$ rpki-client -vvf rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft File: e-IwFTz_kAFkLbybJPhdDMKCNk4.mft (raw, json) Hash identifier: wCwJ2IpOQ7DawxPygQ35YfBqjTVLbbRvKqUJexIulaE= Subject key identifier: 17:7F:BD:07:41:DB:B0:18:D5:53:CE:9D:F5:14:59:F5:A4:11:51:88 Authority key identifier: 7B:E2:30:15:3C:FF:90:01:64:2D:BC:9B:24:F8:5D:0C:C2:82:36:4E Certificate issuer: /CN=A91625DB/serialNumber=7BE230153CFF9001642DBC9B24F85D0CC282364E Certificate serial: 015D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft Manifest number: 014F Signing time: Sat 23 Aug 2025 04:28:07 +0000 Manifest this update: Sat 23 Aug 2025 04:28:07 +0000 Manifest next update: Sat 30 Aug 2025 04:28:07 +0000 Files and hashes: 1: e-IwFTz_kAFkLbybJPhdDMKCNk4.crl (hash: Gn4sxi6CCu8o9R5rONhs4xV4+wBFKI0EMDQu34Z2fqA=) 2: 9D3EBEF4921111EE9AD1150CC4F9AE02.roa (hash: H7JonSUtz6tgIVuXpEGUpFZ7fUQBIkEHbO/Cd9DHtNo=) 3: C00D9A3C71EE11EFA7DD021EC4F9AE02.roa (hash: j/6dClTGKIF6Y0W3OQ8vmv5qC35aQkMZjQK9N8GGPFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.crl rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:28:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 349 (0x15d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91625DB, serialNumber=7BE230153CFF9001642DBC9B24F85D0CC282364E Validity Not Before: Aug 23 04:28:07 2025 GMT Not After : Aug 30 04:28:07 2025 GMT Subject: CN=68a94357-fd17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b4:00:f8:b6:92:30:5b:29:61:1b:33:42:10: d7:86:47:36:84:b7:31:aa:fb:da:e4:90:ad:60:4d: 99:ac:39:79:e8:ea:61:38:f0:c4:68:91:e5:bf:0c: 23:5c:12:bb:56:f7:26:89:e7:0a:c9:66:3c:f7:ee: db:51:e0:b7:ef:46:79:b1:64:fc:a3:29:d2:e1:b5: 42:48:51:4b:5a:e3:2f:48:16:65:a8:df:6b:4f:d1: 16:d9:bd:a3:45:59:cf:99:39:e6:25:75:10:d5:ab: 4f:9e:0c:44:2d:be:08:f6:34:b1:95:b4:d6:e8:16: 87:d8:e0:56:43:76:8c:df:8e:1e:34:57:be:eb:66: 98:30:d7:db:18:e9:75:17:c2:f6:41:ee:8f:f7:fb: 3a:09:1f:0b:b3:fb:43:47:bd:00:03:e1:e7:03:49: d8:47:cf:7c:c3:fc:f2:27:b5:0c:73:82:c6:07:7b: 46:85:e7:e5:02:46:dc:67:da:a2:f2:e3:e8:74:75: 02:a9:64:44:60:39:e2:5f:d6:18:35:db:dc:d1:f0: 7d:bf:80:88:0b:fa:81:72:b8:6a:21:77:5b:75:f1: 80:41:13:2e:2d:eb:ec:ee:a9:aa:24:d5:a4:ea:45: 88:1d:3e:01:c5:6c:6d:63:41:22:a5:64:29:6a:9a: 5e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:7F:BD:07:41:DB:B0:18:D5:53:CE:9D:F5:14:59:F5:A4:11:51:88 X509v3 Authority Key Identifier: keyid:7B:E2:30:15:3C:FF:90:01:64:2D:BC:9B:24:F8:5D:0C:C2:82:36:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:2c:87:9d:e2:1b:b8:d9:39:36:61:1d:ae:f2:06:c1:b8:45: e4:bf:4c:0e:92:75:bb:48:a6:0d:e4:a1:f5:24:2e:53:b1:18: b4:79:57:f4:7f:71:da:04:a8:11:1e:17:1d:ca:50:98:12:c6: e9:28:72:71:89:59:7d:ce:81:20:3c:b6:42:8f:42:e6:f5:5e: a2:80:52:e5:2d:48:b4:9b:62:00:8a:7d:3a:22:4f:5c:76:f8: 86:99:0c:c0:01:9e:a3:c0:6e:5a:66:84:23:c3:cc:95:28:03: 44:11:2b:b1:58:94:62:e6:0b:28:99:cd:39:16:e4:9a:f4:62: 4e:4a:62:0f:be:36:99:51:f6:60:ab:d7:32:57:f9:8f:da:72: 72:ea:22:6d:17:3c:ef:46:3e:b9:53:68:87:90:4a:38:e8:19: 47:9b:44:02:15:88:9b:56:be:8f:13:a0:88:cd:13:7d:01:52: 08:97:c2:a4:84:54:55:46:fa:2d:67:c5:88:1b:9c:1e:2d:a1: a1:c8:93:8c:fc:76:d2:01:6d:9f:65:74:3b:ff:c5:63:67:a6: dd:2f:1a:00:e1:17:1d:69:01:cb:86:19:54:ab:0b:72:dc:bb: ce:d2:69:31:9e:ce:72:12:f4:69:74:ca:4b:35:77:e2:25:b7: 25:26:41:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI1REIxMTAvBgNVBAUTKDdCRTIzMDE1M0NGRjkwMDE2NDJEQkM5QjI0Rjg1RDBD QzI4MjM2NEUwHhcNMjUwODIzMDQyODA3WhcNMjUwODMwMDQyODA3WjAYMRYwFAYD VQQDEw02OGE5NDM1Ny1mZDE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0rQA+LaSMFspYRszQhDXhkc2hLcxqvva5JCtYE2ZrDl56OphOPDEaJHlvwwj XBK7VvcmiecKyWY89+7bUeC370Z5sWT8oynS4bVCSFFLWuMvSBZlqN9rT9EW2b2j RVnPmTnmJXUQ1atPngxELb4I9jSxlbTW6BaH2OBWQ3aM344eNFe+62aYMNfbGOl1 F8L2Qe6P9/s6CR8Ls/tDR70AA+HnA0nYR898w/zyJ7UMc4LGB3tGheflAkbcZ9qi 8uPodHUCqWREYDniX9YYNdvc0fB9v4CIC/qBcrhqIXdbdfGAQRMuLevs7qmqJNWk 6kWIHT4BxWxtY0EipWQpappeXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBd/vQdB 27AY1VPOnfUUWfWkEVGIMB8GA1UdIwQYMBaAFHviMBU8/5ABZC28myT4XQzCgjZO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjVEQi8xMTkzOUQxMDkw NjkxMUVFQjIzRDc0MjVDNEY5QUUwMi9lLUl3RlR6X2tBRmtMYnliSlBoZERNS0NO azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2UtSXdGVHpfa0FGa0xieWJKUGhkRE1LQ05rNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjVEQi8xMTkzOUQxMDkwNjkxMUVFQjIzRDc0MjVDNEY5QUUwMi9lLUl3RlR6X2tB RmtMYnliSlBoZERNS0NOazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABLIed4hu42Tk2YR2u8gbBuEXkv0wOknW7SKYN5KH1JC5TsRi0eVf0 f3HaBKgRHhcdylCYEsbpKHJxiVl9zoEgPLZCj0Lm9V6igFLlLUi0m2IAin06Ik9c dviGmQzAAZ6jwG5aZoQjw8yVKANEESuxWJRi5gsomc05FuSa9GJOSmIPvjaZUfZg q9cyV/mP2nJy6iJtFzzvRj65U2iHkEo46BlHm0QCFYibVr6PE6CIzRN9AVIIl8Kk hFRVRvotZ8WIG5weLaGhyJOM/HbSAW2fZXQ7/8VjZ6bdLxoA4RcdaQHLhhlUqwty 3LvO0mkxns5yEvRpdMpLNXfiJbclJkGA -----END CERTIFICATE-----Generated at Sat Aug 23 18:25:43 2025 by rpki-client