$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft File: iX261kcCN4pu4YYw4Yv3Whcpgmk.mft (raw, json) Hash identifier: rNb+9qSWyuBjA9lGPFaG0PNAiNBzfYXHxB8sgeLD2So= Subject key identifier: 19:DD:24:6A:5B:D6:62:1B:DD:16:64:EF:7D:CD:3C:13:DB:88:9C:90 Authority key identifier: 89:7D:BA:D6:47:02:37:8A:6E:E1:86:30:E1:8B:F7:5A:17:29:82:69 Certificate issuer: /CN=A91D8117/serialNumber=897DBAD64702378A6EE18630E18BF75A17298269 Certificate serial: 0132 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft Manifest number: 012C Signing time: Sat 23 Aug 2025 04:49:34 +0000 Manifest this update: Sat 23 Aug 2025 04:49:33 +0000 Manifest next update: Sat 30 Aug 2025 04:49:33 +0000 Files and hashes: 1: iX261kcCN4pu4YYw4Yv3Whcpgmk.crl (hash: JmA0vhpzROr7Jw3yFxNpl9CjoF1UNsfcjzV3jB7xB3k=) 2: D442A7A0BE2E11EEAFAF1934C4F9AE02.roa (hash: GqeiAvi13dSKvLM+fHPrB98afI5mQF/DJh5CG60rs0k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.crl rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:49:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 306 (0x132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8117, serialNumber=897DBAD64702378A6EE18630E18BF75A17298269 Validity Not Before: Aug 23 04:49:33 2025 GMT Not After : Aug 30 04:49:33 2025 GMT Subject: CN=68a9485e-9d78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:96:74:fc:e6:ea:84:34:61:f6:cf:53:07:5c: 57:64:f0:c6:ff:00:43:44:24:b1:c3:a1:63:b2:2a: 59:49:1c:f9:46:bc:57:79:ec:91:1d:5e:d8:71:40: 10:ce:07:d8:6b:e1:7c:48:20:f4:22:90:1d:dd:ff: da:7c:39:14:b0:e9:fe:99:85:4f:d8:29:03:64:7a: eb:27:45:ad:67:c4:78:0e:9f:a3:6c:e5:08:12:57: 6d:e6:7e:7e:b6:2b:8a:44:49:af:7c:a3:48:49:93: 65:3c:d6:ff:d2:6a:9f:7e:2f:ea:e9:57:86:1c:8a: e8:e3:23:d9:d2:52:1c:1c:04:89:9e:b9:f8:f4:44: 8b:d5:89:b9:81:72:f2:31:f7:ff:1c:17:e0:38:07: 96:bd:f5:82:ee:7b:25:da:a1:d2:2e:98:07:f1:6e: 19:c0:1c:a7:44:80:4f:0d:af:5a:04:f2:2a:75:bc: 53:9f:2e:a9:d2:5b:cb:1e:df:aa:5b:98:de:3d:c5: 2d:e2:85:79:07:61:55:52:54:6b:46:06:85:e9:b4: e4:0c:b3:d1:44:34:a6:eb:1e:fd:ef:a8:30:1b:ac: 3f:87:53:4e:bf:5c:e3:d1:ee:8a:51:4b:f7:68:10: 67:2e:13:03:6f:3a:77:c6:53:52:77:69:09:1b:32: 7c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:DD:24:6A:5B:D6:62:1B:DD:16:64:EF:7D:CD:3C:13:DB:88:9C:90 X509v3 Authority Key Identifier: keyid:89:7D:BA:D6:47:02:37:8A:6E:E1:86:30:E1:8B:F7:5A:17:29:82:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:e4:ce:7c:e9:25:5d:25:89:3f:87:7b:ce:12:e4:5a:70:37: e2:88:c1:65:b3:77:be:0c:1e:58:cd:b0:5c:02:d8:47:16:dc: 69:76:55:31:5e:4c:a1:f1:5f:29:4a:40:44:21:38:38:82:fd: a3:a0:71:91:df:80:b4:27:39:dd:53:eb:25:27:82:53:0b:cd: b7:f3:61:f6:eb:d9:05:96:1d:4a:9d:ff:17:c8:dd:bf:24:dd: 82:06:7c:d4:2e:8c:8f:7e:8d:8c:68:47:d2:80:12:24:e5:3a: 5a:33:7d:3b:83:03:c8:ac:1a:20:6c:ef:d4:f7:dd:0e:56:19: 60:a8:de:1a:42:25:51:56:b7:09:eb:80:1e:5e:d5:08:1a:06: 9b:9c:70:74:e5:02:e8:3b:b3:24:16:5e:13:44:d3:3a:7f:cf: 93:8e:82:e2:71:bb:f5:5a:50:10:65:87:50:58:b7:0e:f2:a5: 48:f9:51:d0:95:37:47:91:8a:5f:4a:22:08:6c:59:99:eb:86: d4:52:d8:14:1c:65:c5:64:22:43:91:b1:67:7b:62:0c:51:f7: 47:2b:df:35:75:c0:67:61:61:42:33:3e:21:2f:6b:0f:67:94: 8e:ed:ca:4b:c2:db:b0:58:5f:f7:43:ef:01:d2:0e:e3:c3:cb: b8:f7:fb:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgxMTcxMTAvBgNVBAUTKDg5N0RCQUQ2NDcwMjM3OEE2RUUxODYzMEUxOEJGNzVB MTcyOTgyNjkwHhcNMjUwODIzMDQ0OTMzWhcNMjUwODMwMDQ0OTMzWjAYMRYwFAYD VQQDEw02OGE5NDg1ZS05ZDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5pZ0/ObqhDRh9s9TB1xXZPDG/wBDRCSxw6FjsipZSRz5RrxXeeyRHV7YcUAQ zgfYa+F8SCD0IpAd3f/afDkUsOn+mYVP2CkDZHrrJ0WtZ8R4Dp+jbOUIEldt5n5+ tiuKREmvfKNISZNlPNb/0mqffi/q6VeGHIro4yPZ0lIcHASJnrn49ESL1Ym5gXLy Mff/HBfgOAeWvfWC7nsl2qHSLpgH8W4ZwBynRIBPDa9aBPIqdbxTny6p0lvLHt+q W5jePcUt4oV5B2FVUlRrRgaF6bTkDLPRRDSm6x7976gwG6w/h1NOv1zj0e6KUUv3 aBBnLhMDbzp3xlNSd2kJGzJ8TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBndJGpb 1mIb3RZk733NPBPbiJyQMB8GA1UdIwQYMBaAFIl9utZHAjeKbuGGMOGL91oXKYJp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODExNy84RTI4RTc5NEJF MkQxMUVFODUzNkQwMzBDNEY5QUUwMi9pWDI2MWtjQ040cHU0WVl3NFl2M1doY3Bn bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lYMjYxa2NDTjRwdTRZWXc0WXYzV2hjcGdtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODExNy84RTI4RTc5NEJFMkQxMUVFODUzNkQwMzBDNEY5QUUwMi9pWDI2MWtjQ040 cHU0WVl3NFl2M1doY3BnbWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBW5M586SVdJYk/h3vOEuRacDfiiMFls3e+DB5YzbBcAthHFtxpdlUx Xkyh8V8pSkBEITg4gv2joHGR34C0JzndU+slJ4JTC82382H269kFlh1Knf8XyN2/ JN2CBnzULoyPfo2MaEfSgBIk5TpaM307gwPIrBogbO/U990OVhlgqN4aQiVRVrcJ 64AeXtUIGgabnHB05QLoO7MkFl4TRNM6f8+TjoLicbv1WlAQZYdQWLcO8qVI+VHQ lTdHkYpfSiIIbFmZ64bUUtgUHGXFZCJDkbFne2IMUfdHK981dcBnYWFCMz4hL2sP Z5SO7cpLwtuwWF/3Q+8B0g7jw8u49/t9 -----END CERTIFICATE-----Generated at Sat Aug 23 19:40:07 2025 by rpki-client