$ rpki-client -vvf rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft File: IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft (raw, json) Hash identifier: uhVIYDf2ttM07aUfxxDz2Uqh9G5fvu2sxn4eROl/zG4= Subject key identifier: 5E:A9:8D:75:03:7A:F2:27:AA:39:36:B9:9D:55:80:9D:9C:B7:85:FE Authority key identifier: 21:F2:02:27:55:9D:B1:F8:63:84:9A:B6:43:23:3C:3E:93:57:76:A6 Certificate issuer: /CN=A91159B7/serialNumber=21F20227559DB1F863849AB643233C3E935776A6 Certificate serial: 0D34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfICJ1WdsfhjhJq2QyM8PpNXdqY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft Manifest number: 0D27 Signing time: Fri 22 Aug 2025 18:09:59 +0000 Manifest this update: Fri 22 Aug 2025 18:09:58 +0000 Manifest next update: Fri 29 Aug 2025 18:09:58 +0000 Files and hashes: 1: IfICJ1WdsfhjhJq2QyM8PpNXdqY.crl (hash: LwRfWLHYUdMEbe8x2DRL6XUZFRivwE0D+tZg+iqsL50=) 2: 7FC0801ED4EF11EC84AABC0CC4F9AE02.roa (hash: KmGf8Zvcyufmo51iUasTSRX2HWDW8cDhuB6ClqAH62g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.crl rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfICJ1WdsfhjhJq2QyM8PpNXdqY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:09:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3380 (0xd34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91159B7, serialNumber=21F20227559DB1F863849AB643233C3E935776A6 Validity Not Before: Aug 22 18:09:58 2025 GMT Not After : Aug 29 18:09:58 2025 GMT Subject: CN=68a8b277-8840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:25:07:e7:72:0d:73:c4:fa:cb:93:99:3b:bf: 6c:29:93:c2:5d:68:23:4e:e3:60:78:9b:09:9f:76: 52:40:35:29:e4:bf:18:73:a8:bb:e4:40:ee:d2:54: c5:75:80:a7:2c:61:3c:ec:eb:39:51:71:49:20:25: c6:36:14:be:7c:e5:5d:1b:d2:22:ce:5b:21:ec:f6: 33:69:3b:60:a4:69:b4:65:1e:d6:4c:46:1e:15:c0: a5:09:76:e9:54:e7:4d:22:ca:82:19:55:e4:24:5d: 5a:2b:c8:d3:b5:e9:7d:31:c6:c2:a7:e6:aa:07:19: 08:34:bb:c1:a0:15:d7:4c:0d:29:aa:a0:4f:13:90: 83:e2:36:af:69:ad:67:75:07:c1:af:ce:b9:c8:24: 35:06:7d:da:83:bb:a3:34:0b:4a:2c:ea:3b:15:1d: 4a:12:c7:f3:14:38:fe:17:c8:90:3f:59:e4:37:21: 8a:44:46:ac:28:89:5a:66:3b:78:72:0f:ad:45:2f: 92:01:1e:46:de:8d:c6:fe:05:45:77:e4:4c:6b:91: 11:e5:54:50:83:9d:b5:0f:06:e1:04:7d:cb:0e:a8: 87:1d:f4:fc:de:03:ac:ba:ff:ff:0b:89:6d:df:20: b5:0c:ed:ac:20:3e:04:22:34:a4:18:24:78:30:16: 59:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:A9:8D:75:03:7A:F2:27:AA:39:36:B9:9D:55:80:9D:9C:B7:85:FE X509v3 Authority Key Identifier: keyid:21:F2:02:27:55:9D:B1:F8:63:84:9A:B6:43:23:3C:3E:93:57:76:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfICJ1WdsfhjhJq2QyM8PpNXdqY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:92:7f:f0:05:c5:f1:a4:3f:eb:95:fb:94:81:78:78:97:e5: fa:e3:8b:80:57:d4:ff:c0:ec:d6:02:94:0b:31:5e:a2:7f:a6: 82:16:cf:3c:c1:d1:cc:79:70:9d:0d:f9:dc:fe:0c:1d:ee:cd: 92:d5:d8:64:c5:f8:08:9b:07:b9:5f:f5:41:46:15:be:09:92: eb:f8:08:5a:52:64:b9:24:03:78:c9:93:be:7e:9d:3d:27:61: 59:02:09:94:e5:be:26:b8:3a:8b:27:5a:59:70:67:4a:ab:84: ca:79:95:aa:40:8b:2b:e1:61:b1:d2:a4:64:31:5c:d6:5d:20: 06:60:46:d3:4d:95:ec:0b:fd:5a:27:86:46:88:7e:8e:59:6b: 1e:39:ed:9d:e1:80:6d:a0:e8:7d:55:99:b0:9d:14:30:66:7d: c7:b1:85:6c:31:eb:df:57:7a:7a:ef:5d:1e:22:4c:a2:d7:93: 19:f7:83:5b:f3:81:0f:f8:e8:09:94:f3:f7:ac:60:fb:c3:eb: 97:16:5d:aa:28:ec:e7:74:a6:30:26:23:33:3f:4a:7c:2d:9b: f2:c9:ee:f6:95:6e:21:0e:1c:59:01:be:e3:b0:31:b5:24:6c: 83:1f:cf:c9:6b:b1:e6:25:94:dc:c8:7d:8a:7d:07:a7:5f:e7: d1:65:89:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDTQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU5QjcxMTAvBgNVBAUTKDIxRjIwMjI3NTU5REIxRjg2Mzg0OUFCNjQzMjMzQzNF OTM1Nzc2QTYwHhcNMjUwODIyMTgwOTU4WhcNMjUwODI5MTgwOTU4WjAYMRYwFAYD VQQDEw02OGE4YjI3Ny04ODQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6CUH53INc8T6y5OZO79sKZPCXWgjTuNgeJsJn3ZSQDUp5L8Yc6i75EDu0lTF dYCnLGE87Os5UXFJICXGNhS+fOVdG9Iizlsh7PYzaTtgpGm0ZR7WTEYeFcClCXbp VOdNIsqCGVXkJF1aK8jTtel9McbCp+aqBxkINLvBoBXXTA0pqqBPE5CD4javaa1n dQfBr865yCQ1Bn3ag7ujNAtKLOo7FR1KEsfzFDj+F8iQP1nkNyGKREasKIlaZjt4 cg+tRS+SAR5G3o3G/gVFd+RMa5ER5VRQg521DwbhBH3LDqiHHfT83gOsuv//C4lt 3yC1DO2sID4EIjSkGCR4MBZZBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF6pjXUD evInqjk2uZ1VgJ2ct4X+MB8GA1UdIwQYMBaAFCHyAidVnbH4Y4SatkMjPD6TV3am MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTlCNy9BNEVDNTNGNkUy QjAxMUU5OUFCQjgxNTFDNEY5QUUwMi9JZklDSjFXZHNmaGpoSnEyUXlNOFBwTlhk cVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lmSUNKMVdkc2ZoamhKcTJReU04UHBOWGRxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTlCNy9BNEVDNTNGNkUyQjAxMUU5OUFCQjgxNTFDNEY5QUUwMi9JZklDSjFXZHNm aGpoSnEyUXlNOFBwTlhkcVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBkn/wBcXxpD/rlfuUgXh4l+X644uAV9T/wOzWApQLMV6if6aCFs88 wdHMeXCdDfnc/gwd7s2S1dhkxfgImwe5X/VBRhW+CZLr+AhaUmS5JAN4yZO+fp09 J2FZAgmU5b4muDqLJ1pZcGdKq4TKeZWqQIsr4WGx0qRkMVzWXSAGYEbTTZXsC/1a J4ZGiH6OWWseOe2d4YBtoOh9VZmwnRQwZn3HsYVsMevfV3p6710eIkyi15MZ94Nb 84EP+OgJlPP3rGD7w+uXFl2qKOzndKYwJiMzP0p8LZvyye72lW4hDhxZAb7jsDG1 JGyDH8/Ja7HmJZTcyH2KfQenX+fRZYk0 -----END CERTIFICATE-----Generated at Sun Aug 24 00:16:35 2025 by rpki-client