$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft File: c1jmvCkIxoFAvzuKgV9pXcsqiks.mft (raw, json) Hash identifier: nRgVIW2KLa7ta9mbIVqZWzxlYc7xlqit2TZK0tON2Bw= Subject key identifier: 8F:86:F5:F8:66:AE:1B:AD:B1:57:49:FF:24:7A:7F:71:6A:40:0E:E5 Authority key identifier: 73:58:E6:BC:29:08:C6:81:40:BF:3B:8A:81:5F:69:5D:CB:2A:8A:4B Certificate issuer: /CN=A91BB227/serialNumber=7358E6BC2908C68140BF3B8A815F695DCB2A8A4B Certificate serial: 016F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft Manifest number: 0168 Signing time: Sat 23 Aug 2025 04:04:56 +0000 Manifest this update: Sat 23 Aug 2025 04:04:56 +0000 Manifest next update: Sat 30 Aug 2025 04:04:56 +0000 Files and hashes: 1: c1jmvCkIxoFAvzuKgV9pXcsqiks.crl (hash: pBQKUMnUzULACqkp1d9RSNyzqpfxixMvflp5BpGXfKs=) 2: 71014290D87411EE97234F5CC4F9AE02.roa (hash: fakP4GJLKmnyVMCfkqZinteG0/CZYTZ4JdvjAch5f+A=) 3: C01378B2D87411EE85EACB5CC4F9AE02.roa (hash: pDlIkunYLeVqqqSF0elUnTy2XYUeAlfMdaUFeXZ9gcI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.crl rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:04:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 367 (0x16f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB227, serialNumber=7358E6BC2908C68140BF3B8A815F695DCB2A8A4B Validity Not Before: Aug 23 04:04:56 2025 GMT Not After : Aug 30 04:04:56 2025 GMT Subject: CN=68a93de8-595c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9f:d2:69:6c:e6:ec:4b:ce:be:d3:f9:f8:79: c9:65:99:cd:8f:41:7b:34:3f:45:a7:ac:75:1a:1b: a1:5a:78:fb:c8:35:fd:1e:c4:6b:dd:e5:f1:ba:c4: ba:0d:a5:0e:cb:22:14:ff:4d:3b:2c:75:ed:f9:b5: ae:fd:12:0b:53:b3:85:bf:05:f7:d9:ba:05:4c:d0: 4a:cd:8a:25:4b:ee:52:e8:98:f9:a8:b8:9c:45:63: 0d:ba:cb:4e:85:01:2d:f5:17:f1:13:c9:f2:51:4d: aa:ba:21:4c:26:08:b0:bc:0a:60:4a:a3:06:aa:42: 57:71:fb:59:be:c3:23:b9:27:a9:b9:50:8c:b0:10: 6a:1e:9a:a8:9c:56:ef:16:7e:d0:91:38:67:79:1f: 72:64:13:f3:c7:2b:73:7e:e5:52:01:1c:80:e7:c8: d3:9e:c2:e1:f5:fe:9b:e3:e5:f8:25:48:18:2d:af: b3:40:90:f4:4b:87:38:55:51:e8:72:3e:84:a7:fe: 99:8f:20:42:70:6c:5b:97:dd:26:a9:9a:f1:22:a9: b8:b4:b1:37:a9:f1:92:82:e5:74:20:2d:5f:11:1e: c7:42:c7:02:89:13:d4:e2:3b:87:9c:b4:c0:aa:b3: 92:55:81:28:b0:5f:2b:76:f8:3e:8a:0a:fe:12:33: 84:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:86:F5:F8:66:AE:1B:AD:B1:57:49:FF:24:7A:7F:71:6A:40:0E:E5 X509v3 Authority Key Identifier: keyid:73:58:E6:BC:29:08:C6:81:40:BF:3B:8A:81:5F:69:5D:CB:2A:8A:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:63:64:f8:5f:69:17:f1:6b:c2:0b:63:5b:10:ae:f5:c4:90: eb:1b:49:14:b4:b8:89:8a:df:b7:01:55:67:dd:5f:db:88:a6: d3:4c:74:1f:37:3b:cd:f8:85:7f:aa:23:58:7e:0a:1b:e1:eb: d5:c0:3e:c7:a9:0a:60:5a:75:e8:d4:15:4f:e3:91:c9:6c:e3: b2:97:2a:1d:d4:9c:b8:fe:f7:d7:19:a3:a8:39:7b:04:8f:1f: 35:52:73:be:0f:cd:d1:3b:2b:1a:e0:e4:72:f0:8f:d8:3d:c8: 58:63:51:46:63:2e:3b:0e:43:c7:5f:8a:e7:93:46:10:f6:cf: dc:ac:8b:c5:e1:15:24:14:ef:ac:a0:05:73:13:f1:0b:ca:30: 92:e9:1f:38:f0:cd:bd:3e:9a:07:1c:60:85:52:42:c3:99:f7: 84:90:2f:4c:ad:42:c1:ef:74:b0:93:26:e5:ed:73:67:d9:1f: 45:88:d0:76:21:f4:ad:0d:28:2c:4f:42:65:5c:c9:90:dd:88: 0b:61:f1:f1:8c:ee:88:3b:33:7d:de:39:53:ac:7c:05:e6:95: cd:35:53:cf:94:1e:09:e4:9e:47:67:13:8f:6c:d2:aa:57:a1: 17:c6:b7:87:ea:a4:fc:ec:b9:e1:4f:f5:29:59:2f:e9:02:de: b1:5c:3b:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkIyMjcxMTAvBgNVBAUTKDczNThFNkJDMjkwOEM2ODE0MEJGM0I4QTgxNUY2OTVE Q0IyQThBNEIwHhcNMjUwODIzMDQwNDU2WhcNMjUwODMwMDQwNDU2WjAYMRYwFAYD VQQDEw02OGE5M2RlOC01OTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm5/SaWzm7EvOvtP5+HnJZZnNj0F7ND9Fp6x1GhuhWnj7yDX9HsRr3eXxusS6 DaUOyyIU/007LHXt+bWu/RILU7OFvwX32boFTNBKzYolS+5S6Jj5qLicRWMNustO hQEt9RfxE8nyUU2quiFMJgiwvApgSqMGqkJXcftZvsMjuSepuVCMsBBqHpqonFbv Fn7QkThneR9yZBPzxytzfuVSARyA58jTnsLh9f6b4+X4JUgYLa+zQJD0S4c4VVHo cj6Ep/6ZjyBCcGxbl90mqZrxIqm4tLE3qfGSguV0IC1fER7HQscCiRPU4juHnLTA qrOSVYEosF8rdvg+igr+EjOEFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI+G9fhm rhutsVdJ/yR6f3FqQA7lMB8GA1UdIwQYMBaAFHNY5rwpCMaBQL87ioFfaV3LKopL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjIyNy9ENUE1NTM5ODVE MkQxMUVFQTNFMzlGNTdDNEY5QUUwMi9jMWptdkNrSXhvRkF2enVLZ1Y5cFhjc3Fp a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Mxam12Q2tJeG9GQXZ6dUtnVjlwWGNzcWlrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjIyNy9ENUE1NTM5ODVEMkQxMUVFQTNFMzlGNTdDNEY5QUUwMi9jMWptdkNrSXhv RkF2enVLZ1Y5cFhjc3Fpa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkY2T4X2kX8WvCC2NbEK71xJDrG0kUtLiJit+3AVVn3V/biKbTTHQf NzvN+IV/qiNYfgob4evVwD7HqQpgWnXo1BVP45HJbOOylyod1Jy4/vfXGaOoOXsE jx81UnO+D83ROysa4ORy8I/YPchYY1FGYy47DkPHX4rnk0YQ9s/crIvF4RUkFO+s oAVzE/ELyjCS6R848M29PpoHHGCFUkLDmfeEkC9MrULB73Swkybl7XNn2R9FiNB2 IfStDSgsT0JlXMmQ3YgLYfHxjO6IOzN93jlTrHwF5pXNNVPPlB4J5J5HZxOPbNKq V6EXxreH6qT87LnhT/UpWS/pAt6xXDvI -----END CERTIFICATE-----Generated at Sat Aug 23 21:28:12 2025 by rpki-client