$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/aaSG-_IUhPFBL7ioCieKJIzvvrI.mft File: aaSG-_IUhPFBL7ioCieKJIzvvrI.mft (raw, json) Hash identifier: LOZsfY3kUOot0CoiDDCLkRPHpGpqqoKtonW9vVRmoQo= Subject key identifier: 6C:71:48:8A:00:B8:97:39:26:2A:7B:71:02:87:50:B8:71:CA:52:E2 Authority key identifier: 69:A4:86:FB:F2:14:84:F1:41:2F:B8:A8:0A:27:8A:24:8C:EF:BE:B2 Certificate issuer: /CN=A91B4713/serialNumber=69A486FBF21484F1412FB8A80A278A248CEFBEB2 Certificate serial: 014B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaSG-_IUhPFBL7ioCieKJIzvvrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/aaSG-_IUhPFBL7ioCieKJIzvvrI.mft Manifest number: 0146 Signing time: Mon 11 Aug 2025 04:29:23 +0000 Manifest this update: Mon 11 Aug 2025 04:29:22 +0000 Manifest next update: Mon 18 Aug 2025 04:29:22 +0000 Files and hashes: 1: aaSG-_IUhPFBL7ioCieKJIzvvrI.crl (hash: DNAsr5uL3Wsr/xPjuKm0eqv05tWCp8tV5aamekkf6A8=) 2: A5656D2E892B11EE94747D6BC4F9AE02.roa (hash: 01zpHNpEXp5bla5wzGX7psaD7zJbZ+wyzWYL5eybWGY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/aaSG-_IUhPFBL7ioCieKJIzvvrI.crl rsync://rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/aaSG-_IUhPFBL7ioCieKJIzvvrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaSG-_IUhPFBL7ioCieKJIzvvrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 331 (0x14b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4713, serialNumber=69A486FBF21484F1412FB8A80A278A248CEFBEB2 Validity Not Before: Aug 11 04:29:22 2025 GMT Not After : Aug 18 04:29:22 2025 GMT Subject: CN=689971a3-7ff5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ad:3b:0c:f4:2a:01:80:a5:41:c9:b9:e5:e5: d2:52:81:3b:1b:ea:b5:e1:c4:70:bd:bc:3e:a2:5a: 6c:46:19:ed:0d:d1:63:88:38:5e:6d:c9:60:82:9e: 68:1f:66:1d:07:c5:42:18:21:f0:4b:45:84:86:f9: cb:67:d3:10:96:a9:ea:0b:bc:9e:f2:0c:a6:c2:e8: cc:82:ef:bb:98:e5:58:26:f3:ec:09:30:b0:9e:a1: 8d:3f:34:0e:da:af:f1:05:0b:1a:66:d8:eb:ca:0f: e1:96:54:4b:e7:57:80:92:d7:06:06:7b:8f:92:65: 14:c9:c6:20:c4:c4:c2:4e:13:cc:34:2a:04:c7:6c: 73:24:4a:bc:e0:ab:ef:46:5c:ba:22:7f:c7:df:77: 8a:a7:27:cb:c4:a2:86:44:3b:e3:57:a6:ed:82:79: ca:3d:09:af:29:8c:a9:85:ea:e7:98:91:0e:aa:b6: b7:4a:38:e7:49:40:ac:50:fe:d6:4f:5b:65:aa:72: d7:9b:46:56:4a:cf:b7:1f:f4:6d:17:cb:60:c8:cc: 22:2e:82:a2:96:35:33:a3:37:91:e9:36:c5:a3:15: fc:54:2d:ec:3a:56:7e:98:91:11:e2:87:8c:81:0c: 7f:d4:38:55:b8:e0:95:8c:18:ee:a7:b5:58:13:33: 85:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:71:48:8A:00:B8:97:39:26:2A:7B:71:02:87:50:B8:71:CA:52:E2 X509v3 Authority Key Identifier: