$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.mft File: 44pe3hloyTdeUVUfrpiIigu1RJA.mft (raw, json) Hash identifier: +z7EhoQCOuz7pasatchn0Ot/WbyiOS8312aeLfC0f6g= Subject key identifier: 5A:80:C4:9C:E9:68:64:0C:1B:92:73:31:A2:C5:57:6B:AF:7C:27:29 Authority key identifier: E3:8A:5E:DE:19:68:C9:37:5E:51:55:1F:AE:98:88:8A:0B:B5:44:90 Certificate issuer: /CN=A91AAC4B/serialNumber=E38A5EDE1968C9375E51551FAE98888A0BB54490 Certificate serial: 6F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/44pe3hloyTdeUVUfrpiIigu1RJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.mft Manifest number: 6E Signing time: Sat 09 Aug 2025 07:22:04 +0000 Manifest this update: Sat 09 Aug 2025 07:22:04 +0000 Manifest next update: Sat 16 Aug 2025 07:22:04 +0000 Files and hashes: 1: 44pe3hloyTdeUVUfrpiIigu1RJA.crl (hash: SE6hGu8jcw79tt8n4lJWzXnt+YIquTxb9raR2onvqI4=) 2: B6A31094CD7E11EFBBAE2137C4F9AE02.roa (hash: f1IFYkIgMkQ3+JyMSl70ACqIsH3T9EI7K8/rW2krDH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.crl rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/44pe3hloyTdeUVUfrpiIigu1RJA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111 (0x6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAC4B, serialNumber=E38A5EDE1968C9375E51551FAE98888A0BB54490 Validity Not Before: Aug 9 07:22:04 2025 GMT Not After : Aug 16 07:22:04 2025 GMT Subject: CN=6896f71c-b69f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:aa:85:93:52:22:4e:16:bc:75:f8:10:d4:a3: 5d:6d:be:34:af:c2:80:97:fe:dd:f9:25:db:6a:1f: 57:3b:3a:04:4f:1b:31:65:48:b8:31:41:d2:da:ab: 78:52:03:e8:05:20:3f:a2:05:79:ef:ed:97:cb:ed: 7e:5a:14:31:2d:25:86:d5:7a:2a:8a:a7:ea:88:90: 94:c6:b5:e7:e6:5b:d5:c7:94:7d:a8:6d:19:01:11: 4d:72:66:d2:48:ab:f7:0f:3f:99:53:85:3e:70:6a: 74:81:35:97:73:01:b2:c9:25:36:9e:de:d1:1d:47: b8:c3:be:9f:b7:68:cb:fb:08:c5:39:4f:48:03:ac: a3:ce:ff:4d:95:c5:02:7f:6b:11:c5:5c:69:4f:55: 3f:1b:40:b9:d0:0e:b7:da:8d:9a:fc:18:34:70:80: 18:ff:21:2c:f8:19:6b:03:ef:4a:55:69:51:13:e0: 1a:b9:f1:86:37:93:7e:cb:17:13:0e:10:92:45:31: 0d:d9:81:f2:6e:20:9c:a8:dd:af:3d:38:de:6f:e9: 12:0e:c1:db:e4:f8:a7:85:1d:97:9b:11:7f:26:62: 45:78:c4:b4:da:30:a1:68:d7:12:52:e4:d7:b1:75: b0:a8:e0:46:45:5f:82:5a:2a:a8:39:1b:60:17:6e: 85:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:80:C4:9C:E9:68:64:0C:1B:92:73:31:A2:C5:57:6B:AF:7C:27:29 X509v3 Authority Key Identifier: