$ rpki-client -vvf rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft File: iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft (raw, json) Hash identifier: CMyOlYPgwipt5+3UWNstxXVG7QI++yqy4Ld8GNhStVA= Subject key identifier: 8F:D8:18:34:98:FD:9B:B4:D1:D8:6B:27:18:58:3A:F4:4D:08:6E:C3 Authority key identifier: 88:6A:0E:E6:BC:7A:BD:C0:9F:A8:22:E1:14:DF:43:5F:0B:0E:86:5A Certificate issuer: /CN=A91376FB/serialNumber=886A0EE6BC7ABDC09FA822E114DF435F0B0E865A Certificate serial: 0410 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iGoO5rx6vcCfqCLhFN9DXwsOhlo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft Manifest number: 0409 Signing time: Sat 23 Aug 2025 00:40:56 +0000 Manifest this update: Sat 23 Aug 2025 00:40:55 +0000 Manifest next update: Sat 30 Aug 2025 00:40:55 +0000 Files and hashes: 1: iGoO5rx6vcCfqCLhFN9DXwsOhlo.crl (hash: pwzbplgTvYJLexMwx5cG6sHEz3Px6WpCTd/MAQfpRQI=) 2: 25C61AECB7ED11ED9CF6A63EC4F9AE02.roa (hash: Yv9ClrwAFACGSqITuh9ooZXNuE+9WgMW5OezB268l+A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.crl rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iGoO5rx6vcCfqCLhFN9DXwsOhlo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:40:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1040 (0x410) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91376FB, serialNumber=886A0EE6BC7ABDC09FA822E114DF435F0B0E865A Validity Not Before: Aug 23 00:40:55 2025 GMT Not After : Aug 30 00:40:55 2025 GMT Subject: CN=68a90e17-d86f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c1:73:1d:e1:e9:97:18:dc:55:36:b6:b0:9e: 39:75:88:7e:6f:a5:6c:41:4a:4d:41:f0:c8:61:9e: 34:74:78:43:50:8f:61:c4:06:00:43:87:3c:08:86: 8d:3e:99:01:92:a4:0f:de:1d:d2:2a:43:4e:b1:c7: 0c:3a:d3:08:94:44:56:0b:ed:86:ad:e5:8c:44:94: 08:2d:26:f7:15:04:6a:47:a6:b8:75:0b:20:82:69: a6:45:5d:2b:15:7e:ea:de:e6:90:e5:3d:2c:36:08: 90:e4:99:19:f4:b5:58:f0:fd:f8:48:12:58:19:17: b2:78:7a:e8:4a:7b:c5:57:e6:72:f8:0e:05:96:7e: bc:3c:e8:c5:03:0d:c4:44:d9:4a:3a:48:fe:83:a2: 48:0d:f8:51:18:eb:a3:22:02:44:29:9e:e9:72:f0: 98:b8:ad:a7:53:77:88:a2:ab:63:95:58:39:03:0b: 6e:77:0b:c9:9b:0f:42:17:08:62:0e:07:67:27:f8: 05:4d:f7:46:18:88:8a:ae:d6:49:7a:60:96:22:9b: 2d:d7:85:9d:8b:c7:87:e6:66:c5:19:c9:4a:ce:83: ca:f0:dc:34:d1:43:b0:53:34:c4:e0:26:a0:14:8c: e7:91:de:69:5b:15:3e:ca:2d:99:90:9d:b0:86:b0: ed:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:D8:18:34:98:FD:9B:B4:D1:D8:6B:27:18:58:3A:F4:4D:08:6E:C3 X509v3 Authority Key Identifier: keyid:88:6A:0E:E6:BC:7A:BD:C0:9F:A8:22:E1:14:DF:43:5F:0B:0E:86:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iGoO5rx6vcCfqCLhFN9DXwsOhlo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:ac:66:3f:bc:10:6f:80:37:2c:5a:fe:7b:b8:10:a3:af:6c: 9c:9f:b8:ab:9d:9e:12:ba:7b:fb:8b:f0:ae:5a:0d:fb:34:8e: 2a:4c:82:5c:a2:ee:6e:d1:b8:aa:9e:80:96:b2:56:7a:d1:0c: 7f:14:3c:92:6c:9f:5f:e2:1e:23:ba:ff:ed:6c:c2:0f:20:ee: c9:f6:6c:65:cf:42:d9:0c:47:79:45:4f:5b:31:ec:61:84:f7: c0:18:fc:c0:f9:00:2f:8c:7e:3f:c0:56:e5:e9:33:fb:65:6d: f9:1a:26:80:a8:b2:ac:ae:0f:f0:eb:30:5a:ec:96:5e:4b:35: 6b:a6:e1:c3:63:a1:0e:81:73:11:5a:cd:79:87:c6:89:2c:a2: ca:87:79:1e:04:82:e0:79:11:73:eb:a7:f3:13:62:ad:a6:86: ad:d8:d2:9a:a1:47:16:00:58:3a:23:e8:38:86:0e:1b:9a:b8: 0b:11:2e:e0:a9:13:9d:fe:3c:1d:a7:09:38:04:39:e8:48:44: d5:61:da:8a:e1:73:bb:9b:50:e8:bd:ae:3f:d8:45:b6:5a:26: d2:08:36:ea:2b:77:a1:78:e2:2b:6d:1f:fc:f9:fd:9b:80:59: be:be:a6:00:60:1b:16:59:91:ae:9f:35:13:a1:3e:c6:60:62: a2:e4:a2:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc2RkIxMTAvBgNVBAUTKDg4NkEwRUU2QkM3QUJEQzA5RkE4MjJFMTE0REY0MzVG MEIwRTg2NUEwHhcNMjUwODIzMDA0MDU1WhcNMjUwODMwMDA0MDU1WjAYMRYwFAYD VQQDEw02OGE5MGUxNy1kODZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArsFzHeHplxjcVTa2sJ45dYh+b6VsQUpNQfDIYZ40dHhDUI9hxAYAQ4c8CIaN PpkBkqQP3h3SKkNOsccMOtMIlERWC+2GreWMRJQILSb3FQRqR6a4dQsggmmmRV0r FX7q3uaQ5T0sNgiQ5JkZ9LVY8P34SBJYGReyeHroSnvFV+Zy+A4Fln68POjFAw3E RNlKOkj+g6JIDfhRGOujIgJEKZ7pcvCYuK2nU3eIoqtjlVg5AwtudwvJmw9CFwhi DgdnJ/gFTfdGGIiKrtZJemCWIpst14Wdi8eH5mbFGclKzoPK8Nw00UOwUzTE4Cag FIznkd5pWxU+yi2ZkJ2whrDtOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI/YGDSY /Zu00dhrJxhYOvRNCG7DMB8GA1UdIwQYMBaAFIhqDua8er3An6gi4RTfQ18LDoZa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzZGQi85MkZCNzFBMDgz RjIxMUVDQkIyNTE5ODVDNEY5QUUwMi9pR29PNXJ4NnZjQ2ZxQ0xoRk45RFh3c09o bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lHb081cng2dmNDZnFDTGhGTjlEWHdzT2hsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzZGQi85MkZCNzFBMDgzRjIxMUVDQkIyNTE5ODVDNEY5QUUwMi9pR29PNXJ4NnZj Q2ZxQ0xoRk45RFh3c09obG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5rGY/vBBvgDcsWv57uBCjr2ycn7irnZ4Sunv7i/CuWg37NI4qTIJc ou5u0biqnoCWslZ60Qx/FDySbJ9f4h4juv/tbMIPIO7J9mxlz0LZDEd5RU9bMexh hPfAGPzA+QAvjH4/wFbl6TP7ZW35GiaAqLKsrg/w6zBa7JZeSzVrpuHDY6EOgXMR Ws15h8aJLKLKh3keBILgeRFz66fzE2Ktpoat2NKaoUcWAFg6I+g4hg4bmrgLES7g qROd/jwdpwk4BDnoSETVYdqK4XO7m1Dova4/2EW2WibSCDbqK3eheOIrbR/8+f2b gFm+vqYAYBsWWZGunzUToT7GYGKi5KJP -----END CERTIFICATE-----Generated at Sat Aug 23 07:00:19 2025 by rpki-client