$ rpki-client -vvf rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft File: awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft (raw, json) Hash identifier: OF3GplvNzKu/w1hm8biEyAASTQPETEnt++hczsVfxaY= Subject key identifier: 98:55:40:9E:F5:D5:9D:E6:DE:E9:5E:64:7A:2F:C4:8A:58:50:73:FA Authority key identifier: 6B:0C:B5:95:03:DA:89:5F:F9:42:69:D7:A9:BC:20:26:17:04:DC:E9 Certificate issuer: /CN=A91A45E0/serialNumber=6B0CB59503DA895FF94269D7A9BC20261704DCE9 Certificate serial: 0C5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft Manifest number: 0C3D Signing time: Sun 10 Aug 2025 18:39:37 +0000 Manifest this update: Sun 10 Aug 2025 18:39:36 +0000 Manifest next update: Sun 17 Aug 2025 18:39:36 +0000 Files and hashes: 1: awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl (hash: D1l6mlX3TdbPKyn5L6joSxecfAxvKASSk+EW8CNz/w0=) 2: 1ECA8050696211EC8A05D115C4F9AE02.roa (hash: TDJGQsW2NIk73+noi3yai+lnEcUS65iyjDduaFF8MsU=) 3: 7A0359125C0E11ECA36CBF0FC4F9AE02.roa (hash: o+CZ7fn0neERiRGT74H4pMCJhxb2efrn1ZqyAv5eZQ0=) 4: DF1E2FEA97D611EB8BEF8223C4F9AE02.roa (hash: +Z1f48sI1Kz7JI6qJ55JG0SRXt9VC0MvWpOU7eCKqS8=) 5: 884C5FB8E60411EFBF5A7957C4F9AE02.roa (hash: lJpIF/DoFI3JvxRyvCQySFIPNE83lEmMNZBRdgQLMfI=) 6: 84CFF0D6D2F311EEAFCF3273C4F9AE02.roa (hash: lwAwrTafRErL3moVwMNPzUjYlQsMQhM9S9kLt9SAVBg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3167 (0xc5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A45E0, serialNumber=6B0CB59503DA895FF94269D7A9BC20261704DCE9 Validity Not Before: Aug 10 18:39:36 2025 GMT Not After : Aug 17 18:39:36 2025 GMT Subject: CN=6898e769-bdbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b4:74:ab:f4:03:10:5c:c0:b3:85:71:e8:46: ef:49:b4:c3:fd:b8:95:d7:58:e3:ab:70:be:b6:0b: f6:58:31:8c:77:aa:43:2e:d4:61:54:86:44:15:38: 91:fe:1e:0f:3b:03:6d:86:74:94:bc:32:41:0b:c1: 05:70:19:06:10:fe:cc:b5:c6:2e:5c:f0:1a:c7:a8: 0a:ea:6b:d0:52:7f:ad:75:0b:40:3c:47:8c:6b:93: 40:d9:02:43:c7:62:c0:de:18:ba:97:97:63:80:b5: b5:ab:f0:af:62:7e:cc:03:29:84:2e:5a:bb:43:64: 33:c5:09:9d:38:87:32:25:a3:16:d7:aa:71:b2:2a: 47:20:f9:d0:c5:ec:00:50:07:2f:ad:b2:88:f7:8f: 4d:8b:85:97:18:bd:89:60:9e:12:f2:56:6a:f8:7f: e4:d0:af:74:db:6f:37:07:38:4f:39:2d:04:31:35: 34:82:aa:be:fb:a1:71:e6:82:e5:c7:b5:9c:e1:d0: d1:05:2b:00:cb:0f:c3:9d:5f:70:d9:81:d4:36:08: bb:ef:66:13:48:3d:de:31:a0:ca:ce:49:27:ff:3a: 16:be:1d:3d:6a:5e:f1:0e:24:ca:92:bc:d5:1b:d2: 2e:7e:f8:02:46:f4:e9:b2:be:a8:e6:41:38:a4:e0: 63:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:55:40:9E:F5:D5:9D:E6:DE:E9:5E:64:7A:2F:C4:8A:58:50:73:FA