$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft File: i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft (raw, json) Hash identifier: pN4GABa/I/1y5kD5P0kbO2KdgXnW5LAyAgPgqMJq40U= Subject key identifier: 32:53:87:FE:99:74:64:13:CD:DD:D1:62:70:53:44:F8:C4:64:58:F0 Authority key identifier: 8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8 Certificate issuer: /CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8 Certificate serial: 077D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft Manifest number: 06F5 Signing time: Fri 22 Aug 2025 22:34:47 +0000 Manifest this update: Fri 22 Aug 2025 22:34:47 +0000 Manifest next update: Fri 29 Aug 2025 22:34:47 +0000 Files and hashes: 1: i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl (hash: NF5MnXJp3Sx/eFaDriDM6v8LfOhC3GPpB7txT/rVX00=) 2: B7BC1B76506A11EDBB3A804AC4F9AE02.roa (hash: j0xrsPerWvAmq5TrfXCCAXxhmW7uoVGvVR9TrXHmI/c=) 3: 79D30C40BABE11EB825A5D09C4F9AE02.roa (hash: VF1EKdtqMB8DRuSBnFKjSSnE5AI9LEnGrDvhJPYGcJw=) 4: 30CB9694A28911ECBC355360C4F9AE02.roa (hash: iacyWEeXTvXTILxRcADZ+9lCVjiDHQnMplIMRt/73Xk=) 5: 97C79A806C0511EF8B77D10EC4F9AE02.roa (hash: Z/eyVAkA9R8S1+9PHNU8ppbtyyeeA+WhA6oeOKeAzo8=) 6: BB9C14F6AA5511EB86F34077C4F9AE02.roa (hash: bcPbqQLGQnoAzNP2Fmg0TCnc4h72RS0Eli/gU7/zCsQ=) 7: 317095E0A28911ECBC355360C4F9AE02.roa (hash: IjGCmqfeR6dWCwkTJerprQJ5jh4UJlY6ZGEM3z029yo=) 8: 8BB6CB12A4D511EB9E4DF342C4F9AE02.roa (hash: q95wxrZ9LN/HMmU4q1987KOKTt7X/HBomrSB/BVWhIg=) 9: 2AECA58494EE11EE84F9D73CC4F9AE02.roa (hash: I8a2tYdChMy0m+hYeHyoEloBcDOZ+JhPIXTugtfIp8g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:34:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1917 (0x77d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC31B, serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8 Validity Not Before: Aug 22 22:34:47 2025 GMT Not After : Aug 29 22:34:47 2025 GMT Subject: CN=68a8f087-c204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:71:91:08:e9:2e:3a:ee:7f:da:58:5d:b8:51: 8c:58:44:ce:a7:f2:9b:92:be:78:5a:88:23:1c:10: fd:d5:60:18:1b:12:e3:be:13:16:24:79:c1:9e:fb: cb:34:c1:07:a5:09:53:c2:02:87:64:34:82:60:f8: c4:5d:37:93:08:50:30:e7:0c:c9:5b:24:c0:f7:77: 37:0e:68:27:d5:44:34:57:a3:9e:e6:05:02:76:5c: 32:e8:d4:ff:71:dc:4a:38:64:af:66:19:41:5d:93: 88:56:de:81:e5:f8:92:3b:b6:40:a7:cf:ad:24:9c: cd:11:97:3d:7a:01:6b:f3:4d:c7:e9:a0:51:63:ac: 8f:96:a8:18:fe:0e:77:a3:71:f3:85:ed:08:9a:cd: 33:aa:38:c4:ba:80:04:d9:65:10:01:82:12:c0:67: 07:33:b7:21:cf:4e:bc:a5:10:55:1d:69:e0:b9:86: 85:f3:82:6f:11:6a:66:49:4c:17:f2:9a:d0:70:35: 93:ee:96:6e:bb:4a:99:34:ac:eb:dd:16:a6:25:cb: 13:d4:35:0a:eb:60:4b:21:93:0a:8d:63:21:6d:8d: 1a:4e:56:e5:36:43:72:ae:3a:23:e8:0d:a8:46:5c: 