$ rpki-client -vvf rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft File: Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft (raw, json) Hash identifier: jRfFiht5ydJ/shxFCL8f0z/P84m2yy1iDonjEKo0jAQ= Subject key identifier: 26:06:32:E8:3D:75:73:13:67:75:39:E2:0A:CE:0F:6B:6B:6A:94:45 Authority key identifier: 02:AE:84:F6:11:B7:E8:2F:D7:D6:FF:8F:45:2D:87:25:EF:48:90:88 Certificate issuer: /CN=A91642A0/serialNumber=02AE84F611B7E82FD7D6FF8F452D8725EF489088 Certificate serial: 0D08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft Manifest number: 0CE0 Signing time: Mon 08 Sep 2025 18:11:51 +0000 Manifest this update: Mon 08 Sep 2025 18:11:51 +0000 Manifest next update: Mon 15 Sep 2025 18:11:51 +0000 Files and hashes: 1: Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl (hash: 1/dr9xfu7jiBa5KHi6GvgKyDj2jK4Cv2NVHmUgx1OLI=) 2: B0B70006B19211EC9EAAD44EC4F9AE02.roa (hash: iAcBe9JsIgejkunApnFizR8kcd9hvKFDEaA+fu50sDE=) 3: AFB0FFCCB19211EC9EAAD44EC4F9AE02.roa (hash: I0QziAIo3oazYojvFNhbt9C/zSWf1Md92KB9f4lH27c=) 4: 0EF0E842839E11EEA1892A12C4F9AE02.roa (hash: CTDwhtj/lvv2X5UcpQAPIBaNmpDgoQygeS9l2k6Fjz0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 18:11:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3336 (0xd08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91642A0, serialNumber=02AE84F611B7E82FD7D6FF8F452D8725EF489088 Validity Not Before: Sep 8 18:11:51 2025 GMT Not After : Sep 15 18:11:51 2025 GMT Subject: CN=68bf1c67-13cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:eb:d2:07:0d:d4:2d:f5:bd:4c:83:1f:df:96: 6b:ab:b0:2f:f6:23:2a:1e:4e:52:cc:65:c6:81:53: 4b:a3:76:f2:2f:d4:e1:be:05:53:45:67:90:55:58: e1:e3:e7:09:44:31:2c:03:df:93:4e:11:d1:ee:40: 26:db:d8:2e:6c:b9:76:aa:b6:b7:d6:99:72:1a:f2: 70:5e:9b:e9:15:20:ca:31:b2:4b:09:23:c7:6d:1a: 90:1e:d2:8d:cc:f3:11:8b:e9:c4:fe:58:75:28:b9: 9c:30:09:02:99:09:b4:77:16:64:de:88:d6:66:28: 15:44:f5:cb:48:7f:7a:d6:3a:6b:cd:c2:93:bd:97: 36:f0:d7:4f:fe:b6:f5:d5:84:df:ce:6b:fa:30:41: 33:d5:7e:e4:77:b8:fe:ae:65:d6:b3:3c:fc:03:77: 7f:75:0e:ab:69:45:fa:02:71:0c:6b:77:01:ea:28: 9e:2a:f0:50:a9:5f:a0:bf:ff:52:fc:5c:24:46:e3: ab:d4:ed:94:5f:8d:e9:c9:0f:ed:4e:6d:8e:25:2c: e4:c2:fd:86:d7:2f:30:64:64:b7:9a:d6:c2:a1:d0: 00:70:5e:12:c6:4c:e7:ab:5e:4d:b4:74:96:ae:3e: 8f:c4:4c:58:29:01:47:bd:4d:05:70:ab:8d:33:29: bf:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:06:32:E8:3D:75:73:13:67:75:39:E2:0A:CE:0F:6B:6B:6A:94:45 X509v3 Authority Key Identifier: