$ rpki-client -vvf rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft File: AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft (raw, json) Hash identifier: PiaXzng0Q3gNd7SRXo4mIUwmzrHJYF2U6FfNp8vIRzY= Subject key identifier: 1E:13:FC:68:7C:84:9B:06:F8:BA:86:DC:FB:B6:B9:9D:0E:85:13:DE Authority key identifier: 00:96:1B:8F:63:AD:E9:D1:9F:3A:CF:42:83:3A:C5:D9:C9:C7:27:8F Certificate issuer: /CN=A912216A/serialNumber=00961B8F63ADE9D19F3ACF42833AC5D9C9C7278F Certificate serial: 10A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft Manifest number: 10A0 Signing time: Thu 14 Aug 2025 17:34:12 +0000 Manifest this update: Thu 14 Aug 2025 17:34:12 +0000 Manifest next update: Thu 21 Aug 2025 17:34:11 +0000 Files and hashes: 1: AJYbj2Ot6dGfOs9CgzrF2cnHJ48.crl (hash: 3bs8iGgOpBjALQlH8PvS+hl0e51mryM97z+71Lj+2N0=) 2: 2A44CEFE311111E98C69B181C4F9AE02.roa (hash: 0SVk2cOfikrAvRDDJgb5TANBAXNNynzVUWZgXY+3hcc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.crl rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 21 Aug 2025 17:34:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4264 (0x10a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912216A, serialNumber=00961B8F63ADE9D19F3ACF42833AC5D9C9C7278F Validity Not Before: Aug 14 17:34:12 2025 GMT Not After : Aug 21 17:34:11 2025 GMT Subject: CN=689e1e14-ecf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:16:6c:2f:8d:e7:4d:c6:4c:07:66:11:42:62: 72:e7:c9:a4:66:bc:e5:49:76:37:70:ce:9e:62:4c: ae:dc:a8:71:59:9d:36:10:73:c3:7c:2b:26:89:a3: 16:85:76:ef:68:d4:04:14:69:a0:2f:d7:10:be:f8: 23:b1:f1:50:91:69:70:d8:2c:72:5b:f6:ce:e2:cb: dc:41:85:23:78:85:5a:b2:57:a5:74:fe:ec:20:03: 15:9f:9b:d8:34:81:e8:16:59:50:cd:27:6d:7a:4a: ce:5d:a0:03:5e:c2:88:e7:0f:0a:a5:f2:a7:72:e4: 69:36:c7:17:88:f7:8d:b7:de:9c:95:d8:8e:87:9c: a5:4d:ed:e1:11:e1:7c:cf:56:ed:53:77:bc:c1:59: 81:16:7c:3c:e4:24:e2:f5:4c:67:cd:38:1f:2d:b1: 17:c9:62:75:7b:d1:25:19:f4:1a:f5:35:a3:a7:df: 0b:54:2b:4a:80:84:47:2e:97:e0:ce:b4:b8:48:60: 65:68:4c:01:cc:5b:28:c3:60:f5:79:06:a5:07:d9: 9e:09:f1:6b:60:e9:93:68:c9:32:ff:92:a0:22:73: 50:2b:33:0c:23:c9:bf:6b:04:5f:5f:14:71:4a:7b: 60:ab:41:f5:ec:39:0e:60:43:83:b0:9a:e2:72:ab: bd:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:13:FC:68:7C:84:9B:06:F8:BA:86:DC:FB:B6:B9:9D:0E:85:13:DE X509v3 Authority Key Identifier: