$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.mft File: asoRKbI4x6HxeRt1zUmta9at-nc.mft (raw, json) Hash identifier: 5+VYMvI8uebpMpOBSfqDtgnhZeVKY6CJtnIFzp7VTMk= Subject key identifier: 28:33:99:FD:88:AF:AC:50:21:0A:25:F1:1E:F7:D0:97:9B:9A:5E:83 Authority key identifier: 6A:CA:11:29:B2:38:C7:A1:F1:79:1B:75:CD:49:AD:6B:D6:AD:FA:77 Certificate issuer: /CN=A91A6F56/serialNumber=6ACA1129B238C7A1F1791B75CD49AD6BD6ADFA77 Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asoRKbI4x6HxeRt1zUmta9at-nc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.mft Manifest number: 06 Signing time: Sat 09 Aug 2025 08:42:49 +0000 Manifest this update: Sat 09 Aug 2025 08:42:49 +0000 Manifest next update: Sat 16 Aug 2025 08:42:49 +0000 Files and hashes: 1: asoRKbI4x6HxeRt1zUmta9at-nc.crl (hash: /e9X/h5VUgqPxFR7hbkPZ812L6bP3S7ui18zw2137ak=) 2: 234A6D0E6E8911F0AEEA0B14C4F9AE02.roa (hash: rZBaMYyqsgdUbj2Kc1VUQWs/4+3J/zfoVLydL5l2mZM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.crl rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asoRKbI4x6HxeRt1zUmta9at-nc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6F56, serialNumber=6ACA1129B238C7A1F1791B75CD49AD6BD6ADFA77 Validity Not Before: Aug 9 08:42:49 2025 GMT Not After : Aug 16 08:42:49 2025 GMT Subject: CN=68970a09-f719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a6:0f:cf:b6:ec:db:78:06:89:79:81:70:d4: ee:b4:02:f5:b6:bf:ba:f8:ea:60:bb:5d:9a:f2:c1: 2e:79:09:40:6f:0c:35:67:68:29:74:33:dd:e2:ff: 2e:f6:f3:b9:24:2b:07:18:f2:09:49:84:e7:13:c8: f5:16:e8:18:a9:9e:ca:d6:49:f3:ed:94:c8:17:07: e6:d3:17:1b:52:f3:82:4f:bf:fe:29:ef:94:b6:8a: 64:88:be:fb:26:ab:0c:01:08:5b:41:c8:90:4b:b8: 34:12:15:20:64:36:71:9e:10:2e:f2:f8:30:e5:82: 81:4a:17:da:c6:48:93:d6:df:fb:1b:93:c7:8e:cf: d0:4c:b1:41:3a:12:c5:1d:7f:8c:85:bf:10:b9:50: 53:cd:be:d1:8b:96:da:6e:46:10:a2:cb:3a:b5:81: 5b:cc:98:d6:ac:5b:c0:d8:20:1c:09:3a:b4:e9:15: 2b:a3:4e:97:b6:1c:88:4a:5e:c9:3c:3d:9d:d3:f3: 1b:8f:42:f5:90:45:a7:dd:a7:32:e8:c4:4d:bc:45: 28:25:b6:7a:aa:8f:55:7d:99:82:46:75:f7:e9:9d: 09:ac:a1:5a:0c:33:46:c7:a8:1c:52:93:a7:90:bb: 9d:a3:d4:8f:7c:bc:79:b4:3b:b4:7e:d9:0e:68:3d: 5a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:33:99:FD:88:AF:AC:50:21:0A:25:F1:1E:F7:D0:97:9B:9A:5E:83 X509v3 Authority Key Identifier: keyid:6A:CA:11:29:B2:38:C7:A1:F1:79:1B:75:CD:49:AD:6B:D6:AD:FA:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asoRKbI4x6HxeRt1zUmta9at-nc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:71:4b:3e:1a:76:ab:c8:84:9b:f0:ec:62:d2:db:34:75:21: 