04:c6:3a:da:1d:89:a1:fb:6b:1d:6e:8d:ca:ed:59: 54:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:53:87:FE:99:74:64:13:CD:DD:D1:62:70:53:44:F8:C4:64:58:F0 X509v3 Authority Key Identifier: keyid:8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:e5:0c:ba:ad:7b:b6:28:f2:63:ac:bd:14:51:4b:69:22:bc: b0:91:14:46:ed:e0:15:75:69:6e:72:b9:7b:f7:de:70:2e:3f: df:8d:d0:bb:b9:c9:08:eb:f7:4d:07:77:f0:0b:6b:dc:7f:2d: 9e:36:f2:b1:dd:87:1a:39:30:0a:c2:2f:dd:65:bc:65:9a:88: 6e:51:18:94:40:ba:00:85:6d:ac:5c:2a:95:c6:c5:d4:eb:9c: 39:72:1c:2d:9e:3e:4b:e8:a8:a9:4b:b7:7b:e1:23:ec:a5:3c: 80:f8:70:67:51:25:44:11:c1:62:33:c2:ab:b7:ff:91:a8:db: ec:e8:91:c9:69:0a:2b:66:2e:26:e4:35:c1:e4:99:1c:69:47: b2:f6:ae:e0:48:38:36:a6:f0:5f:d0:25:80:e5:1d:eb:da:38: 37:6f:cb:2b:af:6e:70:0d:94:42:e1:fe:19:a3:76:67:b2:21: 37:ef:0d:91:be:4c:eb:a5:9e:7e:fb:c7:fd:cf:9c:3e:06:6a: bc:17:ee:b4:89:49:0e:d9:f9:86:7b:2d:2d:57:2f:e8:c2:2b: de:64:f1:84:8b:04:31:00:d8:4f:96:a4:d1:7d:8e:4c:a4:43: 7e:c7:c5:d9:2c:0c:ac:01:33:65:70:9f:2c:d1:22:98:c2:ea: 43:60:ec:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB30wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMzMUIxMTAvBgNVBAUTKDhCOEFENUNBMUMzRThCOENGNDY4QjVGNDk2QTkxQUJC MEU0OENGQTgwHhcNMjUwODIyMjIzNDQ3WhcNMjUwODI5MjIzNDQ3WjAYMRYwFAYD VQQDEw02OGE4ZjA4Ny1jMjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0XGRCOkuOu5/2lhduFGMWETOp/Kbkr54WogjHBD91WAYGxLjvhMWJHnBnvvL NMEHpQlTwgKHZDSCYPjEXTeTCFAw5wzJWyTA93c3Dmgn1UQ0V6Oe5gUCdlwy6NT/ cdxKOGSvZhlBXZOIVt6B5fiSO7ZAp8+tJJzNEZc9egFr803H6aBRY6yPlqgY/g53 o3Hzhe0Ims0zqjjEuoAE2WUQAYISwGcHM7chz068pRBVHWnguYaF84JvEWpmSUwX 8prQcDWT7pZuu0qZNKzr3RamJcsT1DUK62BLIZMKjWMhbY0aTlblNkNyrjoj6A2o RlwExjraHYmh+2sdbo3K7VlUKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDJTh/6Z dGQTzd3RYnBTRPjEZFjwMB8GA1UdIwQYMBaAFIuK1cocPouM9Gi19JapGrsOSM+o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzMxQi9EMEVDQ0Q0ODg5 M0QxMUVCOTE2REYwMjJDNEY5QUUwMi9pNHJWeWh3LWk0ejBhTFgwbHFrYXV3NUl6 NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2k0clZ5aHctaTR6MGFMWDBscWthdXc1SXo2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzMxQi9EMEVDQ0Q0ODg5M0QxMUVCOTE2REYwMjJDNEY5QUUwMi9pNHJWeWh3LWk0 ejBhTFgwbHFrYXV3NUl6NmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBM5Qy6rXu2KPJjrL0UUUtpIrywkRRG7eAVdWlucrl7995wLj/fjdC7 uckI6/dNB3fwC2vcfy2eNvKx3YcaOTAKwi/dZbxlmohuURiUQLoAhW2sXCqVxsXU 65w5chwtnj5L6KipS7d74SPspTyA+HBnUSVEEcFiM8Krt/+RqNvs6JHJaQorZi4m 5DXB5JkcaUey9q7gSDg2pvBf0CWA5R3r2jg3b8srr25wDZRC4f4Zo3ZnsiE37w2R vkzrpZ5++8f9z5w+Bmq8F+60iUkO2fmGey0tVy/owiveZPGEiwQxANhPlqTRfY5M pEN+x8XZLAysATNlcJ8s0SKYwupDYOwi -----END CERTIFICATE-----Generated at Sat Aug 23 12:30:55 2025 by rpki-client