$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.mft File: AAs7T4iVfN1tN9_2ExONb1SoW3k.mft (raw, json) Hash identifier: bdG/bOeCztmNHUNqP2utiiTAxZumnvnXUsX3T0p2kik= Subject key identifier: A8:F1:2E:36:2D:91:A8:E3:55:67:FB:B8:F6:60:95:E2:9A:39:F1:86 Authority key identifier: 00:0B:3B:4F:88:95:7C:DD:6D:37:DF:F6:13:13:8D:6F:54:A8:5B:79 Certificate issuer: /CN=A9149F48/serialNumber=000B3B4F88957CDD6D37DFF613138D6F54A85B79 Certificate serial: 06D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAs7T4iVfN1tN9_2ExONb1SoW3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.mft Manifest number: 06C7 Signing time: Sun 10 Aug 2025 22:10:28 +0000 Manifest this update: Sun 10 Aug 2025 22:10:28 +0000 Manifest next update: Sun 17 Aug 2025 22:10:28 +0000 Files and hashes: 1: AAs7T4iVfN1tN9_2ExONb1SoW3k.crl (hash: yU6q73t231FceDJ44eZKA4RyZYe4BMCytIKydzipsMI=) 2: A1F2E73A19D511EF85D48428C4F9AE02.roa (hash: ZX1QzTNwDgtR4R7k4FRyRV5Z8jQyiy5Ky4ynHhk2quU=) 3: 9BCBA2EA6D6511EB80F7684BC4F9AE02.roa (hash: hdIhzh8K12opQ1D1WK4zXsMffrmcGa0gdrGINvycqaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.crl rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAs7T4iVfN1tN9_2ExONb1SoW3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1749 (0x6d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F48, serialNumber=000B3B4F88957CDD6D37DFF613138D6F54A85B79 Validity Not Before: Aug 10 22:10:28 2025 GMT Not After : Aug 17 22:10:28 2025 GMT Subject: CN=689918d4-6ce8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e5:fd:d8:46:01:ce:26:fa:a0:0a:71:84:43: cd:ee:78:09:aa:dd:82:fb:b4:9d:41:ae:1a:2b:89: 52:0d:38:b9:eb:3e:27:f6:4c:3a:9f:37:0f:28:a3: fd:11:ba:ed:55:59:01:96:f5:bf:7c:9e:55:c6:2c: ea:67:9e:8c:0b:a5:28:cb:31:93:03:74:2e:8b:fd: 80:6d:db:74:b1:fb:a1:55:84:12:f9:15:f5:3f:a6: ef:22:db:3f:b4:f2:71:9d:9d:31:7b:b4:e6:e4:8b: f7:a0:95:ed:c9:16:65:6e:76:aa:f8:27:d6:5e:68: d9:5d:29:2c:2c:70:f6:b6:af:48:4c:90:b7:43:51: a1:4e:a9:51:24:7f:93:6b:34:d6:43:79:d9:cd:6d: 8e:9f:d4:db:d3:b0:33:6d:2d:97:9e:84:e5:5a:b4: de:f0:6a:84:fd:2d:3e:e7:ee:26:d6:27:ad:aa:fa: d0:c6:32:a4:99:0a:77:cc:69:b9:d8:10:72:f0:ec: e9:14:ac:81:20:73:58:e9:f7:a2:b7:13:02:7b:83: ff:01:8a:ef:85:ac:f9:c9:f4:c2:5e:59:d7:1d:c6: 90:f5:fb:fe:18:86:48:7c:49:24:43:6b:b8:86:be: d0:40:b1:84:5b:25:02:66:d0:0e:45:b4:76:8a:65: 02:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:F1:2E:36:2D:91:A8:E3:55:67:FB:B8:F6:60:95:E2:9A:39:F1:86 X509v3 Authority Key Identifier: keyid:00:0B:3B:4F:88:95:7C:DD:6D:37:DF:F6:13:13:8D:6F:54:A8:5B:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAs7T4iVfN1tN9_2ExONb1SoW3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:ac:ee:10:0f:a6:b9:2e:f4:7a:29:d8:a3:04:85:67:21:3d: 24:56:c8:39:ab:c0:cd:16:82:93:a3:2d:6e:82:38:d0:40:10: 1d:d2:f6:67:0e:48:6f:99:42:3d:33:de:87:67:71:a5:3c:66: 6a:24:f5:39:c3:eb:d5:68:ad:50:90:98:c9:96:73:0d:05:d7: 0f:4a:70:b9:05:a0:7f:e0:80:2a:ce:eb:ab:88:43:19:6b:c6: bb:4b:0b:7b:ac:94:41:e8:53:4e:d9:37:33:75:f6:99:53:db: 7f:5e:2b:44:e1:f6:15:a5:23:98:d2:ce:57:b7:fd:5f:a9:23: 22:40:00:0b:ec:f0:60:96:cb:0b:42:ae:61:09:50:5e:b4:eb: 71:70:3f:07:df:ef:31:c7:ce:3e:38:53:77:90:49:b8:02:72: 8d:d6:bb:cc:20:75:46:ff:28:45:fb:60:83:6b:ee:9b:78:c1: b5:86:39:20:9a:d3:1d:10:2d:d9:da:f5:8b:1d:f7:c2:92:eb: 97:1c:4e:cb:dc:05:fa:30:0b:93:d1:06:57:c9:99:c7:66:c5: 01:92:12:14:67:87:27:28:15:52:57:2d:27:86:0a:37:cd:53: 70:a1:56:c6:d7:ee:33:63:7d:c0:33:13:e4:f9:77:25:ea:39: 6b:00:52:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGNDgxMTAvBgNVBAUTKDAwMEIzQjRGODg5NTdDREQ2RDM3REZGNjEzMTM4RDZG NTRBODVCNzkwHhcNMjUwODEwMjIxMDI4WhcNMjUwODE3MjIxMDI4WjAYMRYwFAYD VQQDEw02ODk5MThkNC02Y2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApeX92EYBzib6oApxhEPN7ngJqt2C+7SdQa4aK4lSDTi56z4n9kw6nzcPKKP9 EbrtVVkBlvW/fJ5VxizqZ56MC6UoyzGTA3Qui/2Abdt0sfuhVYQS+RX1P6bvIts/ tPJxnZ0xe7Tm5Iv3oJXtyRZlbnaq+CfWXmjZXSksLHD2tq9ITJC3Q1GhTqlRJH+T azTWQ3nZzW2On9Tb07AzbS2XnoTlWrTe8GqE/S0+5+4m1ietqvrQxjKkmQp3zGm5 2BBy8OzpFKyBIHNY6feitxMCe4P/AYrvhaz5yfTCXlnXHcaQ9fv+GIZIfEkkQ2u4 hr7QQLGEWyUCZtAORbR2imUCmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKjxLjYt kajjVWf7uPZgleKaOfGGMB8GA1UdIwQYMBaAFAALO0+IlXzdbTff9hMTjW9UqFt5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUY0OC9EOUVGOTlDMDZE NjMxMUVCOURGODE5NDlDNEY5QUUwMi9BQXM3VDRpVmZOMXROOV8yRXhPTmIxU29X M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FBczdUNGlWZk4xdE45XzJFeE9OYjFTb1czay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUY0OC9EOUVGOTlDMDZENjMxMUVCOURGODE5NDlDNEY5QUUwMi9BQXM3VDRpVmZO MXROOV8yRXhPTmIxU29XM2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmrO4QD6a5LvR6KdijBIVnIT0kVsg5q8DNFoKToy1ugjjQQBAd0vZn DkhvmUI9M96HZ3GlPGZqJPU5w+vVaK1QkJjJlnMNBdcPSnC5BaB/4IAqzuuriEMZ a8a7Swt7rJRB6FNO2TczdfaZU9t/XitE4fYVpSOY0s5Xt/1fqSMiQAAL7PBglssL Qq5hCVBetOtxcD8H3+8xx84+OFN3kEm4AnKN1rvMIHVG/yhF+2CDa+6beMG1hjkg mtMdEC3Z2vWLHffCkuuXHE7L3AX6MAuT0QZXyZnHZsUBkhIUZ4cnKBVSVy0nhgo3 zVNwoVbG1+4zY33AMxPk+Xcl6jlrAFLb -----END CERTIFICATE-----Generated at Mon Aug 11 14:25:16 2025 by rpki-client