$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft File: IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft (raw, json) Hash identifier: nIX5ijh+ZtTtofexJHBgoKQpnUhLKMzRwEXCfZ18bL8= Subject key identifier: 99:54:B4:95:A3:CB:F9:7E:E8:36:7F:CD:23:94:27:C1:EB:3D:8D:D2 Authority key identifier: 21:F7:13:C8:08:BC:D1:4B:FC:BC:CF:D4:62:73:C2:0E:D0:7B:41:07 Certificate issuer: /CN=A91E8B44/serialNumber=21F713C808BCD14BFCBCCFD46273C20ED07B4107 Certificate serial: 051A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfcTyAi80Uv8vM_UYnPCDtB7QQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft Manifest number: 0514 Signing time: Fri 22 Aug 2025 23:48:14 +0000 Manifest this update: Fri 22 Aug 2025 23:48:14 +0000 Manifest next update: Fri 29 Aug 2025 23:48:14 +0000 Files and hashes: 1: IfcTyAi80Uv8vM_UYnPCDtB7QQc.crl (hash: WlqQ73KzUpizRdF69c9qx6W8weF4QFVnkOJRu0G16CA=) 2: 6084E4F217E811EC8A22700DC4F9AE02.roa (hash: /RmAWe3bm7uFqeMNb4uaNurOTOXrUZgieKkDs6gSDuQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.crl rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfcTyAi80Uv8vM_UYnPCDtB7QQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1306 (0x51a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8B44, serialNumber=21F713C808BCD14BFCBCCFD46273C20ED07B4107 Validity Not Before: Aug 22 23:48:14 2025 GMT Not After : Aug 29 23:48:14 2025 GMT Subject: CN=68a901be-dd01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:85:90:db:39:b9:8c:78:5f:9a:ef:cd:82:72: 9c:ff:a6:dd:82:4c:ef:51:10:90:7d:6f:c1:06:4e: 38:43:75:00:2c:29:89:89:1c:47:a2:a2:86:96:08: 52:47:64:89:70:86:7a:d7:ca:21:c4:28:f1:9d:72: 5b:29:f4:d5:68:98:3a:0c:85:91:aa:79:46:c4:f6: 9d:46:09:88:60:b8:b4:2b:c6:fe:92:b4:8d:37:af: 78:69:b6:dd:f3:a6:ab:1e:29:3b:97:43:2a:c7:07: 4a:7b:03:93:f9:7e:fa:06:e7:65:78:94:fa:89:bc: e2:22:d9:9f:30:82:6d:e5:1b:98:f0:60:29:7f:f6: d4:16:bb:3d:54:d0:a0:d4:87:e8:92:e0:93:28:fb: d7:54:39:c4:f0:16:de:99:4c:aa:c8:73:ce:63:ba: 96:95:b9:e2:a2:1a:af:7c:8c:e1:ce:8a:6a:eb:0f: 0c:4a:5a:41:9f:f1:95:f5:dc:d6:22:0c:02:ea:69: aa:d7:e1:fe:d5:cb:b6:45:d9:f6:e4:7c:66:08:06: c5:f3:e4:ab:10:42:58:8a:c7:50:08:7e:1d:3f:ae: f1:e1:14:14:f0:dc:9e:1a:c2:06:82:9f:bf:17:fc: 99:b1:5e:36:ad:33:4b:71:b0:7d:c6:46:52:7b:55: 3e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:54:B4:95:A3:CB:F9:7E:E8:36:7F:CD:23:94:27:C1:EB:3D:8D:D2 X509v3 Authority Key Identifier: