$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft File: ijkUYMpvZEpYkR23ODRhhON40AU.mft (raw, json) Hash identifier: 6l7tKqWwEzmAVNhJqyN9KEHRtXjrWyd/UhLZ4dDAv+A= Subject key identifier: 9D:48:D5:3D:FD:B1:1D:74:1C:C2:6B:88:00:AD:4A:B5:96:29:B7:20 Authority key identifier: 8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05 Certificate issuer: /CN=A91CF7F6/serialNumber=8A391460CA6F644A58911DB738346184E378D005 Certificate serial: 037F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft Manifest number: 036D Signing time: Sat 23 Aug 2025 01:09:15 +0000 Manifest this update: Sat 23 Aug 2025 01:09:14 +0000 Manifest next update: Sat 30 Aug 2025 01:09:14 +0000 Files and hashes: 1: ijkUYMpvZEpYkR23ODRhhON40AU.crl (hash: Mr1ZZdx+lhkY5c2zg4scQp7jk5FGoiampw+gTs3ofzQ=) 2: 244CF0D8329D11EF9B0F1058C4F9AE02.roa (hash: jPTVwsGJwTtYxGq4/k3kM5VWiV1n8hGmQtDrb+dxPSo=) 3: C09ED7E6804A11EDABB05C09C4F9AE02.roa (hash: R9SBhXEhOf+gMa/m0vryBFjGp9sBxlfHO7G/5GujZAU=) 4: 12A549F8BFC111ECBF03EF63C4F9AE02.roa (hash: PlCOgT/H+ZebbdqL9OriSJeX2NeXIzVYubJJm3a+JOU=) 5: 16B9139A238311EEA2B7992CC4F9AE02.roa (hash: xG6dNUlA+c724kNwKX8NUp4Jh1K9Q2v6tE8mpl0ElKc=) 6: 446E8606745311EDBF95BB2CC4F9AE02.roa (hash: Mxx0NjOtuBLL5qPMv7dyQqyOzCktL0daliI6SvMVL7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:09:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 895 (0x37f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF7F6, serialNumber=8A391460CA6F644A58911DB738346184E378D005 Validity Not Before: Aug 23 01:09:14 2025 GMT Not After : Aug 30 01:09:14 2025 GMT Subject: CN=68a914ba-c3cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:13:a9:96:c8:8b:0d:87:0f:b1:c4:3b:7a:2b: a5:e5:6a:f2:60:e1:3c:d5:a7:ef:fc:7a:91:3d:8a: a4:78:84:f9:a7:f0:05:9b:61:af:87:85:b8:27:3b: a2:fd:40:63:e3:12:8a:00:1b:5b:dd:eb:4b:ef:47: 77:9e:ed:3b:b2:37:46:7c:dc:bc:1d:10:46:7b:d6: 23:25:68:94:42:b2:e4:6b:b6:1c:52:8b:43:8e:f2: 54:93:7e:b0:1d:b6:66:d6:2e:7c:b7:02:12:25:a7: e4:1f:6f:34:9d:74:17:c2:a5:0d:25:be:96:1b:83: 67:b8:6c:cd:03:02:36:13:20:f1:76:c8:d6:60:55: d7:80:d4:a0:7f:fa:f4:f4:74:55:5f:1b:ac:24:13: 48:10:c6:60:7a:f3:39:65:08:f2:f6:e7:e7:c3:2d: cf:29:d4:13:2d:aa:57:c7:70:1c:cc:78:54:49:4d: 57:da:17:5a:7e:a4:92:8b:a0:60:3b:14:bd:46:86: c0:dc:5b:7a:35:5b:ba:94:ba:49:d8:06:3f:e1:ce: 4b:75:56:56:76:c0:0d:2a:e7:73:a0:1b:5d:e9:67: a3:85:ee:4f:57:3a:7c:7d:b3:6d:31:94:08:e5:94: b6:a7:ed:33:06:7f:33:45:48:5b:e4:f6:85:58:5b: b3:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:48:D5:3D:FD:B1:1D:74:1C:C2:6B:88:00:AD:4A:B5:96:29:B7:20 