$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.mft File: iEiqzfKVEwPnCY9BnYygBCKJDGk.mft (raw, json) Hash identifier: eIqcC15otEwc6RuNC5gtaINNwdwnJkZA64NiW7ClSUw= Subject key identifier: F8:E8:4D:9F:1E:7E:7D:38:DE:C8:A7:F3:42:11:E9:B5:D3:65:A2:3E Authority key identifier: 88:48:AA:CD:F2:95:13:03:E7:09:8F:41:9D:8C:A0:04:22:89:0C:69 Certificate issuer: /CN=A91A8047/serialNumber=8848AACDF2951303E7098F419D8CA00422890C69 Certificate serial: A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEiqzfKVEwPnCY9BnYygBCKJDGk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.mft Manifest number: A0 Signing time: Sat 23 Aug 2025 06:37:23 +0000 Manifest this update: Sat 23 Aug 2025 06:37:23 +0000 Manifest next update: Sat 30 Aug 2025 06:37:23 +0000 Files and hashes: 1: iEiqzfKVEwPnCY9BnYygBCKJDGk.crl (hash: q4QkuAZz1b7dOo2ytdFjxcDwvw4J6NK4CeqaHEbcCyg=) 2: 029310329B1911EFA0BD6470C4F9AE02.roa (hash: ipUtH6de1n3QDXNmS4idd62IMEQfE9S8Kl6BBzpD9nQ=) 3: 07BAAB7C9B1611EFB5C28465C4F9AE02.roa (hash: ofbztl5uVlglZWvlUxP/w/vzUs13H0jw290VgxrDPX8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.crl rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEiqzfKVEwPnCY9BnYygBCKJDGk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:37:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8047, serialNumber=8848AACDF2951303E7098F419D8CA00422890C69 Validity Not Before: Aug 23 06:37:23 2025 GMT Not After : Aug 30 06:37:23 2025 GMT Subject: CN=68a961a3-844f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:10:a8:d8:d0:9e:6c:42:27:f1:a5:2a:8f:33: ad:27:d6:de:80:60:36:cd:ac:99:e1:f8:49:c7:79: 0e:ae:d1:7a:8a:ac:23:b5:7d:59:33:7c:e6:38:f8: db:4b:91:c2:71:63:da:9b:a2:5d:ff:e1:8c:3f:a4: 8d:08:9d:b0:50:58:3b:9b:7a:52:1a:9b:53:c6:c1: a2:0d:92:50:0b:14:c1:95:c1:5f:d8:b2:55:62:7b: 3e:d2:df:79:b4:c7:2d:47:52:3d:35:ae:5b:da:82: 21:60:ca:ff:33:06:c4:7a:f2:f5:b1:6b:9c:da:58: 56:b2:c9:14:1c:67:e8:b4:95:2c:18:55:86:64:fc: f5:15:1a:0e:70:f9:18:ed:73:69:c4:35:df:0c:28: 87:5b:77:77:82:5f:ad:cc:85:56:81:1c:94:a5:0c: 58:37:08:87:4f:1b:3b:62:99:a8:8a:5c:36:4d:d4: f0:e2:fc:1a:ca:a5:f1:46:92:4f:eb:e0:cb:0a:6c: 4d:b9:e8:ed:8b:f9:8c:30:20:a6:0d:c5:2c:a0:2f: 96:5b:30:e6:d4:7b:13:bf:66:69:0f:97:2d:1f:b6: 36:7d:fe:46:4b:b5:4c:a5:ed:a8:c6:6a:03:69:6f: 92:ca:8d:be:63:19:c6:fa:dd:7d:eb:c0:2c:4a:29: fe:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:E8:4D:9F:1E:7E:7D:38:DE:C8:A7:F3:42:11:E9:B5:D3:65:A2:3E X509v3 Authority Key Identifier: keyid:88:48:AA:CD:F2:95:13:03:E7:09:8F:41:9D:8C:A0:04:22:89:0C:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEiqzfKVEwPnCY9BnYygBCKJDGk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:af:01:f9:89:4c:ba:f3:c1:f6:a3:c8:68:00:4f:98:db:eb: 98:55:db:cb:d4:a8:c9:07:bf:20:bf:7f:5b:ff:ef:c1:28:be: 49:11:d3:05:3e:41:74:be:d1:fd:9b:29:1e:c7:d0:fd:b9:de: b0:70:75:3f:3d:97:26:00:56:84:95:71:02:76:c1:51:9d:49: ed:54:98:27:5f:a4:d1:ec:1a:9d:7c:3f:28:bb:10:25:3c:ad: 29:58:3d:d6:df:65:b9:9e:bc:82:49:3d:9d:61:58:e3:1d:76: 3b:e9:11:7a:9e:30:c8:2a:8a:49:ff:83:6e:96:a0:26:59:40: f3:5a:e8:42:0f:a9:a3:b5:72:9a:12:6a:85:95:fb:2d:2f:21: d0:08:a8:a7:b2:77:73:5b:b3:76:76:37:97:32:51:58:38:dc: e1:49:4f:3c:88:af:50:e5:59:21:95:c9:cb:48:05:5d:43:9e: d2:bc:4e:bd:18:f7:85:59:84:28:6b:9a:ee:81:66:50:9c:13: f7:70:d3:50:06:ff:e5:9b:ad:8f:04:50:51:bf:9d:23:d7:7e: c7:0b:f1:3b:50:33:57:57:d1:5b:11:3c:4c:19:81:77:ca:8f: 4e:c2:1a:3f:ce:1f:7b:a7:87:f0:78:e5:c3:c2:3f:1f:6c:ec: f7:15:88:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgwNDcxMTAvBgNVBAUTKDg4NDhBQUNERjI5NTEzMDNFNzA5OEY0MTlEOENBMDA0 MjI4OTBDNjkwHhcNMjUwODIzMDYzNzIzWhcNMjUwODMwMDYzNzIzWjAYMRYwFAYD VQQDEw02OGE5NjFhMy04NDRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzhCo2NCebEIn8aUqjzOtJ9begGA2zayZ4fhJx3kOrtF6iqwjtX1ZM3zmOPjb S5HCcWPam6Jd/+GMP6SNCJ2wUFg7m3pSGptTxsGiDZJQCxTBlcFf2LJVYns+0t95 tMctR1I9Na5b2oIhYMr/MwbEevL1sWuc2lhWsskUHGfotJUsGFWGZPz1FRoOcPkY 7XNpxDXfDCiHW3d3gl+tzIVWgRyUpQxYNwiHTxs7Ypmoilw2TdTw4vwayqXxRpJP 6+DLCmxNuejti/mMMCCmDcUsoC+WWzDm1HsTv2ZpD5ctH7Y2ff5GS7VMpe2oxmoD aW+Syo2+YxnG+t1968AsSin+2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPjoTZ8e fn043sin80IR6bXTZaI+MB8GA1UdIwQYMBaAFIhIqs3ylRMD5wmPQZ2MoAQiiQxp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODA0Ny8zNDRBMDFBMjlC MTUxMUVGODZFQjM3NDZDNEY5QUUwMi9pRWlxemZLVkV3UG5DWTlCbll5Z0JDS0pE R2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lFaXF6ZktWRXdQbkNZOUJuWXlnQkNLSkRHay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODA0Ny8zNDRBMDFBMjlCMTUxMUVGODZFQjM3NDZDNEY5QUUwMi9pRWlxemZLVkV3 UG5DWTlCbll5Z0JDS0pER2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1rwH5iUy688H2o8hoAE+Y2+uYVdvL1KjJB78gv39b/+/BKL5JEdMF PkF0vtH9mykex9D9ud6wcHU/PZcmAFaElXECdsFRnUntVJgnX6TR7BqdfD8ouxAl PK0pWD3W32W5nryCST2dYVjjHXY76RF6njDIKopJ/4NulqAmWUDzWuhCD6mjtXKa EmqFlfstLyHQCKinsndzW7N2djeXMlFYONzhSU88iK9Q5VkhlcnLSAVdQ57SvE69 GPeFWYQoa5rugWZQnBP3cNNQBv/lm62PBFBRv50j137HC/E7UDNXV9FbETxMGYF3 yo9Owho/zh97p4fweOXDwj8fbOz3FYie -----END CERTIFICATE-----Generated at Sun Aug 24 00:48:48 2025 by rpki-client