keyid:00:96:1B:8F:63:AD:E9:D1:9F:3A:CF:42:83:3A:C5:D9:C9:C7:27:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:95:b4:9a:f4:e2:1f:44:a9:0c:41:3e:47:89:59:f2:81:b8: d7:de:42:de:a5:8d:2a:b7:05:53:3d:da:55:c1:b3:9e:91:d5: 14:98:db:80:25:90:da:99:8d:a5:a5:3c:31:05:b0:83:39:ea: a4:33:01:9d:08:49:0e:66:27:4c:f3:f0:01:37:0b:50:d9:82: 33:20:55:9e:a6:be:af:1e:3c:82:b4:ab:43:b0:3a:5e:c0:da: b7:f1:90:b4:f6:d8:15:6c:11:2f:fc:68:c0:9b:62:1d:30:e0: 46:8d:d2:b4:54:75:41:f2:01:1a:b8:7d:8f:b2:43:18:bb:d3: e8:38:8d:b0:99:74:99:34:02:87:fe:95:50:10:72:9f:ab:53: 1e:53:03:bf:75:25:dc:7e:64:39:ce:bc:88:64:61:21:94:4e: fc:78:00:de:b7:b0:7e:ea:f1:e5:37:62:f7:9b:25:68:73:12: e1:8a:06:bd:06:bb:23:90:9a:da:e6:28:60:57:e5:29:a0:d9: 7a:84:61:c4:35:c2:12:83:d3:c4:0d:ee:b1:12:69:14:bc:97: 78:0b:a9:d7:fc:22:29:68:f1:c8:43:bf:b9:d3:d9:fc:95:ce: 7e:69:13:00:10:fa:3f:62:3d:00:ec:e0:4e:a4:43:a3:d9:64: 7c:b4:5f:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIxNkExMTAvBgNVBAUTKDAwOTYxQjhGNjNBREU5RDE5RjNBQ0Y0MjgzM0FDNUQ5 QzlDNzI3OEYwHhcNMjUwODE0MTczNDEyWhcNMjUwODIxMTczNDExWjAYMRYwFAYD VQQDEw02ODllMWUxNC1lY2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqxZsL43nTcZMB2YRQmJy58mkZrzlSXY3cM6eYkyu3KhxWZ02EHPDfCsmiaMW hXbvaNQEFGmgL9cQvvgjsfFQkWlw2CxyW/bO4svcQYUjeIVasleldP7sIAMVn5vY NIHoFllQzSdtekrOXaADXsKI5w8KpfKncuRpNscXiPeNt96cldiOh5ylTe3hEeF8 z1btU3e8wVmBFnw85CTi9UxnzTgfLbEXyWJ1e9ElGfQa9TWjp98LVCtKgIRHLpfg zrS4SGBlaEwBzFsow2D1eQalB9meCfFrYOmTaMky/5KgInNQKzMMI8m/awRfXxRx Sntgq0H17DkOYEODsJricqu9PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB4T/Gh8 hJsG+LqG3Pu2uZ0OhRPeMB8GA1UdIwQYMBaAFACWG49jrenRnzrPQoM6xdnJxyeP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjE2QS9GQzUxQzlFODMx MEIxMUU5QkI4MkZFNzJDNEY5QUUwMi9BSlliajJPdDZkR2ZPczlDZ3pyRjJjbkhK NDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FKWWJqMk90NmRHZk9zOUNnenJGMmNuSEo0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjE2QS9GQzUxQzlFODMxMEIxMUU5QkI4MkZFNzJDNEY5QUUwMi9BSlliajJPdDZk R2ZPczlDZ3pyRjJjbkhKNDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7lbSa9OIfRKkMQT5HiVnygbjX3kLepY0qtwVTPdpVwbOekdUUmNuA JZDamY2lpTwxBbCDOeqkMwGdCEkOZidM8/ABNwtQ2YIzIFWepr6vHjyCtKtDsDpe wNq38ZC09tgVbBEv/GjAm2IdMOBGjdK0VHVB8gEauH2PskMYu9PoOI2wmXSZNAKH /pVQEHKfq1MeUwO/dSXcfmQ5zryIZGEhlE78eADet7B+6vHlN2L3myVocxLhiga9 BrsjkJra5ihgV+UpoNl6hGHENcISg9PEDe6xEmkUvJd4C6nX/CIpaPHIQ7+509n8 lc5+aRMAEPo/Yj0A7OBOpEOj2WR8tF9U -----END CERTIFICATE-----Generated at Fri Aug 15 00:18:53 2025 by rpki-client