$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft File: aXYgUV57Huisfz9tE76uumLE7ak.mft (raw, json) Hash identifier: Bk4SkyFRyD4ROk7471TQNcJ6gvLUT7xBeiOdClnEr3c= Subject key identifier: 59:E7:AC:F5:3F:32:00:F7:37:EC:DB:61:52:6F:90:FF:A2:95:B3:67 Authority key identifier: 69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9 Certificate issuer: /CN=A91DE2AE/serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9 Certificate serial: 0200 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft Manifest number: 01EC Signing time: Sat 19 Jul 2025 02:55:13 +0000 Manifest this update: Sat 19 Jul 2025 02:55:12 +0000 Manifest next update: Sat 26 Jul 2025 02:55:12 +0000 Files and hashes: 1: aXYgUV57Huisfz9tE76uumLE7ak.crl (hash: DC30P5lEik98SWq/p/BGi5BEevdJbPZG4FR+y5IdKF4=) 2: 38E45CE08C2511EDB64DB410C4F9AE02.roa (hash: cR87tK+M2QvPpStj15TUAHSw7pMeZSCsKtclKhkYsV4=) 3: F3B716768F2F11EE86964D62C4F9AE02.roa (hash: Ez3fMRvxWFNiR5F6idq+GUYygoYJpqIuMgbojOp3vAE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:55:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 512 (0x200) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE2AE, serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9 Validity Not Before: Jul 19 02:55:12 2025 GMT Not After : Jul 26 02:55:12 2025 GMT Subject: CN=687b0910-7646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:d3:2f:73:54:4c:b5:62:98:9f:5e:1a:f8:2e: dc:4a:d4:e7:08:19:f0:54:b9:b1:72:27:e3:f7:96: 48:dc:ce:83:6e:0e:67:48:f5:81:25:ed:bf:80:b2: 56:f8:34:c1:73:89:2a:3a:22:e2:37:21:ab:6a:d2: 8a:31:46:01:0c:5e:9f:35:a4:5a:56:4c:3b:4b:83: b0:01:1c:fc:6a:f4:48:40:7e:e2:d5:20:fd:4b:21: 90:66:21:4f:6d:92:c2:55:00:de:2f:7b:a8:87:27: 56:54:1d:8e:b2:77:f1:ee:a0:fb:e7:b7:14:5e:30: ee:70:01:cf:c2:56:1a:d4:97:87:5b:e1:8a:20:d4: 2a:e0:d0:0b:73:90:47:10:d2:65:36:59:df:4c:ee: 87:ff:10:6b:0f:a3:f7:ef:0e:4e:8c:20:36:db:db: bc:0d:57:16:6a:38:de:0c:36:2a:4f:71:4e:0a:95: ca:0f:18:3c:e1:d9:f0:ac:f1:2e:ac:99:5a:c2:a3: c0:b9:42:7d:7f:c8:aa:68:5e:ff:9e:24:50:72:88: 06:f0:59:c9:9a:d2:1d:b3:03:95:69:69:ed:24:f0: 83:bf:88:e5:7a:fa:e9:01:91:4e:7e:44:f4:ff:83: bc:67:1c:78:15:36:e4:41:09:b4:4c:4a:26:ba:0b: ad:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:E7:AC:F5:3F:32:00:F7:37:EC:DB:61:52:6F:90:FF:A2:95:B3:67 X509v3 Authority Key Identifier: keyid:69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:65:26:f7:e5:d5:e7:32:b9:43:ba:ea:c4:60:05:55:9c:f6: dc:c3:7f:4f:78:cd:4d:02:5e:83:f0:77:63:a1:77:52:1b:3b: 15:d0:1d:08:ff:39:b2:f7:0c:3e:24:dc:fa:55:27:e5:dc:82: 0b:80:ed:cb:33:49:6c:6f:59:33:63:de:99:42:55:81:1b:b8: 1a:7b:b8:ff:81:94:61:5c:ef:b4:f4:0f:0d:38:3a:66:03:8e: 29:4d:9c:dc:b9:a0:a1:b8:7d:2e:83:e8:0c:dc:ba:28:3d:c1: ff:01:3e:f7:0a:f3:15:02:6c:a1:64:2f:7a:6b:5f:27:d4:e9: da:b4:f2:1a:86:f2:fb:f1:da:2f:43:db:3b:2d:73:4f:34:8e: 5e:47:1c:ca:1b:62:54:49:77:ae:b9:93:93:7c:bf:60:5f:55: 77:af:a4:86:10:aa:58:3c:5f:b7:f9:2e:13:b6:a2:cb:50:db: 93:3c:22:c4:46:2a:9d:21:25:bd:2f:3e:be:31:23:19:7c:16: 12:b6:c9:82:dd:6d:32:7b:0a:f1:88:7e:16:a4:1c:67:b3:27: 61:c8:9d:7a:d4:38:57:7f:47:ff:18:e2:e1:a2:6e:ba:b9:a5: 5c:b5:bf:e7:1d:de:19:25:af:e3:24:29:d7:51:0c:cf:c5:8d: bb:2a:7d:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUyQUUxMTAvBgNVBAUTKDY5NzYyMDUxNUU3QjFFRThBQzdGM0Y2RDEzQkVBRUJB NjJDNEVEQTkwHhcNMjUwNzE5MDI1NTEyWhcNMjUwNzI2MDI1NTEyWjAYMRYwFAYD VQQDEw02ODdiMDkxMC03NjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6dMvc1RMtWKYn14a+C7cStTnCBnwVLmxcifj95ZI3M6Dbg5nSPWBJe2/gLJW +DTBc4kqOiLiNyGratKKMUYBDF6fNaRaVkw7S4OwARz8avRIQH7i1SD9SyGQZiFP bZLCVQDeL3uohydWVB2Osnfx7qD757cUXjDucAHPwlYa1JeHW+GKINQq4NALc5BH ENJlNlnfTO6H/xBrD6P37w5OjCA229u8DVcWajjeDDYqT3FOCpXKDxg84dnwrPEu rJlawqPAuUJ9f8iqaF7/niRQcogG8FnJmtIdswOVaWntJPCDv4jlevrpAZFOfkT0 /4O8Zxx4FTbkQQm0TEomugutXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFnnrPU/ MgD3N+zbYVJvkP+ilbNnMB8GA1UdIwQYMBaAFGl2IFFeex7orH8/bRO+rrpixO2p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTJBRS9DNzBGRUEyQThD MjAxMUVEQURENUM4MDlDNEY5QUUwMi9hWFlnVVY1N0h1aXNmejl0RTc2dXVtTEU3 YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FYWWdVVjU3SHVpc2Z6OXRFNzZ1dW1MRTdhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTJBRS9DNzBGRUEyQThDMjAxMUVEQURENUM4MDlDNEY5QUUwMi9hWFlnVVY1N0h1 aXNmejl0RTc2dXVtTEU3YWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKZSb35dXnMrlDuurEYAVVnPbcw39PeM1NAl6D8HdjoXdSGzsV0B0I /zmy9ww+JNz6VSfl3IILgO3LM0lsb1kzY96ZQlWBG7gae7j/gZRhXO+09A8NODpm A44pTZzcuaChuH0ug+gM3LooPcH/AT73CvMVAmyhZC96a18n1OnatPIahvL78dov Q9s7LXNPNI5eRxzKG2JUSXeuuZOTfL9gX1V3r6SGEKpYPF+3+S4TtqLLUNuTPCLE RiqdISW9Lz6+MSMZfBYStsmC3W0yewrxiH4WpBxnsydhyJ161DhXf0f/GOLhom66 uaVctb/nHd4ZJa/jJCnXUQzPxY27Kn11 -----END CERTIFICATE-----Generated at Sun Jul 20 07:30:13 2025 by rpki-client