$ rpki-client -vvf rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft File: aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft (raw, json) Hash identifier: lOy7zqVbmol6U8FSFwpczDtgtfbowKW7DuMkrLfZrDU= Subject key identifier: 1F:84:3B:CD:FB:F1:DE:B5:8C:15:A3:47:58:4F:65:C8:C2:A3:34:32 Authority key identifier: 69:05:41:86:79:F4:3C:A8:88:CB:23:BF:2B:CB:2B:E6:99:C0:C3:66 Certificate issuer: /CN=A9183010/serialNumber=6905418679F43CA888CB23BF2BCB2BE699C0C366 Certificate serial: 34B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft Manifest number: 34AA Signing time: Thu 14 Aug 2025 15:11:29 +0000 Manifest this update: Thu 14 Aug 2025 15:11:29 +0000 Manifest next update: Thu 21 Aug 2025 15:11:29 +0000 Files and hashes: 1: aQVBhnn0PKiIyyO_K8sr5pnAw2Y.crl (hash: OtS7kFBBSAObWwx3X5uBXbbWIuxw2VOBLdx87t9UIP8=) 2: 99144F3C03DB11F09FBAF32DC4F9AE02.roa (hash: 2QPhy8okP7a5b727IcPA6kh/C7CWYx/FM2MEQeDTjxM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.crl rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 21 Aug 2025 15:11:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13490 (0x34b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183010, serialNumber=6905418679F43CA888CB23BF2BCB2BE699C0C366 Validity Not Before: Aug 14 15:11:29 2025 GMT Not After : Aug 21 15:11:29 2025 GMT Subject: CN=689dfca1-99eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:24:e3:fb:2f:52:58:2c:46:58:ea:7b:6f:71: a8:b1:3f:3c:3f:72:6f:68:9b:49:55:27:e2:d5:90: 19:38:94:47:f6:6f:f3:c7:b2:e3:29:b4:8b:6b:fa: e2:2d:8c:53:2e:e1:03:75:19:6d:55:3f:f7:26:63: 6a:1a:dc:26:cf:1c:27:0b:00:a0:81:eb:2a:63:92: 9d:da:20:23:ed:6e:26:75:7f:c7:7f:24:e1:e3:b3: 2c:44:42:11:9b:1d:86:d9:dd:ac:6c:c5:9b:f4:7e: fc:dc:18:f0:62:ce:b2:17:04:52:69:a1:2b:81:78: 8e:35:57:46:f8:ce:99:d8:bb:ee:7a:80:e5:22:50: c7:5b:27:13:4b:2c:d8:48:5f:33:65:b3:bd:43:61: 9c:51:59:e9:9f:8d:f7:d3:f2:72:0b:77:78:ee:c6: 98:d3:6b:d1:b5:e5:f7:a0:e2:95:d7:f9:f9:6a:75: 1c:a6:fa:85:58:02:e1:a6:92:b8:c8:13:24:8f:ff: 5a:15:cf:fe:2f:95:d3:c4:95:f2:d0:83:2f:fe:0a: c0:e2:41:e5:2a:c6:eb:5e:82:14:54:1d:b2:e2:ff: d6:06:11:1e:dd:c9:01:6b:b6:84:43:ff:50:80:96: 2b:cb:42:c1:22:d3:69:92:89:a7:11:d7:6f:a8:70: d0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:84:3B:CD:FB:F1:DE:B5:8C:15:A3:47:58:4F:65:C8:C2:A3:34:32 X509v3 Authority Key Identifier: keyid:69:05:41:86:79:F4:3C:A8:88:CB:23:BF:2B:CB:2B:E6:99:C0:C3:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:85:94:85:d7:df:e9:d5:15:fe:1e:a3:15:8f:27:dd:76:b5: 96:1a:14:c8:ca:b5:ea:b9:f8:01:e5:e3:3a:85:e4:c4:62:1f: 28:ea:98:07:13:c0:42:53:61:b2:f5:de:74:ca:33:87:1d:92: 59:82:25:d2:69:b0:63:d6:1f:24:9f:cd:93:d3:85:78:c3:5e: 36:1d:b0:43:00:1e:ef:21:a1:83:15:20:fc:6c:a5:cb:58:3a: a1:2c:c1:6e:5c:9c:18:2b:1c:0d:63:e8:de:d2:a5:ac:52:ee: f2:d0:c5:dc:5d:80:88:a6:fe:18:b9:64:3b:2c:cf:15:4d:46: ff:4c:f8:fc:10:a4:d8:16:22:ac:8f:24:0e:8d:3b:a3:b6:96: 7c:ae:b6:75:3e:75:8b:e7:50:f2:36:12:b5:59:47:28:68:1c: 81:a0:a6:cd:79:17:04:b1:39:71:2a:ea:34:15:d5:76:a4:a8: 0d:e1:d2:b5:82:3c:76:35:01:86:1b:43:5e:a3:cb:9c:7c:2f: bd:30:d2:a0:67:20:cc:ea:eb:39:45:38:5f:c5:62:ab:ef:e3: 27:e5:e6:b0:84:a6:7e:37:ee:ee:ec:fa:bb:e1:f7:6f:c7:a5: e0:3d:d7:4f:aa:e1:35:5e:bd:3a:9e:5d:49:54:cc:77:8d:60: 43:b1:62:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODMwMTAxMTAvBgNVBAUTKDY5MDU0MTg2NzlGNDNDQTg4OENCMjNCRjJCQ0IyQkU2 OTlDMEMzNjYwHhcNMjUwODE0MTUxMTI5WhcNMjUwODIxMTUxMTI5WjAYMRYwFAYD VQQDEw02ODlkZmNhMS05OWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1yTj+y9SWCxGWOp7b3GosT88P3JvaJtJVSfi1ZAZOJRH9m/zx7LjKbSLa/ri LYxTLuEDdRltVT/3JmNqGtwmzxwnCwCggesqY5Kd2iAj7W4mdX/HfyTh47MsREIR mx2G2d2sbMWb9H783BjwYs6yFwRSaaErgXiONVdG+M6Z2LvueoDlIlDHWycTSyzY SF8zZbO9Q2GcUVnpn4330/JyC3d47saY02vRteX3oOKV1/n5anUcpvqFWALhppK4 yBMkj/9aFc/+L5XTxJXy0IMv/grA4kHlKsbrXoIUVB2y4v/WBhEe3ckBa7aEQ/9Q gJYry0LBItNpkomnEddvqHDQnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB+EO837 8d61jBWjR1hPZcjCozQyMB8GA1UdIwQYMBaAFGkFQYZ59DyoiMsjvyvLK+aZwMNm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzAxMC81RjFEREIxMjFE QTMxMUUyOTNCMTlFOTgwOEIwMkNEMi9hUVZCaG5uMFBLaUl5eU9fSzhzcjVwbkF3 MlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FRVkJobm4wUEtpSXl5T19LOHNyNXBuQXcyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzAxMC81RjFEREIxMjFEQTMxMUUyOTNCMTlFOTgwOEIwMkNEMi9hUVZCaG5uMFBL aUl5eU9fSzhzcjVwbkF3MlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/hZSF19/p1RX+HqMVjyfddrWWGhTIyrXqufgB5eM6heTEYh8o6pgH E8BCU2Gy9d50yjOHHZJZgiXSabBj1h8kn82T04V4w142HbBDAB7vIaGDFSD8bKXL WDqhLMFuXJwYKxwNY+je0qWsUu7y0MXcXYCIpv4YuWQ7LM8VTUb/TPj8EKTYFiKs jyQOjTujtpZ8rrZ1PnWL51DyNhK1WUcoaByBoKbNeRcEsTlxKuo0FdV2pKgN4dK1 gjx2NQGGG0Neo8ucfC+9MNKgZyDM6us5RThfxWKr7+Mn5eawhKZ+N+7u7Pq74fdv x6XgPddPquE1Xr06nl1JVMx3jWBDsWLq -----END CERTIFICATE-----Generated at Fri Aug 15 17:50:03 2025 by rpki-client