68:29:0d:12:7e:1c:66:6a:9e:d5:ff:1e:40:01:27:10:e5:1f: e2:32:8b:34:e1:d8:a9:a9:1c:f9:35:c9:a3:2a:a9:56:48:85: 34:64:0d:6d:ee:85:f9:0d:2e:bf:d0:c8:03:ac:07:cc:89:fb: 23:43:0c:d4:70:c4:8e:b8:18:9d:9d:1c:18:34:8a:71:3e:85: 4c:b7:f3:ec:99:d7:60:fd:8a:5a:83:ec:11:46:22:79:89:07: 15:0d:10:e3:20:96:0c:64:a9:00:47:f5:31:6e:38:e0:e5:81: 30:40:b7:84:21:88:ae:d6:9e:60:8e:63:25:4b:28:f1:01:6a: f5:4e:38:76:13:8a:0a:19:ac:5a:db:36:38:c8:fa:db:0c:f3: 24:06:ac:49:c9:ba:1e:7c:46:15:38:ca:e1:7b:51:f8:c5:66: 6e:41:26:f2:4a:37:1e:13:2f:a9:9b:01:55:f4:d8:62:45:85: 22:65:33:8f:74:5f:df:b7:78:8b:d3:d3:58:d6:7e:8f:9f:b8: 69:69:1e:b0:9c:4e:70:73:10:c9:7a:6a:ef:e6:12:69:71:07: d5:c6:60:3a:66:69:ad:47:73:86:be:9f:27:56:1b:78:c0:25: 4c:59:76:25 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NkY1NjExMC8GA1UEBRMoNkFDQTExMjlCMjM4QzdBMUYxNzkxQjc1Q0Q0OUFENkJE NkFERkE3NzAeFw0yNTA4MDkwODQyNDlaFw0yNTA4MTYwODQyNDlaMBgxFjAUBgNV BAMTDTY4OTcwYTA5LWY3MTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6pg/PtuzbeAaJeYFw1O60AvW2v7r46mC7XZrywS55CUBvDDVnaCl0M93i/y72 87kkKwcY8glJhOcTyPUW6BipnsrWSfPtlMgXB+bTFxtS84JPv/4p75S2imSIvvsm qwwBCFtByJBLuDQSFSBkNnGeEC7y+DDlgoFKF9rGSJPW3/sbk8eOz9BMsUE6EsUd f4yFvxC5UFPNvtGLltpuRhCiyzq1gVvMmNasW8DYIBwJOrTpFSujTpe2HIhKXsk8 PZ3T8xuPQvWQRafdpzLoxE28RSgltnqqj1V9mYJGdffpnQmsoVoMM0bHqBxSk6eQ u52j1I98vHm0O7R+2Q5oPVrbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKDOZ/Yiv rFAhCiXxHvfQl5uaXoMwHwYDVR0jBBgwFoAUasoRKbI4x6HxeRt1zUmta9at+ncw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2RjU2LzkxM0NBNkU4NkU4 ODExRjBBRDVEMUExMkM0RjlBRTAyL2Fzb1JLYkk0eDZIeGVSdDF6VW10YTlhdC1u Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYXNvUktiSTR4Nkh4ZVJ0MXpVbXRhOWF0LW5jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2 RjU2LzkxM0NBNkU4NkU4ODExRjBBRDVEMUExMkM0RjlBRTAyL2Fzb1JLYkk0eDZI eGVSdDF6VW10YTlhdC1uYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABlxSz4adqvIhJvw7GLS2zR1IWgpDRJ+HGZqntX/HkABJxDlH+IyizTh 2KmpHPk1yaMqqVZIhTRkDW3uhfkNLr/QyAOsB8yJ+yNDDNRwxI64GJ2dHBg0inE+ hUy38+yZ12D9ilqD7BFGInmJBxUNEOMglgxkqQBH9TFuOODlgTBAt4QhiK7WnmCO YyVLKPEBavVOOHYTigoZrFrbNjjI+tsM8yQGrEnJuh58RhU4yuF7UfjFZm5BJvJK Nx4TL6mbAVX02GJFhSJlM490X9+3eIvT01jWfo+fuGlpHrCcTnBzEMl6au/mEmlx B9XGYDpmaa1Hc4a+nydWG3jAJUxZdiU= -----END CERTIFICATE-----Generated at Sun Aug 10 04:28:45 2025 by rpki-client