$ rpki-client -vvf rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.mft File: i1fdFr2X-1v8IdnMqeK4bVUC4og.mft (raw, json) Hash identifier: UdhCQAhH4WFPaVdEwXTyUShqL5yihOk0APtcipXAUZ4= Subject key identifier: 66:F6:3C:EA:62:C9:89:EB:F5:6F:76:F4:CC:4F:78:55:AD:CD:A1:8C Authority key identifier: 8B:57:DD:16:BD:97:FB:5B:FC:21:D9:CC:A9:E2:B8:6D:55:02:E2:88 Certificate issuer: /CN=A91B929F/serialNumber=8B57DD16BD97FB5BFC21D9CCA9E2B86D5502E288 Certificate serial: 059D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i1fdFr2X-1v8IdnMqeK4bVUC4og.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.mft Manifest number: 0599 Signing time: Sat 28 Jun 2025 22:46:55 +0000 Manifest this update: Sat 28 Jun 2025 22:46:54 +0000 Manifest next update: Sat 05 Jul 2025 22:46:54 +0000 Files and hashes: 1: i1fdFr2X-1v8IdnMqeK4bVUC4og.crl (hash: kHj5J1wXytcUa6hWWsc1qeiDBr3MaYED6eaGJdq32q0=) 2: 2EA68D96D65211EB8DAD1886C4F9AE02.roa (hash: QfVYtd7FvBpsR5Tca8bnLg+O7UqwB1xI72oRETrqTpE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.crl rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i1fdFr2X-1v8IdnMqeK4bVUC4og.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 22:46:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1437 (0x59d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B929F, serialNumber=8B57DD16BD97FB5BFC21D9CCA9E2B86D5502E288 Validity Not Before: Jun 28 22:46:54 2025 GMT Not After : Jul 5 22:46:54 2025 GMT Subject: CN=686070df-d5c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:dc:95:86:2d:f7:5f:b4:b5:68:53:c5:44:cc: f6:aa:cf:19:55:24:bc:e7:ee:d7:ca:94:06:c0:45: e5:c8:72:a8:0a:6c:4e:c6:33:9f:6e:d8:85:f2:91: 20:aa:7d:42:7f:56:10:f2:17:5a:bb:f6:fb:09:4f: 48:0c:a5:1c:09:f9:c2:ad:0c:ca:18:45:62:78:4c: d3:86:dd:bd:8b:db:94:31:69:70:0b:f8:90:64:de: 44:4a:42:1d:ac:a7:24:5a:c5:49:d5:9f:72:fa:7b: 1d:c4:c1:39:9a:57:06:48:55:3c:d7:b8:00:66:c5: 69:1b:52:6b:be:24:3e:68:08:5a:7c:93:ad:96:11: f5:f8:27:0c:1e:d6:34:5e:a8:3b:0d:be:23:80:19: a5:52:d2:50:f3:ed:3e:12:7f:1f:21:b8:67:fa:e0: c3:af:65:7d:2d:d4:70:9d:c9:8e:d6:92:06:61:e2: 92:2e:c6:8b:30:0f:6e:5f:eb:29:02:af:df:88:fa: 75:68:b4:b5:13:a0:70:f8:25:4b:18:62:af:f5:c3: 7e:77:4d:23:e4:eb:15:7b:c5:05:6f:24:8d:16:c2: eb:dc:5a:4e:86:71:5a:4d:d1:6e:bc:61:64:44:4a: 5c:f9:0d:f7:8b:50:e6:5d:d8:3d:1b:2b:e9:54:32: e9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:F6:3C:EA:62:C9:89:EB:F5:6F:76:F4:CC:4F:78:55:AD:CD:A1:8C X509v3 Authority Key Identifier: keyid:8B:57:DD:16:BD:97:FB:5B:FC:21:D9:CC:A9:E2:B8:6D:55:02:E2:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i1fdFr2X-1v8IdnMqeK4bVUC4og.