$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.mft File: iUgJYwlWkkOCzDnUYPpHZLAXWTQ.mft (raw, json) Hash identifier: F6NXb17AiTF+L58Lbfwe8JwPqwLhEeBNpIQEbYzdBu0= Subject key identifier: 24:2D:2F:FF:FC:94:B0:65:43:F2:CC:5F:FC:28:BC:D3:6E:1D:01:FB Authority key identifier: 89:48:09:63:09:56:92:43:82:CC:39:D4:60:FA:47:64:B0:17:59:34 Certificate issuer: /CN=A91F2046/serialNumber=894809630956924382CC39D460FA4764B0175934 Certificate serial: 0C23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.mft Manifest number: 0C1C Signing time: Fri 22 Aug 2025 18:48:58 +0000 Manifest this update: Fri 22 Aug 2025 18:48:57 +0000 Manifest next update: Fri 29 Aug 2025 18:48:57 +0000 Files and hashes: 1: iUgJYwlWkkOCzDnUYPpHZLAXWTQ.crl (hash: pBQm6jn4bVca0lx87JwObNu5808k8EV7eODWdhQ7kG0=) 2: 0D2573FA173E11EA947B2976C4F9AE02.roa (hash: LIAL0RVUWvTNgpPqawClJ1GtfpOkeD0nFPnq/+uTw9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.crl rsync://rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:48:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3107 (0xc23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2046, serialNumber=894809630956924382CC39D460FA4764B0175934 Validity Not Before: Aug 22 18:48:57 2025 GMT Not After : Aug 29 18:48:57 2025 GMT Subject: CN=68a8bb9a-422b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7d:43:65:5f:c6:d1:59:5d:26:20:7a:ec:a8: 97:10:a0:6d:99:b0:bb:ef:cb:f5:a0:c5:0f:72:71: df:1b:06:86:5a:44:e0:1a:e0:80:a7:94:57:7f:3d: 12:81:6c:25:62:30:83:18:28:5e:4b:7f:28:ad:dd: 88:e8:62:3d:f3:4f:b8:e9:55:59:3d:1f:da:f7:18: 80:16:b8:ea:d5:08:bd:8f:f5:54:18:97:52:96:96: 9d:7a:88:11:5e:e7:9c:6e:c7:c1:10:6a:bb:94:50: 9d:5d:9c:66:02:91:c3:66:4e:ab:a0:30:6d:9d:0e: 73:2d:49:4c:b4:07:5e:78:e0:4f:5f:14:9e:6a:77: 31:62:29:61:36:50:91:05:6e:8a:23:78:28:7e:dd: 90:19:c6:8e:e4:e4:f9:bc:07:bc:ff:65:99:1c:31: 86:8f:09:f1:7f:d4:2d:7d:c9:f8:0e:fe:6f:af:86: 55:f6:5c:85:06:5b:48:1e:a2:aa:52:08:84:cc:0f: ea:b0:85:ec:d5:17:15:58:e1:51:3b:ad:c9:a4:76: 33:5a:1b:28:57:ce:0b:d3:fd:c6:0d:6c:0c:86:21: 1c:1d:49:33:e2:0e:bb:cb:6d:bd:39:44:d4:cd:d0: 3f:cc:9d:fc:6d:76:92:e4:ca:5a:3d:fa:41:1a:9b: 3f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:2D:2F:FF:FC:94:B0:65:43:F2:CC:5F:FC:28:BC:D3:6E:1D:01:FB X509v3 Authority Key Identifier: keyid:89:48:09:63:09:56:92:43:82:CC:39:D4:60:FA:47:64:B0:17:59:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:1c:dc:30:ed:14:db:ac:3a:60:34:4a:74:74:53:f6:28:1e: 