$ rpki-client -vvf rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft File: phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft (raw, json) Hash identifier: U98W0ZFm3GklJwAuM0GppCtJCzljZLNHIwyMg4CPjFE= Subject key identifier: DE:23:C4:1E:5D:2A:A3:46:30:BC:59:37:B2:D5:97:97:18:59:C0:BA Authority key identifier: A6:12:0A:E9:9A:AA:DC:00:A3:5A:0C:8B:F5:16:5E:0B:63:A3:8A:1E Certificate issuer: /CN=A91456E2/serialNumber=A6120AE99AAADC00A35A0C8BF5165E0B63A38A1E Certificate serial: 0489 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phIK6Zqq3ACjWgyL9RZeC2Ojih4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft Manifest number: 0484 Signing time: Sat 23 Aug 2025 00:16:30 +0000 Manifest this update: Sat 23 Aug 2025 00:16:29 +0000 Manifest next update: Sat 30 Aug 2025 00:16:29 +0000 Files and hashes: 1: phIK6Zqq3ACjWgyL9RZeC2Ojih4.crl (hash: BTQUc32RP8WEBUAeTKz5d0H5T3DCkvNNf7Eq99zSC3s=) 2: 28E9FEB86F0511EDAF35FA28C4F9AE02.roa (hash: HeEMxWbEp596Nl2YyjBu7WmXC2Fx4dfVT+MEH+2m8Ic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.crl rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phIK6Zqq3ACjWgyL9RZeC2Ojih4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1161 (0x489) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91456E2, serialNumber=A6120AE99AAADC00A35A0C8BF5165E0B63A38A1E Validity Not Before: Aug 23 00:16:29 2025 GMT Not After : Aug 30 00:16:29 2025 GMT Subject: CN=68a9085d-2311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:5d:12:94:ce:88:0c:cf:3e:06:45:0a:80:ea: a7:78:5d:e9:9c:bc:c1:c5:db:58:3b:bb:c0:ca:20: 28:c3:f0:1f:91:7e:cd:43:ef:61:36:a2:25:77:ff: aa:36:61:79:36:5a:1d:26:98:2a:cf:cb:e7:61:93: ed:c2:a5:5e:4b:ad:ea:61:ee:bf:15:a5:14:81:32: d8:9d:83:e7:e0:49:d4:bc:eb:30:5c:66:4f:ed:69: 9c:47:49:a0:7c:ac:49:d1:bb:77:d5:01:8e:20:9e: 14:6d:c2:54:0c:03:7c:31:4c:0b:0d:43:c1:2a:27: e7:09:41:ea:33:43:79:16:56:24:04:e5:8e:c0:55: 89:fd:22:cb:8d:c3:9c:f5:93:e8:f6:59:d3:a3:02: 77:17:40:0c:af:2c:fb:3a:2c:39:e6:1c:2d:93:90: 59:1a:17:fb:7c:e1:d1:4a:e8:54:f3:4a:c0:c3:2f: 1f:a2:17:de:8e:86:d0:80:a0:2c:eb:e6:91:69:8e: e0:7f:21:0c:0b:dd:af:71:fe:71:83:f9:35:d2:88: 90:a5:84:94:2f:72:2c:97:5c:15:ac:1b:ee:ca:b4: 43:4a:0a:9b:36:6a:1c:21:ff:06:5c:2e:c3:7b:85: a7:a9:08:eb:b0:38:e9:83:61:3e:a8:ab:6a:8d:aa: be:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:23:C4:1E:5D:2A:A3:46:30:BC:59:37:B2:D5:97:97:18:59:C0:BA X509v3 Authority Key Identifier: