$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.mft File: M1KIaoOU86z15jXjxHVvTQpuRek.mft (raw, json) Hash identifier: 8XsS9YMZTuoZ5+A/GUFwi+WNfnl2riaJkeOX4YLl0fo= Subject key identifier: 42:3A:B3:E4:D6:F1:27:29:D0:68:1F:8B:AE:C5:56:47:3E:E0:44:F0 Authority key identifier: 33:52:88:6A:83:94:F3:AC:F5:E6:35:E3:C4:75:6F:4D:0A:6E:45:E9 Certificate issuer: /CN=A91B5AD4/serialNumber=3352886A8394F3ACF5E635E3C4756F4D0A6E45E9 Certificate serial: 09B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1KIaoOU86z15jXjxHVvTQpuRek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.mft Manifest number: 09AF Signing time: Fri 22 Aug 2025 19:38:41 +0000 Manifest this update: Fri 22 Aug 2025 19:38:41 +0000 Manifest next update: Fri 29 Aug 2025 19:38:41 +0000 Files and hashes: 1: M1KIaoOU86z15jXjxHVvTQpuRek.crl (hash: EmcCIkPSHAUDyatXk1auOLom+rwec2p91j2GbgyOhEE=) 2: 67A60C64441E11EB861F005AC4F9AE02.roa (hash: JcavRD/UkGMKefo40xrhCPb2PgEwMsvZQrFanuv4C9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.crl rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1KIaoOU86z15jXjxHVvTQpuRek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:38:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2488 (0x9b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5AD4, serialNumber=3352886A8394F3ACF5E635E3C4756F4D0A6E45E9 Validity Not Before: Aug 22 19:38:41 2025 GMT Not After : Aug 29 19:38:41 2025 GMT Subject: CN=68a8c741-1420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:10:1e:a4:58:95:99:a3:5d:d8:f5:bd:73:9c: a6:68:d0:87:82:28:eb:a7:47:fe:2c:1b:8b:bd:ce: c8:41:32:01:49:12:4a:b1:f3:1d:ee:b4:24:7d:ad: 14:33:6a:cf:48:c1:f7:95:a0:0c:c6:9b:4d:ac:a2: fa:1c:25:e8:70:ae:ca:c5:da:ba:68:cd:4f:89:5d: 5a:c5:b4:16:71:2f:19:c2:00:f2:84:e7:84:a7:29: 8e:bd:70:56:33:c9:3d:fd:88:29:26:4d:f7:bf:68: 84:15:3f:35:7d:4b:bd:a3:41:55:6e:e2:f1:8c:50: 99:76:82:60:6a:70:9e:fb:fa:df:56:70:20:df:d5: e3:9a:96:15:51:14:15:a9:ab:76:a3:78:4b:3c:92: 3e:34:8c:28:f0:be:63:b2:38:98:bf:c4:46:20:5f: eb:57:b8:dd:4f:39:2a:75:b3:c6:98:24:8e:c4:20: fd:4c:1d:b7:76:7d:e5:04:d8:8a:02:ad:db:70:7e: 9d:0e:fe:ca:e0:06:dc:81:0f:b7:4c:e4:5e:30:0e: 5f:e0:13:0f:aa:c9:56:7e:83:34:98:51:7e:4a:e0: 52:78:39:45:4f:a3:96:a7:19:94:e9:f8:e0:b1:50: 22:7c:23:5d:4c:d3:bd:71:55:06:15:82:8f:c3:53: 3a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:3A:B3:E4:D6:F1:27:29:D0:68:1F:8B:AE:C5:56:47:3E:E0:44:F0 X509v3 Authority Key Identifier: keyid:33:52:88:6A:83:94:F3:AC:F5:E6:35:E3:C4:75:6F:4D:0A:6E:45:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1KIaoOU86z15jXjxHVvTQpuRek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:dd:c8:37:eb:34:e9:f5:58:06:c7:6f:18:88:13:40:b2:f4: db:27:e7:5b:03:5b:84:76:9f:67:25:33:66:6f:65:3a:d1:66: d8:1f:43:e2:68:c6:47:f5:0b:81:df:8e:49:8c:c3:93:1c:b8: 21:a2:12:a1:01:13:ab:a9:9a:af:db:f7:9e:2e:da:28:91:0c: 9f:a5:9d:c7:c9:d3:43:6b:66:39:59:93:47:f7:cf:9a:00:38: 8d:9e:0c:20:14:e5:6a:67:a1:34:69:39:6b:08:9e:1c:1c:e0: ba:97:bb:90:80:91:2b:94:b5:2a:f2:18:22:3e:53:f6:42:4b: bd:54:20:f6:8b:68:60:59:3f:c8:cb:1b:8a:c8:2f:fb:d9:88: c7:45:7a:20:49:0a:b5:02:e6:68:84:ea:42:e4:ad:cd:92:87: bb:cf:0e:ea:c5:54:70:63:1b:9e:41:c0:aa:37:f2:6f:4e:c8: d7:cb:39:46:71:e9:a1:59:b3:34:6f:ed:ee:33:1b:db:7e:6f: 02:a9:79:01:af:67:1b:b9:a6:ad:f6:dc:a5:20:a5:46:3d:05: 08:b1:8e:b0:fe:49:59:c8:ec:7a:59:ef:f4:ad:8d:5e:af:76: 89:b2:12:f8:f8:9b:ab:2f:b7:89:0a:e7:8f:71:0f:6c:fb:83: 11:1c:33:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVBRDQxMTAvBgNVBAUTKDMzNTI4ODZBODM5NEYzQUNGNUU2MzVFM0M0NzU2RjRE MEE2RTQ1RTkwHhcNMjUwODIyMTkzODQxWhcNMjUwODI5MTkzODQxWjAYMRYwFAYD VQQDEw02OGE4Yzc0MS0xNDIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzRAepFiVmaNd2PW9c5ymaNCHgijrp0f+LBuLvc7IQTIBSRJKsfMd7rQkfa0U M2rPSMH3laAMxptNrKL6HCXocK7Kxdq6aM1PiV1axbQWcS8ZwgDyhOeEpymOvXBW M8k9/YgpJk33v2iEFT81fUu9o0FVbuLxjFCZdoJganCe+/rfVnAg39XjmpYVURQV qat2o3hLPJI+NIwo8L5jsjiYv8RGIF/rV7jdTzkqdbPGmCSOxCD9TB23dn3lBNiK Aq3bcH6dDv7K4AbcgQ+3TOReMA5f4BMPqslWfoM0mFF+SuBSeDlFT6OWpxmU6fjg sVAifCNdTNO9cVUGFYKPw1M62wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEI6s+TW 8Scp0Ggfi67FVkc+4ETwMB8GA1UdIwQYMBaAFDNSiGqDlPOs9eY148R1b00KbkXp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUFENC8xMTIyNkI3RThG OEExMUVBOTgyOEM2NURDNEY5QUUwMi9NMUtJYW9PVTg2ejE1alhqeEhWdlRRcHVS ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00xS0lhb09VODZ6MTVqWGp4SFZ2VFFwdVJlay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUFENC8xMTIyNkI3RThGOEExMUVBOTgyOEM2NURDNEY5QUUwMi9NMUtJYW9PVTg2 ejE1alhqeEhWdlRRcHVSZWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCK3cg36zTp9VgGx28YiBNAsvTbJ+dbA1uEdp9nJTNmb2U60WbYH0Pi aMZH9QuB345JjMOTHLghohKhAROrqZqv2/eeLtookQyfpZ3HydNDa2Y5WZNH98+a ADiNngwgFOVqZ6E0aTlrCJ4cHOC6l7uQgJErlLUq8hgiPlP2Qku9VCD2i2hgWT/I yxuKyC/72YjHRXogSQq1AuZohOpC5K3Nkoe7zw7qxVRwYxueQcCqN/JvTsjXyzlG cemhWbM0b+3uMxvbfm8CqXkBr2cbuaat9tylIKVGPQUIsY6w/klZyOx6We/0rY1e r3aJshL4+JurL7eJCuePcQ9s+4MRHDOf -----END CERTIFICATE-----Generated at Sat Aug 23 18:23:23 2025 by rpki-client