keyid:02:AE:84:F6:11:B7:E8:2F:D7:D6:FF:8F:45:2D:87:25:EF:48:90:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:6c:10:db:d5:5b:1c:8d:dc:9c:6c:5b:9e:b7:4b:17:94:bb: f6:31:ba:de:5b:70:1f:d6:98:f7:7c:98:7a:55:2c:0d:f6:7a: 0c:5d:9d:01:e8:31:17:2e:74:09:14:99:a6:7c:f9:93:21:b7: f7:a4:18:e0:ad:7d:79:76:2b:4b:d0:fc:f8:d2:32:c9:e0:c3: 23:a3:46:6a:84:5a:6e:3c:a1:8a:3d:2c:02:2f:f8:22:3f:9d: 72:6a:32:c3:ce:77:08:f4:de:94:09:8d:f4:7b:5d:73:e8:f3: 0e:13:3e:5e:61:a2:4f:58:34:5b:3c:1f:60:3f:bb:d3:25:7d: 99:e3:2c:0d:a8:1f:1b:b7:39:61:db:4d:58:dc:a0:fc:62:cd: 25:9b:db:12:99:62:58:21:6f:8d:6d:8e:df:c8:f2:18:c7:2b: 30:87:92:cf:ee:65:67:7f:51:fa:9f:1f:1e:f9:c1:03:4d:b0: 5c:06:f1:2b:92:1d:76:a2:b3:d6:9a:98:9c:fb:5e:99:51:5a: 67:aa:dd:2b:f5:45:cf:00:49:45:1f:95:26:15:03:58:24:7f: 03:e8:4a:1b:6d:4d:ff:d1:c0:3a:c9:ae:db:d6:e9:78:ba:de: f6:39:26:92:49:5c:0a:10:74:9b:48:ec:9e:82:f1:45:1f:d7: 25:57:93:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQyQTAxMTAvBgNVBAUTKDAyQUU4NEY2MTFCN0U4MkZEN0Q2RkY4RjQ1MkQ4NzI1 RUY0ODkwODgwHhcNMjUwOTA4MTgxMTUxWhcNMjUwOTE1MTgxMTUxWjAYMRYwFAYD VQQDEw02OGJmMWM2Ny0xM2NiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArOvSBw3ULfW9TIMf35Zrq7Av9iMqHk5SzGXGgVNLo3byL9ThvgVTRWeQVVjh 4+cJRDEsA9+TThHR7kAm29gubLl2qra31plyGvJwXpvpFSDKMbJLCSPHbRqQHtKN zPMRi+nE/lh1KLmcMAkCmQm0dxZk3ojWZigVRPXLSH961jprzcKTvZc28NdP/rb1 1YTfzmv6MEEz1X7kd7j+rmXWszz8A3d/dQ6raUX6AnEMa3cB6iieKvBQqV+gv/9S /FwkRuOr1O2UX43pyQ/tTm2OJSzkwv2G1y8wZGS3mtbCodAAcF4Sxkznq15NtHSW rj6PxExYKQFHvU0FcKuNMym/5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCYGMug9 dXMTZ3U54grOD2trapRFMB8GA1UdIwQYMBaAFAKuhPYRt+gv19b/j0UthyXvSJCI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDJBMC9DQTdEMTE2MkY2 NzYxMUU5OTBCQUEyMjJDNEY5QUUwMi9BcTZFOWhHMzZDX1gxdi1QUlMySEplOUlr SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FxNkU5aEczNkNfWDF2LVBSUzJISmU5SWtJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDJBMC9DQTdEMTE2MkY2NzYxMUU5OTBCQUEyMjJDNEY5QUUwMi9BcTZFOWhHMzZD X1gxdi1QUlMySEplOUlrSWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsbBDb1VscjdycbFuet0sXlLv2MbreW3Af1pj3fJh6VSwN9noMXZ0B 6DEXLnQJFJmmfPmTIbf3pBjgrX15ditL0Pz40jLJ4MMjo0ZqhFpuPKGKPSwCL/gi P51yajLDzncI9N6UCY30e11z6PMOEz5eYaJPWDRbPB9gP7vTJX2Z4ywNqB8btzlh 201Y3KD8Ys0lm9sSmWJYIW+NbY7fyPIYxyswh5LP7mVnf1H6nx8e+cEDTbBcBvEr kh12orPWmpic+16ZUVpnqt0r9UXPAElFH5UmFQNYJH8D6EobbU3/0cA6ya7b1ul4 ut72OSaSSVwKEHSbSOyegvFFH9clV5Mi -----END CERTIFICATE-----Generated at Tue Sep 9 17:41:06 2025 by rpki-client