$ rpki-client -vvf rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft File: aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft (raw, json) Hash identifier: 464AudteFYv2LoMzPT+ujmA/1EkNx6jfIxZXUBbI46Y= Subject key identifier: FB:BA:EE:D6:AD:EF:86:AE:0D:8D:D0:58:9D:D9:24:B9:3E:88:5F:41 Authority key identifier: 69:6A:F4:FE:03:66:13:D6:51:B5:E2:9A:09:D4:FE:71:B5:55:A4:49 Certificate issuer: /CN=A91A80F9/serialNumber=696AF4FE036613D651B5E29A09D4FE71B555A449 Certificate serial: 0CBD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWr0_gNmE9ZRteKaCdT-cbVVpEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft Manifest number: 0CB5 Signing time: Sun 20 Jul 2025 18:11:41 +0000 Manifest this update: Sun 20 Jul 2025 18:11:41 +0000 Manifest next update: Sun 27 Jul 2025 18:11:41 +0000 Files and hashes: 1: aWr0_gNmE9ZRteKaCdT-cbVVpEk.crl (hash: BFoXiJl/kBj8vmu8NrTSeTQq+pyql5BlLs6OOtTCqRU=) 2: 3EF3C6EEF8B511EAAD434755C4F9AE02.roa (hash: 2oxrZykX6FImkgj0+sEn3YTkG/5Ks+ROCEDtHP8d+xs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.crl rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWr0_gNmE9ZRteKaCdT-cbVVpEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 18:11:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3261 (0xcbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A80F9, serialNumber=696AF4FE036613D651B5E29A09D4FE71B555A449 Validity Not Before: Jul 20 18:11:41 2025 GMT Not After : Jul 27 18:11:41 2025 GMT Subject: CN=687d315d-2ff9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:61:51:7e:1f:0d:ad:50:0f:aa:fb:4f:eb:e2: bb:be:a0:f5:fa:2b:b8:75:8c:2d:e0:79:a6:4f:0a: 1b:4e:6e:8b:1f:c0:9f:73:39:77:ca:68:7b:b8:95: c7:ae:c0:4a:db:71:7d:bf:11:21:84:58:d2:b6:e7: fd:02:45:cf:69:9b:7b:50:56:b5:5d:0d:02:00:05: 67:65:d9:9c:2f:7b:de:96:c6:2f:e3:71:ac:db:d2: 98:dc:ff:fe:a8:39:1f:f0:0f:dc:23:7a:2e:f5:5a: b6:21:24:b8:c0:19:d7:8a:14:44:7f:67:d4:6f:c5: 85:40:ad:65:36:a3:0c:fe:6c:5e:12:b1:87:e7:7c: 01:89:f8:76:1b:20:ac:87:ac:e2:48:a3:0e:19:13: e8:b8:96:f5:d1:36:91:61:53:6b:c1:2e:86:a7:32: d2:a2:be:3a:72:4e:36:a4:c6:00:eb:a8:e2:0f:43: 8a:a7:9f:d6:ac:c6:2d:77:73:fa:8f:ee:96:d2:b6: 92:f9:6f:3d:1b:38:fe:d8:0b:06:4f:10:8d:a2:f8: 6d:09:86:89:47:6c:cf:ee:bf:92:1a:b3:c4:93:36: c0:48:2b:ab:f7:cf:18:11:13:6c:a1:95:05:0c:89: 78:c5:a4:ab:67:26:9d:d0:59:2b:af:aa:82:c3:54: c1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:BA:EE:D6:AD:EF:86:AE:0D:8D:D0:58:9D:D9:24:B9:3E:88:5F:41 X509v3 Authority Key Identifier: keyid:69:6A:F4:FE:03:66:13:D6:51:B5:E2:9A:09:D4:FE:71:B5:55:A4:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWr0_gNmE9ZRteKaCdT-cbVVpEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:59:f9:32:2a:46:72:dd:30:27:86:a0:29:89:34:2e:30:e5: 6e:15:a7:93:1d:45:67:ad:47:eb:ee:36:72:1c:f0:b9:0b:3c: 2a:ff:f9:d7:0f:03:61:eb:b8:6e:e3:4a:f2:ba:e2:7f:6b:15: bb:e6:82:70:8b:e6:88:c4:bb:fb:01:8a:5e:a2:1a:a5:43:5b: 84:3f:1a:e4:82:9c:3c:25:e2:6f:11:c7:28:70:fd:5c:2c:86: c1:6e:a6:24:96:0a:85:0f:19:ce:d9:ac:49:35:be:19:49:ab: 8e:c5:f6:1e:49:0d:d8:28:e7:61:fe:b7:b2:c7:d6:b5:62:ed: d2:69:95:9d:42:43:48:23:35:81:57:a8:3a:e7:4e:4a:36:29: 5c:9e:4d:8a:fa:b5:ff:49:cf:3a:72:d5:06:fc:c5:86:0e:fc: b5:04:42:69:40:2c:24:c2:ab:4b:c8:61:14:84:7b:51:5d:8d: ca:d2:81:62:ee:c2:97:0a:d4:3f:8c:c2:39:f1:59:76:04:00: 93:00:d4:29:7c:56:10:74:98:c4:1e:a4:60:d3:92:25:08:6e: 37:be:d2:62:6f:f1:10:d4:08:87:8d:f9:e4:fb:c0:7f:f0:a5: 10:f1:7f:fe:1b:31:88:0e:ba:93:41:78:eb:fe:5f:b0:e2:f0: a0:ba:69:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgwRjkxMTAvBgNVBAUTKDY5NkFGNEZFMDM2NjEzRDY1MUI1RTI5QTA5RDRGRTcx QjU1NUE0NDkwHhcNMjUwNzIwMTgxMTQxWhcNMjUwNzI3MTgxMTQxWjAYMRYwFAYD VQQDEw02ODdkMzE1ZC0yZmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA22FRfh8NrVAPqvtP6+K7vqD1+iu4dYwt4HmmTwobTm6LH8Cfczl3ymh7uJXH rsBK23F9vxEhhFjStuf9AkXPaZt7UFa1XQ0CAAVnZdmcL3velsYv43Gs29KY3P/+ qDkf8A/cI3ou9Vq2ISS4wBnXihREf2fUb8WFQK1lNqMM/mxeErGH53wBifh2GyCs h6ziSKMOGRPouJb10TaRYVNrwS6GpzLSor46ck42pMYA66jiD0OKp5/WrMYtd3P6 j+6W0raS+W89Gzj+2AsGTxCNovhtCYaJR2zP7r+SGrPEkzbASCur988YERNsoZUF DIl4xaSrZyad0Fkrr6qCw1TBXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPu67tat 74auDY3QWJ3ZJLk+iF9BMB8GA1UdIwQYMBaAFGlq9P4DZhPWUbXimgnU/nG1VaRJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODBGOS80OTc3M0FEMEY0 QTQxMUU5OENDNzVFMzdDNEY5QUUwMi9hV3IwX2dObUU5WlJ0ZUthQ2RULWNiVlZw RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FXcjBfZ05tRTlaUnRlS2FDZFQtY2JWVnBFay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODBGOS80OTc3M0FEMEY0QTQxMUU5OENDNzVFMzdDNEY5QUUwMi9hV3IwX2dObUU5 WlJ0ZUthQ2RULWNiVlZwRWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9WfkyKkZy3TAnhqApiTQuMOVuFaeTHUVnrUfr7jZyHPC5Czwq//nX DwNh67hu40ryuuJ/axW75oJwi+aIxLv7AYpeohqlQ1uEPxrkgpw8JeJvEccocP1c LIbBbqYklgqFDxnO2axJNb4ZSauOxfYeSQ3YKOdh/reyx9a1Yu3SaZWdQkNIIzWB V6g6505KNilcnk2K+rX/Sc86ctUG/MWGDvy1BEJpQCwkwqtLyGEUhHtRXY3K0oFi 7sKXCtQ/jMI58Vl2BACTANQpfFYQdJjEHqRg05IlCG43vtJib/EQ1AiHjfnk+8B/ 8KUQ8X/+GzGIDrqTQXjr/l+w4vCgumkM -----END CERTIFICATE-----Generated at Mon Jul 21 07:07:52 2025 by rpki-client