$ rpki-client -vvf rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft File: IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft (raw, json) Hash identifier: xwD7noviqse2laSFqqEGxKnCj7snNXA3EpBNM1RuOwM= Subject key identifier: 9C:B8:B0:6C:86:21:B8:CF:9C:B2:7C:08:A1:E6:1C:8B:0E:05:46:7F Authority key identifier: 22:25:E3:FA:2C:6F:E2:EF:B6:76:65:E5:3C:E9:FE:0C:DF:9C:9B:A7 Certificate issuer: /CN=A91A42A4/serialNumber=2225E3FA2C6FE2EFB67665E53CE9FE0CDF9C9BA7 Certificate serial: 01A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiXj-ixv4u-2dmXlPOn-DN-cm6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft Manifest number: 019D Signing time: Sat 23 Aug 2025 03:26:23 +0000 Manifest this update: Sat 23 Aug 2025 03:26:22 +0000 Manifest next update: Sat 30 Aug 2025 03:26:22 +0000 Files and hashes: 1: IiXj-ixv4u-2dmXlPOn-DN-cm6c.crl (hash: 4b21mNow3dtxyHlzT1VoTIC74ABJ/6BvfAgzVsYSh00=) 2: 73E56336069E11EE9D687712C4F9AE02.roa (hash: 2Dnxh30mhffjOkqJSVSDIOGgOimqWD/AADTc7ZuBX6Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.crl rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiXj-ixv4u-2dmXlPOn-DN-cm6c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:26:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 416 (0x1a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A42A4, serialNumber=2225E3FA2C6FE2EFB67665E53CE9FE0CDF9C9BA7 Validity Not Before: Aug 23 03:26:22 2025 GMT Not After : Aug 30 03:26:22 2025 GMT Subject: CN=68a934de-5462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:86:02:38:0c:d6:41:78:c9:c0:e4:34:73:23: c2:3b:fb:7f:f6:81:8c:99:19:05:8b:34:e9:26:8e: 91:b8:b4:0d:6b:3f:ba:95:72:f5:e1:cf:5e:f2:fd: 8b:bb:f2:27:3d:89:11:69:2d:8c:96:93:d8:82:58: f1:07:cc:f2:fc:4b:f0:1a:d8:2d:d9:73:9f:d2:78: 8d:f0:c7:87:28:86:84:ed:8c:e3:ca:ea:f5:5f:59: 6b:67:9a:d9:1e:ab:e8:13:80:b0:4d:11:f1:9a:b9: 6c:99:4f:6c:8a:ee:15:a8:af:ea:17:ec:cc:0e:39: 0b:3d:b8:80:6f:5b:73:00:de:05:9c:8f:98:d0:ce: a5:fa:be:72:ab:6d:95:ca:de:00:71:8d:ca:bf:5e: c3:8c:b1:92:e2:47:a1:79:b3:5c:03:84:54:00:83: 61:92:01:43:a4:38:a9:d9:1d:aa:00:28:90:cc:5b: d8:23:d8:9c:ea:94:20:b6:14:82:0f:3d:45:20:58: 90:44:a8:1f:7b:c3:df:7b:6f:db:c9:57:04:ec:c0: a2:bd:50:fa:14:32:ee:e8:5c:aa:f9:b9:bd:d9:70: 08:40:60:fe:af:b4:80:09:ba:0b:7d:f2:c4:55:b7: 96:54:e9:94:44:03:c4:c9:64:23:da:d8:27:50:04: c4:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:B8:B0:6C:86:21:B8:CF:9C:B2:7C:08:A1:E6:1C:8B:0E:05:46:7F X509v3 Authority Key Identifier: