$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft File: AkIpyBrDU1oh1g4twyqbiL1q2B8.mft (raw, json) Hash identifier: 73mQmWc2zdqVrfyHto7Gux9hPIW8haXlK0S4NSo3eQA= Subject key identifier: 88:29:AE:E3:40:40:76:E0:8C:8A:95:2D:29:EA:1D:EB:56:5B:DE:A1 Authority key identifier: 02:42:29:C8:1A:C3:53:5A:21:D6:0E:2D:C3:2A:9B:88:BD:6A:D8:1F Certificate issuer: /CN=A91A0848/serialNumber=024229C81AC3535A21D60E2DC32A9B88BD6AD81F Certificate serial: 0227 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft Manifest number: 0211 Signing time: Sun 07 Sep 2025 02:41:53 +0000 Manifest this update: Sun 07 Sep 2025 02:41:53 +0000 Manifest next update: Sun 14 Sep 2025 02:41:53 +0000 Files and hashes: 1: AkIpyBrDU1oh1g4twyqbiL1q2B8.crl (hash: etMM4zsJ/Ucf8BOqltYfTB16Yob0TwUTYI0P993jkE8=) 2: B9D00D3C195A11EE83248835C4F9AE02.roa (hash: TDlTkXNyk/OE7AIzmPKhh2DU+PZI5hEvSUbR0akOStU=) 3: 3B6578C47F4211F084F6C541C4F9AE02.roa (hash: B4BkdpTo1qZHacqSMnVvogHOqStnqdG0ex859T6dd8w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.crl rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 02:41:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 551 (0x227) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0848, serialNumber=024229C81AC3535A21D60E2DC32A9B88BD6AD81F Validity Not Before: Sep 7 02:41:53 2025 GMT Not After : Sep 14 02:41:53 2025 GMT Subject: CN=68bcf0f1-890b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7a:cb:49:7f:f8:8d:c5:9f:7f:5c:97:26:96: 72:fe:80:ed:75:eb:f1:76:74:16:8f:06:71:ff:15: e0:45:7d:04:fa:b0:68:af:c4:c4:81:44:54:fb:2e: 3c:c0:a2:11:d6:da:b4:be:78:70:ef:34:ef:e5:1a: d9:5d:7a:b5:0b:cc:3a:5e:ac:d9:63:15:9b:6f:9a: c1:71:72:b7:ad:ee:5b:ac:a2:4b:c9:a8:d2:74:13: d1:9e:a8:2f:dc:99:14:61:0c:6f:ef:f8:6a:7d:41: 6e:09:ec:31:88:b7:3f:a1:40:fa:bb:86:c5:8c:90: 70:e5:d8:bb:1b:12:9a:6d:12:16:de:fd:d7:52:13: 50:67:82:e9:6e:bd:a6:0c:2d:1d:24:29:31:11:f3: 82:f8:13:65:94:00:97:12:8f:cb:29:06:cc:c0:b8: 59:e5:46:f1:cc:16:f6:de:5f:86:db:64:c8:ed:db: 6d:20:8b:5f:f6:07:f6:78:18:2f:24:45:8c:5f:eb: 9e:05:cc:03:a6:b3:49:ff:9e:e4:a2:1c:11:93:4f: fe:cd:38:7c:72:43:d5:56:ed:e8:b6:fd:30:32:15: e5:28:97:f7:ae:1a:bd:84:e8:ad:1e:f8:23:75:39: 3c:7c:2f:88:65:7b:13:1f:5b:c1:3e:50:0e:51:12: 1a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:29:AE:E3:40:40:76:E0:8C:8A:95:2D:29:EA:1D:EB:56:5B:DE:A1 X509v3 Authority Key Identifier: keyid:02:42:29:C8:1A:C3:53:5A:21:D6:0E:2D:C3:2A:9B:88:BD:6A:D8:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:57:ec:bf:56:75:37:21:f7:dc:d0:f0:0a:ab:9d:40:0f:51: 9e:6c:bf:56:90:42:6a:05:78:eb:71:86:1c:96:6e:65:4b:9f: 88:bf:bc:99:9e:c1:2f:b3:4a:f9:03:6f:8e:fb:d0:57:b9:43: 66:f3:ca:44:c8:4e:6d:08:76:bb:4a:0a:00:65:71:62:55:ac: b1:a8:bc:cc:f1:ca:c7:f9:2c:65:f8:8c:a4:a5:e9:c8:fd:9d: b9:de:93:d0:6f:0a:b1:80:b0:c0:29:a1:e7:08:3b:ec:2e:b6: 19:13:fb:3e:e1:0b:10:82:85:e8:c5:3c:b3:ca:06:79:7c:7a: 87:ec:6f:4d:32:1c:90:dd:75:cc:f5:6d:df:aa:e7:13:50:7c: c4:d4:8a:37:14:d2:d7:04:8a:95:ef:ed:82:17:0b:09:8f:6f: d4:17:fa:aa:1c:a8:4b:c0:44:4c:e4:00:da:2c:5e:6c:d8:cf: 7c:9b:93:6d:84:47:8f:9a:46:96:67:3c:e1:35:54:77:94:ec: 24:81:2c:ae:70:48:93:56:43:ae:e6:3e:f8:44:a2:12:77:55: e4:2c:dc:60:a8:ef:14:41:3a:93:ac:6a:80:b9:51:15:53:98: e5:ce:d5:ec:9a:fe:f4:b1:ea:90:e3:5e:18:69:a1:68:18:f8: 1d:b4:46:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA4NDgxMTAvBgNVBAUTKDAyNDIyOUM4MUFDMzUzNUEyMUQ2MEUyREMzMkE5Qjg4 QkQ2QUQ4MUYwHhcNMjUwOTA3MDI0MTUzWhcNMjUwOTE0MDI0MTUzWjAYMRYwFAYD VQQDEw02OGJjZjBmMS04OTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtHrLSX/4jcWff1yXJpZy/oDtdevxdnQWjwZx/xXgRX0E+rBor8TEgURU+y48 wKIR1tq0vnhw7zTv5RrZXXq1C8w6XqzZYxWbb5rBcXK3re5brKJLyajSdBPRnqgv 3JkUYQxv7/hqfUFuCewxiLc/oUD6u4bFjJBw5di7GxKabRIW3v3XUhNQZ4Lpbr2m DC0dJCkxEfOC+BNllACXEo/LKQbMwLhZ5UbxzBb23l+G22TI7dttIItf9gf2eBgv JEWMX+ueBcwDprNJ/57kohwRk0/+zTh8ckPVVu3otv0wMhXlKJf3rhq9hOitHvgj dTk8fC+IZXsTH1vBPlAOURIaZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIgpruNA QHbgjIqVLSnqHetWW96hMB8GA1UdIwQYMBaAFAJCKcgaw1NaIdYOLcMqm4i9atgf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDg0OC82NEQ4QjFERTc3 RTQxMUVEOTdGNTkzNERDNEY5QUUwMi9Ba0lweUJyRFUxb2gxZzR0d3lxYmlMMXEy QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FrSXB5QnJEVTFvaDFnNHR3eXFiaUwxcTJCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDg0OC82NEQ4QjFERTc3RTQxMUVEOTdGNTkzNERDNEY5QUUwMi9Ba0lweUJyRFUx b2gxZzR0d3lxYmlMMXEyQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfV+y/VnU3Iffc0PAKq51AD1GebL9WkEJqBXjrcYYclm5lS5+Iv7yZ nsEvs0r5A2+O+9BXuUNm88pEyE5tCHa7SgoAZXFiVayxqLzM8crH+Sxl+IykpenI /Z253pPQbwqxgLDAKaHnCDvsLrYZE/s+4QsQgoXoxTyzygZ5fHqH7G9NMhyQ3XXM 9W3fqucTUHzE1Io3FNLXBIqV7+2CFwsJj2/UF/qqHKhLwERM5ADaLF5s2M98m5Nt hEePmkaWZzzhNVR3lOwkgSyucEiTVkOu5j74RKISd1XkLNxgqO8UQTqTrGqAuVEV U5jlztXsmv70seqQ414YaaFoGPgdtEaP -----END CERTIFICATE-----Generated at Mon Sep 8 08:49:41 2025 by rpki-client