X509v3 Authority Key Identifier: keyid:8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:85:cd:cd:43:ab:81:9a:bb:38:29:67:fa:99:80:a1:3c:6a: ac:66:07:76:e4:69:dd:d6:a9:3e:10:65:fe:c2:71:d5:14:cf: 3b:06:c5:14:ff:cc:ad:8f:cc:cb:cd:96:fa:10:27:f7:2b:4d: 8b:82:ab:e3:c4:d2:89:07:f9:4f:5e:10:58:75:29:b7:1d:11: 55:24:43:f6:16:c0:c3:73:f8:e8:68:5a:9f:7d:67:af:cd:b3: 78:56:d2:45:5c:b9:4f:3d:3f:11:eb:af:03:2c:20:66:c4:93: ad:02:24:d7:bc:06:4c:1c:fc:80:e0:ca:54:03:2e:e9:d7:f5: d6:d6:c9:60:53:c9:ea:d4:c0:6e:d2:b5:62:3d:9b:a5:9f:66: 37:9e:04:02:c9:45:b6:b3:9c:73:a2:fa:80:ef:eb:30:37:4e: a7:a0:8a:b9:67:de:52:92:08:67:e9:d9:6f:46:45:ea:39:cb: 95:a5:a4:b1:39:34:07:cb:85:0a:52:a9:40:57:e6:d9:d3:51: bc:35:9a:63:b1:0c:52:25:c2:36:38:ab:12:e4:ad:de:61:dc: 00:fc:1e:79:11:8a:37:af:08:f7:e3:18:cc:8a:98:62:f0:cd: 5a:54:2c:0c:86:0b:74:ee:d8:5f:fa:52:3b:26:ed:ae:6a:36: 31:a6:3c:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA38wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y3RjYxMTAvBgNVBAUTKDhBMzkxNDYwQ0E2RjY0NEE1ODkxMURCNzM4MzQ2MTg0 RTM3OEQwMDUwHhcNMjUwODIzMDEwOTE0WhcNMjUwODMwMDEwOTE0WjAYMRYwFAYD VQQDEw02OGE5MTRiYS1jM2NiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2BOplsiLDYcPscQ7eiul5WryYOE81afv/HqRPYqkeIT5p/AFm2Gvh4W4Jzui /UBj4xKKABtb3etL70d3nu07sjdGfNy8HRBGe9YjJWiUQrLka7YcUotDjvJUk36w HbZm1i58twISJafkH280nXQXwqUNJb6WG4NnuGzNAwI2EyDxdsjWYFXXgNSgf/r0 9HRVXxusJBNIEMZgevM5ZQjy9ufnwy3PKdQTLapXx3AczHhUSU1X2hdafqSSi6Bg OxS9RobA3Ft6NVu6lLpJ2AY/4c5LdVZWdsANKudzoBtd6Wejhe5PVzp8fbNtMZQI 5ZS2p+0zBn8zRUhb5PaFWFuzpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ1I1T39 sR10HMJriACtSrWWKbcgMB8GA1UdIwQYMBaAFIo5FGDKb2RKWJEdtzg0YYTjeNAF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjdGNi83ODI0RUJENEJG QkQxMUVDQjc4ODEyNURDNEY5QUUwMi9pamtVWU1wdlpFcFlrUjIzT0RSaGhPTjQw QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lqa1VZTXB2WkVwWWtSMjNPRFJoaE9ONDBBVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjdGNi83ODI0RUJENEJGQkQxMUVDQjc4ODEyNURDNEY5QUUwMi9pamtVWU1wdlpF cFlrUjIzT0RSaGhPTjQwQVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXhc3NQ6uBmrs4KWf6mYChPGqsZgd25Gnd1qk+EGX+wnHVFM87BsUU /8ytj8zLzZb6ECf3K02LgqvjxNKJB/lPXhBYdSm3HRFVJEP2FsDDc/joaFqffWev zbN4VtJFXLlPPT8R668DLCBmxJOtAiTXvAZMHPyA4MpUAy7p1/XW1slgU8nq1MBu 0rViPZuln2Y3ngQCyUW2s5xzovqA7+swN06noIq5Z95Skghn6dlvRkXqOcuVpaSx OTQHy4UKUqlAV+bZ01G8NZpjsQxSJcI2OKsS5K3eYdwA/B55EYo3rwj34xjMiphi 8M1aVCwMhgt07thf+lI7Ju2uajYxpjxz -----END CERTIFICATE-----Generated at Sun Aug 24 00:20:14 2025 by rpki-client