keyid:22:25:E3:FA:2C:6F:E2:EF:B6:76:65:E5:3C:E9:FE:0C:DF:9C:9B:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiXj-ixv4u-2dmXlPOn-DN-cm6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:85:ac:77:ee:5b:84:de:09:40:15:44:e6:20:c9:b0:d6:d5: 5a:55:03:ce:8c:94:c2:0f:0a:8c:c3:ec:18:bf:be:95:9d:b6: 86:ca:5e:6b:bb:d7:86:7c:84:2d:b9:d7:ed:ce:f3:5c:51:2b: 90:d5:a9:4a:95:f6:f2:bd:24:44:6e:10:08:b6:4b:58:e1:84: 8d:89:d7:26:4d:f5:91:8b:27:5e:c3:59:95:a7:e1:05:12:1d: 27:3b:64:3e:3b:a0:d4:39:78:19:98:d3:02:c3:10:89:bc:eb: 25:02:e1:0c:e0:c4:14:96:83:16:cf:fd:04:58:fe:76:37:af: 31:4a:9c:c5:cf:cf:86:64:e7:ac:46:03:44:a8:b1:69:a8:5b: 5b:b8:f2:be:88:d8:78:f7:c6:90:9e:31:4a:06:0a:19:c6:69: 67:53:bf:ff:11:1b:1f:6c:8f:66:7f:06:04:75:78:1c:c8:20: 26:95:31:a5:61:2c:24:88:44:b8:56:99:cb:0f:22:46:1d:c8: c5:f1:43:5b:4c:63:34:f6:ea:50:10:6c:7c:e5:1e:e1:b5:9b: 14:fe:0d:78:97:27:7f:16:06:77:87:2a:75:0c:ff:55:00:e5: 7c:19:ce:e5:d8:6b:0a:04:5f:a7:bb:9f:c0:71:4e:cc:2c:4e: ef:e4:29:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQyQTQxMTAvBgNVBAUTKDIyMjVFM0ZBMkM2RkUyRUZCNjc2NjVFNTNDRTlGRTBD REY5QzlCQTcwHhcNMjUwODIzMDMyNjIyWhcNMjUwODMwMDMyNjIyWjAYMRYwFAYD VQQDEw02OGE5MzRkZS01NDYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsIYCOAzWQXjJwOQ0cyPCO/t/9oGMmRkFizTpJo6RuLQNaz+6lXL14c9e8v2L u/InPYkRaS2MlpPYgljxB8zy/EvwGtgt2XOf0niN8MeHKIaE7Yzjyur1X1lrZ5rZ HqvoE4CwTRHxmrlsmU9siu4VqK/qF+zMDjkLPbiAb1tzAN4FnI+Y0M6l+r5yq22V yt4AcY3Kv17DjLGS4kehebNcA4RUAINhkgFDpDip2R2qACiQzFvYI9ic6pQgthSC Dz1FIFiQRKgfe8Pfe2/byVcE7MCivVD6FDLu6Fyq+bm92XAIQGD+r7SACboLffLE VbeWVOmURAPEyWQj2tgnUATEawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJy4sGyG IbjPnLJ8CKHmHIsOBUZ/MB8GA1UdIwQYMBaAFCIl4/osb+LvtnZl5Tzp/gzfnJun MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDJBNC82Njg0MTYzQTA2 MzgxMUVFQUUyMzhCNzRDNEY5QUUwMi9JaVhqLWl4djR1LTJkbVhsUE9uLUROLWNt NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lpWGotaXh2NHUtMmRtWGxQT24tRE4tY202Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDJBNC82Njg0MTYzQTA2MzgxMUVFQUUyMzhCNzRDNEY5QUUwMi9JaVhqLWl4djR1 LTJkbVhsUE9uLUROLWNtNmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAhax37luE3glAFUTmIMmw1tVaVQPOjJTCDwqMw+wYv76VnbaGyl5r u9eGfIQtudftzvNcUSuQ1alKlfbyvSREbhAItktY4YSNidcmTfWRiydew1mVp+EF Eh0nO2Q+O6DUOXgZmNMCwxCJvOslAuEM4MQUloMWz/0EWP52N68xSpzFz8+GZOes RgNEqLFpqFtbuPK+iNh498aQnjFKBgoZxmlnU7//ERsfbI9mfwYEdXgcyCAmlTGl YSwkiES4VpnLDyJGHcjF8UNbTGM09upQEGx85R7htZsU/g14lyd/FgZ3hyp1DP9V AOV8Gc7l2GsKBF+nu5/AcU7MLE7v5Cmk -----END CERTIFICATE-----Generated at Sat Aug 23 21:26:26 2025 by rpki-client