$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft File: IadvO7gWz_58RmVVwrC-vJx7xW4.mft (raw, json) Hash identifier: HJvF7mLBCcCqZf1fo+JRsAIK4avt+EtkMhWNDvbV4zE= Subject key identifier: 26:82:99:82:5C:DC:4E:26:6E:AF:B8:FF:C6:30:A4:AE:D9:0D:45:12 Authority key identifier: 21:A7:6F:3B:B8:16:CF:FE:7C:46:65:55:C2:B0:BE:BC:9C:7B:C5:6E Certificate issuer: /CN=A91CA559/serialNumber=21A76F3BB816CFFE7C466555C2B0BEBC9C7BC56E Certificate serial: 04E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft Manifest number: 04D8 Signing time: Sat 23 Aug 2025 00:00:43 +0000 Manifest this update: Sat 23 Aug 2025 00:00:43 +0000 Manifest next update: Sat 30 Aug 2025 00:00:43 +0000 Files and hashes: 1: IadvO7gWz_58RmVVwrC-vJx7xW4.crl (hash: wW5rdlHPNfte01DoIvg32KWiAkpiELVCe861U8KmoBo=) 2: 44D508E43C8311ECA86D031EC4F9AE02.roa (hash: 3A9tL/jcYlpnzHxxWTOseLkNdsbJRJrgjlY1s6ebsbQ=) 3: 45CC5B763C8311ECA86D031EC4F9AE02.roa (hash: GWx3OJd1vwjGtC5zPk/EszjxixEUkMuQ8v31OyEYOdo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.crl rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1252 (0x4e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA559, serialNumber=21A76F3BB816CFFE7C466555C2B0BEBC9C7BC56E Validity Not Before: Aug 23 00:00:43 2025 GMT Not After : Aug 30 00:00:43 2025 GMT Subject: CN=68a904ab-999e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:27:ad:4d:84:df:4a:b7:2c:5f:9f:3e:c1:c3: 9c:f3:8a:da:8f:ca:11:09:22:51:d3:bd:04:52:5d: 05:7a:0c:82:f3:c8:67:b9:89:c9:56:d8:44:f5:79: aa:ed:c9:05:52:33:18:1f:84:1c:93:01:0b:59:b5: be:22:5b:01:42:84:09:8f:34:c2:9d:f7:5a:05:e8: 95:c7:18:10:d8:6c:76:02:43:50:b5:10:41:6d:4a: a5:86:5b:3c:af:0e:dd:6f:f8:15:65:0c:e0:1e:89: 1d:41:e9:27:b4:c0:44:f4:ed:64:16:34:fd:f0:25: 90:96:9f:02:0b:43:50:4e:0a:77:ac:d4:8d:2e:e5: a4:5c:5e:63:6a:62:0e:29:b8:89:07:78:e9:ff:47: 69:d8:dc:5e:4a:ef:66:53:d9:76:8e:49:85:7d:f5: 94:b6:8b:bc:24:a5:cb:be:1d:a6:3f:e6:11:9f:9b: b6:39:3d:69:70:fd:3c:ce:ca:cb:eb:d8:30:70:ab: 3d:2b:50:7f:f4:32:6e:54:43:b1:dc:39:d4:e0:7f: 80:c2:96:8a:0d:4c:9a:5d:77:f4:25:06:32:98:95: f7:3a:20:d5:c4:33:e6:ee:c7:27:1f:8d:2e:cb:58: dc:b9:7f:99:4e:8e:af:f2:01:83:ad:eb:c0:85:2e: af:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:82:99:82:5C:DC:4E:26:6E:AF:B8:FF:C6:30:A4:AE:D9:0D:45:12 X509v3 Authority Key Identifier: keyid:21:A7:6F:3B:B8:16:CF:FE:7C:46:65:55:C2:B0:BE:BC:9C:7B:C5:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:3d:fc:6f:de:3a:b0:ff:3e:f0:3b:49:37:7a:72:a5:ca:c2: 