$ rpki-client -vvf rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.mft File: v02AE9uXuO8A-M6Mbb6vsFHhlLw.mft (raw, json) Hash identifier: zD/bEvwNaTWBDmNk1imss5qY0ipM9YgI+p28siXSMVI= Subject key identifier: 0A:5E:E1:A2:6D:98:4C:EC:1D:28:55:F9:51:8D:41:95:C8:68:91:5B Authority key identifier: BF:4D:80:13:DB:97:B8:EF:00:F8:CE:8C:6D:BE:AF:B0:51:E1:94:BC Certificate issuer: /CN=A9191BBF/serialNumber=BF4D8013DB97B8EF00F8CE8C6DBEAFB051E194BC Certificate serial: 064E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v02AE9uXuO8A-M6Mbb6vsFHhlLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.mft Manifest number: 0645 Signing time: Sun 10 Aug 2025 22:44:28 +0000 Manifest this update: Sun 10 Aug 2025 22:44:27 +0000 Manifest next update: Sun 17 Aug 2025 22:44:27 +0000 Files and hashes: 1: v02AE9uXuO8A-M6Mbb6vsFHhlLw.crl (hash: OSo+PlP9yvuw6ZaZZuWPLxXDj8tvCCdbr3mdFCHfltU=) 2: 4482148613E611EE8ECA2D3CC4F9AE02.roa (hash: XTSBtrIecRC5bRQ4gGFFZQkO+lSp1UBH8SdLLnw+dpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.crl rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v02AE9uXuO8A-M6Mbb6vsFHhlLw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1614 (0x64e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191BBF, serialNumber=BF4D8013DB97B8EF00F8CE8C6DBEAFB051E194BC Validity Not Before: Aug 10 22:44:27 2025 GMT Not After : Aug 17 22:44:27 2025 GMT Subject: CN=689920cc-86ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:92:18:d9:a5:ac:03:ce:d3:9e:f0:99:10:48: c4:50:1e:34:39:ad:bf:1b:ef:a1:9b:12:b7:96:07: ec:34:c5:fc:8f:58:14:ae:ba:86:b0:d8:f7:87:e9: 11:6e:43:29:06:a6:59:95:a4:9a:96:71:1d:c1:17: ba:51:3e:98:1d:51:4a:b3:3c:95:c5:eb:ee:31:49: 43:61:b4:82:c9:27:61:23:29:e4:62:65:62:9d:66: 2b:e3:c3:0a:d2:b3:b9:6b:49:f0:1e:63:86:bb:15: da:07:b0:f5:cb:1b:7a:3c:49:2a:b9:43:ab:99:0f: 6e:b4:1d:a8:74:dd:1b:90:5d:8e:03:ea:a0:e8:86: de:c2:50:2d:d5:65:65:70:03:96:37:1c:fe:f9:8e: 50:61:9f:49:ae:cf:8a:58:2b:50:fe:ac:36:69:36: 01:d1:db:29:08:f8:4e:4b:46:95:a7:a0:af:df:0e: f7:2e:02:ca:28:1b:09:69:9d:72:ff:63:b5:02:9e: eb:55:07:0d:7d:68:b7:99:f9:ff:4b:cf:b1:9f:20: 44:ef:b1:5a:5d:11:d1:2b:e6:b6:91:da:e4:3b:d5: 4a:56:12:06:9b:9c:ff:77:36:cb:7a:c7:98:bc:61: 03:ed:36:6c:2d:27:e8:2b:3f:e9:0c:85:c9:1f:0e: fe:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:5E:E1:A2:6D:98:4C:EC:1D:28:55:F9:51:8D:41:95:C8:68:91:5B X509v3 Authority Key Identifier: keyid:BF:4D:80:13:DB:97:B8:EF:00:F8:CE:8C:6D:BE:AF:B0:51:E1:94:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v02AE9uXuO8A-M6Mbb6vsFHhlLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:71:eb:68:5f:e7:1f:1f:5e:19:60:ab:d6:9d:79:ed:59:d8: e1:d2:87:07:7d:56:c0:64:e9:db:33:0b:14:65:33:20:4a:0b: df:e4:2d:54:ae:86:f1:8d:dd:02:94:fa:a4:a5:29:3e:c7:1f: 98:42:0f:2c:c8:24:28:b8:c2:aa:aa:25:1f:98:3d:fa:78:7f: e1:19:6a:ca:71:df:2a:d4:e8:a9:8d:c4:e5:34:09:da:c3:e1: a1:31:52:d1:a9:7d:ba:88:1e:98:04:fa:e9:a0:f0:cd:42:f7: 45:83:98:c6:79:96:43:9f:b7:56:9f:ad:d6:46:a5:a1:13:2f: 31:64:7a:09:80:64:17:68:71:3c:25:08:11:e5:61:f2:99:94: f0:d6:e2:f8:d3:f1:b1:ae:c8:6b:60:2a:d7:6f:25:34:55:5d: 4b:fc:7a:a5:32:9d:68:9e:54:be:96:20:86:eb:3f:2a:40:81: 6d:07:07:65:87:6a:3a:f7:50:8b:a1:4b:54:26:d9:d7:64:cc: 64:6f:23:36:c3:2f:d3:50:06:5b:17:5b:56:a1:21:43:e8:e8: 25:4f:84:a1:6d:a5:63:87:31:d3:26:f9:e5:c9:c0:1a:31:04: 41:3c:63:4c:4c:99:56:9d:e3:af:6b:86:4e:2f:98:3d:a8:5a: 15:c9:5a:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFCQkYxMTAvBgNVBAUTKEJGNEQ4MDEzREI5N0I4RUYwMEY4Q0U4QzZEQkVBRkIw NTFFMTk0QkMwHhcNMjUwODEwMjI0NDI3WhcNMjUwODE3MjI0NDI3WjAYMRYwFAYD VQQDEw02ODk5MjBjYy04NmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZIY2aWsA87TnvCZEEjEUB40Oa2/G++hmxK3lgfsNMX8j1gUrrqGsNj3h+kR bkMpBqZZlaSalnEdwRe6UT6YHVFKszyVxevuMUlDYbSCySdhIynkYmVinWYr48MK 0rO5a0nwHmOGuxXaB7D1yxt6PEkquUOrmQ9utB2odN0bkF2OA+qg6IbewlAt1WVl cAOWNxz++Y5QYZ9Jrs+KWCtQ/qw2aTYB0dspCPhOS0aVp6Cv3w73LgLKKBsJaZ1y /2O1Ap7rVQcNfWi3mfn/S8+xnyBE77FaXRHRK+a2kdrkO9VKVhIGm5z/dzbLeseY vGED7TZsLSfoKz/pDIXJHw7+1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFApe4aJt mEzsHShV+VGNQZXIaJFbMB8GA1UdIwQYMBaAFL9NgBPbl7jvAPjOjG2+r7BR4ZS8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUJCRi8xMjZCOTA5QTlE QkQxMUVCOEExRjBCMzJDNEY5QUUwMi92MDJBRTl1WHVPOEEtTTZNYmI2dnNGSGhs THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YwMkFFOXVYdU84QS1NNk1iYjZ2c0ZIaGxMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUJCRi8xMjZCOTA5QTlEQkQxMUVCOEExRjBCMzJDNEY5QUUwMi92MDJBRTl1WHVP OEEtTTZNYmI2dnNGSGhsTHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXcetoX+cfH14ZYKvWnXntWdjh0ocHfVbAZOnbMwsUZTMgSgvf5C1U robxjd0ClPqkpSk+xx+YQg8syCQouMKqqiUfmD36eH/hGWrKcd8q1OipjcTlNAna w+GhMVLRqX26iB6YBPrpoPDNQvdFg5jGeZZDn7dWn63WRqWhEy8xZHoJgGQXaHE8 JQgR5WHymZTw1uL40/GxrshrYCrXbyU0VV1L/HqlMp1onlS+liCG6z8qQIFtBwdl h2o691CLoUtUJtnXZMxkbyM2wy/TUAZbF1tWoSFD6OglT4ShbaVjhzHTJvnlycAa MQRBPGNMTJlWneOva4ZOL5g9qFoVyVpn -----END CERTIFICATE-----Generated at Mon Aug 11 01:52:58 2025 by rpki-client