$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft File: aXYgUV57Huisfz9tE76uumLE7ak.mft (raw, json) Hash identifier: 1ZjQtOvEf0cNQ/0efaFrOCxndPc5qQT95uXuv04ZohI= Subject key identifier: 7F:0E:76:A1:2B:D2:58:99:08:E9:BF:EF:5D:91:95:49:04:DF:E1:F0 Authority key identifier: 69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9 Certificate issuer: /CN=A91DE2AE/serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9 Certificate serial: 021A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft Manifest number: 0206 Signing time: Sun 07 Sep 2025 02:49:09 +0000 Manifest this update: Sun 07 Sep 2025 02:49:08 +0000 Manifest next update: Sun 14 Sep 2025 02:49:08 +0000 Files and hashes: 1: aXYgUV57Huisfz9tE76uumLE7ak.crl (hash: J+PIsBJLydN5vHwCBkZjwipohydrQfmxaTPbNHZo6ow=) 2: 38E45CE08C2511EDB64DB410C4F9AE02.roa (hash: cR87tK+M2QvPpStj15TUAHSw7pMeZSCsKtclKhkYsV4=) 3: F3B716768F2F11EE86964D62C4F9AE02.roa (hash: Ez3fMRvxWFNiR5F6idq+GUYygoYJpqIuMgbojOp3vAE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 02:49:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 538 (0x21a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE2AE, serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9 Validity Not Before: Sep 7 02:49:08 2025 GMT Not After : Sep 14 02:49:08 2025 GMT Subject: CN=68bcf2a5-99c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4b:2a:f0:21:e6:b6:58:25:5f:5e:a8:f9:59: dd:29:27:3c:f2:ea:a7:58:b1:98:5b:e7:16:37:35: 09:12:c2:e2:4a:71:14:bc:b3:28:2d:10:1c:3f:77: cf:9d:e7:f4:3e:0b:fe:76:5e:61:fc:54:35:6c:fb: 5d:61:7d:e2:5f:dc:54:6d:f7:ef:21:88:67:6f:99: dd:d6:ff:f3:e5:96:95:97:f3:53:22:d5:11:c8:c5: b7:87:e9:29:93:2e:39:28:a9:6e:90:cf:c4:79:5b: 83:da:d3:dd:1a:35:90:eb:03:92:2f:5a:b8:01:b8: a0:89:3b:07:5b:c4:7a:0e:8a:9d:17:44:4e:3c:ad: 9d:ec:f9:89:02:13:31:e8:7a:7e:13:b6:91:94:ce: 5f:1a:bd:2c:5a:eb:8a:cd:57:54:1e:a3:61:a8:59: c1:31:e2:c5:4e:d3:b5:ee:08:04:aa:ee:a5:02:5a: 54:b1:1f:e5:b7:e0:ef:64:58:2a:20:53:07:09:4e: c9:48:97:d4:7b:3d:81:1e:64:da:f7:d7:18:8c:0c: a4:25:02:f5:f5:f1:93:d6:44:4d:83:99:26:29:1a: 8d:83:51:f7:5b:0e:0b:57:4b:9e:e0:45:33:c4:58: 66:d6:93:94:32:bf:b7:af:b2:8d:a4:74:80:ce:78: f9:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:0E:76:A1:2B:D2:58:99:08:E9:BF:EF:5D:91:95:49:04:DF:E1:F0 X509v3 Authority Key Identifier: keyid:69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:df:4a:38:b8:99:cb:8f:2a:23:24:27:a6:15:4d:16:d4:1f: ae:d9:78:ff:fb:81:db:bb:50:bf:4c:9b:90:0a:9e:77:8c:e9: 60:9e:b9:c2:79:a7:1f:3b:0c:ac:80:e1:18:72:05:6b:b4:9c: 27:78:d7:e1:94:e4:da:7c:c8:66:20:f4:5c:9a:29:b6:50:14: fb:73:50:df:81:81:f9:6e:26:69:f8:68:b3:fe:5f:a8:3c:7e: 73:dd:c5:30:a5:29:0f:e5:06:8d:79:cb:a1:ba:fc:4b:9f:0f: 56:53:23:86:2c:87:c0:4d:cb:58:a2:bd:2a:d6:76:d9:18:f5: 9d:69:fc:d6:1a:e1:6c:50:8a:ed:ad:2c:65:2b:77:61:f4:46: 75:53:a4:6a:dc:b9:08:98:cb:14:8f:a7:0d:6a:e2:cd:e4:69: c0:91:b1:92:00:31:33:62:5d:32:74:c3:4d:f2:95:2f:64:9f: e6:01:59:83:61:4d:20:7b:35:cf:23:fd:a6:b2:d2:2c:ad:ce: bd:dd:95:37:b4:b9:d9:f7:67:50:c4:16:62:e6:fa:d5:c7:b3: cf:1b:cd:01:5c:39:3b:eb:e2:45:26:7f:36:54:bb:8b:a0:cf: a8:82:33:f2:8f:9c:82:c6:d5:bb:84:62:72:f8:b5:57:b5:24: d2:58:e2:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUyQUUxMTAvBgNVBAUTKDY5NzYyMDUxNUU3QjFFRThBQzdGM0Y2RDEzQkVBRUJB NjJDNEVEQTkwHhcNMjUwOTA3MDI0OTA4WhcNMjUwOTE0MDI0OTA4WjAYMRYwFAYD VQQDEw02OGJjZjJhNS05OWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyUsq8CHmtlglX16o+VndKSc88uqnWLGYW+cWNzUJEsLiSnEUvLMoLRAcP3fP nef0Pgv+dl5h/FQ1bPtdYX3iX9xUbffvIYhnb5nd1v/z5ZaVl/NTItURyMW3h+kp ky45KKlukM/EeVuD2tPdGjWQ6wOSL1q4AbigiTsHW8R6DoqdF0ROPK2d7PmJAhMx 6Hp+E7aRlM5fGr0sWuuKzVdUHqNhqFnBMeLFTtO17ggEqu6lAlpUsR/lt+DvZFgq IFMHCU7JSJfUez2BHmTa99cYjAykJQL19fGT1kRNg5kmKRqNg1H3Ww4LV0ue4EUz xFhm1pOUMr+3r7KNpHSAznj5SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH8OdqEr 0liZCOm/712RlUkE3+HwMB8GA1UdIwQYMBaAFGl2IFFeex7orH8/bRO+rrpixO2p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTJBRS9DNzBGRUEyQThD MjAxMUVEQURENUM4MDlDNEY5QUUwMi9hWFlnVVY1N0h1aXNmejl0RTc2dXVtTEU3 YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FYWWdVVjU3SHVpc2Z6OXRFNzZ1dW1MRTdhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTJBRS9DNzBGRUEyQThDMjAxMUVEQURENUM4MDlDNEY5QUUwMi9hWFlnVVY1N0h1 aXNmejl0RTc2dXVtTEU3YWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCe30o4uJnLjyojJCemFU0W1B+u2Xj/+4Hbu1C/TJuQCp53jOlgnrnC eacfOwysgOEYcgVrtJwneNfhlOTafMhmIPRcmim2UBT7c1DfgYH5biZp+Giz/l+o PH5z3cUwpSkP5QaNecuhuvxLnw9WUyOGLIfATctYor0q1nbZGPWdafzWGuFsUIrt rSxlK3dh9EZ1U6Rq3LkImMsUj6cNauLN5GnAkbGSADEzYl0ydMNN8pUvZJ/mAVmD YU0gezXPI/2mstIsrc693ZU3tLnZ92dQxBZi5vrVx7PPG80BXDk76+JFJn82VLuL oM+ogjPyj5yCxtW7hGJy+LVXtSTSWOI7 -----END CERTIFICATE-----Generated at Sun Sep 7 17:32:19 2025 by rpki-client