$ rpki-client -vvf rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft File: iXCkAMzM8BCTPDMMN2Ch7F204K0.mft (raw, json) Hash identifier: 51W2XE/n/9YWRsPvFlwZdATw1/+DVHA8EzYo7tjEVhM= Subject key identifier: 03:4E:0E:CD:12:4B:91:2C:1E:58:20:45:03:2E:11:04:20:96:24:2B Authority key identifier: 89:70:A4:00:CC:CC:F0:10:93:3C:33:0C:37:60:A1:EC:5D:B4:E0:AD Certificate issuer: /CN=A91C92DC/serialNumber=8970A400CCCCF010933C330C3760A1EC5DB4E0AD Certificate serial: 056C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft Manifest number: 0560 Signing time: Fri 22 Aug 2025 23:32:55 +0000 Manifest this update: Fri 22 Aug 2025 23:32:53 +0000 Manifest next update: Fri 29 Aug 2025 23:32:53 +0000 Files and hashes: 1: iXCkAMzM8BCTPDMMN2Ch7F204K0.crl (hash: IObcaomNtA96ZaIji/HoyqziQM/jFzXEAlrI1Z18Pww=) 2: C3CE90CEF99A11EB936CCA1EC4F9AE02.roa (hash: xQl2oR7pAbge5iF8YPhv/hbmMFqMQxGSZC11zhknFak=) 3: AD1469EC7A3911ECB5639D41C4F9AE02.roa (hash: M0rop6u3XFd48CsMz0Ik0R+4A+HjyQyG2cdgIdeoY8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.crl rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:32:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1388 (0x56c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C92DC, serialNumber=8970A400CCCCF010933C330C3760A1EC5DB4E0AD Validity Not Before: Aug 22 23:32:53 2025 GMT Not After : Aug 29 23:32:53 2025 GMT Subject: CN=68a8fe25-da95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cc:88:ec:d8:85:7e:0c:12:33:fa:62:a0:2c: 1e:d8:d1:e9:3a:82:89:08:2c:d5:2d:dc:ba:a2:aa: 03:16:99:54:7a:ed:51:58:dc:ae:d3:e8:53:e2:c9: 6c:96:06:e7:93:98:0d:15:6c:72:c6:19:3c:9d:71: 11:47:f4:86:bb:0b:91:1a:12:71:40:58:2e:83:c8: e4:a9:8e:51:e1:06:60:92:98:79:ee:43:42:d3:2e: 33:ca:5a:3d:85:99:f5:93:22:6f:02:7e:53:14:09: db:ef:d2:f8:0c:22:30:13:c3:be:47:47:60:20:53: a0:80:c5:66:0e:e6:40:fd:52:b7:3d:06:e4:d6:0c: 5c:32:d1:35:df:94:4b:a5:68:5f:e5:0a:f0:6c:fd: 42:8b:e1:4f:22:d4:2f:e4:73:e6:42:8e:4b:06:14: 11:d5:09:32:b9:eb:fb:5f:2a:20:dd:32:23:35:c2: 3f:41:b4:77:c1:79:ec:c6:b3:88:a6:a9:8a:c3:a9: 8c:6a:29:c9:19:08:e9:e7:b5:c3:b0:a3:55:b6:34: 68:7f:28:69:3c:9b:ba:0f:c4:bb:39:0f:a4:bb:90: 8b:d2:4c:1b:1d:57:ed:4e:49:2b:92:7e:1b:85:2d: 35:e2:9e:c9:b9:d4:cf:3b:69:c3:54:6d:94:94:4c: 4a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:4E:0E:CD:12:4B:91:2C:1E:58:20:45:03:2E:11:04:20:96:24:2B X509v3 Authority Key Identifier: keyid:89:70:A4:00:CC:CC:F0:10:93:3C:33:0C:37:60:A1:EC:5D:B4:E0:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:45:1c:bf:6c:64:e3:f6:f2:68:a0:e3:23:3b:cf:f5:94:80: 96:a5:a9:c1:52:06:0b:06:7d:72:6b:bb:3a:00:10:91:e1:12: 09:90:a6:b2:99:fe:ea:c4:f0:03:c6:0f:af:97:b1:76:65:0d: be:a6:f0:f8:d3:4d:d9:d5:4f:ce:dc:66:22:ba:61:19:ca:42: 9d:15:ef:fb:89:40:af:59:94:ac:4b:1a:3b:50:bb:3e:c9:e2: 0c:8f:c6:4b:f5:fd:e0:7a:ac:87:e0:10:d0:75:51:6c:d0:f1: b1:9a:fc:51:68:83:c6:9d:fd:b0:d1:20:c2:e1:52:6e:d3:15: d7:bd:58:dc:26:f3:92:02:1e:f2:41:21:d1:f2:c1:de:4e:96: 02:d0:02:8b:f1:af:e6:95:ff:fb:10:ed:8f:61:08:0b:13:a8: eb:18:e5:b8:b4:96:52:5e:90:38:43:92:d7:e4:89:4c:8e:be: 81:29:ae:0d:39:43:7a:71:b5:e8:e8:cc:43:6b:5b:f3:65:c6: fc:3b:bd:66:4f:43:90:f7:66:34:df:2a:f6:9a:fb:44:91:76: 6c:eb:0f:c8:d3:56:16:c7:15:0e:80:e3:70:bf:ca:cf:0a:e3: 3e:79:06:4c:11:68:cd:0a:6b:e3:b5:a7:14:05:86:4a:53:0f: a5:26:5e:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkyREMxMTAvBgNVBAUTKDg5NzBBNDAwQ0NDQ0YwMTA5MzNDMzMwQzM3NjBBMUVD NURCNEUwQUQwHhcNMjUwODIyMjMzMjUzWhcNMjUwODI5MjMzMjUzWjAYMRYwFAYD VQQDEw02OGE4ZmUyNS1kYTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyMyI7NiFfgwSM/pioCwe2NHpOoKJCCzVLdy6oqoDFplUeu1RWNyu0+hT4sls lgbnk5gNFWxyxhk8nXERR/SGuwuRGhJxQFgug8jkqY5R4QZgkph57kNC0y4zylo9 hZn1kyJvAn5TFAnb79L4DCIwE8O+R0dgIFOggMVmDuZA/VK3PQbk1gxcMtE135RL pWhf5QrwbP1Ci+FPItQv5HPmQo5LBhQR1Qkyuev7Xyog3TIjNcI/QbR3wXnsxrOI pqmKw6mMainJGQjp57XDsKNVtjRofyhpPJu6D8S7OQ+ku5CL0kwbHVftTkkrkn4b hS014p7JudTPO2nDVG2UlExK0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFANODs0S S5EsHlggRQMuEQQgliQrMB8GA1UdIwQYMBaAFIlwpADMzPAQkzwzDDdgoexdtOCt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTJEQy9DNjA1NzhBMEY5 OTgxMUVCOEFGNDlDMURDNEY5QUUwMi9pWENrQU16TThCQ1RQRE1NTjJDaDdGMjA0 SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lYQ2tBTXpNOEJDVFBETU1OMkNoN0YyMDRLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTJEQy9DNjA1NzhBMEY5OTgxMUVCOEFGNDlDMURDNEY5QUUwMi9pWENrQU16TThC Q1RQRE1NTjJDaDdGMjA0SzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFRRy/bGTj9vJooOMjO8/1lICWpanBUgYLBn1ya7s6ABCR4RIJkKay mf7qxPADxg+vl7F2ZQ2+pvD4003Z1U/O3GYiumEZykKdFe/7iUCvWZSsSxo7ULs+ yeIMj8ZL9f3geqyH4BDQdVFs0PGxmvxRaIPGnf2w0SDC4VJu0xXXvVjcJvOSAh7y QSHR8sHeTpYC0AKL8a/mlf/7EO2PYQgLE6jrGOW4tJZSXpA4Q5LX5IlMjr6BKa4N OUN6cbXo6MxDa1vzZcb8O71mT0OQ92Y03yr2mvtEkXZs6w/I01YWxxUOgONwv8rP CuM+eQZMEWjNCmvjtacUBYZKUw+lJl46 -----END CERTIFICATE-----Generated at Sat Aug 23 21:48:25 2025 by rpki-client