X509v3 Authority Key Identifier: keyid:6B:0C:B5:95:03:DA:89:5F:F9:42:69:D7:A9:BC:20:26:17:04:DC:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:8c:24:94:86:37:e5:82:7d:49:a1:4b:a5:0c:51:14:a3:5b: 87:3e:68:de:74:c9:9f:54:e8:03:e7:5b:ab:66:2a:02:c6:08: 9c:be:04:2c:68:df:41:0c:af:f2:06:a1:93:a4:9f:08:ce:d7: 21:88:62:fb:5f:fb:1c:bf:27:b4:70:7a:1d:b7:d7:ab:e1:b4: 3d:9f:49:fd:ef:3d:d4:dc:7c:25:6b:72:37:f3:7a:e4:55:04: 0d:bb:d5:4d:2b:d9:b8:56:50:c0:c0:c7:6d:92:67:9a:c7:37: 5d:f4:9e:5e:2d:80:9d:c0:f3:88:b2:6c:7c:fd:46:2d:4e:4f: b0:a0:5a:28:68:a1:32:f2:f3:09:8d:91:86:a1:69:bf:70:2e: 3a:af:c7:1d:b0:e9:d9:0c:ea:50:54:4a:1c:f8:ab:28:ff:69: 83:98:5b:c7:2e:75:57:3c:67:47:cb:e2:64:9f:40:a0:ce:3f: 40:60:4e:4f:bf:5a:e4:e3:42:c8:68:0e:6d:af:f6:85:cd:6a: 5a:05:b6:e1:f4:67:a5:60:8e:18:3b:f7:5c:93:54:e2:00:38: 6a:49:51:c9:b1:11:9d:5a:63:e1:b6:0a:be:b3:f3:6f:55:ce: 50:b3:f8:1d:a6:94:da:47:c5:b5:96:44:f0:26:2e:b9:fa:57: b0:59:7a:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDF8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ1RTAxMTAvBgNVBAUTKDZCMENCNTk1MDNEQTg5NUZGOTQyNjlEN0E5QkMyMDI2 MTcwNERDRTkwHhcNMjUwODEwMTgzOTM2WhcNMjUwODE3MTgzOTM2WjAYMRYwFAYD VQQDEw02ODk4ZTc2OS1iZGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3rR0q/QDEFzAs4Vx6EbvSbTD/biV11jjq3C+tgv2WDGMd6pDLtRhVIZEFTiR /h4POwNthnSUvDJBC8EFcBkGEP7MtcYuXPAax6gK6mvQUn+tdQtAPEeMa5NA2QJD x2LA3hi6l5djgLW1q/CvYn7MAymELlq7Q2QzxQmdOIcyJaMW16pxsipHIPnQxewA UAcvrbKI949Ni4WXGL2JYJ4S8lZq+H/k0K902283BzhPOS0EMTU0gqq++6Fx5oLl x7Wc4dDRBSsAyw/DnV9w2YHUNgi772YTSD3eMaDKzkkn/zoWvh09al7xDiTKkrzV G9IufvgCRvTpsr6o5kE4pOBj8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJhVQJ71 1Z3m3uleZHovxIpYUHP6MB8GA1UdIwQYMBaAFGsMtZUD2olf+UJp16m8ICYXBNzp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDVFMC8yM0JGMkYyNjEx M0UxMUVBODhFODc4NzZDNEY5QUUwMi9hd3kxbFFQYWlWXzVRbW5YcWJ3Z0poY0Uz T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F3eTFsUVBhaVZfNVFtblhxYndnSmhjRTNPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDVFMC8yM0JGMkYyNjExM0UxMUVBODhFODc4NzZDNEY5QUUwMi9hd3kxbFFQYWlW XzVRbW5YcWJ3Z0poY0UzT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtjCSUhjflgn1JoUulDFEUo1uHPmjedMmfVOgD51urZioCxgicvgQs aN9BDK/yBqGTpJ8IztchiGL7X/scvye0cHodt9er4bQ9n0n97z3U3Hwla3I383rk VQQNu9VNK9m4VlDAwMdtkmeaxzdd9J5eLYCdwPOIsmx8/UYtTk+woFooaKEy8vMJ jZGGoWm/cC46r8cdsOnZDOpQVEoc+Kso/2mDmFvHLnVXPGdHy+Jkn0Cgzj9AYE5P v1rk40LIaA5tr/aFzWpaBbbh9GelYI4YO/dck1TiADhqSVHJsRGdWmPhtgq+s/Nv Vc5Qs/gdppTaR8W1lkTwJi65+lewWXo2 -----END CERTIFICATE-----Generated at Mon Aug 11 06:02:53 2025 by rpki-client