$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft File: iJGVOO7eyDINXq9rHzKymCOreBA.mft (raw, json) Hash identifier: HAf5cu25RpE7I0oqa5sFZ7F4VsJMUFii4TPiZxl4EA8= Subject key identifier: 68:06:F6:E2:49:39:05:18:A7:35:90:84:5C:EB:A9:1C:A1:4E:88:AB Authority key identifier: 88:91:95:38:EE:DE:C8:32:0D:5E:AF:6B:1F:32:B2:98:23:AB:78:10 Certificate issuer: /CN=A91B4460/serialNumber=88919538EEDEC8320D5EAF6B1F32B29823AB7810 Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iJGVOO7eyDINXq9rHzKymCOreBA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft Manifest number: 45 Signing time: Sat 23 Aug 2025 07:38:54 +0000 Manifest this update: Sat 23 Aug 2025 07:38:54 +0000 Manifest next update: Sat 30 Aug 2025 07:38:54 +0000 Files and hashes: 1: iJGVOO7eyDINXq9rHzKymCOreBA.crl (hash: ByiQ1trq1diwWT3TfG1FaDAz7bIPKMzD8xF06eLEnOE=) 2: 7A85F9D2148711F0AF960528C4F9AE02.roa (hash: v93VVwAanSucSOqj9EwS1pD5Lqih1cuGiSwwM282Dpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.crl rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iJGVOO7eyDINXq9rHzKymCOreBA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:38:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4460, serialNumber=88919538EEDEC8320D5EAF6B1F32B29823AB7810 Validity Not Before: Aug 23 07:38:54 2025 GMT Not After : Aug 30 07:38:54 2025 GMT Subject: CN=68a9700e-9057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:86:fd:00:a9:ec:ed:36:04:9b:40:4f:7f:43: f7:d0:f7:f1:fe:0b:dd:d5:ef:df:e5:55:5e:9e:b4: 39:23:a5:a3:b5:1e:f4:cc:63:24:c4:b5:08:59:c3: c4:3f:9d:87:1d:f8:ad:f1:98:9b:d9:b0:1b:6b:7e: 86:b7:87:0e:76:00:51:d3:3d:72:20:e9:64:af:80: 4f:7c:bf:fe:65:21:2d:e7:3e:05:b8:55:4d:93:f7: 4b:a5:b3:b3:34:8b:a1:51:91:ce:04:18:60:df:fa: 13:74:f2:58:de:21:57:4c:e8:d9:e1:5b:98:74:e9: 10:ab:96:1c:2b:66:4d:32:94:d2:a7:52:59:bf:42: 54:ee:3f:5d:91:01:1b:45:dd:91:09:de:e8:a4:b7: d7:65:da:0d:90:4d:05:4a:5c:bd:4b:d1:a6:8d:f9: 4c:90:68:cb:b0:d5:6e:6c:f9:71:1f:2b:f8:aa:da: 6f:10:61:41:b3:57:32:35:c9:dd:cd:9a:56:b5:60: 2b:9e:9d:d1:19:d9:0f:2b:40:46:8e:d2:06:8c:32: 32:fc:e1:ec:bc:0e:55:07:85:22:d4:84:69:4e:a1: f8:14:8c:9e:2d:f4:56:83:66:6e:c3:d8:49:29:35: 66:05:dd:10:de:98:ae:e6:e7:df:69:32:4d:3d:77: ba:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:06:F6:E2:49:39:05:18:A7:35:90:84:5C:EB:A9:1C:A1:4E:88:AB X509v3 Authority Key Identifier: