$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft File: AkIpyBrDU1oh1g4twyqbiL1q2B8.mft (raw, json) Hash identifier: ZmVfSwh/X/MZog5WhJ1rUsB+j/ycMLUptj2LLr2nkSE= Subject key identifier: E2:05:36:A8:57:B6:17:65:73:BC:27:DC:17:DE:47:DD:12:37:99:28 Authority key identifier: 02:42:29:C8:1A:C3:53:5A:21:D6:0E:2D:C3:2A:9B:88:BD:6A:D8:1F Certificate issuer: /CN=A91A0848/serialNumber=024229C81AC3535A21D60E2DC32A9B88BD6AD81F Certificate serial: 0213 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft Manifest number: 0200 Signing time: Mon 11 Aug 2025 02:35:35 +0000 Manifest this update: Mon 11 Aug 2025 02:35:35 +0000 Manifest next update: Mon 18 Aug 2025 02:35:35 +0000 Files and hashes: 1: AkIpyBrDU1oh1g4twyqbiL1q2B8.crl (hash: azTBYZozoYcadYr7SDNAx+FINHprYwmAlN56bdtujho=) 2: 0FBB769A5DDB11EEAEEA437DC4F9AE02.roa (hash: uKjzis/CrgsSg2LUM/lsbZTCdaGZHhh4O1b0+pc2P3M=) 3: B9D00D3C195A11EE83248835C4F9AE02.roa (hash: wCL8taH4LIUOWXKWcvReDaNZ3+NnYlOsUT+x4rsuWPo=) 4: DE56B490143611EEAB1A5D73C4F9AE02.roa (hash: 3IVp9MXxKURZzAWVcJ2+aQ10UWSD+/QnsDWHqJYEcQI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.crl rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 531 (0x213) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0848, serialNumber=024229C81AC3535A21D60E2DC32A9B88BD6AD81F Validity Not Before: Aug 11 02:35:35 2025 GMT Not After : Aug 18 02:35:35 2025 GMT Subject: CN=689956f7-0bfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:76:63:6d:2a:4e:73:20:24:54:8c:d5:bd:a3: 78:5d:52:b5:2e:81:cc:83:47:b9:bb:ea:ef:6d:d1: a6:92:a5:b7:ed:65:ce:80:8c:35:13:b7:dc:9a:cb: 05:37:d3:58:9b:d2:ca:69:f4:25:6f:79:12:36:11: a9:9e:c5:df:6c:13:29:63:a5:6c:65:45:a1:b6:c2: de:1c:18:7d:a8:be:dd:f5:e1:8e:2b:70:a4:9f:3c: 68:f0:7e:7e:29:b8:60:9b:d9:2f:2e:94:f9:76:ff: d9:7c:d2:fc:06:2e:c0:c0:a1:4d:21:fc:46:41:c9: d2:a5:91:cd:b8:91:bd:fe:1e:c9:ab:e9:94:95:2a: 7c:25:74:a4:fe:9c:55:7e:33:7a:a8:20:b6:db:bd: 2a:9a:62:12:1f:ee:e9:78:ac:d4:dd:2f:f6:fb:cc: 4e:c7:74:ef:58:4c:8a:56:c5:cb:61:78:76:18:ca: c7:44:98:d7:9a:c2:29:0a:38:0d:ef:25:c0:96:46: f8:69:38:70:0e:fa:07:64:cb:d2:e2:7e:5c:b0:c5: 1d:d6:98:ba:d0:ff:30:5b:ed:11:f3:96:14:b2:18: d5:3b:3e:22:90:a1:40:5d:cc:43:fa:8c:77:70:7f: ee:c7:1d:9f:bc:de:0f:65:b6:b0:4d:75:c8:c2:58: 91:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:05:36:A8:57:B6:17:65:73:BC:27:DC:17:DE:47:DD:12:37:99:28 X509v3 Authority Key Identifier: keyid:02:42:29:C8:1A:C3:53:5A:21:D6:0E:2D:C3:2A:9B:88:BD:6A:D8:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:f4:3e:38:c4:5c:bf:9c:61:90:80:32:82:ad:21:39:f1:6e: 59:da:c4:4c:ae:31:4b:89:19:61:21:f5:9a:81:c0:5a:83:e1: c2:c5:4e:1b:59:b4:f4:4f:ae:1b:0f:27:27:d0:31:fc:00:99: e2:74:1b:36:f7:55:1e:fc:86:ff:1b:78:6e:d4:a8:57:3f:27: f1:d9:07:1f:60:45:24:8a:a6:cb:a2:33:94:ce:0d:9e:2c:7d: 58:30:af:7a:35:3f:c7:03:e0:32:e9:81:ef:b4:14:03:68:5d: a8:29:7a:fe:03:1c:cc:81:d5:c9:85:0e:f9:0a:e3:7d:67:65: 79:5d:2c:d3:99:b2:86:53:75:a0:39:79:5e:4e:68:2d:d1:67: 5a:d6:32:63:7e:bd:b2:dd:8f:e5:be:7d:a4:e5:97:d9:8f:e4: fc:29:a6:e7:0d:35:7e:19:76:4b:45:08:63:70:fe:38:5e:9d: 1d:1d:fb:f8:a2:98:25:95:55:db:b1:4c:36:e7:eb:87:34:d4: 8c:88:d8:0b:38:b1:98:0b:d3:b6:90:43:35:22:12:4d:44:4a: e7:26:56:2d:09:31:30:1a:1f:dc:32:c5:89:bb:5b:32:d1:b9: d9:6d:94:3f:41:31:af:d5:4e:bd:e7:8e:1e:85:1f:7e:0f:aa: 93:24:2b:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA4NDgxMTAvBgNVBAUTKDAyNDIyOUM4MUFDMzUzNUEyMUQ2MEUyREMzMkE5Qjg4 QkQ2QUQ4MUYwHhcNMjUwODExMDIzNTM1WhcNMjUwODE4MDIzNTM1WjAYMRYwFAYD VQQDEw02ODk5NTZmNy0wYmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA23ZjbSpOcyAkVIzVvaN4XVK1LoHMg0e5u+rvbdGmkqW37WXOgIw1E7fcmssF N9NYm9LKafQlb3kSNhGpnsXfbBMpY6VsZUWhtsLeHBh9qL7d9eGOK3Cknzxo8H5+ Kbhgm9kvLpT5dv/ZfNL8Bi7AwKFNIfxGQcnSpZHNuJG9/h7Jq+mUlSp8JXSk/pxV fjN6qCC2270qmmISH+7peKzU3S/2+8xOx3TvWEyKVsXLYXh2GMrHRJjXmsIpCjgN 7yXAlkb4aThwDvoHZMvS4n5csMUd1pi60P8wW+0R85YUshjVOz4ikKFAXcxD+ox3 cH/uxx2fvN4PZbawTXXIwliR3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOIFNqhX thdlc7wn3BfeR90SN5koMB8GA1UdIwQYMBaAFAJCKcgaw1NaIdYOLcMqm4i9atgf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDg0OC82NEQ4QjFERTc3 RTQxMUVEOTdGNTkzNERDNEY5QUUwMi9Ba0lweUJyRFUxb2gxZzR0d3lxYmlMMXEy QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FrSXB5QnJEVTFvaDFnNHR3eXFiaUwxcTJCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDg0OC82NEQ4QjFERTc3RTQxMUVEOTdGNTkzNERDNEY5QUUwMi9Ba0lweUJyRFUx b2gxZzR0d3lxYmlMMXEyQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCk9D44xFy/nGGQgDKCrSE58W5Z2sRMrjFLiRlhIfWagcBag+HCxU4b WbT0T64bDycn0DH8AJnidBs291Ue/Ib/G3hu1KhXPyfx2QcfYEUkiqbLojOUzg2e LH1YMK96NT/HA+Ay6YHvtBQDaF2oKXr+AxzMgdXJhQ75CuN9Z2V5XSzTmbKGU3Wg OXleTmgt0Wda1jJjfr2y3Y/lvn2k5ZfZj+T8KabnDTV+GXZLRQhjcP44Xp0dHfv4 opgllVXbsUw25+uHNNSMiNgLOLGYC9O2kEM1IhJNRErnJlYtCTEwGh/cMsWJu1sy 0bnZbZQ/QTGv1U69544ehR9+D6qTJCsi -----END CERTIFICATE-----Generated at Mon Aug 11 07:30:02 2025 by rpki-client