$ rpki-client -vvf rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft File: dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft (raw, json) Hash identifier: 1vq9nBHwbHYRulBHpgMffUZmrHsuMcJ3IDP2nypvLYI= Subject key identifier: 5E:D5:E6:C4:BC:7C:5E:73:A5:3D:09:57:AC:55:11:7E:EE:A5:A3:D9 Authority key identifier: 74:8B:C7:9A:FA:9B:7F:F7:5B:13:00:AD:29:40:E7:FC:C1:42:F8:86 Certificate issuer: /CN=A91D76E5/serialNumber=748BC79AFA9B7FF75B1300AD2940E7FCC142F886 Certificate serial: 0887 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft Manifest number: 087E Signing time: Fri 22 Aug 2025 20:45:35 +0000 Manifest this update: Fri 22 Aug 2025 20:45:35 +0000 Manifest next update: Fri 29 Aug 2025 20:45:35 +0000 Files and hashes: 1: dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl (hash: lhAaCf4SsnEp1yJoAwJiBBN2+eyWymqCCGVegJg93RI=) 2: 94B101721B8B11EEACEA736AC4F9AE02.roa (hash: 8KEvrrkPqDZO6TToBnuRSPRZoDSK+MH3syDaDWUh+s0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:45:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2183 (0x887) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D76E5, serialNumber=748BC79AFA9B7FF75B1300AD2940E7FCC142F886 Validity Not Before: Aug 22 20:45:35 2025 GMT Not After : Aug 29 20:45:35 2025 GMT Subject: CN=68a8d6ef-7877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ad:da:b4:fa:33:6e:1f:86:2c:81:a5:5c:4d: 2c:0c:f0:7c:dd:4d:3b:2d:49:b5:8e:23:24:61:6d: 13:40:d7:9f:70:48:72:2b:d9:9e:ad:1b:17:42:d9: 96:2b:fb:bb:fa:a2:81:74:72:a8:b0:de:a8:a5:f4: e9:ac:93:e5:48:d8:47:c0:77:84:52:31:1f:84:c8: 7c:ac:ce:42:3b:a8:c6:17:ee:96:d1:6c:a5:90:af: 98:be:83:b4:8e:90:6d:85:e3:14:8d:f5:b9:9a:f4: 99:23:5d:c9:a8:f5:a1:45:e1:a8:19:cf:73:3a:0e: 4f:0b:8c:c5:3f:81:94:02:47:c2:44:b1:38:4a:b5: ff:c8:a2:62:65:e0:b4:6a:e5:fd:c4:78:27:90:b2: 0f:7f:89:03:0f:7a:a8:97:60:bb:36:d5:ae:7e:0f: 0c:85:e6:01:0e:66:82:0f:8c:99:43:28:58:46:f6: e7:cf:f6:66:04:e9:bc:57:8e:f6:44:94:30:a1:78: 04:94:1b:18:49:20:a0:9e:98:f6:59:34:68:ee:23: 5c:c6:49:11:d8:2c:32:e4:5d:02:33:4b:75:22:2b: 3e:69:0b:07:c7:fb:22:ee:d6:48:2c:f1:06:de:b8: ef:d7:27:19:ab:81:dd:47:50:dd:7f:86:60:ec:a5: bf:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:D5:E6:C4:BC:7C:5E:73:A5:3D:09:57:AC:55:11:7E:EE:A5:A3:D9 X509v3 Authority Key Identifier: keyid:74:8B:C7:9A:FA:9B:7F:F7:5B:13:00:AD:29:40:E7:FC:C1:42:F8:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:f4:f5:f4:90:bc:17:b9:1d:7d:c9:f8:1e:c5:d2:cc:80:f1: 