$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft File: Im9yidTjf-ziJgxk07y6esAxWnU.mft (raw, json) Hash identifier: Ad+K6Xy6VhdmZFDSpH2zZxtS7og5caGH9qIyc2JEd6Q= Subject key identifier: 34:FB:F9:F9:64:D9:F9:39:6D:00:16:42:5E:19:CC:4B:2C:DA:AE:49 Authority key identifier: 22:6F:72:89:D4:E3:7F:EC:E2:26:0C:64:D3:BC:BA:7A:C0:31:5A:75 Certificate issuer: /CN=A91BC269/serialNumber=226F7289D4E37FECE2260C64D3BCBA7AC0315A75 Certificate serial: 0352 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Im9yidTjf-ziJgxk07y6esAxWnU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft Manifest number: 034B Signing time: Sat 23 Aug 2025 01:17:40 +0000 Manifest this update: Sat 23 Aug 2025 01:17:39 +0000 Manifest next update: Sat 30 Aug 2025 01:17:39 +0000 Files and hashes: 1: Im9yidTjf-ziJgxk07y6esAxWnU.crl (hash: qSc06ZZii24Z67v+k2H2CiOw6CCmRETXtMrXKpXKhhM=) 2: 16DDC0F4CFE811ECA193B36BC4F9AE02.roa (hash: d8hKEngO/LeUHQoe5AIEcocjfTWcuilabUG2KLlGFLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.crl rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Im9yidTjf-ziJgxk07y6esAxWnU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:17:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 850 (0x352) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC269, serialNumber=226F7289D4E37FECE2260C64D3BCBA7AC0315A75 Validity Not Before: Aug 23 01:17:39 2025 GMT Not After : Aug 30 01:17:39 2025 GMT Subject: CN=68a916b3-2c96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:53:e1:d7:4d:44:af:2e:c3:22:49:5d:28:22: 3c:b5:45:41:3b:30:7f:c8:83:d2:17:b8:bb:6e:0b: fc:0c:39:ec:89:95:e0:cb:b9:33:37:f9:af:43:15: 77:44:eb:8c:ea:a1:90:89:4a:96:67:7b:02:cb:a7: 74:07:29:f2:a7:85:74:81:a1:4d:83:ed:81:02:f0: 13:35:7b:25:8c:ed:eb:11:27:94:13:ca:0b:a6:47: dc:8a:64:88:29:cb:6d:3a:db:2a:89:ba:b3:8a:22: c9:c0:45:dd:cf:d3:74:b6:37:89:75:02:a4:60:ab: 57:3b:07:d1:35:1e:84:74:b8:5f:bd:72:7c:62:a6: 2f:cf:f2:3a:b1:6c:aa:a5:19:c6:21:75:a5:3a:66: 7f:7c:65:ab:17:b5:90:5b:6a:2c:14:d6:f3:e0:64: 53:21:43:ea:04:36:26:90:1b:06:9f:cb:7f:90:54: 31:8c:a2:d8:75:67:a9:1c:f5:fc:3f:95:13:d3:55: 2a:ea:bd:f2:9e:3b:47:3f:67:6b:8a:55:91:c6:5c: 84:19:d1:fe:d0:c2:d2:4f:7c:70:be:57:2c:93:74: fe:9e:b2:85:4e:0e:ab:77:38:07:12:c8:d9:73:09: 75:26:0b:ae:ae:6b:b9:62:3f:68:f5:1a:dd:a1:24: d2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:FB:F9:F9:64:D9:F9:39:6D:00:16:42:5E:19:CC:4B:2C:DA:AE:49 X509v3 Authority Key Identifier: keyid:22:6F:72:89:D4:E3:7F:EC:E2:26:0C:64:D3:BC:BA:7A:C0:31:5A:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Im9yidTjf-ziJgxk07y6esAxWnU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:92:b3:9e:92:92:e7:e7:f8:cb:57:60:db:31:8a:06:7f:65: 3d:cf:56:f3:9a:3e:d1:ae:3e:ed:1e:4e:5e:0e:78:ad:dd:26: 98:ba:27:e5:e3:3a:09:73:e4:f3:20:18:c5:bf:90:7b:e2:01: ba:b3:f3:04:76:eb:7f:66:9c:bf:1e:5e:a4:49:b6:68:52:cd: 91:e7:96:b4:b0:87:7e:2f:eb:7a:71:da:d5:db:58:c4:0a:3f: f1:64:bd:fe:d1:be:ca:fd:31:63:d7:61:f6:47:09:52:e1:32: 64:25:2c:91:19:02:46:fe:e1:f8:da:b2:2a:54:40:8a:87:51: c8:72:af:c9:89:90:a7:f1:bb:c8:a9:82:45:bd:14:44:e2:a4: 9e:01:68:88:a1:d8:b0:aa:99:f1:9f:33:01:ea:80:1c:78:24: 23:1d:9c:49:71:8a:1b:c8:ec:81:ae:0f:63:86:ae:e9:1a:9f: bc:b5:5c:36:16:25:12:91:ce:a5:50:60:f1:a5:08:0f:94:dd: 92:36:7d:9d:ed:12:3f:a2:b5:4d:c7:4b:8a:a0:e9:0e:bf:a0: 18:8f:2b:81:49:51:22:b2:ee:df:18:d1:63:16:b2:b3:dd:32: 90:70:61:e7:dd:dd:f0:48:8c:c5:30:cc:c8:8b:9d:36:60:bc: ee:78:04:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMyNjkxMTAvBgNVBAUTKDIyNkY3Mjg5RDRFMzdGRUNFMjI2MEM2NEQzQkNCQTdB QzAzMTVBNzUwHhcNMjUwODIzMDExNzM5WhcNMjUwODMwMDExNzM5WjAYMRYwFAYD VQQDEw02OGE5MTZiMy0yYzk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt1Ph101Ery7DIkldKCI8tUVBOzB/yIPSF7i7bgv8DDnsiZXgy7kzN/mvQxV3 ROuM6qGQiUqWZ3sCy6d0Bynyp4V0gaFNg+2BAvATNXsljO3rESeUE8oLpkfcimSI KcttOtsqibqziiLJwEXdz9N0tjeJdQKkYKtXOwfRNR6EdLhfvXJ8YqYvz/I6sWyq pRnGIXWlOmZ/fGWrF7WQW2osFNbz4GRTIUPqBDYmkBsGn8t/kFQxjKLYdWepHPX8 P5UT01Uq6r3ynjtHP2drilWRxlyEGdH+0MLST3xwvlcsk3T+nrKFTg6rdzgHEsjZ cwl1Jguurmu5Yj9o9RrdoSTSqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDT7+flk 2fk5bQAWQl4ZzEss2q5JMB8GA1UdIwQYMBaAFCJvconU43/s4iYMZNO8unrAMVp1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzI2OS9CMTYxMzExOENG RTUxMUVDOTRCQkM3NUFDNEY5QUUwMi9JbTl5aWRUamYtemlKZ3hrMDd5NmVzQXhX blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0ltOXlpZFRqZi16aUpneGswN3k2ZXNBeFduVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzI2OS9CMTYxMzExOENGRTUxMUVDOTRCQkM3NUFDNEY5QUUwMi9JbTl5aWRUamYt emlKZ3hrMDd5NmVzQXhXblUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTkrOekpLn5/jLV2DbMYoGf2U9z1bzmj7Rrj7tHk5eDnit3SaYuifl 4zoJc+TzIBjFv5B74gG6s/MEdut/Zpy/Hl6kSbZoUs2R55a0sId+L+t6cdrV21jE Cj/xZL3+0b7K/TFj12H2RwlS4TJkJSyRGQJG/uH42rIqVECKh1HIcq/JiZCn8bvI qYJFvRRE4qSeAWiIodiwqpnxnzMB6oAceCQjHZxJcYobyOyBrg9jhq7pGp+8tVw2 FiUSkc6lUGDxpQgPlN2SNn2d7RI/orVNx0uKoOkOv6AYjyuBSVEisu7fGNFjFrKz 3TKQcGHn3d3wSIzFMMzIi502YLzueASW -----END CERTIFICATE-----Generated at Sat Aug 23 18:22:50 2025 by rpki-client