$ rpki-client -vvf rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft File: -IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft (raw, json) Hash identifier: 90iuBH4qq42wwkVHkjZIQfNmFbNwNLH866eoN1RYxz4= Subject key identifier: C0:50:9B:0B:B0:9D:64:F5:12:99:A2:19:86:78:BC:C8:F8:0A:04:FB Authority key identifier: F8:8B:97:40:4F:9D:C1:0F:5A:AB:02:F7:4E:C4:90:F9:8A:D0:D3:B0 Certificate issuer: /CN=A91854B7/serialNumber=F88B97404F9DC10F5AAB02F74EC490F98AD0D3B0 Certificate serial: 0696 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft Manifest number: 0685 Signing time: Fri 22 Aug 2025 22:30:36 +0000 Manifest this update: Fri 22 Aug 2025 22:30:36 +0000 Manifest next update: Fri 29 Aug 2025 22:30:36 +0000 Files and hashes: 1: -IuXQE-dwQ9aqwL3TsSQ-YrQ07A.crl (hash: nbnkAZep9nkctbONQmbCYtv1nvzXefdM3+NOHVqMMdI=) 2: 3EACF95EEBB511ECA410BF6DC4F9AE02.roa (hash: xFmg051Irl3QGxSaxPh5/PYgXOOm8roreRqol3Gv8es=) 3: 57D28CCA853E11EB9D9E2D39C4F9AE02.roa (hash: goZ7BQs8FCZwkLeH44QNaXxFhzltbICpUZt+GahLEkQ=) 4: 5892BB44853E11EB9D9E2D39C4F9AE02.roa (hash: pCDQvhpjTdtiJ3zqTDHJUEvIuviY7SsjRZSRovU8uCc=) 5: 1D526B2E5DB311EEA8990E1BC4F9AE02.roa (hash: SXTVWJ2PMrAIqDEbXazZSPAGB7rgkYD55HYA8ZjO4Yw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.crl rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:30:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1686 (0x696) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91854B7, serialNumber=F88B97404F9DC10F5AAB02F74EC490F98AD0D3B0 Validity Not Before: Aug 22 22:30:36 2025 GMT Not After : Aug 29 22:30:36 2025 GMT Subject: CN=68a8ef8c-04e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:51:3c:35:ac:35:39:e2:52:40:0a:63:5d:03: a9:fc:d7:45:6e:dd:a4:46:ba:4c:a9:39:a6:95:3a: de:3f:9b:41:3f:77:31:2e:82:ec:43:82:ed:39:0f: 01:9f:10:f2:bc:c9:a5:ee:66:c4:01:8d:1f:33:33: 8c:b6:e2:28:09:6e:88:d2:ba:b7:11:99:60:bf:4a: 54:e9:84:9e:8d:6d:f4:8c:84:06:9d:9b:9c:20:14: a7:37:66:81:c7:21:68:c7:ad:33:db:33:cb:69:86: d1:4f:2e:1b:ba:f7:27:8e:83:ac:16:7f:e3:43:59: 64:e2:f3:71:29:56:9c:a5:8b:f0:7b:30:cb:33:42: 9d:a2:4b:cf:6a:23:90:90:53:85:a4:70:d5:b8:15: 7c:fe:eb:57:de:fa:50:4c:d0:d3:e5:7c:11:57:af: 72:e4:a9:e6:36:41:01:a6:8d:d8:98:d8:d6:bc:ab: e5:a5:a3:84:38:54:5e:8d:65:e5:d1:e0:55:91:e0: 77:84:ef:0f:d3:06:37:6a:77:2a:a7:5f:f4:3a:f0: 44:48:43:00:d7:bb:bf:29:b9:10:30:bd:c1:77:cd: 28:dc:ba:b0:ab:5a:49:c0:a0:88:4c:4c:fd:e8:11: 23:be:1c:e7:8f:13:23:09:cd:a5:39:30:4a:7c:7b: fb:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:50:9B:0B:B0:9D:64:F5:12:99:A2:19:86:78:BC:C8:F8:0A:04:FB