$ rpki-client -vvf rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft File: I9INognIlcMA7mtlm2sYKZJfvU8.mft (raw, json) Hash identifier: JdTOwsRUg9eWnyqINB9/5tiXwLYaEtVnktwWgPzG+7M= Subject key identifier: FF:4C:D8:C1:EC:97:CB:D3:20:7B:9C:1A:46:82:77:55:C3:B4:B7:7B Authority key identifier: 23:D2:0D:A2:09:C8:95:C3:00:EE:6B:65:9B:6B:18:29:92:5F:BD:4F Certificate issuer: /CN=A91829E3/serialNumber=23D20DA209C895C300EE6B659B6B1829925FBD4F Certificate serial: 0C48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft Manifest number: 0C33 Signing time: Fri 22 Aug 2025 18:48:50 +0000 Manifest this update: Fri 22 Aug 2025 18:48:50 +0000 Manifest next update: Fri 29 Aug 2025 18:48:50 +0000 Files and hashes: 1: I9INognIlcMA7mtlm2sYKZJfvU8.crl (hash: dsmcGwAnKiA00CSSBD7zQXZpY7ec5NPJhPgDBMZvBRQ=) 2: 7B96F1340C6011F088E6FD2FC4F9AE02.roa (hash: FmIgsBhn26Msitd9uYBqz2EKKDjWry4yTM+2My3/Yyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.crl rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:48:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3144 (0xc48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91829E3, serialNumber=23D20DA209C895C300EE6B659B6B1829925FBD4F Validity Not Before: Aug 22 18:48:50 2025 GMT Not After : Aug 29 18:48:50 2025 GMT Subject: CN=68a8bb92-8575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ee:aa:68:f9:1c:c0:e7:57:46:3f:46:a7:3b: 18:9d:34:08:af:24:da:02:07:70:09:2b:5d:25:ac: a0:b0:14:b4:3a:e2:95:bc:ac:e9:91:6d:6f:57:2e: 9b:c3:6a:7d:05:3b:8c:3d:43:73:01:7e:2f:d3:13: ae:eb:aa:94:d0:9d:e0:7a:f3:b0:1b:d7:8c:bc:e4: e1:eb:dd:1b:73:6d:9a:b4:35:ae:6d:b4:35:cd:15: 12:60:44:18:38:c9:c9:40:40:f2:8c:9d:22:5b:8a: cd:0f:2b:e6:60:b3:3e:60:bf:6b:2e:7f:24:55:9d: ae:ec:0f:05:d5:12:5d:c8:3b:89:89:7b:00:9a:ab: d8:64:56:92:56:f0:bf:fa:00:ca:7c:d9:f2:c2:ce: 66:e3:9a:10:97:a7:96:9b:f4:bd:fb:99:e7:fe:4c: b0:70:de:41:76:e5:c7:e8:85:b3:29:e1:c3:a0:42: 21:cc:80:a6:97:fb:12:92:0d:8b:76:ed:94:ed:db: 93:0b:69:cf:00:eb:27:b4:78:3d:e1:18:b4:2d:60: 24:25:5a:a8:5b:33:79:60:de:34:f3:a9:f6:6e:60: d4:d2:55:b4:a1:9e:63:ba:0c:32:7d:3d:08:77:8e: b7:c8:c6:b9:5e:7c:38:64:a6:15:c1:1e:2c:df:58: cc:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:4C:D8:C1:EC:97:CB:D3:20:7B:9C:1A:46:82:77:55:C3:B4:B7:7B X509v3 Authority Key Identifier: keyid:23:D2:0D:A2:09:C8:95:C3:00:EE:6B:65:9B:6B:18:29:92:5F:BD:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:a0:a7:45:58:4b:b6:01:00:b2:92:10:c7:f4:8a:16:23:0f: 