$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft File: ixqAZb6Iqmwbo_7bVOCH59KttN4.mft (raw, json) Hash identifier: 3CZdjCg8EXdLewD6HX2c3yfhNk3q+tJa2/UMqYTPcJc= Subject key identifier: 75:62:47:8A:4B:F9:1D:DA:30:11:AF:F5:8C:46:B8:AE:DC:20:2B:92 Authority key identifier: 8B:1A:80:65:BE:88:AA:6C:1B:A3:FE:DB:54:E0:87:E7:D2:AD:B4:DE Certificate issuer: /CN=A91DC068/serialNumber=8B1A8065BE88AA6C1BA3FEDB54E087E7D2ADB4DE Certificate serial: 011B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixqAZb6Iqmwbo_7bVOCH59KttN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft Manifest number: 0117 Signing time: Sat 23 Aug 2025 05:00:30 +0000 Manifest this update: Sat 23 Aug 2025 05:00:30 +0000 Manifest next update: Sat 30 Aug 2025 05:00:30 +0000 Files and hashes: 1: ixqAZb6Iqmwbo_7bVOCH59KttN4.crl (hash: +MBms5DO/vQXWK+xDwanuVF0dDqIIlwtuO5Wt1K9k9c=) 2: 4DDA8A18D5DD11EEA5B1C711C4F9AE02.roa (hash: FHRlsB48eK0jdLR0VwZXrRd3F+Rj548sH8y8zKsy5+s=) 3: 4D69D2D2D5DD11EEA5B1C711C4F9AE02.roa (hash: PAO2tzUE6VhuIQPWRUUuXZiVK/zRgbkDyCoIJqVq33M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.crl rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixqAZb6Iqmwbo_7bVOCH59KttN4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 283 (0x11b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC068, serialNumber=8B1A8065BE88AA6C1BA3FEDB54E087E7D2ADB4DE Validity Not Before: Aug 23 05:00:30 2025 GMT Not After : Aug 30 05:00:30 2025 GMT Subject: CN=68a94aee-b19e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:65:78:57:73:34:72:bd:f7:52:a3:77:5c:f1: 60:bb:e1:37:e2:ba:fc:44:58:26:45:b5:c0:a3:90: 73:cb:7a:b4:de:c6:46:fc:e9:82:fa:5e:0f:18:f8: ef:9a:0a:33:ab:e2:46:1f:6c:93:ec:e0:1f:0a:74: a6:7a:e5:82:07:95:20:5c:02:74:90:94:b2:99:0b: b7:b6:e6:03:7b:00:ad:88:6d:a8:fc:cc:c8:6d:da: 45:16:f7:7f:8e:45:df:99:75:43:98:c4:7d:9e:90: 4b:09:bc:3a:23:14:ac:69:91:a5:0c:5a:b6:a1:c5: 5a:9f:73:44:94:c5:ec:e4:74:fb:b9:71:cb:81:85: 0e:6f:47:05:d4:ea:ec:c3:e4:da:73:e7:09:b7:57: 8b:96:d5:4a:7a:e7:15:26:52:d6:8a:9e:7e:75:f9: e0:eb:5d:9a:4b:91:8b:02:b1:1b:ba:97:84:f7:84: ee:6f:1b:6d:40:de:c1:d0:08:96:8f:fc:19:fe:0f: ce:26:fa:fc:3f:8b:57:9d:78:17:42:f2:ea:da:a0: bf:af:e6:20:f2:50:09:ba:d6:c7:4f:53:55:fc:c9: b8:5b:8b:c7:fd:c9:9b:b6:06:7b:00:69:ca:6d:a7: c6:c2:dd:2c:cc:a0:29:23:9b:d2:73:bc:65:e4:50: 0e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:62:47:8A:4B:F9:1D:DA:30:11:AF:F5:8C:46:B8:AE:DC:20:2B:92 X509v3 Authority Key Identifier: