$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft File: aXYgUV57Huisfz9tE76uumLE7ak.mft (raw, json) Hash identifier: /6ppZBDH1PyuxrfeeMGr2xIpE/95zklL3g/dc5KQsMo= Subject key identifier: E4:28:98:A8:B3:78:F7:56:BF:8E:C8:30:BE:C7:0F:38:F6:0A:D5:2A Authority key identifier: 69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9 Certificate issuer: /CN=A91DE2AE/serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9 Certificate serial: 0209 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft Manifest number: 01F5 Signing time: Tue 05 Aug 2025 03:05:30 +0000 Manifest this update: Tue 05 Aug 2025 03:05:30 +0000 Manifest next update: Tue 12 Aug 2025 03:05:30 +0000 Files and hashes: 1: aXYgUV57Huisfz9tE76uumLE7ak.crl (hash: rn/ashNEbbsjhRAaHOvTtVeapB+AMTUDWp67/ztbsR4=) 2: 38E45CE08C2511EDB64DB410C4F9AE02.roa (hash: cR87tK+M2QvPpStj15TUAHSw7pMeZSCsKtclKhkYsV4=) 3: F3B716768F2F11EE86964D62C4F9AE02.roa (hash: Ez3fMRvxWFNiR5F6idq+GUYygoYJpqIuMgbojOp3vAE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 03:05:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 521 (0x209) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE2AE, serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9 Validity Not Before: Aug 5 03:05:30 2025 GMT Not After : Aug 12 03:05:30 2025 GMT Subject: CN=689174fa-8613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:24:b5:48:74:71:29:b7:55:03:6e:3e:45:b8: 85:47:ef:ef:70:0e:85:51:be:d8:f9:3e:b7:44:17: 61:b5:7c:46:17:38:a8:86:6e:16:41:00:3a:9d:21: 3f:59:49:14:85:92:40:2e:38:12:c9:7b:8a:67:74: 27:08:57:02:73:bc:00:a3:ce:a3:0e:ed:50:80:2b: 4e:82:cd:ad:3a:9e:0f:69:d1:98:86:83:0b:b2:b8: 2a:a5:07:93:30:1d:a1:14:3d:07:3b:d6:f2:3a:4d: db:eb:4a:e9:1c:27:27:ba:e2:e6:ea:be:94:43:b9: 5b:31:f0:e1:bf:5d:95:65:92:b9:ac:52:00:9d:29: 57:c2:09:00:e4:3c:40:9c:2c:ca:e8:87:5f:8a:d4: 25:92:8e:ce:5b:f2:4a:3a:2c:31:f2:d9:a4:a5:2f: 64:83:93:6b:f4:ab:48:60:b7:5d:01:c6:57:33:d5: 11:9d:e3:02:89:f8:b3:3e:45:e0:51:e7:f2:94:ae: bd:b6:0e:86:6f:a5:27:9c:2a:aa:9a:fa:f1:b2:11: 0e:c4:c8:2d:ec:be:41:74:54:78:3d:94:be:f8:73: 8b:22:c0:1d:04:8a:ba:46:f2:aa:a2:de:99:3a:6c: 66:d5:07:a9:df:60:22:6e:fe:71:d5:58:9b:7d:cd: 10:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:28:98:A8:B3:78:F7:56:BF:8E:C8:30:BE:C7:0F:38:F6:0A:D5:2A X509v3 Authority Key Identifier: keyid:69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:9c:d7:67:61:33:38:11:9a:e4:bb:0f:b9:6d:59:d4:8e:69: c1:8f:6c:5d:11:f9:9b:91:6f:62:28:08:9a:33:d1:00:00:39: b7:1d:2b:96:40:59:47:0a:0b:41:bb:ee:ff:cf:a7:f1:ad:96: 91:65:6e:91:5a:fb:75:05:bc:d4:60:0e:70:35:54:7e:59:1b: b6:35:4b:28:54:50:a6:ed:df:94:30:82:87:c8:53:37:b7:59: 74:a7:0f:3d:73:fd:fa:ad:ce:c4:9c:6a:19:8e:22:51:84:0b: 05:57:67:ba:ef:e4:83:82:5a:c0:d2:23:60:15:52:83:14:09: ad:b7:bc:3a:26:ad:9a:26:21:c1:02:c7:85:ad:da:fc:df:24: a7:59:d7:a6:ea:e6:c0:93:c5:4f:b2:69:f5:e3:e3:46:1d:4d: 69:9a:75:51:e4:1f:e9:ee:c0:82:e8:1d:f6:d0:b2:21:30:ec: 11:4e:0b:95:c5:7a:e8:06:cc:6a:ef:08:68:61:2e:30:df:8a: 65:03:31:23:b0:44:23:de:f6:a8:0d:ad:4e:23:84:49:62:cc: 77:23:3e:2f:c8:0b:dc:ee:f7:5b:6b:7f:de:31:00:5c:a2:63: cb:8b:3f:a9:17:8f:c6:0d:51:19:b9:c3:4d:5a:27:d2:65:d4: e7:6b:b7:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUyQUUxMTAvBgNVBAUTKDY5NzYyMDUxNUU3QjFFRThBQzdGM0Y2RDEzQkVBRUJB NjJDNEVEQTkwHhcNMjUwODA1MDMwNTMwWhcNMjUwODEyMDMwNTMwWjAYMRYwFAYD VQQDEw02ODkxNzRmYS04NjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5yS1SHRxKbdVA24+RbiFR+/vcA6FUb7Y+T63RBdhtXxGFziohm4WQQA6nSE/ WUkUhZJALjgSyXuKZ3QnCFcCc7wAo86jDu1QgCtOgs2tOp4PadGYhoMLsrgqpQeT MB2hFD0HO9byOk3b60rpHCcnuuLm6r6UQ7lbMfDhv12VZZK5rFIAnSlXwgkA5DxA nCzK6IdfitQlko7OW/JKOiwx8tmkpS9kg5Nr9KtIYLddAcZXM9URneMCifizPkXg UefylK69tg6Gb6UnnCqqmvrxshEOxMgt7L5BdFR4PZS++HOLIsAdBIq6RvKqot6Z Omxm1Qep32Aibv5x1Vibfc0QOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOQomKiz ePdWv47IML7HDzj2CtUqMB8GA1UdIwQYMBaAFGl2IFFeex7orH8/bRO+rrpixO2p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTJBRS9DNzBGRUEyQThD MjAxMUVEQURENUM4MDlDNEY5QUUwMi9hWFlnVVY1N0h1aXNmejl0RTc2dXVtTEU3 YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FYWWdVVjU3SHVpc2Z6OXRFNzZ1dW1MRTdhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTJBRS9DNzBGRUEyQThDMjAxMUVEQURENUM4MDlDNEY5QUUwMi9hWFlnVVY1N0h1 aXNmejl0RTc2dXVtTEU3YWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAnNdnYTM4EZrkuw+5bVnUjmnBj2xdEfmbkW9iKAiaM9EAADm3HSuW QFlHCgtBu+7/z6fxrZaRZW6RWvt1BbzUYA5wNVR+WRu2NUsoVFCm7d+UMIKHyFM3 t1l0pw89c/36rc7EnGoZjiJRhAsFV2e67+SDglrA0iNgFVKDFAmtt7w6Jq2aJiHB AseFrdr83ySnWdem6ubAk8VPsmn14+NGHU1pmnVR5B/p7sCC6B320LIhMOwRTguV xXroBsxq7whoYS4w34plAzEjsEQj3vaoDa1OI4RJYsx3Iz4vyAvc7vdba3/eMQBc omPLiz+pF4/GDVEZucNNWifSZdTna7dp -----END CERTIFICATE-----Generated at Wed Aug 6 16:05:00 2025 by rpki-client