$ rpki-client -vvf rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft File: _ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft (raw, json) Hash identifier: 2RkfZssZ3M5l8IWX7zI420jZhtmVR0xNN4dmX5JvYsU= Subject key identifier: FE:72:AF:A2:C1:A0:A4:51:63:FD:71:30:8B:01:2A:FD:77:D0:98:B8 Authority key identifier: FE:2A:49:39:8E:65:00:6B:06:E9:DF:EC:27:0D:E2:E9:76:F8:AA:F6 Certificate issuer: /CN=A91820AF/serialNumber=FE2A49398E65006B06E9DFEC270DE2E976F8AAF6 Certificate serial: 069A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft Manifest number: 0693 Signing time: Fri 22 Aug 2025 22:26:57 +0000 Manifest this update: Fri 22 Aug 2025 22:26:57 +0000 Manifest next update: Fri 29 Aug 2025 22:26:57 +0000 Files and hashes: 1: _ipJOY5lAGsG6d_sJw3i6Xb4qvY.crl (hash: em88AS0Pl5EauQ6Xbt9+A4FOZSXu7Jc6q43jEi9zM9Q=) 2: D4DE5FF8A01F11EC87D72549C4F9AE02.roa (hash: 87anj6ScVkwh+H5EUFqHglOTYr+0YgLiGreNRecvlKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.crl rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:26:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1690 (0x69a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91820AF, serialNumber=FE2A49398E65006B06E9DFEC270DE2E976F8AAF6 Validity Not Before: Aug 22 22:26:57 2025 GMT Not After : Aug 29 22:26:57 2025 GMT Subject: CN=68a8eeb1-4895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:91:48:db:82:2b:4c:11:41:71:ee:f6:ff:6f: 0e:5f:19:c9:ae:1a:e9:21:f7:76:16:bd:3d:63:8d: c8:8f:f2:ea:08:93:6c:03:5a:f8:8e:8a:d3:d6:5b: bb:39:71:04:81:58:fc:d1:cc:05:db:de:b8:84:a0: ac:ec:e8:c6:10:e2:80:8f:df:4d:9f:21:d6:07:0e: e5:4e:5f:af:b1:a4:5a:52:a9:4f:52:76:c9:7c:92: 4f:9d:56:0a:b7:a5:9e:12:e9:1b:97:cf:1b:07:9c: 84:1b:d5:22:2b:a7:45:72:03:b4:14:90:25:1f:a4: 93:a3:db:15:ba:5a:88:a8:4a:1b:09:34:b9:c6:9e: 57:56:91:7d:59:c6:0c:0c:49:a4:1e:a7:05:3d:68: 70:70:3e:b6:07:c8:53:93:46:a4:91:38:27:e7:a8: 70:e8:7d:0e:7d:89:a0:cd:f6:f0:87:ae:44:a8:00: 6c:b0:02:43:31:d5:1b:22:de:56:ce:bf:1a:ff:fd: 09:0f:54:a8:8f:bd:ff:fd:b4:bc:00:ff:36:f2:ac: 19:62:f5:05:7f:f0:2f:9b:53:88:41:90:fd:76:e7: 8c:20:36:53:a4:1c:77:92:ec:34:94:3b:6e:6d:1f: 70:13:5c:8c:fd:e1:fe:a9:6a:e2:3e:fa:a8:c8:cc: ea:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:72:AF:A2:C1:A0:A4:51:63:FD:71:30:8B:01:2A:FD:77:D0:98:B8 X509v3 Authority Key Identifier: keyid:FE:2A:49:39:8E:65:00:6B:06:E9:DF:EC:27:0D:E2:E9:76:F8:AA:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:a3:85:3e:df:4a:c2:e7:91:25:10:a6:a4:22:74:61:d8:03: 0c:71:9b:69:47:6b:84:b0:da:58:d3:5f:ec:b5:a8:29:72:9e: 62:06:21:59:37:ce:0f:ba:e9:f1:c6:07:f6:85:66:46:f7:c6: 06:6b:3a:93:d1:7e:e5:2e:e8:da:b8:3b:76:b5:89:79:21:16: ae:0d:8f:55:7e:a2:2a:89:7c:48:bc:0e:db:d6:30:54:b6:72: 9f:15:bb:32:5a:a9:3a:03:d7:05:69:eb:4a:33:1e:7d:42:b7: 1e:28:f7:85:6c:05:ca:b0:f0:cf:32:f7:75:44:25:62:23:7a: 54:cc:53:40:8d:c6:a4:ea:4a:21:22:1c:33:c5:7b:cf:a4:0a: 84:27:31:ad:2c:6d:5b:5f:26:91:7b:34:88:cd:d2:ba:b2:9e: e7:23:dd:a3:81:21:d4:cd:02:55:2d:8f:63:e0:f8:50:96:7c: 1b:9e:94:57:52:36:92:e5:4a:2a:1b:c4:4a:7c:e8:15:a8:c4: 7e:b4:37:0c:a2:7a:08:98:ce:68:d6:f1:ec:d8:ab:08:61:ab: a4:11:f9:37:11:49:ac:72:d4:1e:5e:14:a3:09:b0:65:a6:8a: d4:13:15:4a:ba:a9:e3:ab:af:ae:34:db:1d:62:75:92:58:99: 8e:be:37:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIwQUYxMTAvBgNVBAUTKEZFMkE0OTM5OEU2NTAwNkIwNkU5REZFQzI3MERFMkU5 NzZGOEFBRjYwHhcNMjUwODIyMjIyNjU3WhcNMjUwODI5MjIyNjU3WjAYMRYwFAYD VQQDEw02OGE4ZWViMS00ODk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqpFI24IrTBFBce72/28OXxnJrhrpIfd2Fr09Y43Ij/LqCJNsA1r4jorT1lu7 OXEEgVj80cwF2964hKCs7OjGEOKAj99NnyHWBw7lTl+vsaRaUqlPUnbJfJJPnVYK t6WeEukbl88bB5yEG9UiK6dFcgO0FJAlH6STo9sVulqIqEobCTS5xp5XVpF9WcYM DEmkHqcFPWhwcD62B8hTk0akkTgn56hw6H0OfYmgzfbwh65EqABssAJDMdUbIt5W zr8a//0JD1Soj73//bS8AP828qwZYvUFf/Avm1OIQZD9dueMIDZTpBx3kuw0lDtu bR9wE1yM/eH+qWriPvqoyMzqlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP5yr6LB oKRRY/1xMIsBKv130Ji4MB8GA1UdIwQYMBaAFP4qSTmOZQBrBunf7CcN4ul2+Kr2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjBBRi8wRUYzREZBNDgw N0ExMUVCQkQwRThENThDNEY5QUUwMi9faXBKT1k1bEFHc0c2ZF9zSnczaTZYYjRx dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19pcEpPWTVsQUdzRzZkX3NKdzNpNlhiNHF2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjBBRi8wRUYzREZBNDgwN0ExMUVCQkQwRThENThDNEY5QUUwMi9faXBKT1k1bEFH c0c2ZF9zSnczaTZYYjRxdlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIo4U+30rC55ElEKakInRh2AMMcZtpR2uEsNpY01/stagpcp5iBiFZ N84Puunxxgf2hWZG98YGazqT0X7lLujauDt2tYl5IRauDY9VfqIqiXxIvA7b1jBU tnKfFbsyWqk6A9cFaetKMx59QrceKPeFbAXKsPDPMvd1RCViI3pUzFNAjcak6koh IhwzxXvPpAqEJzGtLG1bXyaRezSIzdK6sp7nI92jgSHUzQJVLY9j4PhQlnwbnpRX UjaS5UoqG8RKfOgVqMR+tDcMonoImM5o1vHs2KsIYaukEfk3EUmsctQeXhSjCbBl porUExVKuqnjq6+uNNsdYnWSWJmOvjcI -----END CERTIFICATE-----Generated at Sat Aug 23 16:26:34 2025 by rpki-client