X509v3 Authority Key Identifier: keyid:F8:8B:97:40:4F:9D:C1:0F:5A:AB:02:F7:4E:C4:90:F9:8A:D0:D3:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:e3:61:08:49:6e:b1:3c:8a:9c:00:b5:1d:6a:01:53:72:69: ef:17:34:f6:57:9b:cb:6e:09:af:09:f8:c3:40:85:c0:26:66: 9f:ff:80:f0:ee:ae:3e:48:89:6c:e8:a2:6b:2f:45:45:5f:0d: 37:79:a9:5b:9a:70:d5:ac:af:d0:d9:f3:f6:36:cc:0e:12:3e: 88:ad:08:13:75:07:48:39:c7:f9:46:1f:11:e8:75:08:25:bb: c1:25:7a:8f:51:6e:cd:4b:12:dd:85:03:36:0d:be:26:ef:87: c1:6a:cc:80:c5:6e:ac:34:44:28:05:a2:5a:72:93:30:5b:9d: ce:32:00:ae:e9:9f:a9:18:71:e8:c9:b5:06:bc:26:c6:12:65: 75:e7:69:7d:78:a6:76:6b:68:bd:b6:af:65:59:fb:a9:c8:7c: 6d:d9:6e:e3:b2:fd:d0:ba:2f:ca:bc:3a:79:90:0b:7f:d4:63: 9a:64:da:3f:2e:67:c4:6d:2a:b2:66:82:8c:cd:89:be:9d:5a: db:fe:f6:e6:c7:3a:ca:62:7e:d9:9f:93:67:a6:5e:c2:e1:d4: 06:de:4d:f3:37:6a:d5:3f:b0:cf:3a:5a:b5:6f:d0:b1:8f:1a: 05:59:c5:58:66:54:b1:48:63:3d:01:d3:eb:9b:1b:87:e8:7f: a7:5d:f6:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU0QjcxMTAvBgNVBAUTKEY4OEI5NzQwNEY5REMxMEY1QUFCMDJGNzRFQzQ5MEY5 OEFEMEQzQjAwHhcNMjUwODIyMjIzMDM2WhcNMjUwODI5MjIzMDM2WjAYMRYwFAYD VQQDEw02OGE4ZWY4Yy0wNGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyFE8Naw1OeJSQApjXQOp/NdFbt2kRrpMqTmmlTreP5tBP3cxLoLsQ4LtOQ8B nxDyvMml7mbEAY0fMzOMtuIoCW6I0rq3EZlgv0pU6YSejW30jIQGnZucIBSnN2aB xyFox60z2zPLaYbRTy4buvcnjoOsFn/jQ1lk4vNxKVacpYvwezDLM0KdokvPaiOQ kFOFpHDVuBV8/utX3vpQTNDT5XwRV69y5KnmNkEBpo3YmNjWvKvlpaOEOFRejWXl 0eBVkeB3hO8P0wY3ancqp1/0OvBESEMA17u/KbkQML3Bd80o3Lqwq1pJwKCITEz9 6BEjvhznjxMjCc2lOTBKfHv73wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMBQmwuw nWT1EpmiGYZ4vMj4CgT7MB8GA1UdIwQYMBaAFPiLl0BPncEPWqsC907EkPmK0NOw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTRCNy9FMTgwQ0U3QTg1 MUUxMUVCODQxOUIzMjdDNEY5QUUwMi8tSXVYUUUtZHdROWFxd0wzVHNTUS1ZclEw N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1JdVhRRS1kd1E5YXF3TDNUc1NRLVlyUTA3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTRCNy9FMTgwQ0U3QTg1MUUxMUVCODQxOUIzMjdDNEY5QUUwMi8tSXVYUUUtZHdR OWFxd0wzVHNTUS1ZclEwN0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCy42EISW6xPIqcALUdagFTcmnvFzT2V5vLbgmvCfjDQIXAJmaf/4Dw 7q4+SIls6KJrL0VFXw03ealbmnDVrK/Q2fP2NswOEj6IrQgTdQdIOcf5Rh8R6HUI JbvBJXqPUW7NSxLdhQM2Db4m74fBasyAxW6sNEQoBaJacpMwW53OMgCu6Z+pGHHo ybUGvCbGEmV152l9eKZ2a2i9tq9lWfupyHxt2W7jsv3Qui/KvDp5kAt/1GOaZNo/ LmfEbSqyZoKMzYm+nVrb/vbmxzrKYn7Zn5Nnpl7C4dQG3k3zN2rVP7DPOlq1b9Cx jxoFWcVYZlSxSGM9AdPrmxuH6H+nXfbv -----END CERTIFICATE-----Generated at Sun Aug 24 00:45:40 2025 by rpki-client