50:05:d3:23:04:c5:b2:2f:7b:9b:69:d7:83:3d:e1:0d:1d:dc: 28:d8:ca:28:53:cb:f6:e2:ea:83:f9:5b:5b:ea:8c:7d:ff:7c: 3f:6f:e7:bd:31:71:5e:53:67:65:32:54:d6:9f:81:ab:15:db: 3f:4d:f3:1a:8e:0b:2a:b0:15:82:47:68:a6:ed:3f:39:e4:5f: b8:ad:0e:11:8f:00:c0:b0:fa:7c:aa:9b:5a:69:79:ac:40:dd: 05:a7:df:e0:5d:05:72:89:2f:f1:98:f9:0d:56:27:14:c4:44: 0a:6b:a1:79:14:d3:a4:76:43:80:df:10:0a:26:f6:d5:60:94: 3b:a8:94:8c:93:6c:91:3e:6b:4b:c6:a0:7a:0d:4c:ed:6e:51: e8:d1:68:16:5e:a2:10:d5:fa:20:94:96:a3:79:2b:90:bb:7c: ec:f8:06:c8:20:36:5e:33:78:8f:f4:ae:2d:60:78:15:28:25: 45:ad:43:f5:2d:39:2a:d4:7c:fd:8d:70:91:aa:e9:98:f3:fa: 55:aa:87:d2:58:87:45:85:46:75:4d:e3:f8:0f:2b:7a:16:ad: f2:61:28:c2:15:fc:e1:7d:b0:6b:ca:27:03:63:7b:8d:6c:d1: 0a:92:03:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjIwNDYxMTAvBgNVBAUTKDg5NDgwOTYzMDk1NjkyNDM4MkNDMzlENDYwRkE0NzY0 QjAxNzU5MzQwHhcNMjUwODIyMTg0ODU3WhcNMjUwODI5MTg0ODU3WjAYMRYwFAYD VQQDEw02OGE4YmI5YS00MjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuX1DZV/G0VldJiB67KiXEKBtmbC778v1oMUPcnHfGwaGWkTgGuCAp5RXfz0S gWwlYjCDGCheS38ord2I6GI980+46VVZPR/a9xiAFrjq1Qi9j/VUGJdSlpadeogR XuecbsfBEGq7lFCdXZxmApHDZk6roDBtnQ5zLUlMtAdeeOBPXxSeancxYilhNlCR BW6KI3goft2QGcaO5OT5vAe8/2WZHDGGjwnxf9Qtfcn4Dv5vr4ZV9lyFBltIHqKq UgiEzA/qsIXs1RcVWOFRO63JpHYzWhsoV84L0/3GDWwMhiEcHUkz4g67y229OUTU zdA/zJ38bXaS5MpaPfpBGps/VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCQtL//8 lLBlQ/LMX/wovNNuHQH7MB8GA1UdIwQYMBaAFIlICWMJVpJDgsw51GD6R2SwF1k0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjA0Ni8zRkIwMkFFMjE0 RDUxMUVBODEyNjQwMERDNEY5QUUwMi9pVWdKWXdsV2trT0N6RG5VWVBwSFpMQVhX VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lVZ0pZd2xXa2tPQ3pEblVZUHBIWkxBWFdUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjA0Ni8zRkIwMkFFMjE0RDUxMUVBODEyNjQwMERDNEY5QUUwMi9pVWdKWXdsV2tr T0N6RG5VWVBwSFpMQVhXVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVHNww7RTbrDpgNEp0dFP2KB5QBdMjBMWyL3ubadeDPeENHdwo2Moo U8v24uqD+Vtb6ox9/3w/b+e9MXFeU2dlMlTWn4GrFds/TfMajgsqsBWCR2im7T85 5F+4rQ4RjwDAsPp8qptaaXmsQN0Fp9/gXQVyiS/xmPkNVicUxEQKa6F5FNOkdkOA 3xAKJvbVYJQ7qJSMk2yRPmtLxqB6DUztblHo0WgWXqIQ1foglJajeSuQu3zs+AbI IDZeM3iP9K4tYHgVKCVFrUP1LTkq1Hz9jXCRqumY8/pVqofSWIdFhUZ1TeP4Dyt6 Fq3yYSjCFfzhfbBryicDY3uNbNEKkgOM -----END CERTIFICATE-----Generated at Sat Aug 23 20:32:40 2025 by rpki-client