98:82:68:30:f4:01:16:93:03:eb:d8:c8:af:2c:3e:59:36:41: ed:d0:99:4a:d5:ed:a4:d4:b0:3d:8f:0e:f9:e6:2f:f0:c5:e6: 18:ef:80:dd:e7:d8:81:6b:f4:76:ac:8e:48:34:39:e8:44:98: 78:5d:1a:de:ce:a3:8e:1b:d0:e4:8b:e0:69:77:6b:ad:bc:a3: d1:a1:70:a2:1b:e6:77:d0:00:38:d3:99:69:5d:e9:c2:8d:01: 43:3c:97:eb:42:20:9b:fe:c2:d0:ed:e1:21:cf:77:17:42:b5: 41:bb:dc:a8:f2:e9:bf:eb:0e:dc:8a:55:d8:0e:7f:51:08:8a: 1d:d5:1e:3e:f2:92:ab:5f:32:c5:e1:17:6d:b0:93:e3:f4:43: b5:b1:e2:89:2b:82:56:82:dd:52:f0:59:e4:b6:20:d6:e0:07: 86:98:cd:27:26:1f:a6:af:03:4c:ea:e0:35:29:fb:ed:b2:92: 47:aa:97:ea:7f:98:01:76:b6:03:74:15:9a:36:82:19:63:d9: 2b:b5:f6:fb:b7:fa:04:52:e2:b5:66:de:95:bf:ab:d9:fa:f0: 02:94:64:e8:ec:43:88:3b:3a:47:0e:2f:7a:dc:50:5a:56:11: 1d:4f:93:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI5RTMxMTAvBgNVBAUTKDIzRDIwREEyMDlDODk1QzMwMEVFNkI2NTlCNkIxODI5 OTI1RkJENEYwHhcNMjUwODIyMTg0ODUwWhcNMjUwODI5MTg0ODUwWjAYMRYwFAYD VQQDEw02OGE4YmI5Mi04NTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAte6qaPkcwOdXRj9GpzsYnTQIryTaAgdwCStdJaygsBS0OuKVvKzpkW1vVy6b w2p9BTuMPUNzAX4v0xOu66qU0J3gevOwG9eMvOTh690bc22atDWubbQ1zRUSYEQY OMnJQEDyjJ0iW4rNDyvmYLM+YL9rLn8kVZ2u7A8F1RJdyDuJiXsAmqvYZFaSVvC/ +gDKfNnyws5m45oQl6eWm/S9+5nn/kywcN5BduXH6IWzKeHDoEIhzICml/sSkg2L du2U7duTC2nPAOsntHg94Ri0LWAkJVqoWzN5YN4086n2bmDU0lW0oZ5jugwyfT0I d463yMa5Xnw4ZKYVwR4s31jM4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP9M2MHs l8vTIHucGkaCd1XDtLd7MB8GA1UdIwQYMBaAFCPSDaIJyJXDAO5rZZtrGCmSX71P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjlFMy9DNDVGNjBEQTE0 MzcxMUVBQUNGOUZBMzNDNEY5QUUwMi9JOUlOb2duSWxjTUE3bXRsbTJzWUtaSmZ2 VTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k5SU5vZ25JbGNNQTdtdGxtMnNZS1pKZnZVOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjlFMy9DNDVGNjBEQTE0MzcxMUVBQUNGOUZBMzNDNEY5QUUwMi9JOUlOb2duSWxj TUE3bXRsbTJzWUtaSmZ2VTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+oKdFWEu2AQCykhDH9IoWIw+Ygmgw9AEWkwPr2MivLD5ZNkHt0JlK 1e2k1LA9jw755i/wxeYY74Dd59iBa/R2rI5INDnoRJh4XRrezqOOG9Dki+Bpd2ut vKPRoXCiG+Z30AA405lpXenCjQFDPJfrQiCb/sLQ7eEhz3cXQrVBu9yo8um/6w7c ilXYDn9RCIod1R4+8pKrXzLF4RdtsJPj9EO1seKJK4JWgt1S8FnktiDW4AeGmM0n Jh+mrwNM6uA1KfvtspJHqpfqf5gBdrYDdBWaNoIZY9krtfb7t/oEUuK1Zt6Vv6vZ +vAClGTo7EOIOzpHDi963FBaVhEdT5Oi -----END CERTIFICATE-----Generated at Sat Aug 23 17:12:34 2025 by rpki-client