keyid:E3:8A:5E:DE:19:68:C9:37:5E:51:55:1F:AE:98:88:8A:0B:B5:44:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/44pe3hloyTdeUVUfrpiIigu1RJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:79:41:43:3a:2b:7e:73:3b:ea:63:95:bd:2d:f9:52:c1:05: d5:ea:d7:e0:1f:c5:f6:b9:ea:ed:ef:67:ce:4c:d0:23:d1:3b: dc:e4:62:48:61:ce:df:07:35:e4:c9:b6:e2:49:21:be:99:65: 37:d8:d2:68:fc:3e:44:da:fc:4d:72:4a:5c:83:16:39:4b:cd: 2c:57:2b:87:f1:c5:ed:8d:d3:69:97:75:ac:c4:b8:80:8e:a5: a3:f4:9a:92:ec:36:26:1d:b9:52:fa:d9:da:30:29:0a:9a:30: 91:2c:9d:3a:db:c8:86:fa:9e:e1:e8:6b:4f:6d:b4:66:2d:9d: ac:19:61:dd:ed:f6:5e:cf:28:86:95:fc:c8:7a:eb:97:03:50: 22:de:c2:0f:36:cf:d6:86:21:03:70:6f:97:92:3d:75:17:d6: 45:85:82:cc:48:b6:2b:f2:ed:02:fd:9b:40:3b:2f:5d:2f:37: 1f:aa:f1:31:84:98:d5:12:eb:91:b3:d2:0f:ed:e5:78:2b:a5: 61:bb:1e:71:1a:c9:8f:e8:15:92:eb:2f:7d:05:d5:76:3a:8b: 47:c6:77:83:3f:1b:e7:f0:9a:26:b2:dd:f0:a0:d4:23:06:cf: a5:e4:64:40:c1:e2:0d:fd:d7:34:f4:2f:70:52:e4:5f:1f:c4: bf:46:1c:68 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QUM0QjExMC8GA1UEBRMoRTM4QTVFREUxOTY4QzkzNzVFNTE1NTFGQUU5ODg4OEEw QkI1NDQ5MDAeFw0yNTA4MDkwNzIyMDRaFw0yNTA4MTYwNzIyMDRaMBgxFjAUBgNV BAMTDTY4OTZmNzFjLWI2OWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8qoWTUiJOFrx1+BDUo11tvjSvwoCX/t35JdtqH1c7OgRPGzFlSLgxQdLaq3hS A+gFID+iBXnv7ZfL7X5aFDEtJYbVeiqKp+qIkJTGtefmW9XHlH2obRkBEU1yZtJI q/cPP5lThT5wanSBNZdzAbLJJTae3tEdR7jDvp+3aMv7CMU5T0gDrKPO/02VxQJ/ axHFXGlPVT8bQLnQDrfajZr8GDRwgBj/ISz4GWsD70pVaVET4Bq58YY3k37LFxMO EJJFMQ3ZgfJuIJyo3a89ON5v6RIOwdvk+KeFHZebEX8mYkV4xLTaMKFo1xJS5Nex dbCo4EZFX4JaKqg5G2AXboX/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWoDEnOlo ZAwbknMxosVXa698JykwHwYDVR0jBBgwFoAU44pe3hloyTdeUVUfrpiIigu1RJAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFBQzRCL0RFM0Y4ODlBQ0Q3 RDExRUZBQTA3MjMwQUM0RjlBRTAyLzQ0cGUzaGxveVRkZVVWVWZycGlJaWd1MVJK QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNDRwZTNobG95VGRlVVZVZnJwaUlpZ3UxUkpBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFB QzRCL0RFM0Y4ODlBQ0Q3RDExRUZBQTA3MjMwQUM0RjlBRTAyLzQ0cGUzaGxveVRk ZVVWVWZycGlJaWd1MVJKQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGN5QUM6K35zO+pjlb0t+VLBBdXq1+Afxfa56u3vZ85M0CPRO9zkYkhh zt8HNeTJtuJJIb6ZZTfY0mj8PkTa/E1ySlyDFjlLzSxXK4fxxe2N02mXdazEuICO paP0mpLsNiYduVL62dowKQqaMJEsnTrbyIb6nuHoa09ttGYtnawZYd3t9l7PKIaV /Mh665cDUCLewg82z9aGIQNwb5eSPXUX1kWFgsxItivy7QL9m0A7L10vNx+q8TGE mNUS65Gz0g/t5XgrpWG7HnEayY/oFZLrL30F1XY6i0fGd4M/G+fwmiay3fCg1CMG z6XkZEDB4g391zT0L3BS5F8fxL9GHGg= -----END CERTIFICATE-----Generated at Sun Aug 10 18:48:58 2025 by rpki-client