$ rpki-client -vvf rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft File: aq89m8Pfo6ElCCll2P8zuBKPKR8.mft (raw, json) Hash identifier: 3AtQpmXftZE4lYsU0BYco7K/1w5ThGRfLDQ5IgYJ2DM= Subject key identifier: 61:4F:99:81:D3:30:2D:E3:87:05:A1:69:BD:A5:90:03:0D:67:AA:EB Authority key identifier: 6A:AF:3D:9B:C3:DF:A3:A1:25:08:29:65:D8:FF:33:B8:12:8F:29:1F Certificate issuer: /CN=A91476E2/serialNumber=6AAF3D9BC3DFA3A125082965D8FF33B8128F291F Certificate serial: 7A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aq89m8Pfo6ElCCll2P8zuBKPKR8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft Manifest number: 75 Signing time: Sat 09 Aug 2025 07:20:20 +0000 Manifest this update: Sat 09 Aug 2025 07:20:20 +0000 Manifest next update: Sat 16 Aug 2025 07:20:20 +0000 Files and hashes: 1: aq89m8Pfo6ElCCll2P8zuBKPKR8.crl (hash: PHWVv0J45mZheHvZzxBD/e/HVQgW3kPfDUDhwG8MR0Y=) 2: 79E40530CB5A11EFA1C64B62C4F9AE02.roa (hash: mbcELb6wZjeLG0BTxotv3DMO41EhI/vPgN4q1POwi8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.crl rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aq89m8Pfo6ElCCll2P8zuBKPKR8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91476E2, serialNumber=6AAF3D9BC3DFA3A125082965D8FF33B8128F291F Validity Not Before: Aug 9 07:20:20 2025 GMT Not After : Aug 16 07:20:20 2025 GMT Subject: CN=6896f6b4-5702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:98:15:c1:73:7a:82:c0:31:49:80:4b:0b:1f: e3:5a:cb:a8:37:9a:58:b0:a3:57:10:c7:09:31:bb: 46:6e:d0:63:5d:ef:c4:f6:5f:12:e8:6c:9d:d3:27: b6:7e:a3:9b:9b:13:35:65:5c:ed:4f:89:af:5f:d3: 8f:16:ab:f2:ec:f6:d7:a9:24:8a:28:58:76:03:31: 99:95:3a:b5:ee:5f:9d:35:f4:11:d5:2f:d4:a2:57: 0f:65:ca:da:6d:bb:ba:ff:1f:03:0a:40:08:54:d6: d2:bc:9e:ec:c8:2b:85:ec:61:a7:ad:79:b5:d3:46: 2b:c0:9b:fe:77:9b:94:da:1f:ee:0b:55:3d:e6:63: 45:cf:94:7d:bc:07:c1:b5:db:8d:ae:ad:96:6d:6b: 0d:97:5a:55:cd:f1:31:dc:d6:75:c2:f1:05:1f:69: c8:7d:52:01:f3:29:0c:eb:5a:bb:fc:14:8a:a4:c2: 75:44:af:ef:82:f5:44:6a:8a:b1:80:7b:70:7c:44: cf:2f:f7:ca:0d:50:3b:1a:f8:db:15:b5:de:20:91: 9b:1c:b7:8d:e0:3f:16:c8:27:53:30:47:17:7e:74: 9e:b7:c2:a2:bf:cc:ef:cc:6e:85:93:7d:af:30:72: 12:fb:ce:fc:50:8f:21:92:e2:e9:54:b9:7e:f4:81: de:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:4F:99:81:D3:30:2D:E3:87:05:A1:69:BD:A5:90:03:0D:67:AA:EB X509v3 Authority Key Identifier: keyid:6A:AF:3D:9B:C3:DF:A3:A1:25:08:29:65:D8:FF:33:B8:12:8F:29:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aq89m8Pfo6ElCCll2P8zuBKPKR8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:f6:d4:cb:39:fb:91:47:70:5b:4e:cc:00:80:d0:a7:98:cd: 5e:23:54:72:3c:84:88:35:7b:e2:45:16:6e:5b:62:00:5a:8e: 86:13:5f:9c:6e:49:7c:6c:30:ad:a0:6e:8d:ac:97:02:73:45: 3d:22:52:3d:87:cd:58:91:d1:00:44:64:b3:cf:3a:a0:ce:48: 85:77:5e:9c:0e:ff:ae:ae:33:fa:4a:84:05:3c:1d:ba:35:a7: a6:3d:e8:16:14:17:14:0c:19:95:0a:6b:55:6b:55:1a:3a:11: 0c:71:07:88:3e:8a:f4:c7:de:73:1e:4a:d7:09:67:de:0e:3f: ce:7e:93:2f:09:9e:c0:38:ab:1f:44:ea:3c:8c:73:d1:3c:f4: 12:40:05:42:b9:02:16:fa:22:86:6d:c5:a4:4c:7b:7a:c0:09: 57:23:5e:22:32:9f:5b:ba:50:9e:f1:60:24:cb:36:7a:b4:fc: ae:c1:07:1b:6f:e3:2e:86:ef:e6:7f:ce:d3:fd:1b:a7:2d:91: 3c:23:6c:5e:13:a4:92:9e:49:31:a2:bc:25:d0:a8:dc:87:87: 43:35:3e:54:86:e0:e1:0b:71:d8:48:49:4f:2f:a7:0d:0f:ed: 8d:e9:fd:0d:cc:39:ab:45:c2:fe:2c:1f:49:b9:a4:88:02:18: a6:cf:bc:82 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NzZFMjExMC8GA1UEBRMoNkFBRjNEOUJDM0RGQTNBMTI1MDgyOTY1RDhGRjMzQjgx MjhGMjkxRjAeFw0yNTA4MDkwNzIwMjBaFw0yNTA4MTYwNzIwMjBaMBgxFjAUBgNV BAMTDTY4OTZmNmI0LTU3MDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDjmBXBc3qCwDFJgEsLH+Nay6g3mliwo1cQxwkxu0Zu0GNd78T2XxLobJ3TJ7Z+ o5ubEzVlXO1Pia9f048Wq/Ls9tepJIooWHYDMZmVOrXuX5019BHVL9SiVw9lytpt u7r/HwMKQAhU1tK8nuzIK4XsYaetebXTRivAm/53m5TaH+4LVT3mY0XPlH28B8G1 242urZZtaw2XWlXN8THc1nXC8QUfach9UgHzKQzrWrv8FIqkwnVEr++C9URqirGA e3B8RM8v98oNUDsa+NsVtd4gkZsct43gPxbIJ1MwRxd+dJ63wqK/zO/MboWTfa8w chL7zvxQjyGS4ulUuX70gd4/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYU+ZgdMw LeOHBaFpvaWQAw1nquswHwYDVR0jBBgwFoAUaq89m8Pfo6ElCCll2P8zuBKPKR8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3NkUyLzNCNTQxRjIwQ0Iz RDExRUY4NzAzRjc1QUM0RjlBRTAyL2FxODltOFBmbzZFbENDbGwyUDh6dUJLUEtS OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYXE4OW04UGZvNkVsQ0NsbDJQOHp1QktQS1I4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 NkUyLzNCNTQxRjIwQ0IzRDExRUY4NzAzRjc1QUM0RjlBRTAyL2FxODltOFBmbzZF bENDbGwyUDh6dUJLUEtSOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGD21Ms5+5FHcFtOzACA0KeYzV4jVHI8hIg1e+JFFm5bYgBajoYTX5xu SXxsMK2gbo2slwJzRT0iUj2HzViR0QBEZLPPOqDOSIV3XpwO/66uM/pKhAU8Hbo1 p6Y96BYUFxQMGZUKa1VrVRo6EQxxB4g+ivTH3nMeStcJZ94OP85+ky8JnsA4qx9E 6jyMc9E89BJABUK5Ahb6IoZtxaRMe3rACVcjXiIyn1u6UJ7xYCTLNnq0/K7BBxtv 4y6G7+Z/ztP9G6ctkTwjbF4TpJKeSTGivCXQqNyHh0M1PlSG4OELcdhISU8vpw0P 7Y3p/Q3MOatFwv4sH0m5pIgCGKbPvII= -----END CERTIFICATE-----Generated at Mon Aug 11 05:58:45 2025 by rpki-client