$ rpki-client -vvf rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.mft File: su3iAzROnKc1AcVRQvmugWCeiYc.mft (raw, json) Hash identifier: 7p7pcWMeB5GHphfQDnler0NNxr4iejjXXXfjq8b/DS8= Subject key identifier: E8:17:8B:40:77:BB:28:FF:80:AE:10:63:6D:4D:0A:13:2D:B3:D1:A6 Authority key identifier: B2:ED:E2:03:34:4E:9C:A7:35:01:C5:51:42:F9:AE:81:60:9E:89:87 Certificate issuer: /CN=A91E46A5/serialNumber=B2EDE203344E9CA73501C55142F9AE81609E8987 Certificate serial: 0C9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/su3iAzROnKc1AcVRQvmugWCeiYc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.mft Manifest number: 0C90 Signing time: Sun 24 Aug 2025 18:14:08 +0000 Manifest this update: Sun 24 Aug 2025 18:14:08 +0000 Manifest next update: Sun 31 Aug 2025 18:14:08 +0000 Files and hashes: 1: su3iAzROnKc1AcVRQvmugWCeiYc.crl (hash: Xn1EI2ZY0ssK1Q3ctbkW6wrkDjbKlVvVwSMZ4P2GXKk=) 2: CE094B08006B11EAA2719060C4F9AE02.roa (hash: 3at8OHhr3TWPa09hDLUXiFFjg44cS/0xW9KQOVKngqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.crl rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/su3iAzROnKc1AcVRQvmugWCeiYc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 18:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3229 (0xc9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E46A5, serialNumber=B2EDE203344E9CA73501C55142F9AE81609E8987 Validity Not Before: Aug 24 18:14:08 2025 GMT Not After : Aug 31 18:14:08 2025 GMT Subject: CN=68ab5670-6f39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:30:f1:41:04:ff:c0:89:91:00:c5:bb:2d:41: a2:b2:a4:07:26:64:19:a1:82:8a:e9:9d:2b:79:c2: 3b:15:f1:44:37:8b:6b:6a:64:4e:2c:a4:03:04:e5: be:3b:03:04:7d:18:66:f8:14:aa:01:80:01:fd:f8: b1:dd:c8:7d:db:ba:a3:88:44:d5:9e:99:d0:32:43: 58:65:11:61:a3:f6:b7:d4:c3:91:da:4a:69:e3:66: d0:ca:a4:4a:1c:f2:11:8d:0d:4b:54:bc:20:67:cf: ae:ad:91:88:34:40:d3:99:f6:bb:d5:9b:86:c8:ae: 64:90:89:05:9e:69:75:4a:9e:08:f6:cc:d4:f5:0c: 0b:ff:fb:10:62:10:67:d7:fc:76:5f:96:8c:89:de: d9:b4:d0:ff:c0:88:7b:0a:5b:9a:f3:7e:ee:d6:d1: aa:86:f4:70:1e:7b:d8:dc:59:31:42:2b:bb:19:0c: e9:18:70:a2:13:69:32:bb:c0:56:c3:7c:cc:58:1f: 24:fc:64:4e:19:e6:82:15:c1:f9:b5:0b:58:9b:78: 21:09:e3:c5:14:0e:ff:27:76:e7:ba:16:f0:f8:61: 52:40:d2:9d:3b:c6:63:c7:3b:88:06:e8:e4:d3:5a: a8:29:a7:36:96:2d:6a:0f:cd:06:11:c9:27:fd:32: 66:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:17:8B:40:77:BB:28:FF:80:AE:10:63:6D:4D:0A:13:2D:B3:D1:A6 X509v3 Authority Key Identifier: keyid:B2:ED:E2:03:34:4E:9C:A7:35:01:C5:51:42:F9:AE:81:60:9E:89:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/su3iAzROnKc1AcVRQvmugWCeiYc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:7c:e4:e3:bd:a6:41:08:a8:43:58:3a:0f:96:f1:d0:d9:c9: b9:e3:7f:7f:1f:9d:14:32:45:10:04:b5:7c:fe:2c:3e:66:f0: ee:36:ba:dd:9a:4a:55:af:bc:93:1a:46:b3:7b:0e:f0:72:72: 92:f4:fa:cb:0a:3a:a4:95:20:cb:76:4c:d0:c8:32:af:ca:29: 38:65:d7:76:4d:9f:ed:ff:63:bf:a0:db:b8:86:c7:b0:81:bb: 59:ec:78:ad:d9:bf:aa:c6:91:95:f9:e0:76:6b:33:9f:51:bc: be:0d:2d:ea:d0:9b:0f:b9:7a:0c:a8:6d:ff:4b:99:01:85:6d: d1:f6:cb:8e:86:3c:a4:52:1c:95:72:fb:dc:3c:73:78:99:41: 46:a1:fa:39:3b:f3:e2:f9:01:04:a3:38:ce:62:61:40:9c:d6: 3b:54:48:a6:a4:50:7f:7e:be:86:74:34:ad:c5:86:1e:e4:1a: 0c:99:30:ee:16:25:32:99:a5:f6:52:a8:cf:1a:d0:c3:6e:6b: 52:36:74:46:c8:df:bd:ab:97:a4:df:4b:f8:6b:f0:fc:3a:04: f6:12:1b:bc:68:66:aa:9d:e8:13:4c:a5:f4:79:3f:d5:47:20: c7:a1:f5:5f:e4:9f:98:31:1b:d9:f5:bd:af:2a:33:5f:14:e5: 5b:65:2f:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2QTUxMTAvBgNVBAUTKEIyRURFMjAzMzQ0RTlDQTczNTAxQzU1MTQyRjlBRTgx NjA5RTg5ODcwHhcNMjUwODI0MTgxNDA4WhcNMjUwODMxMTgxNDA4WjAYMRYwFAYD VQQDEw02OGFiNTY3MC02ZjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6DDxQQT/wImRAMW7LUGisqQHJmQZoYKK6Z0recI7FfFEN4tramROLKQDBOW+ OwMEfRhm+BSqAYAB/fix3ch927qjiETVnpnQMkNYZRFho/a31MOR2kpp42bQyqRK HPIRjQ1LVLwgZ8+urZGINEDTmfa71ZuGyK5kkIkFnml1Sp4I9szU9QwL//sQYhBn 1/x2X5aMid7ZtND/wIh7Clua837u1tGqhvRwHnvY3FkxQiu7GQzpGHCiE2kyu8BW w3zMWB8k/GROGeaCFcH5tQtYm3ghCePFFA7/J3bnuhbw+GFSQNKdO8ZjxzuIBujk 01qoKac2li1qD80GEckn/TJm8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOgXi0B3 uyj/gK4QY21NChMts9GmMB8GA1UdIwQYMBaAFLLt4gM0TpynNQHFUUL5roFgnomH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDZBNS8wMjMxQzE1NDAw NkIxMUVBOTdDMUJENUZDNEY5QUUwMi9zdTNpQXpST25LYzFBY1ZSUXZtdWdXQ2Vp WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N1M2lBelJPbktjMUFjVlJRdm11Z1dDZWlZYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDZBNS8wMjMxQzE1NDAwNkIxMUVBOTdDMUJENUZDNEY5QUUwMi9zdTNpQXpST25L YzFBY1ZSUXZtdWdXQ2VpWWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqfOTjvaZBCKhDWDoPlvHQ2cm5439/H50UMkUQBLV8/iw+ZvDuNrrd mkpVr7yTGkazew7wcnKS9PrLCjqklSDLdkzQyDKvyik4Zdd2TZ/t/2O/oNu4hsew gbtZ7Hit2b+qxpGV+eB2azOfUby+DS3q0JsPuXoMqG3/S5kBhW3R9suOhjykUhyV cvvcPHN4mUFGofo5O/Pi+QEEozjOYmFAnNY7VEimpFB/fr6GdDStxYYe5BoMmTDu FiUymaX2UqjPGtDDbmtSNnRGyN+9q5ek30v4a/D8OgT2Ehu8aGaqnegTTKX0eT/V RyDHofVf5J+YMRvZ9b2vKjNfFOVbZS+G -----END CERTIFICATE-----Generated at Sun Aug 24 21:48:20 2025 by rpki-client