$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft File: ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft (raw, json) Hash identifier: xbpLf23TGIgHLtoHA6zmf4gxakt0HfMmdAWseOzDsY4= Subject key identifier: 7A:B0:AB:FD:67:C1:AA:16:26:6D:A6:12:1D:EA:D7:CC:83:A4:39:48 Authority key identifier: 8A:F7:D8:B8:64:FD:90:45:2F:FD:6D:E9:3B:51:45:6C:79:EF:B3:C7 Certificate issuer: /CN=A91AC4FA/serialNumber=8AF7D8B864FD90452FFD6DE93B51456C79EFB3C7 Certificate serial: 0213 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft Manifest number: 0207 Signing time: Sat 23 Aug 2025 02:26:43 +0000 Manifest this update: Sat 23 Aug 2025 02:26:43 +0000 Manifest next update: Sat 30 Aug 2025 02:26:43 +0000 Files and hashes: 1: ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl (hash: tmgELhZNYYQFSbixWhCiO+ZuxKeSiOG2HgZbVv4YugU=) 2: 0B1C46B26C8E11EDA1402673C4F9AE02.roa (hash: eBrKZQqIUQgxJsjLbBp6BZmWWZAOHf0P0YyuhSY1Lts=) 3: 2A40C41C6EC511ED9672CB40C4F9AE02.roa (hash: 2ABgaw5i7gtrVWQKQRB2kERFT6VG3t9JHA5FdKRAAjA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:26:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 531 (0x213) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC4FA, serialNumber=8AF7D8B864FD90452FFD6DE93B51456C79EFB3C7 Validity Not Before: Aug 23 02:26:43 2025 GMT Not After : Aug 30 02:26:43 2025 GMT Subject: CN=68a926e3-74ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a5:80:8e:5b:6c:f3:e7:a4:5b:8b:bd:18:65: 74:ff:30:a3:18:fd:ad:3b:09:ba:ee:bf:e3:87:c6: ed:52:6a:00:09:1e:f6:2c:3b:71:9f:a8:c0:6b:42: fd:a3:81:cc:e8:35:71:ea:4e:5b:28:ae:a0:13:b3: 4e:6d:6f:c9:47:ae:c9:9e:33:d9:f0:0f:fa:27:af: 7b:d6:8e:24:9d:f1:22:e4:03:9c:c9:eb:d8:b1:90: 1f:13:d9:9c:84:cc:e0:9a:d0:15:df:80:02:2c:87: a5:54:fc:ca:66:65:e7:c5:e1:4f:4c:f0:30:dd:87: a7:e3:de:73:a1:90:71:f5:52:17:e3:3d:81:42:e2: 89:60:ed:6d:e4:77:47:69:13:27:c9:12:16:38:f2: c3:53:a1:db:2a:e6:26:f4:a0:a0:1c:04:89:40:b1: 27:08:d8:94:9b:d0:4e:40:e2:eb:77:0b:6d:6d:7a: 67:a6:db:fe:0f:84:87:c8:58:ef:2b:42:75:cc:63: 48:f5:97:85:0e:1c:ee:b1:67:08:f3:2b:01:6f:d1: 31:cb:fc:04:1f:87:92:ce:6d:44:4a:2c:b9:33:51: b9:b8:bd:ad:2c:b7:3c:26:84:bc:d4:f6:69:af:f5: 27:f0:81:cd:12:b0:3c:58:81:71:69:0c:80:5b:1e: 0a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:B0:AB:FD:67:C1:AA:16:26:6D:A6:12:1D:EA:D7:CC:83:A4:39:48 X509v3 Authority Key Identifier: keyid:8A:F7:D8:B8:64:FD:90:45:2F:FD:6D:E9:3B:51:45:6C:79:EF:B3:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:b5:25:1b:9d:05:0d:e5:a0:83:66:86:18:50:0f:a5:52:eb: da:54:ae:b7:af:cb:ab:46:20:94:d3:8a:17:2b:20:6a:2f:68: 4f:9a:35:db:f1:f0:c0:49:74:c1:80:a4:43:02:dc:95:d8:2b: d2:8f:ea:5e:81:54:29:45:c9:1d:a1:54:e8:76:fd:98:83:4b: 03:c6:0c:d6:cf:e4:69:dc:22:a2:6b:46:62:52:07:c7:c5:1b: 1f:e7:8e:11:9d:eb:0d:33:d0:fc:a3:11:28:f3:97:79:3e:58: ee:57:13:7f:a1:00:97:83:74:45:43:e1:9d:e6:2b:5c:68:c0: fa:9a:34:50:58:b4:a7:b8:43:db:70:79:0d:5e:cd:47:e2:b2: 62:ec:c4:fa:25:3b:b0:84:18:0e:50:05:5f:b2:fc:5f:e9:25: f5:56:e8:32:13:74:9a:3c:62:38:05:f3:ec:d1:a1:0f:ac:72: 8f:3c:0c:74:f9:c0:b9:7c:39:1c:51:5e:ef:d5:eb:ea:d0:a4: 33:a9:f0:5d:f6:cc:b8:31:9b:1e:cc:e4:59:f0:d4:d0:59:c3: 93:30:d7:3e:c8:74:f2:8f:bd:29:a9:98:80:52:e6:16:d8:4e: 41:54:f0:bc:9f:7f:d8:87:13:8a:35:7e:5c:fb:b2:c0:e4:a6: a7:b7:d4:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM0RkExMTAvBgNVBAUTKDhBRjdEOEI4NjRGRDkwNDUyRkZENkRFOTNCNTE0NTZD NzlFRkIzQzcwHhcNMjUwODIzMDIyNjQzWhcNMjUwODMwMDIyNjQzWjAYMRYwFAYD VQQDEw02OGE5MjZlMy03NGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxKWAjlts8+ekW4u9GGV0/zCjGP2tOwm67r/jh8btUmoACR72LDtxn6jAa0L9 o4HM6DVx6k5bKK6gE7NObW/JR67JnjPZ8A/6J6971o4knfEi5AOcyevYsZAfE9mc hMzgmtAV34ACLIelVPzKZmXnxeFPTPAw3Yen495zoZBx9VIX4z2BQuKJYO1t5HdH aRMnyRIWOPLDU6HbKuYm9KCgHASJQLEnCNiUm9BOQOLrdwttbXpnptv+D4SHyFjv K0J1zGNI9ZeFDhzusWcI8ysBb9Exy/wEH4eSzm1ESiy5M1G5uL2tLLc8JoS81PZp r/Un8IHNErA8WIFxaQyAWx4KYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHqwq/1n waoWJm2mEh3q18yDpDlIMB8GA1UdIwQYMBaAFIr32Lhk/ZBFL/1t6TtRRWx577PH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzRGQS8zN0NCODc5ODZD OEIxMUVEODdBRkY1NzFDNEY5QUUwMi9pdmZZdUdUOWtFVXZfVzNwTzFGRmJIbnZz OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l2Zll1R1Q5a0VVdl9XM3BPMUZGYkhudnM4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzRGQS8zN0NCODc5ODZDOEIxMUVEODdBRkY1NzFDNEY5QUUwMi9pdmZZdUdUOWtF VXZfVzNwTzFGRmJIbnZzOGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBtSUbnQUN5aCDZoYYUA+lUuvaVK63r8urRiCU04oXKyBqL2hPmjXb 8fDASXTBgKRDAtyV2CvSj+pegVQpRckdoVTodv2Yg0sDxgzWz+Rp3CKia0ZiUgfH xRsf544RnesNM9D8oxEo85d5PljuVxN/oQCXg3RFQ+Gd5itcaMD6mjRQWLSnuEPb cHkNXs1H4rJi7MT6JTuwhBgOUAVfsvxf6SX1VugyE3SaPGI4BfPs0aEPrHKPPAx0 +cC5fDkcUV7v1evq0KQzqfBd9sy4MZsezORZ8NTQWcOTMNc+yHTyj70pqZiAUuYW 2E5BVPC8n3/YhxOKNX5c+7LA5Kant9SM -----END CERTIFICATE-----Generated at Sat Aug 23 21:23:11 2025 by rpki-client