$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft File: I3t9TKhKJtX8SVjUgZHzahS8ei8.mft (raw, json) Hash identifier: CzCohSLx1+EK4eLjjCl/KyFy2DOxLxvMzByz2V+J5Fk= Subject key identifier: 45:61:9D:F4:1A:6E:12:49:CE:13:8C:D3:C8:C9:02:D4:32:BE:F1:FE Authority key identifier: 23:7B:7D:4C:A8:4A:26:D5:FC:49:58:D4:81:91:F3:6A:14:BC:7A:2F Certificate issuer: /CN=A91DB6F8/serialNumber=237B7D4CA84A26D5FC4958D48191F36A14BC7A2F Certificate serial: 021A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft Manifest number: 020C Signing time: Sat 23 Aug 2025 02:30:08 +0000 Manifest this update: Sat 23 Aug 2025 02:30:07 +0000 Manifest next update: Sat 30 Aug 2025 02:30:07 +0000 Files and hashes: 1: I3t9TKhKJtX8SVjUgZHzahS8ei8.crl (hash: Kgw/F1/z8iL+vV8D0vUhRkIT2/0e0SZYEisArDSiHkI=) 2: 4E8695C04F6111F0AEF2037CC4F9AE02.roa (hash: dTUyCBlbO/pz+tuVT/tO+XLwXxn5j9PKDxmqVQaSeKk=) 3: CC863C00AAC011EF8A637D09C4F9AE02.roa (hash: 0d8EDj7p85g61PO4rxhm2YW85ofVuKXgCa1+1ENa/7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.crl rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:30:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 538 (0x21a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB6F8, serialNumber=237B7D4CA84A26D5FC4958D48191F36A14BC7A2F Validity Not Before: Aug 23 02:30:07 2025 GMT Not After : Aug 30 02:30:07 2025 GMT Subject: CN=68a927b0-0dee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:34:90:c6:14:80:89:78:f7:af:4c:65:71:b1: 4d:5e:dd:43:aa:f4:6c:e2:ac:6c:b0:8f:9e:56:94: f9:bb:7d:a0:e2:2d:cd:f7:74:7b:5e:54:6a:db:ab: db:23:b2:b9:1a:c0:9b:57:41:d7:e1:26:68:6d:4e: bb:91:d1:b4:53:73:8c:cb:5f:66:b1:08:31:e3:ca: 1f:73:37:41:55:b9:65:a5:43:4d:2f:1f:bb:b5:d6: 30:a0:20:be:dd:da:aa:33:83:ba:3e:7d:7f:23:82: 93:ee:df:c7:26:e2:e9:10:cc:ce:cb:43:98:33:79: 06:e6:e6:10:02:7a:3b:6d:35:78:b5:49:0e:16:24: 1e:c2:fe:49:3b:e9:6b:87:4e:8f:38:e2:ce:81:a2: b1:f6:db:85:f2:df:61:2e:14:c7:c9:80:f2:6d:04: 76:14:2a:92:b9:39:dd:0e:85:df:8e:9b:e4:e7:cc: f4:26:a7:87:4a:12:e2:72:9a:9b:11:f4:74:8f:87: 0e:a0:94:55:0b:b6:7d:ab:b4:fc:d8:a2:b0:c2:01: 40:c6:f4:15:45:a2:62:81:39:69:8b:a1:2e:8f:50: ea:50:9c:20:27:62:8b:e8:f1:8e:39:27:8e:f0:0d: 56:c8:4f:8c:66:dc:30:5e:f7:60:ec:3c:e8:ca:aa: 1f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:61:9D:F4:1A:6E:12:49:CE:13:8C:D3:C8:C9:02:D4:32:BE:F1:FE X509v3 Authority Key Identifier: keyid:23:7B:7D:4C:A8:4A:26:D5:FC:49:58:D4:81:91:F3:6A:14:BC:7A:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:ef:52:3a:54:1a:cf:be:b5:60:97:f3:2f:51:d7:49:33:04: f3:e9:a1:ef:04:2f:3f:2f:9d:db:d9:d6:37:bc:a0:d0:3a:fe: 7a:d5:aa:4a:cf:ec:62:9c:99:cb:ef:1b:19:ac:84:ac:97:67: 02:99:18:ab:c2:81:7b:43:f0:66:ca:3a:db:b2:15:2d:ec:e6: 3c:7d:5c:0e:c6:b1:79:c9:b9:72:37:d0:37:4f:8d:09:7a:c0: 01:b2:f0:b6:10:00:1f:df:56:6a:c4:fb:98:06:78:e8:ee:75: 7b:2a:f6:1b:43:92:e4:c4:d2:93:9f:96:1f:05:48:67:89:1d: 4e:96:b0:8d:a4:78:db:43:1f:fd:98:14:35:d9:f7:e7:02:99: 44:cc:fe:c3:71:ee:ac:d8:d6:5d:85:2d:9e:e8:a1:5a:b8:f0: 55:c2:01:e1:32:5c:07:6f:a9:88:b5:ca:cf:76:80:62:23:63: 63:b1:35:32:fa:9c:ff:0c:17:05:58:0e:c9:cf:d5:77:a9:a1: 77:95:83:b6:1c:5c:9b:6a:0c:ee:6a:e1:49:64:6f:59:79:6e: de:88:65:c0:52:3f:3c:5d:10:29:c9:37:7a:77:5f:9e:74:6a: f2:66:31:51:b0:73:37:93:92:ce:d3:43:d0:5c:0e:b1:18:f1: 7f:5f:0b:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI2RjgxMTAvBgNVBAUTKDIzN0I3RDRDQTg0QTI2RDVGQzQ5NThENDgxOTFGMzZB MTRCQzdBMkYwHhcNMjUwODIzMDIzMDA3WhcNMjUwODMwMDIzMDA3WjAYMRYwFAYD VQQDEw02OGE5MjdiMC0wZGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwjSQxhSAiXj3r0xlcbFNXt1DqvRs4qxssI+eVpT5u32g4i3N93R7XlRq26vb I7K5GsCbV0HX4SZobU67kdG0U3OMy19msQgx48ofczdBVbllpUNNLx+7tdYwoCC+ 3dqqM4O6Pn1/I4KT7t/HJuLpEMzOy0OYM3kG5uYQAno7bTV4tUkOFiQewv5JO+lr h06POOLOgaKx9tuF8t9hLhTHyYDybQR2FCqSuTndDoXfjpvk58z0JqeHShLicpqb EfR0j4cOoJRVC7Z9q7T82KKwwgFAxvQVRaJigTlpi6Euj1DqUJwgJ2KL6PGOOSeO 8A1WyE+MZtwwXvdg7DzoyqofsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEVhnfQa bhJJzhOM08jJAtQyvvH+MB8GA1UdIwQYMBaAFCN7fUyoSibV/ElY1IGR82oUvHov MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjZGOC81NjJDM0NCNDcy NEUxMUVEOEUyMDY3M0VDNEY5QUUwMi9JM3Q5VEtoS0p0WDhTVmpVZ1pIemFoUzhl aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0kzdDlUS2hLSnRYOFNWalVnWkh6YWhTOGVpOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjZGOC81NjJDM0NCNDcyNEUxMUVEOEUyMDY3M0VDNEY5QUUwMi9JM3Q5VEtoS0p0 WDhTVmpVZ1pIemFoUzhlaTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAV71I6VBrPvrVgl/MvUddJMwTz6aHvBC8/L53b2dY3vKDQOv561apK z+xinJnL7xsZrISsl2cCmRirwoF7Q/BmyjrbshUt7OY8fVwOxrF5yblyN9A3T40J esABsvC2EAAf31ZqxPuYBnjo7nV7KvYbQ5LkxNKTn5YfBUhniR1OlrCNpHjbQx/9 mBQ12ffnAplEzP7Dce6s2NZdhS2e6KFauPBVwgHhMlwHb6mItcrPdoBiI2NjsTUy +pz/DBcFWA7Jz9V3qaF3lYO2HFybagzuauFJZG9ZeW7eiGXAUj88XRApyTd6d1+e dGryZjFRsHM3k5LO00PQXA6xGPF/Xwvk -----END CERTIFICATE-----Generated at Sat Aug 23 20:33:47 2025 by rpki-client