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:44:92:f5:a5:74:68:e2:b2:1b:2d:5a:5c:d2:19:75:8f:ae: 63:20:39:4f:71:93:6c:86:5e:db:e3:83:89:f4:64:44:4c:b0: 13:79:e8:b9:8a:2d:01:97:7a:43:00:7e:a4:ce:80:fd:05:06: be:34:08:c7:93:15:fd:1b:77:a8:9f:5e:c7:9e:cd:49:a1:42: 92:4c:33:46:0f:a1:c1:5d:cc:53:f6:2e:63:80:07:c8:30:26: bb:bb:39:0b:1a:79:b5:64:52:fe:1e:f9:e1:3b:4f:8f:8a:ce: dc:a3:00:50:10:8c:f1:b9:f8:ce:bb:ab:ae:0b:a2:92:1a:de: 24:c1:cd:6a:9d:f8:b8:ac:2f:a6:97:d9:1c:48:b3:3f:20:bd: 80:7a:bd:c0:a3:d3:82:2e:ff:69:55:e6:e3:0d:fe:6e:23:a8: bc:25:a9:1d:53:6c:a6:9f:f8:7f:3f:6b:0d:3d:cd:3d:d6:93: b2:cf:a5:09:86:d0:ca:06:6d:8a:3b:c2:fa:99:17:92:d4:cd: 6a:34:06:b0:3f:d9:9e:8e:af:e4:1c:f6:ab:e5:e3:23:9b:0d: 0a:dc:2f:93:2d:93:a1:f8:54:5f:ee:ef:68:7b:ab:a4:a1:7a: bf:d9:8b:ae:a8:4e:9e:06:ea:bf:a4:5b:7f:26:86:74:e3:fd: cf:8c:31:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkyOUYxMTAvBgNVBAUTKDhCNTdERDE2QkQ5N0ZCNUJGQzIxRDlDQ0E5RTJCODZE NTUwMkUyODgwHhcNMjUwNjI4MjI0NjU0WhcNMjUwNzA1MjI0NjU0WjAYMRYwFAYD VQQDEw02ODYwNzBkZi1kNWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwtyVhi33X7S1aFPFRMz2qs8ZVSS85+7XypQGwEXlyHKoCmxOxjOfbtiF8pEg qn1Cf1YQ8hdau/b7CU9IDKUcCfnCrQzKGEVieEzTht29i9uUMWlwC/iQZN5ESkId rKckWsVJ1Z9y+nsdxME5mlcGSFU817gAZsVpG1JrviQ+aAhafJOtlhH1+CcMHtY0 Xqg7Db4jgBmlUtJQ8+0+En8fIbhn+uDDr2V9LdRwncmO1pIGYeKSLsaLMA9uX+sp Aq/fiPp1aLS1E6Bw+CVLGGKv9cN+d00j5OsVe8UFbySNFsLr3FpOhnFaTdFuvGFk REpc+Q33i1DmXdg9GyvpVDLpUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGb2POpi yYnr9W929MxPeFWtzaGMMB8GA1UdIwQYMBaAFItX3Ra9l/tb/CHZzKniuG1VAuKI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTI5Ri8zQkU1NDlDRUQ2 NEUxMUVCOTRENEYyN0RDNEY5QUUwMi9pMWZkRnIyWC0xdjhJZG5NcWVLNGJWVUM0 b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2kxZmRGcjJYLTF2OElkbk1xZUs0YlZVQzRvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTI5Ri8zQkU1NDlDRUQ2NEUxMUVCOTRENEYyN0RDNEY5QUUwMi9pMWZkRnIyWC0x djhJZG5NcWVLNGJWVUM0b2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZRJL1pXRo4rIbLVpc0hl1j65jIDlPcZNshl7b44OJ9GRETLATeei5 ii0Bl3pDAH6kzoD9BQa+NAjHkxX9G3eon17Hns1JoUKSTDNGD6HBXcxT9i5jgAfI MCa7uzkLGnm1ZFL+HvnhO0+Pis7cowBQEIzxufjOu6uuC6KSGt4kwc1qnfi4rC+m l9kcSLM/IL2Aer3Ao9OCLv9pVebjDf5uI6i8JakdU2ymn/h/P2sNPc091pOyz6UJ htDKBm2KO8L6mReS1M1qNAawP9mejq/kHPar5eMjmw0K3C+TLZOh+FRf7u9oe6uk oXq/2YuuqE6eBuq/pFt/JoZ04/3PjDGT -----END CERTIFICATE-----Generated at Sun Jun 29 12:17:22 2025 by rpki-client