$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft File: Aqo6dsRZSXsbRfJukESsxvLoBE8.mft (raw, json) Hash identifier: Po6z0IL9x7pEsqvgv9DLDIno70/1y4vz/1mwlNALmdo= Subject key identifier: DC:21:9C:F6:DD:F9:28:E5:8A:D3:37:71:29:B4:36:B4:84:6E:9F:FE Authority key identifier: 02:AA:3A:76:C4:59:49:7B:1B:45:F2:6E:90:44:AC:C6:F2:E8:04:4F Certificate issuer: /CN=A91BA5BA/serialNumber=02AA3A76C459497B1B45F26E9044ACC6F2E8044F Certificate serial: 039E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft Manifest number: 038B Signing time: Mon 11 Aug 2025 01:04:37 +0000 Manifest this update: Mon 11 Aug 2025 01:04:36 +0000 Manifest next update: Mon 18 Aug 2025 01:04:36 +0000 Files and hashes: 1: Aqo6dsRZSXsbRfJukESsxvLoBE8.crl (hash: dzX22lFen7FYsunjlMhls8PWGuhqb/L3KaLF1/JiINk=) 2: 87F2D334F2D811EC8F663D52C4F9AE02.roa (hash: 2CusgDeod/GNoY/LuvI1PPosNLPCfcqPbyc433D/0Uw=) 3: 5FFA5548B5A311EEA95C5732C4F9AE02.roa (hash: Qo8S4vnL8vk6lsjFg8E5pxu1jHSHJhkqcg0rzkOHusw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.crl rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 926 (0x39e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA5BA, serialNumber=02AA3A76C459497B1B45F26E9044ACC6F2E8044F Validity Not Before: Aug 11 01:04:36 2025 GMT Not After : Aug 18 01:04:36 2025 GMT Subject: CN=689941a4-ed59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:93:29:34:5e:53:59:5f:c3:4a:ff:07:63:af: 51:79:6a:58:23:8d:4f:8e:45:7f:c1:df:a9:10:e8: 9a:c6:80:b4:93:ca:98:a6:78:fe:c3:ec:fe:1f:8e: 4e:93:98:63:06:d1:a9:d7:08:5f:6e:d2:57:75:bc: 32:d4:68:f2:01:86:be:f4:17:5a:93:b0:e2:2e:8f: e3:8a:14:3c:40:06:3b:14:0c:6d:75:73:2f:e6:3d: e7:3f:e8:aa:0c:07:d6:c7:d0:02:6e:e5:c0:fa:06: ec:0c:10:81:17:e8:89:57:8a:91:2c:1c:83:3f:0e: 3a:9b:13:8b:a0:17:43:04:a2:b7:57:d7:ae:a1:72: 5f:d4:a2:8f:4c:9f:ef:be:31:67:5e:e3:76:0f:d7: 17:54:8b:02:d6:52:3c:91:8e:9a:8f:e0:04:bd:32: 08:ff:d9:7a:17:8b:7b:a1:9f:b8:ba:73:21:05:36: f6:cf:3a:85:c0:15:ed:ff:89:54:7e:99:1e:be:ff: 69:6b:d3:96:2c:75:9a:5e:3b:33:5d:00:87:7b:b0: 11:ef:33:89:08:89:1c:b7:21:5c:bd:2f:c9:87:a2: 03:07:06:0f:a0:51:5b:64:0c:72:b5:7f:13:39:e3: 08:23:ff:00:97:31:f6:83:00:64:06:63:6a:b0:67: 2f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:21:9C:F6:DD:F9:28:E5:8A:D3:37:71:29:B4:36:B4:84:6E:9F:FE X509v3 Authority Key Identifier: keyid:02:AA:3A:76:C4:59:49:7B:1B:45:F2:6E:90:44:AC:C6:F2:E8:04:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:5f:db:7c:44:ee:49:b1:37:1d:7a:04:33:5e:69:19:72:a9: 