6VVKEDAyrAsKjt04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:41:ae:20:0b:4c:8e:b0:b0:5e:45:ca:b6:52:81:b0:56:c3: 72:d5:0a:2d:0a:9d:d7:31:84:69:3f:32:29:0b:9d:e8:80:b2: 44:df:ec:24:e0:ce:49:cf:9e:05:af:1f:d6:0c:22:bb:19:81: d7:86:18:39:0a:c8:4a:b3:b5:4e:0a:0a:dd:07:96:fb:eb:a6: 55:d9:4f:83:4d:8e:ef:bb:fd:2a:9b:6b:d4:a7:72:f4:5b:6d: 93:96:5e:6c:1c:4f:ba:82:ac:c3:5b:0b:25:cf:ea:f3:7b:28: b8:ae:9c:f7:ba:40:ec:6f:26:3e:8f:92:91:42:66:cc:a2:d3: 99:39:d5:ff:8b:d4:0c:b5:bb:c3:5f:0e:3b:c1:ec:54:f8:05: cf:03:82:47:11:ba:e8:75:c6:e6:66:c8:df:21:23:ca:f0:c2: 62:d6:d2:94:bb:4d:70:d1:5e:d6:c0:eb:81:25:b2:af:17:94: 70:90:ae:21:01:18:a4:3a:e7:64:93:75:2c:89:fa:f4:72:90: a2:23:c7:a8:c4:41:b8:15:84:af:b3:b0:b0:ff:d4:48:60:44: 74:17:83:4a:0a:85:b3:c2:95:0b:cf:da:42:95:07:a7:d0:38: 0b:64:c0:f2:c4:ee:83:93:0b:fc:ae:ef:11:f6:6f:53:25:0b: 8b:bb:5b:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRDNzAxMTAvBgNVBAUTKDAyODlFMUUwODJCNkRBMUFCQTU1NTI4NDBDMENBQjAy QzJBM0I3NEUwHhcNMjUwODA5MDExOTQ5WhcNMjUwODE2MDExOTQ5WjAYMRYwFAYD VQQDEw02ODk2YTIzNS0wZDFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4gHdhEHF53sQa84M4zErRgqUW+YLy2ZiVTaGnYyuC4NUj1pzSJP+RpDNFm9 mya1HlhIBB5gaBzDwU0rNx5hrjv5784235ZuuPqmoEcFv6a2yGpIirkrah0w9Dh4 X+dFJGSOn1Gw45+XURQf8AZt9AfQoAHVaed7uMhdhNYS/pFlWp5uOoA7ie3em/T3 yuNcSbvgDorLWAJs5u7ayg2Uvx8AnBRp+5Y+My0Lcd+mia7WN/0Sa93QdLWQcP7n XDKt1KWlx6XaMdYC4Vkpadenw4oWmdRZdqb7mgHx/Gy7ah3TXzwT3cyARfC/gwOW fRPqnAPhgmXeiFpv8mwT7SrrJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNaQZ3rn Qhs90E9CH/sLzUPX3w0LMB8GA1UdIwQYMBaAFAKJ4eCCttoaulVShAwMqwLCo7dO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEM3MC84MkJDODRFRUFD NjcxMUVDQjc1Q0RBMjRDNEY5QUUwMi9Bb25oNElLMjJocTZWVktFREF5ckFzS2p0 MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Fvbmg0SUsyMmhxNlZWS0VEQXlyQXNLanQwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEM3MC84MkJDODRFRUFDNjcxMUVDQjc1Q0RBMjRDNEY5QUUwMi9Bb25oNElLMjJo cTZWVktFREF5ckFzS2p0MDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGQa4gC0yOsLBeRcq2UoGwVsNy1QotCp3XMYRpPzIpC53ogLJE3+wk 4M5Jz54Frx/WDCK7GYHXhhg5CshKs7VOCgrdB5b766ZV2U+DTY7vu/0qm2vUp3L0 W22Tll5sHE+6gqzDWwslz+rzeyi4rpz3ukDsbyY+j5KRQmbMotOZOdX/i9QMtbvD Xw47wexU+AXPA4JHEbrodcbmZsjfISPK8MJi1tKUu01w0V7WwOuBJbKvF5RwkK4h ARikOudkk3Usifr0cpCiI8eoxEG4FYSvs7Cw/9RIYER0F4NKCoWzwpULz9pClQen 0DgLZMDyxO6Dkwv8ru8R9m9TJQuLu1uo -----END CERTIFICATE-----Generated at Sun Aug 10 03:56:06 2025 by rpki-client