$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft File: tii4qSXEXjrDpxvkEUZimYv0s-A.mft (raw, json) Hash identifier: 4eY49gyhVFYVeFj/QcvREJkFTkU2SbkJnATzFLVAdDE= Subject key identifier: 61:12:75:37:04:C4:E7:2E:95:34:56:D4:43:AF:BD:0F:AE:FC:6D:5B Authority key identifier: B6:28:B8:A9:25:C4:5E:3A:C3:A7:1B:E4:11:46:62:99:8B:F4:B3:E0 Certificate issuer: /CN=A91CA8EA/serialNumber=B628B8A925C45E3AC3A71BE4114662998BF4B3E0 Certificate serial: 04C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft Manifest number: 04B7 Signing time: Sat 23 Aug 2025 00:07:07 +0000 Manifest this update: Sat 23 Aug 2025 00:07:07 +0000 Manifest next update: Sat 30 Aug 2025 00:07:07 +0000 Files and hashes: 1: tii4qSXEXjrDpxvkEUZimYv0s-A.crl (hash: 42kPA+yBPrONOqG8ESFT2FGmimY3gnFvMhhpTMs2THM=) 2: 14A07422D45E11EEB37CB639C4F9AE02.roa (hash: jYyif5XzvidlG1gkLHEZCka6sLKHMVLL3uaZPQUQSWU=) 3: 207388F2D45E11EE8D29793EC4F9AE02.roa (hash: aIqnIQInPJrCMj5K0+1zGOgCOM0xLmrh4KbjkSzgqVY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.crl rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:07:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1219 (0x4c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA8EA, serialNumber=B628B8A925C45E3AC3A71BE4114662998BF4B3E0 Validity Not Before: Aug 23 00:07:07 2025 GMT Not After : Aug 30 00:07:07 2025 GMT Subject: CN=68a9062b-bd40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0b:c9:59:ab:c5:c7:6e:7c:8a:54:9f:e2:8a: 15:9e:dc:34:05:98:59:f0:21:af:84:23:8f:37:cf: cf:50:3b:0e:03:aa:91:08:f2:49:bd:0d:af:1b:bc: b9:c1:9c:1e:88:f3:b8:e3:fa:61:f3:52:2e:65:19: 11:1e:e2:6d:5f:f7:52:d5:7e:fe:9d:78:f1:6c:f2: 36:5f:45:3b:87:e9:27:89:44:00:50:ae:01:78:c8: 5e:2a:7a:c2:cf:88:c0:a1:7f:71:c6:79:a9:b3:01: 4e:f6:e1:00:37:54:21:68:3c:92:81:62:e6:13:7a: 0b:ff:d0:94:0e:77:e8:ca:27:9c:aa:70:82:71:09: ed:5c:7a:ec:ab:22:35:e2:d0:8d:1d:bd:5d:13:dd: 8d:f2:dc:28:81:d7:8b:b3:d2:fe:9c:90:6a:61:0a: af:ac:84:4c:37:34:e8:3c:59:e2:07:e8:12:9a:bf: 81:e0:4e:19:d5:c7:fc:3d:b0:2e:7c:bf:9e:f5:c3: 99:aa:66:53:0e:0c:fc:93:39:da:0d:20:ca:db:3b: 58:5d:bf:c1:ec:4c:7a:c1:0b:98:2b:8d:1a:df:e3: 89:86:ee:a0:bd:5d:0a:98:3e:d9:eb:e8:6b:fa:99: 36:3b:53:50:9d:e5:fc:f0:d8:ff:34:5b:6d:f6:48: c2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:12:75:37:04:C4:E7:2E:95:34:56:D4:43:AF:BD:0F:AE:FC:6D:5B X509v3 Authority Key Identifier: keyid:B6:28:B8:A9:25:C4:5E:3A:C3:A7:1B:E4:11:46:62:99:8B:F4:B3:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:87:fd:2f:72:72:b8:79:b2:a5:21:11:7e:bc:e6:29:55:9f: a9:77:0c:71:12:49:86:9d:8b:6b:a5:79:96:4e:10:d1:83:03: 3b:9d:32:9d:34:dc:22:37:47:84:bc:44:dc:7b:a2:81:6c:d0: 50:92:c2:62:97:3c:c7:48:37:0b:34:a6:05:55:76:94:14:e7: 14:e8:49:8a:c6:48:cd:45:31:d4:11:3c:e1:56:6a:cf:01:a8: 5d:70:93:73:eb:ae:14:21:f5:ae:89:1d:75:e1:02:c4:58:48: 39:ae:e8:39:67:63:35:d2:e2:d4:e7:fe:af:1c:d7:30:67:9e: 9d:34:70:9a:00:2b:2f:8f:a4:aa:01:ab:31:ac:65:7b:cf:91: ee:6d:07:f6:67:4e:7d:31:f5:83:97:56:48:49:34:b3:e1:ae: 9b:61:6e:8e:ff:3c:05:d0:71:21:1a:53:42:27:6c:45:3b:d3: 8b:24:ae:ea:ba:58:25:f1:be:dd:b9:dd:0c:15:aa:43:84:61: 86:b3:4c:f1:3e:72:55:a5:f1:0a:a6:b6:05:77:81:4f:05:36: f8:51:2b:43:24:b2:46:5c:b9:de:15:05:2f:c8:57:e1:f8:0e: 9d:e5:fe:c5:24:06:a0:75:24:ce:7d:f8:53:52:00:0d:a8:25: 44:89:c0:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E4RUExMTAvBgNVBAUTKEI2MjhCOEE5MjVDNDVFM0FDM0E3MUJFNDExNDY2Mjk5 OEJGNEIzRTAwHhcNMjUwODIzMDAwNzA3WhcNMjUwODMwMDAwNzA3WjAYMRYwFAYD VQQDEw02OGE5MDYyYi1iZDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgvJWavFx258ilSf4ooVntw0BZhZ8CGvhCOPN8/PUDsOA6qRCPJJvQ2vG7y5 wZweiPO44/ph81IuZRkRHuJtX/dS1X7+nXjxbPI2X0U7h+kniUQAUK4BeMheKnrC z4jAoX9xxnmpswFO9uEAN1QhaDySgWLmE3oL/9CUDnfoyiecqnCCcQntXHrsqyI1 4tCNHb1dE92N8twogdeLs9L+nJBqYQqvrIRMNzToPFniB+gSmr+B4E4Z1cf8PbAu fL+e9cOZqmZTDgz8kznaDSDK2ztYXb/B7Ex6wQuYK40a3+OJhu6gvV0KmD7Z6+hr +pk2O1NQneX88Nj/NFtt9kjCEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGESdTcE xOculTRW1EOvvQ+u/G1bMB8GA1UdIwQYMBaAFLYouKklxF46w6cb5BFGYpmL9LPg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQThFQS9EOENBMTNDMjQw NDkxMUVDOUI2RUZFN0JDNEY5QUUwMi90aWk0cVNYRVhqckRweHZrRVVaaW1ZdjBz LUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RpaTRxU1hFWGpyRHB4dmtFVVppbVl2MHMtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QThFQS9EOENBMTNDMjQwNDkxMUVDOUI2RUZFN0JDNEY5QUUwMi90aWk0cVNYRVhq ckRweHZrRVVaaW1ZdjBzLUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXh/0vcnK4ebKlIRF+vOYpVZ+pdwxxEkmGnYtrpXmWThDRgwM7nTKd NNwiN0eEvETce6KBbNBQksJilzzHSDcLNKYFVXaUFOcU6EmKxkjNRTHUETzhVmrP AahdcJNz664UIfWuiR114QLEWEg5rug5Z2M10uLU5/6vHNcwZ56dNHCaACsvj6Sq AasxrGV7z5HubQf2Z059MfWDl1ZISTSz4a6bYW6O/zwF0HEhGlNCJ2xFO9OLJK7q ulgl8b7dud0MFapDhGGGs0zxPnJVpfEKprYFd4FPBTb4UStDJLJGXLneFQUvyFfh +A6d5f7FJAagdSTOffhTUgANqCVEicDk -----END CERTIFICATE-----Generated at Sun Aug 24 00:20:06 2025 by rpki-client