$ rpki-client -vvf rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft File: I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft (raw, json) Hash identifier: e9UEBSH5H3ofJhEsN2Q1d3T5NmGaqIp9vcmsDzLe37M= Subject key identifier: 51:A3:4B:BD:A4:E8:EF:59:28:91:BB:A1:E8:5D:E9:41:B4:3C:66:6E Authority key identifier: 23:B9:60:37:AB:8A:D2:37:E6:32:6F:7E:D0:F8:1E:31:8E:8A:14:AB Certificate issuer: /CN=A91E892A/serialNumber=23B96037AB8AD237E6326F7ED0F81E318E8A14AB Certificate serial: 1921 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft Manifest number: 1917 Signing time: Fri 22 Aug 2025 16:32:10 +0000 Manifest this update: Fri 22 Aug 2025 16:32:10 +0000 Manifest next update: Fri 29 Aug 2025 16:32:10 +0000 Files and hashes: 1: I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl (hash: uK3ywJsn/wZeBvGxTC6dgwyL1I3hoQ91hSqVhTAVqCI=) 2: D421D958881611E78B9B0850C4F9AE02.roa (hash: CS+09tEdeSx7uIOBkaLSiPeVYQX/xw7ybPJk0cnYVHY=) 3: D57C98A88C0311EFAA53FF12C4F9AE02.roa (hash: mbcYtTY7pzkjLAPzzBYkqLR1semAFFI9aiFhIVq/OQg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:32:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6433 (0x1921) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E892A, serialNumber=23B96037AB8AD237E6326F7ED0F81E318E8A14AB Validity Not Before: Aug 22 16:32:10 2025 GMT Not After : Aug 29 16:32:10 2025 GMT Subject: CN=68a89b8a-afb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:79:e7:11:18:52:03:79:a0:01:af:ba:c6:68: f7:03:05:ca:d9:e7:52:99:e1:a5:ff:78:20:c7:25: 5b:78:d7:b8:55:bf:a7:35:fb:07:e4:34:6d:c8:88: 0a:40:e3:ff:00:93:b9:04:14:70:92:78:a0:85:cd: cd:6e:45:18:91:31:bd:ce:45:c7:fb:b6:45:77:19: 6f:db:47:af:84:a5:d2:3c:ce:a4:cb:75:09:3a:e5: f1:17:b7:9f:5c:7f:ab:8a:79:0a:da:10:b2:ab:54: ee:73:14:fd:f2:f4:8e:51:9c:a3:a1:f5:fd:d5:ba: a9:da:72:02:5e:56:11:84:a4:02:62:f8:da:70:ae: 7d:5e:3c:7d:00:dd:8d:cc:7a:d4:6c:d9:a2:d8:f7: 49:fb:e0:98:32:d0:d5:3c:47:4e:c9:15:6a:44:c0: c7:e1:31:f8:14:15:dd:7e:08:1d:d1:f2:66:e2:2d: 4c:d1:9c:04:7b:ec:5a:b1:79:ae:94:14:7d:e1:0b: 4a:de:c5:26:4f:01:17:d7:a9:5b:96:51:6a:ac:17: 45:9a:36:1b:12:53:b5:a3:24:eb:22:dc:eb:04:c0: 2d:57:21:d5:d0:1a:1a:97:27:74:7d:02:72:a0:e9: 60:0d:39:7c:ad:ec:3a:23:55:75:83:23:5a:30:61: b2:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:A3:4B:BD:A4:E8:EF:59:28:91:BB:A1:E8:5D:E9:41:B4:3C:66:6E X509v3 Authority Key Identifier: keyid:23:B9:60:37:AB:8A:D2:37:E6:32:6F:7E:D0:F8:1E:31:8E:8A:14:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:4c:5d:e0:ab:d8:64:ca:c3:a8:79:ed:7f:61:f8:5a:b6:2b: 97:37:8e:b0:ac:2b:f7:0f:47:d1:a9:18:66:87:35:9a:c8:5d: 50:74:43:0d:94:ed:1c:bd:b9:a3:b7:76:de:52:86:a5:8b:37: bf:2e:7a:16:ee:ff:db:7b:7a:2d:b2:32:a4:44:e5:5b:b5:5a: a0:a8:14:1a:2f:90:d5:5f:62:7c:96:86:67:fd:60:30:a9:f0: fc:4e:6b:32:0c:7f:0c:26:8c:85:cd:d9:d4:83:92:f2:83:a5: ad:05:fb:e8:75:39:a5:e2:18:a7:87:06:43:ad:7b:4c:ea:8e: 52:ed:b4:73:d8:0b:49:68:65:93:3d:46:b0:6d:25:a1:db:20: 26:99:a6:ef:f0:9a:6e:4d:5f:7d:15:d3:4a:13:ad:6a:38:f7: f3:70:b9:ac:f0:14:63:92:03:9b:74:92:70:6f:6d:df:cb:d8: b7:22:8f:4d:aa:fd:90:6b:2e:aa:93:da:1d:75:7e:12:69:81: 85:67:c1:aa:f5:4e:e6:c5:43:50:bc:9f:69:e9:ef:ab:9b:a9: e6:03:fe:b7:dd:48:0a:6f:e9:43:0f:78:44:0f:78:f7:b4:ee: 77:ae:96:db:6b:a6:70:1f:f5:33:fd:48:ae:f3:2d:f2:f4:0b: 1a:f2:a3:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGSEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg5MkExMTAvBgNVBAUTKDIzQjk2MDM3QUI4QUQyMzdFNjMyNkY3RUQwRjgxRTMx OEU4QTE0QUIwHhcNMjUwODIyMTYzMjEwWhcNMjUwODI5MTYzMjEwWjAYMRYwFAYD VQQDEw02OGE4OWI4YS1hZmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtnnnERhSA3mgAa+6xmj3AwXK2edSmeGl/3ggxyVbeNe4Vb+nNfsH5DRtyIgK QOP/AJO5BBRwknighc3NbkUYkTG9zkXH+7ZFdxlv20evhKXSPM6ky3UJOuXxF7ef XH+rinkK2hCyq1TucxT98vSOUZyjofX91bqp2nICXlYRhKQCYvjacK59Xjx9AN2N zHrUbNmi2PdJ++CYMtDVPEdOyRVqRMDH4TH4FBXdfggd0fJm4i1M0ZwEe+xasXmu lBR94QtK3sUmTwEX16lbllFqrBdFmjYbElO1oyTrItzrBMAtVyHV0Boalyd0fQJy oOlgDTl8rew6I1V1gyNaMGGyrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFGjS72k 6O9ZKJG7oehd6UG0PGZuMB8GA1UdIwQYMBaAFCO5YDeritI35jJvftD4HjGOihSr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODkyQS9GODEwRTlBNDg4 MTUxMUU3OEJGN0QxNEVDNEY5QUUwMi9JN2xnTjZ1SzBqZm1NbTktMFBnZU1ZNktG S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k3bGdONnVLMGpmbU1tOS0wUGdlTVk2S0ZLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODkyQS9GODEwRTlBNDg4MTUxMUU3OEJGN0QxNEVDNEY5QUUwMi9JN2xnTjZ1SzBq Zm1NbTktMFBnZU1ZNktGS3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+TF3gq9hkysOoee1/YfhatiuXN46wrCv3D0fRqRhmhzWayF1QdEMN lO0cvbmjt3beUoalize/LnoW7v/be3otsjKkROVbtVqgqBQaL5DVX2J8loZn/WAw qfD8TmsyDH8MJoyFzdnUg5Lyg6WtBfvodTml4hinhwZDrXtM6o5S7bRz2AtJaGWT PUawbSWh2yAmmabv8JpuTV99FdNKE61qOPfzcLms8BRjkgObdJJwb23fy9i3Io9N qv2Qay6qk9oddX4SaYGFZ8Gq9U7mxUNQvJ9p6e+rm6nmA/633UgKb+lDD3hED3j3 tO53rpbba6ZwH/Uz/Uiu8y3y9Asa8qMW -----END CERTIFICATE-----Generated at Sun Aug 24 07:01:54 2025 by rpki-client