$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft File: IbLqdC_w7568zvOZh5Dj9bCNa2M.mft (raw, json) Hash identifier: Lc7KK0h19MavtXQBPszOCOoY+SoSahoLKUH1ApL1/P4= Subject key identifier: 45:40:38:E7:4E:E6:80:B7:27:84:E6:68:93:C7:99:6A:5E:A1:35:9D Authority key identifier: 21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63 Certificate issuer: /CN=A91B6172/serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63 Certificate serial: 020A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft Manifest number: 01FF Signing time: Sat 23 Aug 2025 02:29:44 +0000 Manifest this update: Sat 23 Aug 2025 02:29:43 +0000 Manifest next update: Sat 30 Aug 2025 02:29:43 +0000 Files and hashes: 1: IbLqdC_w7568zvOZh5Dj9bCNa2M.crl (hash: kF3VuKO0OeoVg7ytK93whtclDVfJCDFTe0PNRnyDpiQ=) 2: ABDDEF28722F11EDA987AB75C4F9AE02.roa (hash: mzTY+yHaxiOoTmhIGnRxe8TteP35OSc9TDFULhxG7es=) 3: AC80FFE2722F11EDA987AB75C4F9AE02.roa (hash: TCA2TacY4ZsDEXX4IqBFag6vpZrZlhAMEJDWvtGJDWs=) 4: 08A71970723811EDB0BD0312C4F9AE02.roa (hash: Tjdi12mwJxE8vytdEEm6LYs9NXU4cX9jhBUfI2VO1fQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:29:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 522 (0x20a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6172, serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63 Validity Not Before: Aug 23 02:29:43 2025 GMT Not After : Aug 30 02:29:43 2025 GMT Subject: CN=68a92798-af61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:50:d8:05:14:e0:79:39:21:3e:8d:b8:60:5d: a5:c3:37:20:d8:dd:ff:ac:20:f0:0d:c7:84:a0:d6: 4a:f6:62:6c:1b:2c:aa:89:91:a1:aa:41:95:1f:bd: 44:c3:36:9b:ca:60:97:dc:dd:2a:f3:57:00:a8:05: 1c:20:d6:67:9c:0d:c6:63:f6:0d:d7:f5:eb:6f:37: b7:dc:23:0b:65:ce:ac:85:6f:f9:71:af:94:49:44: 57:14:88:7d:a8:66:ea:0a:33:18:71:2c:f9:54:14: 2a:55:84:74:cb:e9:8c:8a:f3:bb:69:f6:93:a1:31: b7:54:fd:39:13:1a:d3:e6:8f:15:4f:bf:c9:c7:f8: bc:dd:ad:e7:66:53:aa:00:02:62:e5:20:12:7e:02: 21:88:a9:62:64:0d:49:2b:cc:50:cb:f2:12:69:4f: 7e:1b:13:e6:01:bc:86:49:04:e5:17:af:90:85:44: 8d:57:32:ca:67:20:ca:57:46:8e:80:65:e2:3e:1c: 7c:bf:c0:67:3b:cc:c1:c5:89:7d:d5:8a:1d:12:4e: ed:53:ad:df:21:a4:39:a7:2a:f1:98:28:58:58:64: 05:fe:98:ea:12:89:35:e1:2e:d8:65:ef:7f:1f:a5: 83:6f:ad:14:3e:9d:77:57:12:c6:b3:2c:55:33:ab: 45:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:40:38:E7:4E:E6:80:B7:27:84:E6:68:93:C7:99:6A:5E:A1:35:9D X509v3 Authority Key Identifier: keyid:21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:51:d7:9e:48:8d:04:29:32:97:bc:e9:9c:15:ed:90:3e:20: f7:16:5e:a8:50:a4:ec:78:df:62:0c:ee:f3:25:cb:b4:26:2e: 16:1f:14:94:47:8c:b9:6f:79:d2:ad:8e:86:14:d7:14:97:83: 9a:94:5e:7a:16:fe:00:fc:41:f2:d8:90:d3:8c:f0:49:a9:dd: ee:0d:8f:a9:51:5b:24:e3:93:ca:52:2d:30:0b:02:33:26:93: 66:ba:db:d0:f1:be:3a:52:6c:0c:42:75:db:ed:81:65:25:2b: cc:ea:a8:e1:ee:f5:c0:f7:1a:1d:9e:26:ed:12:87:27:96:3c: 51:6b:b2:9f:b7:8e:c4:2b:98:9f:6d:96:fc:ae:a7:59:98:b1: 49:94:78:97:c0:fb:04:06:4d:03:69:f3:8f:d3:25:46:53:05: 60:1c:9c:57:95:e1:b0:76:d5:8e:5d:a6:df:7a:75:14:fa:8c: f7:cc:ea:fb:a1:92:59:7d:59:52:09:54:a3:16:06:5e:12:cd: 3b:46:0d:bc:7b:6c:30:92:62:f9:c6:ff:03:8a:47:0a:e3:a6: a4:78:2b:d5:55:1b:1e:59:bb:3c:7f:f7:3a:7e:29:17:0d:58: 8b:78:b4:26:e8:13:fd:d0:9a:c6:84:07:22:58:1d:da:92:69: d4:af:9e:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYxNzIxMTAvBgNVBAUTKDIxQjJFQTc0MkZGMEVGOUVCQ0NFRjM5OTg3OTBFM0Y1 QjA4RDZCNjMwHhcNMjUwODIzMDIyOTQzWhcNMjUwODMwMDIyOTQzWjAYMRYwFAYD VQQDEw02OGE5Mjc5OC1hZjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwFDYBRTgeTkhPo24YF2lwzcg2N3/rCDwDceEoNZK9mJsGyyqiZGhqkGVH71E wzabymCX3N0q81cAqAUcINZnnA3GY/YN1/Xrbze33CMLZc6shW/5ca+USURXFIh9 qGbqCjMYcSz5VBQqVYR0y+mMivO7afaToTG3VP05ExrT5o8VT7/Jx/i83a3nZlOq AAJi5SASfgIhiKliZA1JK8xQy/ISaU9+GxPmAbyGSQTlF6+QhUSNVzLKZyDKV0aO gGXiPhx8v8BnO8zBxYl91YodEk7tU63fIaQ5pyrxmChYWGQF/pjqEok14S7YZe9/ H6WDb60UPp13VxLGsyxVM6tF2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEVAOOdO 5oC3J4TmaJPHmWpeoTWdMB8GA1UdIwQYMBaAFCGy6nQv8O+evM7zmYeQ4/WwjWtj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjE3Mi9CQTU0QzEzNDcy MkIxMUVEOTdENzNDNUFDNEY5QUUwMi9JYkxxZENfdzc1Njh6dk9aaDVEajliQ05h Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0liTHFkQ193NzU2OHp2T1poNURqOWJDTmEyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjE3Mi9CQTU0QzEzNDcyMkIxMUVEOTdENzNDNUFDNEY5QUUwMi9JYkxxZENfdzc1 Njh6dk9aaDVEajliQ05hMk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNUdeeSI0EKTKXvOmcFe2QPiD3Fl6oUKTseN9iDO7zJcu0Ji4WHxSU R4y5b3nSrY6GFNcUl4OalF56Fv4A/EHy2JDTjPBJqd3uDY+pUVsk45PKUi0wCwIz JpNmutvQ8b46UmwMQnXb7YFlJSvM6qjh7vXA9xodnibtEocnljxRa7Kft47EK5if bZb8rqdZmLFJlHiXwPsEBk0DafOP0yVGUwVgHJxXleGwdtWOXabfenUU+oz3zOr7 oZJZfVlSCVSjFgZeEs07Rg28e2wwkmL5xv8DikcK46akeCvVVRseWbs8f/c6fikX DViLeLQm6BP90JrGhAciWB3akmnUr55y -----END CERTIFICATE-----Generated at Sat Aug 23 16:14:31 2025 by rpki-client