$ rpki-client -vvf rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft File: -iKAHFKuKl_EkbfL6-aO_KLI0dk.mft (raw, json) Hash identifier: Y6vHsSh1DMRXqdBJpR0F8gqK1KpnhXX2//gffgFHyBM= Subject key identifier: F3:C1:52:8F:1B:DD:9D:BE:11:31:61:2C:5E:5D:BB:68:13:CF:5C:9B Authority key identifier: FA:22:80:1C:52:AE:2A:5F:C4:91:B7:CB:EB:E6:8E:FC:A2:C8:D1:D9 Certificate issuer: /CN=A91D837B/serialNumber=FA22801C52AE2A5FC491B7CBEBE68EFCA2C8D1D9 Certificate serial: 84 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-iKAHFKuKl_EkbfL6-aO_KLI0dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft Manifest number: 83 Signing time: Sat 23 Aug 2025 06:55:28 +0000 Manifest this update: Sat 23 Aug 2025 06:55:28 +0000 Manifest next update: Sat 30 Aug 2025 06:55:27 +0000 Files and hashes: 1: -iKAHFKuKl_EkbfL6-aO_KLI0dk.crl (hash: gRASN/xoEHJQnOb5PfK3OAcHbbnRpfdUF0F3Dza0DII=) 2: 8F7DFE66C96E11EF98B64E15C4F9AE02.roa (hash: NJttL+qjjIMKQduatRuB9wCf9GQJviKk9JlU07XKUgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.crl rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-iKAHFKuKl_EkbfL6-aO_KLI0dk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:55:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 132 (0x84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D837B, serialNumber=FA22801C52AE2A5FC491B7CBEBE68EFCA2C8D1D9 Validity Not Before: Aug 23 06:55:28 2025 GMT Not After : Aug 30 06:55:27 2025 GMT Subject: CN=68a965e0-b348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:26:a3:91:1d:4c:d5:2f:5f:d5:37:85:8c:26: 0e:a2:11:17:bb:01:94:c9:74:38:af:a2:ce:86:cf: a4:16:28:a8:ab:98:5c:0e:a0:59:ab:6e:87:be:bd: a0:d7:92:46:30:c3:d8:3b:e6:fe:da:f4:86:c2:07: 10:ba:f7:54:aa:8c:38:19:9d:d6:9c:9a:59:74:a4: 4b:39:3d:cc:9c:25:8e:0d:62:8e:4d:23:a8:d9:de: 1a:07:1c:2b:67:6e:fc:d6:80:64:68:3e:8a:4c:3e: 65:83:7d:db:54:8a:79:8f:b0:b4:75:f9:08:70:5f: 15:b2:42:8d:1d:c4:4e:37:d3:71:1d:8f:0d:55:a5: 31:46:89:32:c0:eb:28:e4:5e:7d:ef:b6:4b:b0:b3: d7:aa:7c:04:b9:4d:9c:08:10:9d:12:ae:be:09:11: 08:43:26:f2:d9:23:27:3d:68:16:95:3f:b8:39:f1: bc:0b:9a:71:92:4d:15:84:ec:8e:95:41:b0:68:e4: 54:58:de:95:ee:84:63:50:e4:ec:a3:83:4c:bb:04: 63:11:88:87:5f:52:40:31:3c:32:2e:57:fa:3b:07: 10:0a:b4:eb:67:03:08:2f:98:fd:a1:da:cf:65:81: cf:cf:99:8f:3d:ee:ef:4a:20:2c:25:28:3f:89:67: 4e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:C1:52:8F:1B:DD:9D:BE:11:31:61:2C:5E:5D:BB:68:13:CF:5C:9B X509v3 Authority Key Identifier: keyid:FA:22:80:1C:52:AE:2A:5F:C4:91:B7:CB:EB:E6:8E:FC:A2:C8:D1:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-iKAHFKuKl_EkbfL6-aO_KLI0dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:d5:54:7b:3c:c5:cb:4f:ec:30:64:2d:70:bf:3e:fe:69:62: 41:a1:96:6a:0b:e7:b2:b9:c2:d6:97:e9:41:d9:bd:50:e9:82: cd:bf:ef:97:90:f8:26:f5:82:2d:cb:91:21:b2:41:51:f5:67: 28:93:5b:17:45:f1:f5:40:e8:e9:ad:0f:e2:5a:94:93:53:1e: 34:af:f7:96:b9:74:33:ff:a6:96:f7:4e:68:47:2d:30:8f:6b: 80:73:95:ef:d0:cd:bf:d4:c1:35:b6:94:c4:6d:ff:0e:c4:02: e8:7f:de:46:ee:da:ec:46:95:f7:f4:55:c0:c4:98:05:7c:e4: 13:71:c4:c3:14:62:8e:99:95:87:06:41:1c:92:4c:93:ea:d9: 06:90:4d:fc:d8:4b:df:5d:64:e6:87:5f:66:ac:cf:e4:69:0c: bd:4d:94:98:37:4a:6b:d8:de:01:2a:26:7c:0d:97:28:c7:e8: 20:4c:5e:39:7e:27:6a:b4:ae:40:4d:4c:06:80:ec:ee:c5:ea: f4:82:70:5d:d7:7f:b2:0d:e6:e7:56:ee:11:4c:90:d2:aa:65: 28:50:10:ae:03:57:a8:c0:cc:c9:0c:d5:d6:60:e2:27:ce:b3: f4:e4:d7:e3:7e:3b:f0:b3:28:a0:ca:73:ce:31:c2:e3:cd:fa: 14:5f:6f:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgzN0IxMTAvBgNVBAUTKEZBMjI4MDFDNTJBRTJBNUZDNDkxQjdDQkVCRTY4RUZD QTJDOEQxRDkwHhcNMjUwODIzMDY1NTI4WhcNMjUwODMwMDY1NTI3WjAYMRYwFAYD VQQDEw02OGE5NjVlMC1iMzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsCajkR1M1S9f1TeFjCYOohEXuwGUyXQ4r6LOhs+kFiioq5hcDqBZq26Hvr2g 15JGMMPYO+b+2vSGwgcQuvdUqow4GZ3WnJpZdKRLOT3MnCWODWKOTSOo2d4aBxwr Z2781oBkaD6KTD5lg33bVIp5j7C0dfkIcF8VskKNHcRON9NxHY8NVaUxRokywOso 5F5977ZLsLPXqnwEuU2cCBCdEq6+CREIQyby2SMnPWgWlT+4OfG8C5pxkk0VhOyO lUGwaORUWN6V7oRjUOTso4NMuwRjEYiHX1JAMTwyLlf6OwcQCrTrZwMIL5j9odrP ZYHPz5mPPe7vSiAsJSg/iWdO8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPPBUo8b 3Z2+ETFhLF5du2gTz1ybMB8GA1UdIwQYMBaAFPoigBxSripfxJG3y+vmjvyiyNHZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODM3Qi8xNThEN0YzQ0I5 OUMxMUVGOTYzOEY3NjlDNEY5QUUwMi8taUtBSEZLdUtsX0VrYmZMNi1hT19LTEkw ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1pS0FIRkt1S2xfRWtiZkw2LWFPX0tMSTBkay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODM3Qi8xNThEN0YzQ0I5OUMxMUVGOTYzOEY3NjlDNEY5QUUwMi8taUtBSEZLdUts X0VrYmZMNi1hT19LTEkwZGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBI1VR7PMXLT+wwZC1wvz7+aWJBoZZqC+eyucLWl+lB2b1Q6YLNv++X kPgm9YIty5EhskFR9Wcok1sXRfH1QOjprQ/iWpSTUx40r/eWuXQz/6aW905oRy0w j2uAc5Xv0M2/1ME1tpTEbf8OxALof95G7trsRpX39FXAxJgFfOQTccTDFGKOmZWH BkEckkyT6tkGkE382EvfXWTmh19mrM/kaQy9TZSYN0pr2N4BKiZ8DZcox+ggTF45 fidqtK5ATUwGgOzuxer0gnBd13+yDebnVu4RTJDSqmUoUBCuA1eowMzJDNXWYOIn zrP05NfjfjvwsyigynPOMcLjzfoUX29z -----END CERTIFICATE-----Generated at Sat Aug 23 12:40:21 2025 by rpki-client