keyid:88:91:95:38:EE:DE:C8:32:0D:5E:AF:6B:1F:32:B2:98:23:AB:78:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iJGVOO7eyDINXq9rHzKymCOreBA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:22:26:de:97:b3:e3:9c:ef:6a:77:7f:71:b1:16:e9:68:d6: f3:a6:78:ab:77:19:41:57:6c:b3:b9:4a:69:b9:1a:2b:88:7e: ee:8b:39:13:0b:88:cf:27:b5:ad:a9:26:0c:82:3b:eb:2a:70: 1b:1d:cb:7a:e3:3f:2b:0a:6f:d6:e2:e5:de:02:d7:a9:34:80: a9:49:92:48:a4:c7:c2:07:48:01:fd:38:c7:f4:bd:59:14:76: 3f:17:25:a9:6a:0f:28:10:c2:a7:e5:26:29:60:da:37:df:a8: 36:c8:fb:d8:fc:a7:5b:f7:92:ac:76:cd:b7:24:aa:81:a5:26: d9:b7:27:7c:06:ea:6b:0a:b5:d1:8f:1f:c2:ed:5a:da:1e:e1: 4d:dd:f4:64:a9:a0:15:ba:9c:75:68:95:60:87:dc:ee:60:3a: 21:cd:71:28:48:a3:51:d8:ec:12:10:aa:45:47:0b:09:47:18: c5:7a:0f:0a:07:c3:17:ca:89:ca:0d:03:ca:17:8e:20:73:72: 47:62:a5:10:9a:96:2e:2b:07:eb:67:05:7f:65:27:d7:ac:6c: 3d:13:1f:7c:b5:21:5a:57:77:63:ae:63:4a:7e:2f:aa:c1:bc: ca:ca:1f:a4:6d:42:9a:1c:56:86:b6:7b:93:e3:88:34:72:9e: aa:57:bf:36 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NDQ2MDExMC8GA1UEBRMoODg5MTk1MzhFRURFQzgzMjBENUVBRjZCMUYzMkIyOTgy M0FCNzgxMDAeFw0yNTA4MjMwNzM4NTRaFw0yNTA4MzAwNzM4NTRaMBgxFjAUBgNV BAMTDTY4YTk3MDBlLTkwNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDChv0AqeztNgSbQE9/Q/fQ9/H+C93V79/lVV6etDkjpaO1HvTMYyTEtQhZw8Q/ nYcd+K3xmJvZsBtrfoa3hw52AFHTPXIg6WSvgE98v/5lIS3nPgW4VU2T90uls7M0 i6FRkc4EGGDf+hN08ljeIVdM6NnhW5h06RCrlhwrZk0ylNKnUlm/QlTuP12RARtF 3ZEJ3uikt9dl2g2QTQVKXL1L0aaN+UyQaMuw1W5s+XEfK/iq2m8QYUGzVzI1yd3N mla1YCuendEZ2Q8rQEaO0gaMMjL84ey8DlUHhSLUhGlOofgUjJ4t9FaDZm7D2Ekp NWYF3RDemK7m599pMk09d7rhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaAb24kk5 BRinNZCEXOupHKFOiKswHwYDVR0jBBgwFoAUiJGVOO7eyDINXq9rHzKymCOreBAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0NDYwLzA0OTg2NDc2MTQ4 NzExRjBBNzlFQUIyNkM0RjlBRTAyL2lKR1ZPTzdleURJTlhxOXJIekt5bUNPcmVC QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaUpHVk9PN2V5RElOWHE5ckh6S3ltQ09yZUJBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0 NDYwLzA0OTg2NDc2MTQ4NzExRjBBNzlFQUIyNkM0RjlBRTAyL2lKR1ZPTzdleURJ TlhxOXJIekt5bUNPcmVCQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKYiJt6Xs+Oc72p3f3GxFulo1vOmeKt3GUFXbLO5Smm5GiuIfu6LORML iM8nta2pJgyCO+sqcBsdy3rjPysKb9bi5d4C16k0gKlJkkikx8IHSAH9OMf0vVkU dj8XJalqDygQwqflJilg2jffqDbI+9j8p1v3kqx2zbckqoGlJtm3J3wG6msKtdGP H8LtWtoe4U3d9GSpoBW6nHVolWCH3O5gOiHNcShIo1HY7BIQqkVHCwlHGMV6DwoH wxfKicoNA8oXjiBzckdipRCali4rB+tnBX9lJ9esbD0TH3y1IVpXd2OuY0p+L6rB vMrKH6RtQpocVoa2e5PjiDRynqpXvzY= -----END CERTIFICATE-----Generated at Sat Aug 23 12:50:25 2025 by rpki-client