$ rpki-client -vvf rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft File: awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft (raw, json) Hash identifier: /LWqJOcv3vJfqKIPq0dDvYEjDezbBjoKSZtlCYfXQ/g= Subject key identifier: 55:3E:1A:AB:B1:FE:6A:F8:07:9D:45:C6:9D:7B:D3:4D:89:1B:D0:DA Authority key identifier: 6B:0C:B5:95:03:DA:89:5F:F9:42:69:D7:A9:BC:20:26:17:04:DC:E9 Certificate issuer: /CN=A91A45E0/serialNumber=6B0CB59503DA895FF94269D7A9BC20261704DCE9 Certificate serial: 0C53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft Manifest number: 0C31 Signing time: Fri 18 Jul 2025 18:50:36 +0000 Manifest this update: Fri 18 Jul 2025 18:50:35 +0000 Manifest next update: Fri 25 Jul 2025 18:50:35 +0000 Files and hashes: 1: awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl (hash: lLaNNZzjsVg4Q6J7MF0oaT5euVA+jSLQzHzy7Z6rGVE=) 2: 1ECA8050696211EC8A05D115C4F9AE02.roa (hash: TDJGQsW2NIk73+noi3yai+lnEcUS65iyjDduaFF8MsU=) 3: 7A0359125C0E11ECA36CBF0FC4F9AE02.roa (hash: o+CZ7fn0neERiRGT74H4pMCJhxb2efrn1ZqyAv5eZQ0=) 4: DF1E2FEA97D611EB8BEF8223C4F9AE02.roa (hash: +Z1f48sI1Kz7JI6qJ55JG0SRXt9VC0MvWpOU7eCKqS8=) 5: 884C5FB8E60411EFBF5A7957C4F9AE02.roa (hash: lJpIF/DoFI3JvxRyvCQySFIPNE83lEmMNZBRdgQLMfI=) 6: 84CFF0D6D2F311EEAFCF3273C4F9AE02.roa (hash: lwAwrTafRErL3moVwMNPzUjYlQsMQhM9S9kLt9SAVBg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:50:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3155 (0xc53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A45E0, serialNumber=6B0CB59503DA895FF94269D7A9BC20261704DCE9 Validity Not Before: Jul 18 18:50:35 2025 GMT Not After : Jul 25 18:50:35 2025 GMT Subject: CN=687a977c-eaac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d2:e5:d5:2f:fa:49:81:d7:aa:e7:b7:68:6b: 9c:e4:9f:6c:32:e3:3a:5e:71:75:fa:c1:b9:db:48: 3b:e6:77:e0:d2:76:dc:82:e0:04:fd:0f:13:d9:b5: 9d:dd:e9:43:cb:b9:fe:a4:a7:25:58:ed:a6:8c:f7: 1b:46:08:3b:66:a8:50:f6:7f:14:58:90:7a:3d:3f: 0d:ee:e6:04:fd:07:ff:47:36:c9:62:22:6b:32:85: 1b:0e:7b:1c:90:4e:39:a5:c7:4b:49:5c:bb:65:64: 7c:d8:f2:ff:ff:3c:c1:10:6b:d5:bb:e8:21:d0:54: d3:51:a8:ce:c9:d8:3d:1e:25:b9:d0:bb:d1:1d:3a: e5:ce:06:d0:26:25:9a:1d:93:d3:f4:48:67:ef:bd: 64:dd:53:6d:db:70:58:5a:4a:26:af:92:5f:4a:27: b5:11:b1:06:0e:30:af:ea:2d:c0:52:86:79:cf:66: 16:89:83:8a:f1:5b:2a:f2:4d:73:0f:3b:90:6a:50: 76:11:6a:7f:e6:6d:09:f9:1e:b1:e6:ba:19:d6:23: fe:70:b1:1e:9d:d6:e8:23:d8:f6:5f:e4:f1:f3:62: bb:29:88:20:3b:fb:51:51:8f:6b:a7:5d:11:d7:77: c2:9d:56:05:1b:6c:74:e3:e7:00:41:b8:a3:1d:d0: 40:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:3E:1A:AB:B1:FE:6A:F8:07:9D:45:C6:9D:7B:D3:4D:89:1B:D0:DA