38:24:aa:6f:85:cf:c4:0b:6e:73:41:d2:45:6e:01:b4:ad:01: 5e:41:ec:15:22:db:41:a2:f4:65:76:5e:bf:08:10:ab:26:af: 9b:df:89:5b:9f:6f:14:84:ef:93:a8:44:2d:65:73:87:49:58: 82:cb:59:41:ff:54:b6:84:b9:9d:98:fb:93:73:39:f4:0e:41: d0:e7:57:a0:49:56:87:8d:c2:81:15:1f:20:05:3b:91:c0:1f: 3d:9d:f8:38:ff:f8:d6:eb:91:86:cd:7e:01:59:f4:16:a7:c5: 30:37:7a:c2:5b:78:71:e5:42:85:9a:44:11:57:76:65:c8:7d: f0:04:78:4d:4c:6b:f4:b9:c1:d0:82:a1:82:28:d5:d5:64:76: 37:4e:a6:ea:e4:e9:29:21:af:76:7b:90:66:de:8b:99:7b:f4: 61:7c:7b:5f:2f:82:8c:03:c6:e5:0e:1c:4b:f8:b5:3b:af:34: 3a:2e:02:74:b2:07:f9:cf:94:88:9e:6d:c5:ab:9f:16:6e:0b: 86:3b:0c:50:5c:09:17:88:70:98:96:49:9a:e2:89:e5:79:7f: 53:85:76:f8:1c:06:68:88:b5:6c:12:76:97:64:a6:ef:b2:b3: f1:85:96:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E1NTkxMTAvBgNVBAUTKDIxQTc2RjNCQjgxNkNGRkU3QzQ2NjU1NUMyQjBCRUJD OUM3QkM1NkUwHhcNMjUwODIzMDAwMDQzWhcNMjUwODMwMDAwMDQzWjAYMRYwFAYD VQQDEw02OGE5MDRhYi05OTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwietTYTfSrcsX58+wcOc84raj8oRCSJR070EUl0FegyC88hnuYnJVthE9Xmq 7ckFUjMYH4QckwELWbW+IlsBQoQJjzTCnfdaBeiVxxgQ2Gx2AkNQtRBBbUqlhls8 rw7db/gVZQzgHokdQekntMBE9O1kFjT98CWQlp8CC0NQTgp3rNSNLuWkXF5jamIO KbiJB3jp/0dp2NxeSu9mU9l2jkmFffWUtou8JKXLvh2mP+YRn5u2OT1pcP08zsrL 69gwcKs9K1B/9DJuVEOx3DnU4H+AwpaKDUyaXXf0JQYymJX3OiDVxDPm7scnH40u y1jcuX+ZTo6v8gGDrevAhS6v9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCaCmYJc 3E4mbq+4/8YwpK7ZDUUSMB8GA1UdIwQYMBaAFCGnbzu4Fs/+fEZlVcKwvryce8Vu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTU1OS9BQUMzNEY0NjMw QzQxMUVDOTlGMkY2NkNDNEY5QUUwMi9JYWR2TzdnV3pfNThSbVZWd3JDLXZKeDd4 VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lhZHZPN2dXel81OFJtVlZ3ckMtdkp4N3hXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTU1OS9BQUMzNEY0NjMwQzQxMUVDOTlGMkY2NkNDNEY5QUUwMi9JYWR2TzdnV3pf NThSbVZWd3JDLXZKeDd4VzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDPfxv3jqw/z7wO0k3enKlysI4JKpvhc/EC25zQdJFbgG0rQFeQewV IttBovRldl6/CBCrJq+b34lbn28UhO+TqEQtZXOHSViCy1lB/1S2hLmdmPuTczn0 DkHQ51egSVaHjcKBFR8gBTuRwB89nfg4//jW65GGzX4BWfQWp8UwN3rCW3hx5UKF mkQRV3ZlyH3wBHhNTGv0ucHQgqGCKNXVZHY3Tqbq5OkpIa92e5Bm3ouZe/RhfHtf L4KMA8blDhxL+LU7rzQ6LgJ0sgf5z5SInm3Fq58WbguGOwxQXAkXiHCYlkma4onl eX9ThXb4HAZoiLVsEnaXZKbvsrPxhZbe -----END CERTIFICATE-----Generated at Sat Aug 23 15:38:13 2025 by rpki-client