$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft File: -gEnQNykk8ziA6-q3o68cZqsI7Q.mft (raw, json) Hash identifier: hMaGdOehrFmNOJCQu03dRVRlTYGY0jJ0Dt0tIgl2sPQ= Subject key identifier: 7F:2F:61:08:2B:CC:7D:F3:A1:7A:68:CA:C5:FE:6C:17:F7:BA:89:23 Authority key identifier: FA:01:27:40:DC:A4:93:CC:E2:03:AF:AA:DE:8E:BC:71:9A:AC:23:B4 Certificate issuer: /CN=A91AF404/serialNumber=FA012740DCA493CCE203AFAADE8EBC719AAC23B4 Certificate serial: 01B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gEnQNykk8ziA6-q3o68cZqsI7Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft Manifest number: 01AA Signing time: Sat 09 Aug 2025 03:38:49 +0000 Manifest this update: Sat 09 Aug 2025 03:38:48 +0000 Manifest next update: Sat 16 Aug 2025 03:38:48 +0000 Files and hashes: 1: -gEnQNykk8ziA6-q3o68cZqsI7Q.crl (hash: UhSFmw9qhEM8ZQA1N7nn1JRJ/CRudHe4rPI3kkgciHo=) 2: D8674A0C0ED911EE8A4E0A23C4F9AE02.roa (hash: AIB5iRq0wZoH+M+QlWHGPd+eXgQBKYvmWuJJAuisaNs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.crl rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gEnQNykk8ziA6-q3o68cZqsI7Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 432 (0x1b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF404, serialNumber=FA012740DCA493CCE203AFAADE8EBC719AAC23B4 Validity Not Before: Aug 9 03:38:48 2025 GMT Not After : Aug 16 03:38:48 2025 GMT Subject: CN=6896c2c8-da61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:71:ba:e8:44:6d:55:56:74:38:8e:8d:e0:38: ce:4d:ec:66:bf:b3:65:e2:f6:b1:2b:73:17:37:3e: 0d:eb:a9:2a:18:95:eb:36:0a:e3:ad:b0:42:87:d4: 2d:ee:26:07:1d:a8:9a:7a:9b:84:47:7d:4a:ec:8d: a8:86:ca:31:ac:8c:3c:a6:51:4e:d3:d6:ad:ed:ac: 70:0e:1c:1f:66:27:d7:00:48:64:f6:03:e8:f8:14: 0a:7d:60:5a:19:39:d2:8a:62:22:ee:7a:85:d0:73: be:7c:9d:52:63:a7:75:0c:eb:e8:86:2b:e2:85:2d: c5:78:0a:85:6c:b5:5c:c3:a9:af:75:8e:c8:53:a5: fb:48:86:a3:8a:ae:6c:0c:45:75:be:2b:ff:a5:a1: 9c:c5:32:8d:8f:99:25:61:95:fc:15:d7:e8:c8:ec: 4e:b3:49:14:25:42:57:46:cf:d7:48:0a:ff:31:5a: b4:6a:3c:48:79:80:77:c1:bf:b0:82:2c:c3:c8:60: 3c:32:02:6f:25:34:b5:bf:0c:d6:6f:6d:8b:69:16: fc:be:32:16:01:c6:c4:57:88:43:2e:78:9c:8b:a6: 06:7d:e0:c2:90:49:75:f7:2b:41:a4:dd:62:31:af: 0d:fa:83:45:c5:14:8c:7e:86:83:ea:91:36:c5:af: cb:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:2F:61:08:2B:CC:7D:F3:A1:7A:68:CA:C5:FE:6C:17:F7:BA:89:23 X509v3 Authority Key Identifier: keyid:FA:01:27:40:DC:A4:93:CC:E2:03:AF:AA:DE:8E:BC:71:9A:AC:23:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gEnQNykk8ziA6-q3o68cZqsI7Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:84:e8:c6:b6:c2:75:01:2d:f4:dd:ad:f5:7a:7c:ef:ea:6d: fd:63:4e:53:f0:3b:c0:a6:75:f1:7a:c8:97:9c:9b:11:ec:6e: 16:66:b4:23:83:b2:e2:64:eb:02:e6:f6:d6:ad:7d:28:fa:e6: 04:ea:6a:5c:f4:cb:bf:92:4a:91:05:b8:fa:24:92:c6:34:78: 96:85:67:e8:ea:c3:f3:49:40:22:ec:d9:b2:bd:a3:99:1f:fb: 86:46:5c:52:08:1c:d6:0a:bd:38:67:59:57:50:2d:2d:f4:4c: 9d:97:05:62:9e:59:34:37:39:79:7a:9f:98:b8:4e:3e:dd:65: fd:18:66:5a:c2:38:e8:a6:6d:b6:bc:f0:4c:2b:47:ae:b8:76: 69:72:2f:cf:1c:e3:b2:f9:9e:54:41:3f:4e:eb:37:de:46:ce: 36:91:6f:11:09:04:1f:b1:f9:be:bf:29:5b:cc:19:9b:28:ab: ea:ac:43:f4:e1:96:bb:8f:bb:09:b4:bd:7f:84:7a:af:20:a6: 0f:1d:94:b5:d4:6a:8c:8d:f2:d0:27:3a:c0:97:45:6c:d0:65: 21:54:52:9f:91:4c:ea:37:28:a5:71:04:2a:6c:bf:cb:f2:e8: 9c:3b:d8:d3:4b:2a:23:8e:c0:35:0f:95:97:17:65:b0:cf:37: 09:f1:7a:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY0MDQxMTAvBgNVBAUTKEZBMDEyNzQwRENBNDkzQ0NFMjAzQUZBQURFOEVCQzcx OUFBQzIzQjQwHhcNMjUwODA5MDMzODQ4WhcNMjUwODE2MDMzODQ4WjAYMRYwFAYD VQQDEw02ODk2YzJjOC1kYTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAznG66ERtVVZ0OI6N4DjOTexmv7Nl4vaxK3MXNz4N66kqGJXrNgrjrbBCh9Qt 7iYHHaiaepuER31K7I2ohsoxrIw8plFO09at7axwDhwfZifXAEhk9gPo+BQKfWBa GTnSimIi7nqF0HO+fJ1SY6d1DOvohivihS3FeAqFbLVcw6mvdY7IU6X7SIajiq5s DEV1viv/paGcxTKNj5klYZX8FdfoyOxOs0kUJUJXRs/XSAr/MVq0ajxIeYB3wb+w gizDyGA8MgJvJTS1vwzWb22LaRb8vjIWAcbEV4hDLnici6YGfeDCkEl19ytBpN1i Ma8N+oNFxRSMfoaD6pE2xa/LqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH8vYQgr zH3zoXpoysX+bBf3uokjMB8GA1UdIwQYMBaAFPoBJ0DcpJPM4gOvqt6OvHGarCO0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjQwNC81NDQwODFEMkY0 RDgxMUVEOTgwNDZDNEFDNEY5QUUwMi8tZ0VuUU55a2s4emlBNi1xM282OGNacXNJ N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1nRW5RTnlrazh6aUE2LXEzbzY4Y1pxc0k3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjQwNC81NDQwODFEMkY0RDgxMUVEOTgwNDZDNEFDNEY5QUUwMi8tZ0VuUU55a2s4 emlBNi1xM282OGNacXNJN1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPhOjGtsJ1AS303a31enzv6m39Y05T8DvApnXxesiXnJsR7G4WZrQj g7LiZOsC5vbWrX0o+uYE6mpc9Mu/kkqRBbj6JJLGNHiWhWfo6sPzSUAi7NmyvaOZ H/uGRlxSCBzWCr04Z1lXUC0t9EydlwVinlk0Nzl5ep+YuE4+3WX9GGZawjjopm22 vPBMK0euuHZpci/PHOOy+Z5UQT9O6zfeRs42kW8RCQQfsfm+vylbzBmbKKvqrEP0 4Za7j7sJtL1/hHqvIKYPHZS11GqMjfLQJzrAl0Vs0GUhVFKfkUzqNyilcQQqbL/L 8uicO9jTSyojjsA1D5WXF2WwzzcJ8Xqv -----END CERTIFICATE-----Generated at Mon Aug 11 01:48:57 2025 by rpki-client