$ rpki-client -vvf rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft File: ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft (raw, json) Hash identifier: rB+HuxcRD6btDWiMS1tGE6Sa4cwuVCEmVPut1DdmGe0= Subject key identifier: C7:FF:44:F0:65:35:ED:01:1F:E4:77:91:7A:44:69:E8:38:4F:A9:22 Authority key identifier: 6A:12:19:72:6D:23:9C:82:F5:A4:46:01:12:7D:1A:F8:72:5C:E0:ED Certificate issuer: /CN=A91944AB/serialNumber=6A1219726D239C82F5A44601127D1AF8725CE0ED Certificate serial: 05F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahIZcm0jnIL1pEYBEn0a-HJc4O0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft Manifest number: 05E9 Signing time: Fri 08 Aug 2025 23:25:30 +0000 Manifest this update: Fri 08 Aug 2025 23:25:29 +0000 Manifest next update: Fri 15 Aug 2025 23:25:29 +0000 Files and hashes: 1: ahIZcm0jnIL1pEYBEn0a-HJc4O0.crl (hash: vAlnwiZ2LmP6cD2+l7aEdU7GdV7L2c4fTHqAghPQi/M=) 2: BB01CFB0723811EEA39E0042C4F9AE02.roa (hash: 1LEbeB2sOSy0yXmk2wIYI71rgNCCnZow4wFFO18wbUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.crl rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahIZcm0jnIL1pEYBEn0a-HJc4O0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1520 (0x5f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91944AB, serialNumber=6A1219726D239C82F5A44601127D1AF8725CE0ED Validity Not Before: Aug 8 23:25:29 2025 GMT Not After : Aug 15 23:25:29 2025 GMT Subject: CN=68968769-0774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4e:7f:d4:fe:20:6c:03:95:a3:55:8b:77:c8: a0:ef:72:e8:80:52:cb:18:55:4b:97:32:5d:ee:65: 53:8a:ab:98:d2:c5:a5:01:3d:2d:f4:47:92:23:4a: 04:a7:e2:17:c2:7d:a6:44:07:23:40:bf:9a:f4:db: 39:2c:1d:32:1f:9c:28:90:23:3d:1b:d5:d3:a1:53: 73:87:d9:56:d4:2c:08:5c:05:50:17:bf:7b:b1:c8: 81:b4:19:8c:19:3d:dc:c0:fd:31:4c:cf:dd:70:d1: 56:60:71:38:a8:eb:b9:47:e5:27:eb:75:b3:ce:5f: 42:b9:2b:b4:89:a5:5d:63:c7:f1:05:c2:8e:4c:87: f9:92:03:8f:40:0d:b6:fa:ac:fb:0f:9c:cc:c1:79: 23:42:cf:95:0a:f3:3f:da:14:2c:7e:1d:3f:0f:8f: e1:c6:ea:cf:da:1b:d3:7d:a5:54:36:75:4d:82:5f: a1:6e:6a:83:d5:45:dc:e8:56:0f:55:a7:ab:1c:24: 61:f3:8c:83:a1:96:87:ff:e1:12:84:bb:10:8f:6c: 97:f6:85:c2:7e:45:ba:92:39:49:5f:2b:57:ab:be: aa:22:e0:e9:91:cd:99:76:c2:94:b3:61:40:ac:30: 0e:16:3b:bb:26:9b:69:c4:82:cc:1e:97:ff:17:91: 26:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:FF:44:F0:65:35:ED:01:1F:E4:77:91:7A:44:69:E8:38:4F:A9:22 X509v3 Authority Key Identifier: keyid:6A:12:19:72:6D:23:9C:82:F5:A4:46:01:12:7D:1A:F8:72:5C:E0:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahIZcm0jnIL1pEYBEn0a-HJc4O0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:49:e2:8f:85:bd:98:44:e1:be:ec:e4:bc:63:92:13:c5:36: 2c:09:28:22:9e:e9:1e:6b:cc:8a:bf:d7:d5:4c:76:0b:91:31: f6:ea:a9:b8:db:55:9c:4f:0e:a5:22:f9:e3:68:be:3d:56:18: 4b:34:50:21:33:a6:31:58:80:0d:8b:4b:53:13:b9:7d:f8:d3: fc:21:44:38:b7:3b:1d:04:43:5c:0b:ff:bd:bf:9e:2b:57:8c: 0c:0a:36:4c:68:45:a9:34:b0:60:8b:ad:9f:d7:45:f8:08:98: 69:de:e8:e1:f7:03:15:09:21:85:25:2b:95:fb:83:f7:9d:d0: 7e:2f:f2:07:9f:69:fd:68:cb:11:91:4f:7f:f5:45:25:97:77: e7:c0:00:85:da:d3:8a:18:e5:23:b6:2d:f9:4b:d8:44:60:26: 58:58:7e:5a:71:4f:fd:e3:5b:a2:ed:1a:6d:e4:ba:fa:1e:92: 42:c0:ca:31:dc:da:8e:20:70:23:b6:8e:bc:66:9f:11:fd:87: 95:6a:e6:f8:31:d7:b0:ce:84:62:d0:ed:d7:80:97:e4:1f:84: 5b:ab:09:72:9a:78:88:56:12:63:58:96:6d:89:1c:45:52:45: c2:f5:d2:dd:b0:fe:f1:57:ac:c3:72:01:ed:69:1e:e2:32:cf: 45:57:0a:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ0QUIxMTAvBgNVBAUTKDZBMTIxOTcyNkQyMzlDODJGNUE0NDYwMTEyN0QxQUY4 NzI1Q0UwRUQwHhcNMjUwODA4MjMyNTI5WhcNMjUwODE1MjMyNTI5WjAYMRYwFAYD VQQDEw02ODk2ODc2OS0wNzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0E5/1P4gbAOVo1WLd8ig73LogFLLGFVLlzJd7mVTiquY0sWlAT0t9EeSI0oE p+IXwn2mRAcjQL+a9Ns5LB0yH5wokCM9G9XToVNzh9lW1CwIXAVQF797sciBtBmM GT3cwP0xTM/dcNFWYHE4qOu5R+Un63Wzzl9CuSu0iaVdY8fxBcKOTIf5kgOPQA22 +qz7D5zMwXkjQs+VCvM/2hQsfh0/D4/hxurP2hvTfaVUNnVNgl+hbmqD1UXc6FYP VaerHCRh84yDoZaH/+EShLsQj2yX9oXCfkW6kjlJXytXq76qIuDpkc2ZdsKUs2FA rDAOFju7JptpxILMHpf/F5EmPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMf/RPBl Ne0BH+R3kXpEaeg4T6kiMB8GA1UdIwQYMBaAFGoSGXJtI5yC9aRGARJ9GvhyXODt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDRBQi82RkUzMDZBNkMy QzgxMUVCOThEOURBNzlDNEY5QUUwMi9haElaY20wam5JTDFwRVlCRW4wYS1ISmM0 TzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FoSVpjbTBqbklMMXBFWUJFbjBhLUhKYzRPMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDRBQi82RkUzMDZBNkMyQzgxMUVCOThEOURBNzlDNEY5QUUwMi9haElaY20wam5J TDFwRVlCRW4wYS1ISmM0TzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkSeKPhb2YROG+7OS8Y5ITxTYsCSginukea8yKv9fVTHYLkTH26qm4 21WcTw6lIvnjaL49VhhLNFAhM6YxWIANi0tTE7l9+NP8IUQ4tzsdBENcC/+9v54r V4wMCjZMaEWpNLBgi62f10X4CJhp3ujh9wMVCSGFJSuV+4P3ndB+L/IHn2n9aMsR kU9/9UUll3fnwACF2tOKGOUjti35S9hEYCZYWH5acU/941ui7Rpt5Lr6HpJCwMox 3NqOIHAjto68Zp8R/YeVaub4MdewzoRi0O3XgJfkH4RbqwlymniIVhJjWJZtiRxF UkXC9dLdsP7xV6zDcgHtaR7iMs9FVwqU -----END CERTIFICATE-----Generated at Sun Aug 10 18:29:16 2025 by rpki-client