$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5A93/C01AF5F415C511EFAA338236C4F9AE02/eAtbxs5eRpg3res2hXTtSDBIAcs.mft File: eAtbxs5eRpg3res2hXTtSDBIAcs.mft (raw, json) Hash identifier: SYrXcTB4xAQMX/nsXsJvQOortyYoFxPANnKi29/pono= Subject key identifier: 6A:88:6B:46:51:3C:49:20:B3:C4:14:C1:93:7C:EB:47:D6:A0:63:91 Authority key identifier: 78:0B:5B:C6:CE:5E:46:98:37:AD:EB:36:85:74:ED:48:30:48:01:CB Certificate issuer: /CN=A91A5A93/serialNumber=780B5BC6CE5E469837ADEB368574ED48304801CB Certificate serial: F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eAtbxs5eRpg3res2hXTtSDBIAcs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5A93/C01AF5F415C511EFAA338236C4F9AE02/eAtbxs5eRpg3res2hXTtSDBIAcs.mft Manifest number: F0 Signing time: Thu 21 Aug 2025 05:28:57 +0000 Manifest this update: Thu 21 Aug 2025 05:28:56 +0000 Manifest next update: Thu 28 Aug 2025 05:28:56 +0000 Files and hashes: 1: eAtbxs5eRpg3res2hXTtSDBIAcs.crl (hash: GxPXIF8mtrrGmtAtkoN/gT4C6oJuDX6BVHCYLLRLpTo=) 2: 521500EE15C611EF88C07237C4F9AE02.roa (hash: BCuicmcvw7ww1h97rYp14idO+zun7W58fW3pvWobsAM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5A93/C01AF5F415C511EFAA338236C4F9AE02/eAtbxs5eRpg3res2hXTtSDBIAcs.crl rsync://rpki.apnic.net/member_repository/A91A5A93/C01AF5F415C511EFAA338236C4F9AE02/eAtbxs5eRpg3res2hXTtSDBIAcs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eAtbxs5eRpg3res2hXTtSDBIAcs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 05:28:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 244 (0xf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5A93, serialNumber=780B5BC6CE5E469837ADEB368574ED48304801CB Validity Not Before: Aug 21 05:28:56 2025 GMT Not After : Aug 28 05:28:56 2025 GMT Subject: CN=68a6ae99-42aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5c:49:8b:f1:51:94:ec:c7:5a:26:b6:cc:0b: 0e:3f:82:9a:85:e5:5d:a8:c9:97:0e:2d:6a:5f:8f: b5:db:fb:c0:1a:f9:04:f9:2f:13:cb:89:bc:b9:55: de:ce:af:c4:b7:e8:ca:28:3e:ab:00:4e:15:77:52: 6f:5b:f0:92:80:fb:d0:36:2c:32:5c:d3:9c:80:23: c7:ca:42:1b:d9:05:5e:65:df:67:d2:bc:f6:42:46: 3e:b3:20:f3:09:58:0f:9c:60:89:b4:5d:ee:d6:3a: ef:5c:07:8c:20:0b:6b:42:fc:d2:c6:c6:22:1a:42: 51:20:48:ea:e4:b1:4c:ba:16:f8:db:48:f1:29:a7: 15:19:03:15:6e:9f:4d:a6:e3:fe:1d:af:a9:31:27: 43:24:79:a3:12:5f:5f:8b:85:b5:b6:52:bb:7c:f4: 1a:eb:a0:0e:0d:e7:42:a2:eb:84:17:4e:6f:f1:8d: 09:6b:d7:56:65:7a:bb:b9:f9:5c:1b:84:65:cb:b4: 8d:73:94:18:53:8e:81:86:1d:8c:7a:e8:17:5a:6b: 79:44:22:15:03:84:b7:3a:59:34:d1:c1:99:e3:36: 42:bb:10:3e:cb:bd:f1:86:86:fa:d4:4e:62:cf:f4: 38:4c:5b:02:31:e6:6e:85:d0:a5:9f:a2:1d:56:71: bc:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:88:6B:46:51:3C:49:20:B3:C4:14:C1:93:7C:EB:47:D6:A0:63:91 X509v3 Authority Key Identifier: keyid:78:0B:5B:C6:CE:5E:46:98:37:AD:EB:36:85:74:ED:48:30:48:01:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5A93/C01AF5F415C511EFAA338236C4F9AE02/eAtbxs5eRpg3res2hXTtSDBIAcs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eAtbxs5eRpg3res2hXTtSDBIAcs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5A93/C01AF5F415C511EFAA338236C4F9AE02/eAtbxs5eRpg3res2hXTtSDBIAcs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:a0:70:28:6c:cb:e1:96:ad:08:44:98:b9:99:35:46:f0:f2: 71:ae:c3:4c:a8:f7:0e:b4:17:11:16:e8:d9:1e:b3:0c:20:8a: 1a:05:cc:11:8a:25:4c:65:66:56:81:dd:6d:3c:4f:9b:b3:01: 31:56:76:9a:b6:50:16:20:c9:da:eb:40:d6:6d:8c:2b:e5:0c: 22:a9:43:03:be:f8:9a:10:cc:5f:33:c6:b2:18:6a:1c:91:84: 6b:54:45:44:fa:8b:8c:dc:2a:b3:3d:93:05:fe:6e:80:4d:ca: ba:8a:ed:49:b0:bf:25:89:92:b1:45:e1:82:0d:13:41:d8:a1: b6:2c:69:83:19:b1:d3:70:95:8a:d8:6d:11:1c:e7:6a:5d:41: 52:f1:ea:d6:35:fb:23:95:14:5b:0c:93:07:d5:8e:ea:3b:58: 31:5e:40:6f:35:25:43:5d:68:2d:2a:13:41:85:b5:81:69:f4: b7:fd:a2:db:71:3e:ca:b1:25:8f:7c:a4:84:8d:4e:fe:93:dc: bd:13:a5:9f:3b:19:af:28:03:42:fa:07:6c:0a:b3:b6:dd:ef: f1:85:67:43:2b:9e:bb:90:69:a8:53:8b:d4:ea:58:2c:33:ba: 2d:42:bb:8e:1d:c4:9e:f5:47:e3:c5:80:03:57:66:51:26:d5: 43:94:2a:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVBOTMxMTAvBgNVBAUTKDc4MEI1QkM2Q0U1RTQ2OTgzN0FERUIzNjg1NzRFRDQ4 MzA0ODAxQ0IwHhcNMjUwODIxMDUyODU2WhcNMjUwODI4MDUyODU2WjAYMRYwFAYD VQQDEw02OGE2YWU5OS00MmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAslxJi/FRlOzHWia2zAsOP4KaheVdqMmXDi1qX4+12/vAGvkE+S8Ty4m8uVXe zq/Et+jKKD6rAE4Vd1JvW/CSgPvQNiwyXNOcgCPHykIb2QVeZd9n0rz2QkY+syDz CVgPnGCJtF3u1jrvXAeMIAtrQvzSxsYiGkJRIEjq5LFMuhb420jxKacVGQMVbp9N puP+Ha+pMSdDJHmjEl9fi4W1tlK7fPQa66AODedCouuEF05v8Y0Ja9dWZXq7uflc G4Rly7SNc5QYU46Bhh2MeugXWmt5RCIVA4S3Olk00cGZ4zZCuxA+y73xhob61E5i z/Q4TFsCMeZuhdCln6IdVnG8owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGqIa0ZR PEkgs8QUwZN860fWoGORMB8GA1UdIwQYMBaAFHgLW8bOXkaYN63rNoV07UgwSAHL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUE5My9DMDFBRjVGNDE1 QzUxMUVGQUEzMzgyMzZDNEY5QUUwMi9lQXRieHM1ZVJwZzNyZXMyaFhUdFNEQklB Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VBdGJ4czVlUnBnM3JlczJoWFR0U0RCSUFjcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUE5My9DMDFBRjVGNDE1QzUxMUVGQUEzMzgyMzZDNEY5QUUwMi9lQXRieHM1ZVJw ZzNyZXMyaFhUdFNEQklBY3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAboHAobMvhlq0IRJi5mTVG8PJxrsNMqPcOtBcRFujZHrMMIIoaBcwR iiVMZWZWgd1tPE+bswExVnaatlAWIMna60DWbYwr5QwiqUMDvviaEMxfM8ayGGoc kYRrVEVE+ouM3CqzPZMF/m6ATcq6iu1JsL8liZKxReGCDRNB2KG2LGmDGbHTcJWK 2G0RHOdqXUFS8erWNfsjlRRbDJMH1Y7qO1gxXkBvNSVDXWgtKhNBhbWBafS3/aLb cT7KsSWPfKSEjU7+k9y9E6WfOxmvKANC+gdsCrO23e/xhWdDK567kGmoU4vU6lgs M7otQruOHcSe9UfjxYADV2ZRJtVDlCoH -----END CERTIFICATE-----Generated at Fri Aug 22 16:17:01 2025 by rpki-client