keyid:21:F7:13:C8:08:BC:D1:4B:FC:BC:CF:D4:62:73:C2:0E:D0:7B:41:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfcTyAi80Uv8vM_UYnPCDtB7QQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:f2:21:12:df:9b:24:ab:d5:27:5e:5b:e5:0b:98:ff:e5:88: 7e:c2:bf:68:22:ee:18:bc:a6:e6:8f:bb:26:32:77:2b:a6:fe: a2:68:9c:4b:00:a1:13:32:e2:ac:15:f0:43:18:0a:c3:64:4b: 57:cf:28:23:bc:ae:7f:ca:cc:31:07:75:b5:d8:e6:9a:76:f8: 39:2a:5b:9f:8a:f5:aa:21:5a:19:00:6b:b4:3e:a0:bf:e0:ef: e9:e7:c4:72:7d:73:9e:82:c2:dc:23:7f:28:92:d7:25:c1:8f: 5f:1b:0b:33:f4:6d:e6:e2:7c:2d:e0:d9:7f:a7:11:96:82:23: 1a:25:b5:0d:6d:f3:d0:dd:f6:6c:e5:88:95:24:c2:32:6d:5c: ca:a4:74:ed:f9:c8:4f:9f:48:07:76:d2:79:34:cb:61:7b:fe: 41:ec:99:c5:17:ad:44:5c:c6:32:89:50:12:91:52:47:5d:ca: da:ef:95:ba:d1:f1:77:a8:cf:41:3c:c6:32:6d:96:92:dc:df: 95:64:2c:fe:1b:e3:8c:72:47:5e:c9:ad:e4:fa:04:f0:1c:90: 55:73:ea:8c:7d:80:4e:49:eb:70:eb:da:bb:99:2a:93:ea:7b: 5e:0d:59:cf:30:be:b1:7d:7d:93:5e:67:bd:c2:fb:e1:6d:92: 2b:3e:cf:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThCNDQxMTAvBgNVBAUTKDIxRjcxM0M4MDhCQ0QxNEJGQ0JDQ0ZENDYyNzNDMjBF RDA3QjQxMDcwHhcNMjUwODIyMjM0ODE0WhcNMjUwODI5MjM0ODE0WjAYMRYwFAYD VQQDEw02OGE5MDFiZS1kZDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4YWQ2zm5jHhfmu/NgnKc/6bdgkzvURCQfW/BBk44Q3UALCmJiRxHoqKGlghS R2SJcIZ618ohxCjxnXJbKfTVaJg6DIWRqnlGxPadRgmIYLi0K8b+krSNN694abbd 86arHik7l0MqxwdKewOT+X76BudleJT6ibziItmfMIJt5RuY8GApf/bUFrs9VNCg 1IfokuCTKPvXVDnE8BbemUyqyHPOY7qWlbniohqvfIzhzopq6w8MSlpBn/GV9dzW IgwC6mmq1+H+1cu2Rdn25HxmCAbF8+SrEEJYisdQCH4dP67x4RQU8NyeGsIGgp+/ F/yZsV42rTNLcbB9xkZSe1U+OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJlUtJWj y/l+6DZ/zSOUJ8HrPY3SMB8GA1UdIwQYMBaAFCH3E8gIvNFL/LzP1GJzwg7Qe0EH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEI0NC9GM0IxNjRBQzE3 RTQxMUVDOUI4ODQ2ODVDNEY5QUUwMi9JZmNUeUFpODBVdjh2TV9VWW5QQ0R0QjdR UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lmY1R5QWk4MFV2OHZNX1VZblBDRHRCN1FRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEI0NC9GM0IxNjRBQzE3RTQxMUVDOUI4ODQ2ODVDNEY5QUUwMi9JZmNUeUFpODBV djh2TV9VWW5QQ0R0QjdRUWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCd8iES35skq9UnXlvlC5j/5Yh+wr9oIu4YvKbmj7smMncrpv6iaJxL AKETMuKsFfBDGArDZEtXzygjvK5/yswxB3W12Oaadvg5KlufivWqIVoZAGu0PqC/ 4O/p58RyfXOegsLcI38oktclwY9fGwsz9G3m4nwt4Nl/pxGWgiMaJbUNbfPQ3fZs 5YiVJMIybVzKpHTt+chPn0gHdtJ5NMthe/5B7JnFF61EXMYyiVASkVJHXcra75W6 0fF3qM9BPMYybZaS3N+VZCz+G+OMckdeya3k+gTwHJBVc+qMfYBOSetw69q7mSqT 6nteDVnPML6xfX2TXme9wvvhbZIrPs8I -----END CERTIFICATE-----Generated at Sat Aug 23 19:11:15 2025 by rpki-client