01:c9:ee:fc:25:7c:3c:db:5f:b2:ab:13:c2:32:37:68:87:20: f6:29:52:7a:10:b4:00:34:92:37:e2:09:6b:81:a9:45:4b:dc: c3:e7:38:1f:b0:bd:7d:bd:f3:49:94:b9:45:f6:32:95:86:67: 09:48:44:67:d2:6d:87:84:10:17:6c:1a:79:5a:55:ff:e7:a2: 71:81:c0:85:74:dd:cf:08:35:95:a1:cc:e0:86:34:35:1f:ec: 48:58:83:65:7c:22:a6:c6:5c:07:6b:f9:9e:da:7e:f8:1c:7c: b2:97:51:0e:62:7b:5d:1e:61:db:dc:36:ed:f3:81:52:17:ae: 9e:2c:95:41:c8:46:1f:d5:b4:b3:64:9a:ac:bb:79:79:d7:d9: 41:6c:f2:55:93:9f:20:b4:40:b0:75:ed:88:29:d8:75:26:d0: b9:d0:1c:c5:d6:1c:09:12:2d:21:5a:30:27:33:33:33:76:c5: f8:e0:3e:f3:f3:d7:39:fc:ef:b5:8f:58:6e:84:8f:2f:c5:9e: a2:39:49:25:5b:e4:de:43:0f:3f:a0:94:2f:0f:f2:85:66:33: 25:65:25:8c:27:e4:7f:ae:e4:f5:c3:a3:4d:d4:b0:46:21:4a: fb:c5:42:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc2RTUxMTAvBgNVBAUTKDc0OEJDNzlBRkE5QjdGRjc1QjEzMDBBRDI5NDBFN0ZD QzE0MkY4ODYwHhcNMjUwODIyMjA0NTM1WhcNMjUwODI5MjA0NTM1WjAYMRYwFAYD VQQDEw02OGE4ZDZlZi03ODc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtK3atPozbh+GLIGlXE0sDPB83U07LUm1jiMkYW0TQNefcEhyK9merRsXQtmW K/u7+qKBdHKosN6opfTprJPlSNhHwHeEUjEfhMh8rM5CO6jGF+6W0WylkK+YvoO0 jpBtheMUjfW5mvSZI13JqPWhReGoGc9zOg5PC4zFP4GUAkfCRLE4SrX/yKJiZeC0 auX9xHgnkLIPf4kDD3qol2C7NtWufg8MheYBDmaCD4yZQyhYRvbnz/ZmBOm8V472 RJQwoXgElBsYSSCgnpj2WTRo7iNcxkkR2Cwy5F0CM0t1Iis+aQsHx/si7tZILPEG 3rjv1ycZq4HdR1Ddf4Zg7KW/YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF7V5sS8 fF5zpT0JV6xVEX7upaPZMB8GA1UdIwQYMBaAFHSLx5r6m3/3WxMArSlA5/zBQviG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzZFNS9FMDgzQTBFQUNC MTIxMUVBOTI1MDdBMkJDNEY5QUUwMi9kSXZIbXZxYmZfZGJFd0N0S1VEbl9NRkMt SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RJdkhtdnFiZl9kYkV3Q3RLVURuX01GQy1JWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzZFNS9FMDgzQTBFQUNCMTIxMUVBOTI1MDdBMkJDNEY5QUUwMi9kSXZIbXZxYmZf ZGJFd0N0S1VEbl9NRkMtSVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAk9PX0kLwXuR19yfgexdLMgPEBye78JXw821+yqxPCMjdohyD2KVJ6 ELQANJI34glrgalFS9zD5zgfsL19vfNJlLlF9jKVhmcJSERn0m2HhBAXbBp5WlX/ 56JxgcCFdN3PCDWVoczghjQ1H+xIWINlfCKmxlwHa/me2n74HHyyl1EOYntdHmHb 3Dbt84FSF66eLJVByEYf1bSzZJqsu3l519lBbPJVk58gtECwde2IKdh1JtC50BzF 1hwJEi0hWjAnMzMzdsX44D7z89c5/O+1j1huhI8vxZ6iOUklW+TeQw8/oJQvD/KF ZjMlZSWMJ+R/ruT1w6NN1LBGIUr7xUKb -----END CERTIFICATE-----Generated at Sat Aug 23 16:48:39 2025 by rpki-client