$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.mft File: A0a2NPJj9jaEI52232S7us33-KQ.mft (raw, json) Hash identifier: AElGABbAv+Au8R7Y3s+oDGNTShf+rD4n9BzvSN4s3D4= Subject key identifier: D1:3E:82:B4:F1:51:B1:30:61:9F:F4:03:A7:99:67:BD:F4:B9:C2:F0 Authority key identifier: 03:46:B6:34:F2:63:F6:36:84:23:9D:B6:DF:64:BB:BA:CD:F7:F8:A4 Certificate issuer: /CN=A91D7156/serialNumber=0346B634F263F63684239DB6DF64BBBACDF7F8A4 Certificate serial: 111E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0a2NPJj9jaEI52232S7us33-KQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.mft Manifest number: 0F00 Signing time: Tue 22 Jul 2025 18:18:30 +0000 Manifest this update: Tue 22 Jul 2025 18:18:30 +0000 Manifest next update: Tue 29 Jul 2025 18:18:30 +0000 Files and hashes: 1: A0a2NPJj9jaEI52232S7us33-KQ.crl (hash: tJ5U4C5qMhRcKOCA1yXj3/BQhASih3/0Gf/huflhbVk=) 2: 5CF5B0D0C0FC11EFBD950B83C4F9AE02.roa (hash: vN/9LHfh3j5ZLBr/LEueO3rNwhcG/GM6CvWEAGSk/ZI=) 3: 2D5961DC1EBC11F0B2B33B09C4F9AE02.roa (hash: LdebEkCRrhy63DdZXzPif/b/vfYplYHj6hgrohg5ZGY=) 4: 26DA1E16247411EA8E1A1178C4F9AE02.roa (hash: aychuQENH8MDXgDPyxOf+DmbnwVNOnjjWiqIFqUZGSQ=) 5: 161D8022A24611EF966F6286C4F9AE02.roa (hash: 2XDfE9tomi91M9QoC2KCz+TumizpJ0BJ//HIQVo+Dlw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.crl rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0a2NPJj9jaEI52232S7us33-KQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 18:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4382 (0x111e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7156, serialNumber=0346B634F263F63684239DB6DF64BBBACDF7F8A4 Validity Not Before: Jul 22 18:18:30 2025 GMT Not After : Jul 29 18:18:30 2025 GMT Subject: CN=687fd5f6-a902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:89:93:f4:70:20:df:88:87:9e:e8:d6:31:92: 00:bb:21:2b:f7:24:f5:48:8a:03:f4:14:10:f4:9b: ab:a8:96:18:8e:60:27:75:5b:24:4b:c6:4a:ee:0b: a3:d0:28:3a:76:70:07:96:c2:3a:ba:a6:b0:12:dc: 7f:1a:dd:4c:d5:53:6b:20:43:3e:52:77:81:40:e9: c7:29:ec:f1:59:b4:c6:f6:1a:98:79:45:cc:13:a0: 35:34:fa:2d:a5:77:0d:01:dc:66:f6:62:5a:a7:b8: c7:41:04:92:c0:c6:6a:b0:be:6f:00:ac:7b:d6:47: 2d:5c:db:1a:4e:66:d4:b5:2a:9b:41:6d:ec:82:fe: 6f:d1:89:f8:95:8e:35:1b:d0:5d:d5:a8:e1:b8:6e: 19:07:a0:92:01:01:bd:37:3f:43:a2:20:7a:0f:b0: 63:b0:78:3f:55:1e:fa:66:b8:d3:5d:22:90:51:ed: 90:5d:1e:38:49:2a:54:15:e4:9d:f6:fd:6c:e3:b9: fd:48:a2:91:3c:8d:1f:3f:58:25:41:97:45:8f:6e: 8b:2a:3e:ef:91:08:0d:ac:68:8a:c2:61:a4:1c:3a: 63:00:22:4b:40:ae:a1:89:04:1a:00:21:90:d8:63: 03:5b:3e:b3:71:97:d3:80:70:25:1e:f0:8f:e6:69: 2a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:3E:82:B4:F1:51:B1:30:61:9F:F4:03:A7:99:67:BD:F4:B9:C2:F0 