X509v3 Authority Key Identifier: keyid:6B:0C:B5:95:03:DA:89:5F:F9:42:69:D7:A9:BC:20:26:17:04:DC:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:46:45:47:1f:b0:90:6c:eb:02:e8:81:60:27:cc:89:1c:b7: 81:03:6c:a5:38:de:54:8d:d4:16:2c:cc:26:bc:18:ac:21:09: 3c:2a:bb:4d:82:3f:e4:82:41:62:df:4c:95:bc:a3:02:23:5d: fe:3d:9e:1b:ef:e4:2d:ae:10:1a:af:e6:dd:49:14:37:89:49: b0:99:33:c8:54:d5:7a:9c:de:4e:10:df:c9:83:df:8d:e8:48: 29:6a:68:6e:81:a1:8f:d9:10:d9:3d:00:61:a7:f2:a5:ab:09: 9b:42:1d:a1:cc:08:6a:d3:e6:b7:6b:7a:3f:65:1d:04:af:86: 7a:eb:7c:62:c5:bf:40:a0:7a:2e:2a:4c:88:c0:18:1a:e4:1f: e3:ae:0b:25:45:8f:a0:2d:1b:dd:bb:6d:ea:3b:27:0d:b2:e6: 2f:24:60:ef:8f:c8:a7:aa:b7:1c:ff:43:b1:5b:bf:8b:86:ac: f7:55:b1:5e:d9:53:b6:09:0e:70:0a:fd:0f:75:b2:c3:0c:6b: 3e:f9:94:3b:5b:81:c2:bf:59:f6:39:5a:50:fe:65:9a:56:39: 13:49:6c:e1:cf:ba:9b:e4:51:2c:ab:09:5b:bb:fa:22:a6:bd: 84:6f:47:e2:fe:5f:e8:f8:b1:ed:c3:15:4b:d8:99:73:70:0e: a5:c1:13:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ1RTAxMTAvBgNVBAUTKDZCMENCNTk1MDNEQTg5NUZGOTQyNjlEN0E5QkMyMDI2 MTcwNERDRTkwHhcNMjUwNzE4MTg1MDM1WhcNMjUwNzI1MTg1MDM1WjAYMRYwFAYD VQQDEw02ODdhOTc3Yy1lYWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr9Ll1S/6SYHXque3aGuc5J9sMuM6XnF1+sG520g75nfg0nbcguAE/Q8T2bWd 3elDy7n+pKclWO2mjPcbRgg7ZqhQ9n8UWJB6PT8N7uYE/Qf/RzbJYiJrMoUbDnsc kE45pcdLSVy7ZWR82PL//zzBEGvVu+gh0FTTUajOydg9HiW50LvRHTrlzgbQJiWa HZPT9Ehn771k3VNt23BYWkomr5JfSie1EbEGDjCv6i3AUoZ5z2YWiYOK8Vsq8k1z DzuQalB2EWp/5m0J+R6x5roZ1iP+cLEendboI9j2X+Tx82K7KYggO/tRUY9rp10R 13fCnVYFG2x04+cAQbijHdBA3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFU+Gqux /mr4B51Fxp17002JG9DaMB8GA1UdIwQYMBaAFGsMtZUD2olf+UJp16m8ICYXBNzp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDVFMC8yM0JGMkYyNjEx M0UxMUVBODhFODc4NzZDNEY5QUUwMi9hd3kxbFFQYWlWXzVRbW5YcWJ3Z0poY0Uz T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F3eTFsUVBhaVZfNVFtblhxYndnSmhjRTNPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDVFMC8yM0JGMkYyNjExM0UxMUVBODhFODc4NzZDNEY5QUUwMi9hd3kxbFFQYWlW XzVRbW5YcWJ3Z0poY0UzT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZRkVHH7CQbOsC6IFgJ8yJHLeBA2ylON5UjdQWLMwmvBisIQk8KrtN gj/kgkFi30yVvKMCI13+PZ4b7+QtrhAar+bdSRQ3iUmwmTPIVNV6nN5OEN/Jg9+N 6EgpamhugaGP2RDZPQBhp/KlqwmbQh2hzAhq0+a3a3o/ZR0Er4Z663xixb9AoHou KkyIwBga5B/jrgslRY+gLRvdu23qOycNsuYvJGDvj8inqrcc/0OxW7+Lhqz3VbFe 2VO2CQ5wCv0PdbLDDGs++ZQ7W4HCv1n2OVpQ/mWaVjkTSWzhz7qb5FEsqwlbu/oi pr2Eb0fi/l/o+LHtwxVL2JlzcA6lwRNp -----END CERTIFICATE-----Generated at Sun Jul 20 15:15:49 2025 by rpki-client