$ rpki-client -vvf rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.mft File: EAslNUZkaB2quQXO_0pNp0nE64o.mft (raw, json) Hash identifier: pnwbOyeOXSTOZnLj6IkNRxDDFDOvr6gLmCLg+m51B94= Subject key identifier: 7B:6D:F3:86:44:EA:1A:DE:9A:6C:A9:92:6C:EF:7E:7A:1D:6A:9A:4C Authority key identifier: 10:0B:25:35:46:64:68:1D:AA:B9:05:CE:FF:4A:4D:A7:49:C4:EB:8A Certificate issuer: /CN=A91D488C/serialNumber=100B25354664681DAAB905CEFF4A4DA749C4EB8A Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EAslNUZkaB2quQXO_0pNp0nE64o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.mft Manifest number: 1C Signing time: Fri 05 Sep 2025 08:30:21 +0000 Manifest this update: Fri 05 Sep 2025 08:30:20 +0000 Manifest next update: Fri 12 Sep 2025 08:30:20 +0000 Files and hashes: 1: EAslNUZkaB2quQXO_0pNp0nE64o.crl (hash: FXn74AFt4GV0ZDTxd7TlduoqZ53XNYy54PMsFfC2vEU=) 2: 4DA7A7766C6611F0883DC646C4F9AE02.roa (hash: Q+FmthFDMCnpB7Yj2dZxhxoV/SktKs7HXODFGAlvqdE=) 3: 8B9109C06B8911F0A0F62851C4F9AE02.roa (hash: 9jfSP8gh6271KQbI+jNnvgnlMdq0sgOuoX6+h4wU+tM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.crl rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EAslNUZkaB2quQXO_0pNp0nE64o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 08:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D488C, serialNumber=100B25354664681DAAB905CEFF4A4DA749C4EB8A Validity Not Before: Sep 5 08:30:20 2025 GMT Not After : Sep 12 08:30:20 2025 GMT Subject: CN=68ba9f9d-5a5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:88:14:46:18:c9:46:56:48:db:30:30:2d:c3: ff:2c:f4:75:f7:25:c5:f8:07:d2:2f:12:df:2c:82: b5:b9:86:ff:e4:51:b7:06:58:14:d1:01:12:e3:9d: 51:3c:ec:ce:5e:7e:76:d9:84:1d:d8:90:8c:97:7c: 6f:2f:0b:06:cb:c5:46:d4:0e:89:b0:b4:c0:ff:e3: 9d:3b:4a:59:1e:27:c3:a2:b2:bb:99:e7:42:35:d8: e9:81:4f:33:3b:6a:60:38:b2:d6:c8:b1:ee:4d:3f: 12:93:f6:3f:b5:e0:06:3d:bc:ec:6d:16:43:01:12: 8a:39:a1:c7:0d:c7:01:7f:50:c9:26:6b:6c:34:6c: 88:b4:8d:39:e6:f1:1d:a2:0f:f5:d2:b5:64:d4:42: 75:cc:e9:c5:34:00:21:3f:3d:3f:af:67:72:28:65: 24:63:13:3d:cf:12:ec:a2:9d:da:76:d6:33:cf:df: 0c:f6:4a:17:f4:24:be:19:76:02:25:9c:97:72:e3: bc:30:73:ae:84:a9:d0:6b:35:08:aa:25:54:f5:e0: f5:4e:67:6b:2c:00:4f:c6:db:d8:1c:2d:a6:59:21: f0:70:07:c9:16:49:b7:68:4a:f0:a5:00:00:31:8e: 1f:f3:3e:14:15:63:0f:d9:ff:04:5f:64:20:05:5e: 7d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:6D:F3:86:44:EA:1A:DE:9A:6C:A9:92:6C:EF:7E:7A:1D:6A:9A:4C X509v3 Authority Key Identifier: keyid:10:0B:25:35:46:64:68:1D:AA:B9:05:CE:FF:4A:4D:A7:49:C4:EB:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EAslNUZkaB2quQXO_0pNp0nE64o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:e1:f8:c7:be:a3:26:1c:52:2b:e9:c5:d0:0a:fb:f7:ca:74: 79:2e:0a:54:24:ac:8c:cc:0c:f7:ab:b7:5d:39:d4:d1:34:60: 3b:08:03:b9:f8:4a:e6:4f:c4:a6:57:4f:6a:57:f1:ba:d7:a7: b6:bd:38:a5:67:cd:53:67:35:41:55:c8:14:77:a3:0c:6e:85: ac:43:42:30:2e:f3:4c:11:25:f5:7a:f5:88:73:a7:64:3d:f5: 38:ce:e6:62:6c:de:16:cd:10:4f:6d:45:7c:d2:44:ee:38:2e: 64:c6:6a:97:ad:96:70:bf:85:2f:3c:cb:36:b4:e7:6c:03:97: 66:d9:22:24:01:89:31:62:4e:91:ca:00:1a:17:51:f9:78:49: fd:b9:b3:bf:b4:68:85:91:36:0c:d7:96:0d:95:a8:ce:4e:cb: 3c:fa:27:07:76:f4:5a:4d:f7:46:a8:93:58:09:94:22:26:b4: 8a:29:dc:85:f4:1b:1c:c2:16:41:45:21:ba:e6:ab:f8:b4:d0: 99:ce:de:03:39:ff:dd:4e:a6:ba:2d:77:74:13:3a:f5:5e:67: 4d:88:0a:18:1b:ff:f9:3a:72:5a:12:52:79:6f:9f:91:29:74: cc:16:c7:64:e1:23:f2:9c:47:b3:4c:26:35:34:6a:bc:74:2c: 4b:91:48:07 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NDg4QzExMC8GA1UEBRMoMTAwQjI1MzU0NjY0NjgxREFBQjkwNUNFRkY0QTREQTc0 OUM0RUI4QTAeFw0yNTA5MDUwODMwMjBaFw0yNTA5MTIwODMwMjBaMBgxFjAUBgNV BAMTDTY4YmE5ZjlkLTVhNWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmiBRGGMlGVkjbMDAtw/8s9HX3JcX4B9IvEt8sgrW5hv/kUbcGWBTRARLjnVE8 7M5efnbZhB3YkIyXfG8vCwbLxUbUDomwtMD/4507SlkeJ8OisruZ50I12OmBTzM7 amA4stbIse5NPxKT9j+14AY9vOxtFkMBEoo5occNxwF/UMkma2w0bIi0jTnm8R2i D/XStWTUQnXM6cU0ACE/PT+vZ3IoZSRjEz3PEuyindp21jPP3wz2Shf0JL4ZdgIl nJdy47wwc66EqdBrNQiqJVT14PVOZ2ssAE/G29gcLaZZIfBwB8kWSbdoSvClAAAx jh/zPhQVYw/Z/wRfZCAFXn2HAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUe23zhkTq Gt6abKmSbO9+eh1qmkwwHwYDVR0jBBgwFoAUEAslNUZkaB2quQXO/0pNp0nE64ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0ODhDLzQ2QjAwNTA0NkI4 OTExRjA5NUYxMTAyQkM0RjlBRTAyL0VBc2xOVVprYUIycXVRWE9fMHBOcDBuRTY0 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRUFzbE5VWmthQjJxdVFYT18wcE5wMG5FNjRvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0 ODhDLzQ2QjAwNTA0NkI4OTExRjA5NUYxMTAyQkM0RjlBRTAyL0VBc2xOVVprYUIy cXVRWE9fMHBOcDBuRTY0by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG3h+Me+oyYcUivpxdAK+/fKdHkuClQkrIzMDPert1051NE0YDsIA7n4 SuZPxKZXT2pX8brXp7a9OKVnzVNnNUFVyBR3owxuhaxDQjAu80wRJfV69Yhzp2Q9 9TjO5mJs3hbNEE9tRXzSRO44LmTGapetlnC/hS88yza052wDl2bZIiQBiTFiTpHK ABoXUfl4Sf25s7+0aIWRNgzXlg2VqM5Oyzz6Jwd29FpN90aok1gJlCImtIop3IX0 GxzCFkFFIbrmq/i00JnO3gM5/91Oprotd3QTOvVeZ02IChgb//k6cloSUnlvn5Ep dMwWx2ThI/KcR7NMJjU0arx0LEuRSAc= -----END CERTIFICATE-----Generated at Sat Sep 6 12:08:03 2025 by rpki-client