06:a6:59:1a:98:1f:b6:af:91:d3:b0:f2:5b:01:12:63:56:93: 7d:65:a8:08:bd:36:76:e5:35:2f:a4:6b:a3:c3:9a:37:0a:09: 3d:3d:cf:ea:7b:5c:13:0f:33:f5:de:a9:9c:6e:10:dd:3c:6a: 55:db:01:d8:20:56:a3:f3:b5:37:47:a2:4f:e7:1d:a4:2e:d5: b6:09:e9:80:b5:bc:b3:75:e4:98:b6:b5:8a:86:c3:7d:b4:ca: e3:f2:b8:33:fd:cd:bf:37:0c:1d:23:ed:be:b6:4f:52:58:ff: bc:29:80:9d:ed:8a:34:b3:a4:60:de:17:72:e7:15:71:89:e6: a6:b1:21:6f:44:f3:26:f3:a9:b0:4d:e0:d3:15:b5:cc:d3:63: ee:d0:c2:73:bc:1e:8c:53:79:25:ab:48:58:7a:2d:49:fd:2c: 42:ff:1b:01:09:54:e7:53:f1:80:a0:6c:dd:fa:e4:bd:3a:92: 79:17:49:00:2c:08:b6:54:f3:0d:42:fb:3d:79:0b:cf:55:1a: fe:3e:f2:40:a0:05:97:72:a9:45:89:7f:0d:85:44:d6:f6:bc: 5f:05:7f:68:61:a7:c3:cb:ca:aa:52:b3:70:a3:a7:65:df:f5: 96:94:47:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA54wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE1QkExMTAvBgNVBAUTKDAyQUEzQTc2QzQ1OTQ5N0IxQjQ1RjI2RTkwNDRBQ0M2 RjJFODA0NEYwHhcNMjUwODExMDEwNDM2WhcNMjUwODE4MDEwNDM2WjAYMRYwFAYD VQQDEw02ODk5NDFhNC1lZDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsJMpNF5TWV/DSv8HY69ReWpYI41PjkV/wd+pEOiaxoC0k8qYpnj+w+z+H45O k5hjBtGp1whfbtJXdbwy1GjyAYa+9Bdak7DiLo/jihQ8QAY7FAxtdXMv5j3nP+iq DAfWx9ACbuXA+gbsDBCBF+iJV4qRLByDPw46mxOLoBdDBKK3V9euoXJf1KKPTJ/v vjFnXuN2D9cXVIsC1lI8kY6aj+AEvTII/9l6F4t7oZ+4unMhBTb2zzqFwBXt/4lU fpkevv9pa9OWLHWaXjszXQCHe7AR7zOJCIkctyFcvS/Jh6IDBwYPoFFbZAxytX8T OeMII/8AlzH2gwBkBmNqsGcv5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNwhnPbd +SjlitM3cSm0NrSEbp/+MB8GA1UdIwQYMBaAFAKqOnbEWUl7G0XybpBErMby6ARP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTVCQS80MzI2Q0JDMEI3 Q0QxMUVDQUY2ODEzMzVDNEY5QUUwMi9BcW82ZHNSWlNYc2JSZkp1a0VTc3h2TG9C RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FxbzZkc1JaU1hzYlJmSnVrRVNzeHZMb0JFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTVCQS80MzI2Q0JDMEI3Q0QxMUVDQUY2ODEzMzVDNEY5QUUwMi9BcW82ZHNSWlNY c2JSZkp1a0VTc3h2TG9CRTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApX9t8RO5JsTcdegQzXmkZcqkGplkamB+2r5HTsPJbARJjVpN9ZagI vTZ25TUvpGujw5o3Cgk9Pc/qe1wTDzP13qmcbhDdPGpV2wHYIFaj87U3R6JP5x2k LtW2CemAtbyzdeSYtrWKhsN9tMrj8rgz/c2/NwwdI+2+tk9SWP+8KYCd7Yo0s6Rg 3hdy5xVxieamsSFvRPMm86mwTeDTFbXM02Pu0MJzvB6MU3klq0hYei1J/SxC/xsB CVTnU/GAoGzd+uS9OpJ5F0kALAi2VPMNQvs9eQvPVRr+PvJAoAWXcqlFiX8NhUTW 9rxfBX9oYafDy8qqUrNwo6dl3/WWlEdp -----END CERTIFICATE-----Generated at Mon Aug 11 10:03:03 2025 by rpki-client