keyid:69:A4:86:FB:F2:14:84:F1:41:2F:B8:A8:0A:27:8A:24:8C:EF:BE:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/aaSG-_IUhPFBL7ioCieKJIzvvrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaSG-_IUhPFBL7ioCieKJIzvvrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/aaSG-_IUhPFBL7ioCieKJIzvvrI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:60:55:3a:4c:58:c1:24:16:fe:2c:bd:42:97:de:c7:bd:d7: dd:c5:57:59:26:a0:4b:2c:a9:ac:2d:c3:a2:f8:88:ac:00:b6: 1a:ee:40:d2:14:69:d1:a9:4d:5a:58:2f:29:bf:6c:ec:fd:4e: ba:96:b0:57:54:8c:38:8b:35:ec:56:66:dd:4d:14:1b:11:cc: a7:5c:0e:09:c6:8d:61:8e:3f:c6:c0:d1:4b:a0:10:68:18:6e: 20:18:fc:cb:c8:33:0e:9f:47:1f:92:05:8b:f8:12:e8:01:0b: 0d:a0:d4:41:53:52:e4:4d:e2:df:da:4b:61:ac:ba:a7:0e:ea: 38:6f:f3:01:03:d5:6a:6c:95:e2:4f:25:02:92:18:af:cc:97: e9:d0:fa:27:9d:3b:d1:6e:d0:d6:b9:8a:d7:2f:de:95:7b:6e: 81:69:85:b4:5e:20:7c:39:15:a8:0a:b9:1b:b0:5a:66:67:f5: f4:57:55:70:7d:cb:1a:29:de:e2:da:80:59:97:ab:fa:70:7e: 2d:3d:aa:97:e0:37:7a:a5:87:6a:17:94:3c:aa:59:d7:80:8e: 6c:bd:80:a0:e7:61:9b:40:e5:21:24:06:63:53:b5:e2:ac:91: 4c:d3:33:6e:18:88:20:0f:4c:62:de:6a:52:59:1f:62:3c:e6: c9:ad:69:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ3MTMxMTAvBgNVBAUTKDY5QTQ4NkZCRjIxNDg0RjE0MTJGQjhBODBBMjc4QTI0 OENFRkJFQjIwHhcNMjUwODExMDQyOTIyWhcNMjUwODE4MDQyOTIyWjAYMRYwFAYD VQQDEw02ODk5NzFhMy03ZmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxq07DPQqAYClQcm55eXSUoE7G+q14cRwvbw+olpsRhntDdFjiDhebclggp5o H2YdB8VCGCHwS0WEhvnLZ9MQlqnqC7ye8gymwujMgu+7mOVYJvPsCTCwnqGNPzQO 2q/xBQsaZtjryg/hllRL51eAktcGBnuPkmUUycYgxMTCThPMNCoEx2xzJEq84Kvv Rly6In/H33eKpyfLxKKGRDvjV6btgnnKPQmvKYyphernmJEOqra3SjjnSUCsUP7W T1tlqnLXm0ZWSs+3H/RtF8tgyMwiLoKiljUzozeR6TbFoxX8VC3sOlZ+mJER4oeM gQx/1DhVuOCVjBjup7VYEzOFyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGxxSIoA uJc5Jip7cQKHULhxylLiMB8GA1UdIwQYMBaAFGmkhvvyFITxQS+4qAoniiSM776y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDcxMy9GRTFCRDk3Qzg5 MkExMUVFQjYxNDgyNkFDNEY5QUUwMi9hYVNHLV9JVWhQRkJMN2lvQ2llS0pJenZ2 ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FhU0ctX0lVaFBGQkw3aW9DaWVLSkl6dnZySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDcxMy9GRTFCRDk3Qzg5MkExMUVFQjYxNDgyNkFDNEY5QUUwMi9hYVNHLV9JVWhQ RkJMN2lvQ2llS0pJenZ2ckkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZYFU6TFjBJBb+LL1Cl97HvdfdxVdZJqBLLKmsLcOi+IisALYa7kDS FGnRqU1aWC8pv2zs/U66lrBXVIw4izXsVmbdTRQbEcynXA4Jxo1hjj/GwNFLoBBo GG4gGPzLyDMOn0cfkgWL+BLoAQsNoNRBU1LkTeLf2kthrLqnDuo4b/MBA9VqbJXi TyUCkhivzJfp0PonnTvRbtDWuYrXL96Ve26BaYW0XiB8ORWoCrkbsFpmZ/X0V1Vw fcsaKd7i2oBZl6v6cH4tPaqX4Dd6pYdqF5Q8qlnXgI5svYCg52GbQOUhJAZjU7Xi rJFM0zNuGIggD0xi3mpSWR9iPObJrWk3 -----END CERTIFICATE-----Generated at Mon Aug 11 06:18:51 2025 by rpki-client