$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft File: Ae4IndSGeyyydlgqqXsxj1Cepu4.mft (raw, json) Hash identifier: 00zZEdJ9m8oG3ASBN77LDrJ6/8Dzx+gYnm08blYjLQ8= Subject key identifier: 14:7D:F1:57:FB:23:EC:68:C6:04:1E:97:69:7F:54:8C:7B:20:65:5E Authority key identifier: 01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE Certificate issuer: /CN=A91B3D30/serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE Certificate serial: 0B81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft Manifest number: 0B55 Signing time: Sat 06 Sep 2025 19:20:44 +0000 Manifest this update: Sat 06 Sep 2025 19:20:44 +0000 Manifest next update: Sat 13 Sep 2025 19:20:44 +0000 Files and hashes: 1: Ae4IndSGeyyydlgqqXsxj1Cepu4.crl (hash: IpVH0C1umljRzkZuHBr2OujNos+uECxN+1czSOiC7ZA=) 2: 09534036847011F0A17FCE63C4F9AE02.roa (hash: PdJl8I+ys5mY6W97HjsxfAl70ScWMMUlyRe/qkuqiA0=) 3: BB46A670849811F08EA6E444C4F9AE02.roa (hash: Zt/7xi+nXrTj/iilNfK0wU0w18V9L0wFMcOFcwVdW/k=) 4: 3A883F284B3E11F0817E3C31C4F9AE02.roa (hash: v527tHPDU0uVPbXjXzW0KocA0xKJVkiNxeh4nwu9KSk=) 5: F6722FA6822411F088762570C4F9AE02.roa (hash: EdJTIkg+x49DUKuxSmKMqDv7aYWLFZehzcNiKlZK6s8=) 6: 12AE33B4419811EAA268D964C4F9AE02.roa (hash: WByJv+/0UWcFSBkuQVt24N8Bh5eeznOvZMkj35xeU8o=) 7: F5E1478E822411F088762570C4F9AE02.roa (hash: FtG2AONefrzS1aqmU6M+Rb0qH4cFpoVfgLPk4YTu7w0=) 8: A5FE56B2596B11F0AF4BB31EC4F9AE02.roa (hash: plyiht/V1LmRJUTFVmqkO0mlXSVbC2l7eMnY30pWhS4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 19:20:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2945 (0xb81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3D30, serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE Validity Not Before: Sep 6 19:20:44 2025 GMT Not After : Sep 13 19:20:44 2025 GMT Subject: CN=68bc898c-4379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:17:6a:43:b0:0b:57:39:be:4c:41:47:49:09: d9:0a:03:7b:5b:fd:f0:66:9a:a0:69:52:73:b4:f3: 4a:0a:94:fe:71:3e:65:ab:4b:f6:8a:f9:9e:08:fc: e6:e3:46:fe:cc:1d:12:24:3c:5e:3c:ff:30:3d:98: 0a:4d:25:28:f9:a7:ec:d5:d5:33:be:6e:cd:34:b9: 38:21:a3:3d:c6:26:bc:db:f4:f4:eb:ae:91:25:89: eb:0a:1b:05:79:05:c0:1c:e2:ad:0c:b2:e0:d4:3c: fd:20:bc:f7:44:39:76:35:0c:fe:d4:3a:b6:be:1f: 90:88:6a:2c:47:d3:34:c2:b9:e1:ea:0f:c8:68:35: 7b:39:ed:3d:d9:42:be:09:b4:dd:fe:0d:79:68:41: 08:0a:d4:d5:83:10:86:05:ca:2a:e6:2a:16:83:7c: d3:62:55:6e:35:55:fa:f8:db:b9:8c:d9:46:bf:8f: b1:b8:de:a0:d7:71:85:32:62:02:2a:3a:4d:ad:cb: b3:6b:53:66:e4:d1:4c:7c:f6:de:c6:b5:0d:db:89: e2:93:e4:34:03:3f:61:20:74:3e:28:e2:9b:6b:06: 54:1d:3d:c9:a2:c5:be:0d:59:76:94:47:f7:91:4f: d2:5e:b0:89:b2:80:55:ae:22:72:3c:e0:07:f5:9c: 01:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:7D:F1:57:FB:23:EC:68:C6:04:1E:97:69:7F:54:8C:7B:20:65:5E X509v3 Authority Key Identifier: keyid:01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:a7:e7:b1:f9:9a:8b:4e:6e:4a:17:f7:93:b7:f0:e4:01:48: ee:27:1c:bb:8b:d4:0e:f0:dd:07:10:c6:0d:6d:07:0a:29:90: 06:cc:a9:38:51:0f:e6:aa:8e:91:cf:f7:92:54:4c:c5:79:3c: dc:8e:ae:63:25:24:be:db:06:3f:30:37:83:62:d7:0e:a5:d7: 46:2c:2f:e9:9c:28:0f:77:df:5a:13:36:df:c5:ae:6e:45:01: 70:9b:45:63:a1:7c:5e:c8:8c:87:f1:4e:55:ee:8a:ca:47:88: 61:66:6c:77:16:ee:c0:a1:51:6b:d5:94:2a:7e:2c:35:30:c3: e4:95:3f:6b:91:7b:64:e3:f7:c8:8f:c2:c9:49:b4:d6:87:98: 7c:d3:7e:33:f8:48:19:1b:a8:83:79:f5:f1:97:39:52:f2:de: c2:25:8c:ec:aa:30:57:61:24:58:7f:95:a2:b9:e4:db:78:84: ce:bb:4f:2d:dd:9a:d1:92:23:4e:54:ca:1a:9c:a8:f5:2e:ac: f2:78:7a:10:4c:ab:64:a3:d6:7d:f9:9b:73:73:5b:8a:ff:8e: 5c:e3:c0:71:8d:c0:25:bd:67:34:18:d7:c1:69:d4:e7:7c:a5: 39:8a:d4:91:8f:a8:3d:94:ba:d6:a3:f1:7c:fe:27:97:ba:51: 50:19:d3:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNEMzAxMTAvBgNVBAUTKDAxRUUwODlERDQ4NjdCMkNCMjc2NTgyQUE5N0IzMThG NTA5RUE2RUUwHhcNMjUwOTA2MTkyMDQ0WhcNMjUwOTEzMTkyMDQ0WjAYMRYwFAYD VQQDEw02OGJjODk4Yy00Mzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRdqQ7ALVzm+TEFHSQnZCgN7W/3wZpqgaVJztPNKCpT+cT5lq0v2ivmeCPzm 40b+zB0SJDxePP8wPZgKTSUo+afs1dUzvm7NNLk4IaM9xia82/T0666RJYnrChsF eQXAHOKtDLLg1Dz9ILz3RDl2NQz+1Dq2vh+QiGosR9M0wrnh6g/IaDV7Oe092UK+ CbTd/g15aEEICtTVgxCGBcoq5ioWg3zTYlVuNVX6+Nu5jNlGv4+xuN6g13GFMmIC KjpNrcuza1Nm5NFMfPbexrUN24nik+Q0Az9hIHQ+KOKbawZUHT3JosW+DVl2lEf3 kU/SXrCJsoBVriJyPOAH9ZwB9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBR98Vf7 I+xoxgQel2l/VIx7IGVeMB8GA1UdIwQYMBaAFAHuCJ3UhnsssnZYKql7MY9Qnqbu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0QzMC9FM0RGNDY5QzQx NjgxMUVBQUU4QTc3NTBDNEY5QUUwMi9BZTRJbmRTR2V5eXlkbGdxcVhzeGoxQ2Vw dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FlNEluZFNHZXl5eWRsZ3FxWHN4ajFDZXB1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0QzMC9FM0RGNDY5QzQxNjgxMUVBQUU4QTc3NTBDNEY5QUUwMi9BZTRJbmRTR2V5 eXlkbGdxcVhzeGoxQ2VwdTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzp+ex+ZqLTm5KF/eTt/DkAUjuJxy7i9QO8N0HEMYNbQcKKZAGzKk4 UQ/mqo6Rz/eSVEzFeTzcjq5jJSS+2wY/MDeDYtcOpddGLC/pnCgPd99aEzbfxa5u RQFwm0VjoXxeyIyH8U5V7orKR4hhZmx3Fu7AoVFr1ZQqfiw1MMPklT9rkXtk4/fI j8LJSbTWh5h8034z+EgZG6iDefXxlzlS8t7CJYzsqjBXYSRYf5WiueTbeITOu08t 3ZrRkiNOVMoanKj1LqzyeHoQTKtko9Z9+Ztzc1uK/45c48BxjcAlvWc0GNfBadTn fKU5itSRj6g9lLrWo/F8/ieXulFQGdO8 -----END CERTIFICATE-----Generated at Sun Sep 7 06:41:58 2025 by rpki-client