keyid:A6:12:0A:E9:9A:AA:DC:00:A3:5A:0C:8B:F5:16:5E:0B:63:A3:8A:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phIK6Zqq3ACjWgyL9RZeC2Ojih4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:61:ee:04:f1:a6:ce:d5:dc:3d:20:66:d7:fb:c2:be:e1:5e: 45:5d:2a:bd:d3:60:c7:14:98:a4:bc:40:80:2c:08:ea:ed:60: cc:fe:96:f9:69:d6:a5:00:61:35:1b:41:c6:a4:73:ab:a5:98: 8d:c9:3e:c6:90:c7:fe:f7:c6:ef:fd:52:b6:7a:b6:db:d8:98: d2:78:73:12:b6:9c:60:d4:30:c8:35:eb:f9:9a:fc:e8:a6:ce: 60:6c:48:6c:43:bb:4f:54:7a:49:43:cb:10:49:29:70:6b:e4: 31:84:2e:5f:20:47:aa:08:41:ab:81:3f:64:3b:36:ea:88:32: c1:f9:84:e8:a9:eb:e7:c7:83:0c:96:13:18:d9:56:38:d0:cd: 1a:29:cd:c6:71:32:8e:b8:2f:97:8b:ec:1f:2d:f6:6b:21:e8: ad:40:3d:10:31:d8:e3:77:64:5c:a7:28:84:42:7e:8b:ea:2b: 6c:aa:30:b2:d1:4d:29:dd:2e:e3:eb:23:7f:a1:b9:73:ae:4f: 81:54:fe:34:b8:69:bb:04:8c:59:26:b1:cd:92:93:a3:ae:65: 6f:1a:0d:43:04:27:e5:c0:31:46:23:4e:64:49:5f:ad:af:1c: 8f:ac:1d:48:b6:9a:54:e4:4e:be:59:45:21:7c:4c:c8:30:b9: ea:16:eb:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU2RTIxMTAvBgNVBAUTKEE2MTIwQUU5OUFBQURDMDBBMzVBMEM4QkY1MTY1RTBC NjNBMzhBMUUwHhcNMjUwODIzMDAxNjI5WhcNMjUwODMwMDAxNjI5WjAYMRYwFAYD VQQDEw02OGE5MDg1ZC0yMzExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5l0SlM6IDM8+BkUKgOqneF3pnLzBxdtYO7vAyiAow/AfkX7NQ+9hNqIld/+q NmF5NlodJpgqz8vnYZPtwqVeS63qYe6/FaUUgTLYnYPn4EnUvOswXGZP7WmcR0mg fKxJ0bt31QGOIJ4UbcJUDAN8MUwLDUPBKifnCUHqM0N5FlYkBOWOwFWJ/SLLjcOc 9ZPo9lnTowJ3F0AMryz7Oiw55hwtk5BZGhf7fOHRSuhU80rAwy8fohfejobQgKAs 6+aRaY7gfyEMC92vcf5xg/k10oiQpYSUL3Isl1wVrBvuyrRDSgqbNmocIf8GXC7D e4WnqQjrsDjpg2E+qKtqjaq+QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN4jxB5d KqNGMLxZN7LVl5cYWcC6MB8GA1UdIwQYMBaAFKYSCumaqtwAo1oMi/UWXgtjo4oe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTZFMi9BMUZBQ0JGQzUy MDUxMUVDOTM2QUFCMjJDNEY5QUUwMi9waElLNlpxcTNBQ2pXZ3lMOVJaZUMyT2pp aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BoSUs2WnFxM0FDaldneUw5UlplQzJPamloNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTZFMi9BMUZBQ0JGQzUyMDUxMUVDOTM2QUFCMjJDNEY5QUUwMi9waElLNlpxcTNB Q2pXZ3lMOVJaZUMyT2ppaDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1Ye4E8abO1dw9IGbX+8K+4V5FXSq902DHFJikvECALAjq7WDM/pb5 adalAGE1G0HGpHOrpZiNyT7GkMf+98bv/VK2erbb2JjSeHMStpxg1DDINev5mvzo ps5gbEhsQ7tPVHpJQ8sQSSlwa+QxhC5fIEeqCEGrgT9kOzbqiDLB+YToqevnx4MM lhMY2VY40M0aKc3GcTKOuC+Xi+wfLfZrIeitQD0QMdjjd2RcpyiEQn6L6itsqjCy 0U0p3S7j6yN/oblzrk+BVP40uGm7BIxZJrHNkpOjrmVvGg1DBCflwDFGI05kSV+t rxyPrB1ItppU5E6+WUUhfEzIMLnqFuuz -----END CERTIFICATE-----Generated at Sat Aug 23 17:12:25 2025 by rpki-client