X509v3 Authority Key Identifier: keyid:03:46:B6:34:F2:63:F6:36:84:23:9D:B6:DF:64:BB:BA:CD:F7:F8:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0a2NPJj9jaEI52232S7us33-KQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:c1:8a:d6:4b:69:aa:5e:95:7c:44:6d:ab:a9:d1:af:c8:25: ba:8d:7e:67:41:69:7d:a3:c8:88:f5:06:59:ec:ef:c9:e6:66: 3d:9d:49:66:43:2d:1d:d4:2c:77:01:3d:e3:1e:66:db:61:28: 92:7a:bd:ee:2c:17:c9:69:43:01:df:79:be:e0:0b:2f:7b:89: ba:7e:ad:dd:98:c2:91:9d:f4:5d:9d:a7:e0:f6:59:ef:ff:aa: b9:00:b1:5c:b4:b6:cb:ef:37:c2:df:5c:bb:fc:19:51:3d:f9: 83:45:e5:57:57:8f:5e:8c:d4:bb:93:bb:57:fb:ce:0e:55:46: ad:fd:e8:c2:47:f8:c2:f0:bb:21:70:e9:de:16:a9:7c:6c:19: 8d:13:d8:0b:d8:ad:85:7b:f8:5c:38:f3:76:29:49:c7:ee:ed: ef:cd:ab:4a:f2:80:b0:23:69:4a:46:f7:e0:5d:4e:3a:d4:ff: cf:cc:f9:4e:4c:36:1a:29:87:d9:40:53:5f:f8:15:ac:2b:e3: ab:b9:40:21:e5:51:ca:d5:73:75:23:ba:6a:30:44:9d:8a:86: 39:c0:5f:38:ba:ab:1b:0e:64:7b:7e:27:9d:c5:d4:e2:6d:68: 33:6e:69:db:71:b6:c3:01:f7:02:d9:fd:bf:b6:92:04:01:c4: fc:8e:6a:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICER4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDcxNTYxMTAvBgNVBAUTKDAzNDZCNjM0RjI2M0Y2MzY4NDIzOURCNkRGNjRCQkJB Q0RGN0Y4QTQwHhcNMjUwNzIyMTgxODMwWhcNMjUwNzI5MTgxODMwWjAYMRYwFAYD VQQDEw02ODdmZDVmNi1hOTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0omT9HAg34iHnujWMZIAuyEr9yT1SIoD9BQQ9JurqJYYjmAndVskS8ZK7guj 0Cg6dnAHlsI6uqawEtx/Gt1M1VNrIEM+UneBQOnHKezxWbTG9hqYeUXME6A1NPot pXcNAdxm9mJap7jHQQSSwMZqsL5vAKx71kctXNsaTmbUtSqbQW3sgv5v0Yn4lY41 G9Bd1ajhuG4ZB6CSAQG9Nz9DoiB6D7BjsHg/VR76ZrjTXSKQUe2QXR44SSpUFeSd 9v1s47n9SKKRPI0fP1glQZdFj26LKj7vkQgNrGiKwmGkHDpjACJLQK6hiQQaACGQ 2GMDWz6zcZfTgHAlHvCP5mkqGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNE+grTx UbEwYZ/0A6eZZ730ucLwMB8GA1UdIwQYMBaAFANGtjTyY/Y2hCOdtt9ku7rN9/ik MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzE1Ni9COUYwODQ0Q0Yy M0QxMUU5QUY4NDI3MjRDNEY5QUUwMi9BMGEyTlBKajlqYUVJNTIyMzJTN3VzMzMt S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EwYTJOUEpqOWphRUk1MjIzMlM3dXMzMy1LUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzE1Ni9COUYwODQ0Q0YyM0QxMUU5QUY4NDI3MjRDNEY5QUUwMi9BMGEyTlBKajlq YUVJNTIyMzJTN3VzMzMtS1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfwYrWS2mqXpV8RG2rqdGvyCW6jX5nQWl9o8iI9QZZ7O/J5mY9nUlm Qy0d1Cx3AT3jHmbbYSiSer3uLBfJaUMB33m+4Asve4m6fq3dmMKRnfRdnafg9lnv /6q5ALFctLbL7zfC31y7/BlRPfmDReVXV49ejNS7k7tX+84OVUat/ejCR/jC8Lsh cOneFql8bBmNE9gL2K2Fe/hcOPN2KUnH7u3vzatK8oCwI2lKRvfgXU461P/PzPlO TDYaKYfZQFNf+BWsK+OruUAh5VHK1XN1I7pqMESdioY5wF84uqsbDmR7fiedxdTi bWgzbmnbcbbDAfcC2f2/tpIEAcT8jmqi -----END CERTIFICATE-----Generated at Wed Jul 23 23:27:55 2025 by rpki-client