$ rpki-client -vvf rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.mft File: EAslNUZkaB2quQXO_0pNp0nE64o.mft (raw, json) Hash identifier: ojPV1TYqn7lhmiHILqNc2oxnCNwnu1dHva9OVDrHFhM= Subject key identifier: FE:8A:57:E1:82:F7:2C:F9:02:AC:AD:25:87:E2:75:5D:4C:0F:6C:81 Authority key identifier: 10:0B:25:35:46:64:68:1D:AA:B9:05:CE:FF:4A:4D:A7:49:C4:EB:8A Certificate issuer: /CN=A91D488C/serialNumber=100B25354664681DAAB905CEFF4A4DA749C4EB8A Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EAslNUZkaB2quQXO_0pNp0nE64o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.mft Manifest number: 0E Signing time: Sat 09 Aug 2025 08:41:41 +0000 Manifest this update: Sat 09 Aug 2025 08:41:40 +0000 Manifest next update: Sat 16 Aug 2025 08:41:40 +0000 Files and hashes: 1: EAslNUZkaB2quQXO_0pNp0nE64o.crl (hash: P48w3lm5HMySOgtL6MxISf+SAzY4oXuh7t3RdVgDjDk=) 2: 4DA7A7766C6611F0883DC646C4F9AE02.roa (hash: Q+FmthFDMCnpB7Yj2dZxhxoV/SktKs7HXODFGAlvqdE=) 3: 8B9109C06B8911F0A0F62851C4F9AE02.roa (hash: 9jfSP8gh6271KQbI+jNnvgnlMdq0sgOuoX6+h4wU+tM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.crl rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EAslNUZkaB2quQXO_0pNp0nE64o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D488C, serialNumber=100B25354664681DAAB905CEFF4A4DA749C4EB8A Validity Not Before: Aug 9 08:41:40 2025 GMT Not After : Aug 16 08:41:40 2025 GMT Subject: CN=689709c4-db68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:c5:1c:6b:57:51:2d:66:4d:6f:21:d6:37:af: 2b:fa:a4:79:5d:d8:fc:20:8e:73:b9:86:64:ff:26: 78:4a:ed:c7:64:63:d7:8b:99:04:32:22:07:7f:2d: 3b:30:c0:0e:34:7b:75:cf:6d:4d:fa:af:4a:5d:50: 39:b0:ee:3a:e6:19:16:6a:44:13:9e:7b:2d:35:b3: e7:7a:46:8c:94:12:6b:01:83:b7:c8:f3:20:d6:be: 73:8b:72:70:7f:21:74:74:e0:1e:76:5b:53:11:e9: 1c:03:00:25:0c:67:73:31:a5:96:c6:43:37:79:fe: 27:6f:67:ed:44:68:85:f9:e0:28:30:57:b8:90:db: e6:69:a0:c1:d7:d2:4b:fd:6e:68:21:10:80:7f:01: 86:1f:fc:1b:4e:ff:50:f7:a9:61:5b:b7:c2:1d:95: 3e:12:38:a7:0b:8d:7b:78:33:d8:20:1f:91:28:31: e5:84:a7:0f:72:d4:46:da:da:f3:0b:64:d8:d3:1b: 9d:97:37:fd:c3:df:cd:7e:35:1b:0d:a5:84:ec:67: 9b:fd:11:41:fc:46:eb:21:b4:ce:b0:89:46:3a:bd: 1f:3b:b8:43:29:f0:d3:5d:56:61:e5:66:35:b3:06: 07:2c:18:35:13:a0:b3:48:0f:6c:c0:e8:af:2c:9c: e0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:8A:57:E1:82:F7:2C:F9:02:AC:AD:25:87:E2:75:5D:4C:0F:6C:81 X509v3 Authority Key Identifier: keyid:10:0B:25:35:46:64:68:1D:AA:B9:05:CE:FF:4A:4D:A7:49:C4:EB:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EAslNUZkaB2quQXO_0pNp0nE64o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:42:be:f4:f9:ab:0a:f9:b2:e0:54:04:0e:b6:a9:3b:58:a8: e8:85:20:e7:8e:d2:d7:13:3c:b5:58:f8:5b:b0:c7:03:c7:e6: 67:b9:6f:bd:cd:92:8a:5f:af:85:8f:69:88:f6:b0:3e:16:26: e6:e0:5e:98:6b:04:2c:7e:6e:f7:18:9e:1a:ab:a3:99:80:03: a0:40:3a:03:f6:81:c7:20:a5:f7:aa:c5:54:9e:83:10:3a:4e: d3:f4:4c:68:5a:65:53:1e:45:ff:07:b2:91:89:53:d7:5b:7e: bb:65:d7:ea:52:b3:78:65:48:33:42:1c:25:d1:f9:ac:29:8c: 70:f7:a7:93:14:39:34:38:bb:53:90:8a:b1:a9:0d:10:2d:d8: d8:77:4b:69:30:e8:9e:ab:d1:21:14:76:b2:1f:04:62:c3:d8: 18:e0:40:76:a2:70:1d:9a:df:f7:ee:db:17:52:55:d0:0a:1e: 53:01:77:48:08:f5:ad:f6:78:21:35:c4:12:fe:5c:83:b0:44: 5d:15:12:6d:bf:9a:ff:a6:64:86:8e:e7:d1:ad:a0:e1:c3:fe: 43:85:73:ae:90:c3:43:b4:d6:3c:9c:5f:bf:e9:7c:d5:42:33: 68:d2:1d:8a:6c:a4:44:5a:04:eb:ca:53:45:d9:cf:7c:f6:81: 62:02:97:82 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NDg4QzExMC8GA1UEBRMoMTAwQjI1MzU0NjY0NjgxREFBQjkwNUNFRkY0QTREQTc0 OUM0RUI4QTAeFw0yNTA4MDkwODQxNDBaFw0yNTA4MTYwODQxNDBaMBgxFjAUBgNV BAMTDTY4OTcwOWM0LWRiNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDlxRxrV1EtZk1vIdY3ryv6pHld2PwgjnO5hmT/JnhK7cdkY9eLmQQyIgd/LTsw wA40e3XPbU36r0pdUDmw7jrmGRZqRBOeey01s+d6RoyUEmsBg7fI8yDWvnOLcnB/ IXR04B52W1MR6RwDACUMZ3MxpZbGQzd5/idvZ+1EaIX54CgwV7iQ2+ZpoMHX0kv9 bmghEIB/AYYf/BtO/1D3qWFbt8IdlT4SOKcLjXt4M9ggH5EoMeWEpw9y1Eba2vML ZNjTG52XN/3D381+NRsNpYTsZ5v9EUH8RushtM6wiUY6vR87uEMp8NNdVmHlZjWz BgcsGDUToLNID2zA6K8snOAHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/opX4YL3 LPkCrK0lh+J1XUwPbIEwHwYDVR0jBBgwFoAUEAslNUZkaB2quQXO/0pNp0nE64ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0ODhDLzQ2QjAwNTA0NkI4 OTExRjA5NUYxMTAyQkM0RjlBRTAyL0VBc2xOVVprYUIycXVRWE9fMHBOcDBuRTY0 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRUFzbE5VWmthQjJxdVFYT18wcE5wMG5FNjRvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0 ODhDLzQ2QjAwNTA0NkI4OTExRjA5NUYxMTAyQkM0RjlBRTAyL0VBc2xOVVprYUIy cXVRWE9fMHBOcDBuRTY0by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGlCvvT5qwr5suBUBA62qTtYqOiFIOeO0tcTPLVY+FuwxwPH5me5b73N kopfr4WPaYj2sD4WJubgXphrBCx+bvcYnhqro5mAA6BAOgP2gccgpfeqxVSegxA6 TtP0TGhaZVMeRf8HspGJU9dbfrtl1+pSs3hlSDNCHCXR+awpjHD3p5MUOTQ4u1OQ irGpDRAt2Nh3S2kw6J6r0SEUdrIfBGLD2BjgQHaicB2a3/fu2xdSVdAKHlMBd0gI 9a32eCE1xBL+XIOwRF0VEm2/mv+mZIaO59GtoOHD/kOFc66Qw0O01jycX7/pfNVC M2jSHYpspERaBOvKU0XZz3z2gWICl4I= -----END CERTIFICATE-----Generated at Mon Aug 11 02:06:04 2025 by rpki-client