keyid:8B:1A:80:65:BE:88:AA:6C:1B:A3:FE:DB:54:E0:87:E7:D2:AD:B4:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixqAZb6Iqmwbo_7bVOCH59KttN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:33:2e:fb:66:3e:e7:fe:77:45:60:5e:78:94:d6:74:bd:f4: 13:40:16:97:63:ac:3b:60:2b:a7:5a:0d:68:b6:1e:29:1b:56: 73:de:df:87:08:eb:28:82:a3:66:28:10:84:98:8b:54:f2:43: c6:f4:94:ce:bc:0f:f7:79:f7:7b:f8:f8:77:1a:eb:14:10:81: 34:34:0d:28:7b:8b:63:5c:41:15:12:bd:ac:de:87:64:27:ef: 4f:67:11:35:8d:91:ce:9a:ef:f3:50:38:71:ab:29:47:3a:c8: b5:e2:41:31:fe:a8:d2:00:c4:38:71:f6:d3:29:a6:01:e4:22: 97:dc:02:78:b1:d8:35:b1:c9:4c:cd:5e:31:4b:57:94:cc:a1: a0:9a:18:0d:bf:81:ad:c4:8b:f7:34:23:86:69:cd:bd:ff:d3: f0:3b:ce:29:8a:a9:f8:28:e7:cc:7c:0c:72:fc:47:14:20:fa: 82:da:44:54:47:82:a6:a7:94:ee:2d:16:aa:b3:02:59:d1:28: c2:33:fd:83:1d:96:fb:f9:48:38:7c:cd:7a:bf:84:d9:0b:7e: 34:d6:00:7a:5f:c8:5c:56:cb:86:d3:57:d7:1c:90:8a:b9:04: 10:c1:bc:01:ca:33:b3:20:d6:12:d0:ab:c6:11:ca:d5:a5:03: 15:7e:96:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwNjgxMTAvBgNVBAUTKDhCMUE4MDY1QkU4OEFBNkMxQkEzRkVEQjU0RTA4N0U3 RDJBREI0REUwHhcNMjUwODIzMDUwMDMwWhcNMjUwODMwMDUwMDMwWjAYMRYwFAYD VQQDEw02OGE5NGFlZS1iMTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw2V4V3M0cr33UqN3XPFgu+E34rr8RFgmRbXAo5Bzy3q03sZG/OmC+l4PGPjv mgozq+JGH2yT7OAfCnSmeuWCB5UgXAJ0kJSymQu3tuYDewCtiG2o/MzIbdpFFvd/ jkXfmXVDmMR9npBLCbw6IxSsaZGlDFq2ocVan3NElMXs5HT7uXHLgYUOb0cF1Ors w+Tac+cJt1eLltVKeucVJlLWip5+dfng612aS5GLArEbupeE94TubxttQN7B0AiW j/wZ/g/OJvr8P4tXnXgXQvLq2qC/r+Yg8lAJutbHT1NV/Mm4W4vH/cmbtgZ7AGnK bafGwt0szKApI5vSc7xl5FAO7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHViR4pL +R3aMBGv9YxGuK7cICuSMB8GA1UdIwQYMBaAFIsagGW+iKpsG6P+21Tgh+fSrbTe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzA2OC9ENzdCOUQ2NkQ1 QzQxMUVFODlDMTk3MERDNEY5QUUwMi9peHFBWmI2SXFtd2JvXzdiVk9DSDU5S3R0 TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2l4cUFaYjZJcW13Ym9fN2JWT0NINTlLdHRONC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzA2OC9ENzdCOUQ2NkQ1QzQxMUVFODlDMTk3MERDNEY5QUUwMi9peHFBWmI2SXFt d2JvXzdiVk9DSDU5S3R0TjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRMy77Zj7n/ndFYF54lNZ0vfQTQBaXY6w7YCunWg1oth4pG1Zz3t+H COsogqNmKBCEmItU8kPG9JTOvA/3efd7+Ph3GusUEIE0NA0oe4tjXEEVEr2s3odk J+9PZxE1jZHOmu/zUDhxqylHOsi14kEx/qjSAMQ4cfbTKaYB5CKX3AJ4sdg1sclM zV4xS1eUzKGgmhgNv4GtxIv3NCOGac29/9PwO84piqn4KOfMfAxy/EcUIPqC2kRU R4Kmp5TuLRaqswJZ0SjCM/2DHZb7+Ug4fM16v4TZC3401gB6X8hcVsuG01fXHJCK uQQQwbwByjOzINYS0KvGEcrVpQMVfpZc -----END CERTIFICATE-----Generated at Sat Aug 23 10:41:03 2025 by rpki-client