$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft File: aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft (raw, json) Hash identifier: BNS//W4wWEthCezY2txxDZ8WnYAf+7SHo4YXQo92Spc= Subject key identifier: 81:C2:51:21:B5:07:92:6B:B9:4A:D7:2D:CA:17:67:8E:D2:9A:32:0A Authority key identifier: 69:23:6E:59:96:30:0A:2F:D7:85:EF:85:78:3C:5C:29:C5:B4:E8:74 Certificate issuer: /CN=A91EE5E5/serialNumber=69236E5996300A2FD785EF85783C5C29C5B4E874 Certificate serial: 82 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft Manifest number: 80 Signing time: Tue 05 Aug 2025 07:17:01 +0000 Manifest this update: Tue 05 Aug 2025 07:17:01 +0000 Manifest next update: Tue 12 Aug 2025 07:17:01 +0000 Files and hashes: 1: aSNuWZYwCi_Xhe-FeDxcKcW06HQ.crl (hash: Ha4/YLyyuF146p0KXgfWyvdC/A0gqvEv2u5/+S/VO9w=) 2: 1506B298B00711EF863A582EC4F9AE02.roa (hash: PjiKcHZxo3PwYpPFYpla6KazUuXCJGnKHspIakJqo2E=) 3: 4965F84CAFC011EF82BB1055C4F9AE02.roa (hash: jpijFayg1AhLIehVWTrf1nyIqutL0nvGe/8hsMY0L/c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.crl rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 07:17:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 130 (0x82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE5E5, serialNumber=69236E5996300A2FD785EF85783C5C29C5B4E874 Validity Not Before: Aug 5 07:17:01 2025 GMT Not After : Aug 12 07:17:01 2025 GMT Subject: CN=6891afed-7222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:67:67:99:82:9f:2f:fb:68:5d:25:ca:a1:b7: 22:70:cf:2d:01:e6:68:34:26:ab:18:a5:c8:b7:7f: 45:54:ab:3b:f3:ae:b2:45:23:87:94:c8:3f:8b:22: 4e:58:de:61:7d:10:82:4a:68:0f:71:30:87:d1:f5: 37:65:b2:c9:28:0e:48:1a:96:f6:fc:16:ff:de:90: 83:85:97:fe:05:7d:11:3c:c3:3c:3c:bd:c7:ac:31: f7:60:10:de:51:bc:76:37:63:aa:bd:f4:73:65:9c: 3a:e2:b6:6a:fc:d0:17:ea:be:04:28:c7:3b:83:2a: b1:b8:3f:49:22:74:11:31:a4:f0:5f:20:4b:c0:87: 35:f3:3e:0c:6c:9d:ef:72:43:68:77:eb:2e:8c:ae: 92:56:34:2a:9a:e5:31:98:ad:e2:b0:1b:a2:6f:43: 8f:d9:e7:d4:58:e9:56:3e:e8:6d:91:6a:e8:aa:6f: c2:54:6d:d9:1e:c9:36:ee:ef:ee:17:d7:e0:5c:32: 7b:9c:d1:40:7c:9d:48:22:3d:9c:6b:5e:66:0b:ad: e8:ff:da:c2:f4:a7:9f:19:c0:67:13:c1:49:ec:55: 8c:bd:59:8c:c3:99:af:45:1d:21:71:94:a5:44:f7: 39:7a:43:d0:4f:1d:c4:c0:07:3a:81:29:89:97:3f: 1b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:C2:51:21:B5:07:92:6B:B9:4A:D7:2D:CA:17:67:8E:D2:9A:32:0A X509v3 Authority Key Identifier: keyid:69:23:6E:59:96:30:0A:2F:D7:85:EF:85:78:3C:5C:29:C5:B4:E8:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:3c:3c:4b:2e:7c:20:2b:e6:70:57:e8:3d:5f:7d:0b:c2:17: ca:76:28:d6:e0:92:e6:58:67:07:09:f3:7a:af:8d:71:bb:ca: 03:ce:82:f0:55:60:b4:66:a7:0d:b2:60:92:e5:65:4c:c2:7c: 6f:b1:fb:3e:1a:ba:c6:97:c5:b9:57:6a:39:32:79:1d:7a:ad: 0b:47:82:2f:67:1f:bf:a7:a4:4f:be:e8:e9:a6:84:23:15:00: c4:e3:76:73:0f:83:79:b8:3f:3b:c5:c2:7c:5a:67:6f:b2:43: 76:67:41:9e:2f:ec:16:44:6d:df:e5:79:7d:e5:56:41:bb:ee: 72:e9:b3:b0:42:70:c7:8a:35:bf:c9:1b:43:54:61:77:3f:94: 3f:15:8b:1d:be:99:74:cc:d6:50:48:8c:cb:84:f6:d1:46:3d: 1e:66:97:d9:f3:1c:5d:1b:94:05:c1:e9:1f:d3:09:46:a4:49: db:a6:a8:f7:d5:77:e4:b2:9f:9c:18:59:ae:22:25:03:7f:a3: b9:bc:5b:57:60:cc:3a:af:98:f4:7f:11:f6:56:67:76:fe:18: 13:bd:99:b4:19:41:21:f1:66:7e:b7:21:cd:a3:52:a4:a0:ad: 11:22:ae:15:a2:c6:0f:14:d2:41:75:00:a5:c8:08:f2:43:04: 5e:de:4b:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUU1RTUxMTAvBgNVBAUTKDY5MjM2RTU5OTYzMDBBMkZENzg1RUY4NTc4M0M1QzI5 QzVCNEU4NzQwHhcNMjUwODA1MDcxNzAxWhcNMjUwODEyMDcxNzAxWjAYMRYwFAYD VQQDEw02ODkxYWZlZC03MjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1GdnmYKfL/toXSXKobcicM8tAeZoNCarGKXIt39FVKs7866yRSOHlMg/iyJO WN5hfRCCSmgPcTCH0fU3ZbLJKA5IGpb2/Bb/3pCDhZf+BX0RPMM8PL3HrDH3YBDe Ubx2N2OqvfRzZZw64rZq/NAX6r4EKMc7gyqxuD9JInQRMaTwXyBLwIc18z4MbJ3v ckNod+sujK6SVjQqmuUxmK3isBuib0OP2efUWOlWPuhtkWroqm/CVG3ZHsk27u/u F9fgXDJ7nNFAfJ1IIj2ca15mC63o/9rC9KefGcBnE8FJ7FWMvVmMw5mvRR0hcZSl RPc5ekPQTx3EwAc6gSmJlz8bqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIHCUSG1 B5JruUrXLcoXZ47SmjIKMB8GA1UdIwQYMBaAFGkjblmWMAov14XvhXg8XCnFtOh0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTVFNS9GMEU3NkUxMkFG QkYxMUVGQTI4QTM2NTRDNEY5QUUwMi9hU051V1pZd0NpX1hoZS1GZUR4Y0tjVzA2 SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2FTTnVXWll3Q2lfWGhlLUZlRHhjS2NXMDZIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTVFNS9GMEU3NkUxMkFGQkYxMUVGQTI4QTM2NTRDNEY5QUUwMi9hU051V1pZd0Np X1hoZS1GZUR4Y0tjVzA2SFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClPDxLLnwgK+ZwV+g9X30LwhfKdijW4JLmWGcHCfN6r41xu8oDzoLw VWC0ZqcNsmCS5WVMwnxvsfs+GrrGl8W5V2o5Mnkdeq0LR4IvZx+/p6RPvujppoQj FQDE43ZzD4N5uD87xcJ8WmdvskN2Z0GeL+wWRG3f5Xl95VZBu+5y6bOwQnDHijW/ yRtDVGF3P5Q/FYsdvpl0zNZQSIzLhPbRRj0eZpfZ8xxdG5QFwekf0wlGpEnbpqj3 1Xfksp+cGFmuIiUDf6O5vFtXYMw6r5j0fxH2Vmd2/hgTvZm0GUEh8WZ+tyHNo1Kk oK0RIq4VosYPFNJBdQClyAjyQwRe3kuZ -----END CERTIFICATE-----Generated at Wed Aug 6 14:06:36 2025 by rpki-client