$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft File: IQlGzanedd75YJiV-_Ie2Exy9Oc.mft (raw, json) Hash identifier: 8dHVpEOj1Q7081qGuIGaNvT4GDGyxqYYaMJ0MxQ1dU8= Subject key identifier: B8:A5:5D:FB:51:37:A8:3F:B2:0C:26:27:5A:EE:87:8B:11:2C:BC:12 Authority key identifier: 21:09:46:CD:A9:DE:75:DE:F9:60:98:95:FB:F2:1E:D8:4C:72:F4:E7 Certificate issuer: /CN=A91F7537/serialNumber=210946CDA9DE75DEF9609895FBF21ED84C72F4E7 Certificate serial: 92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQlGzanedd75YJiV-_Ie2Exy9Oc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft Manifest number: 91 Signing time: Sat 23 Aug 2025 06:42:39 +0000 Manifest this update: Sat 23 Aug 2025 06:42:38 +0000 Manifest next update: Sat 30 Aug 2025 06:42:38 +0000 Files and hashes: 1: IQlGzanedd75YJiV-_Ie2Exy9Oc.crl (hash: zk1Q0zZ3VKldovuGwLZGCfdM+Y9WxCP2ZGiI0HaA6II=) 2: 6156C7F6A27311EFBF7D5E22C4F9AE02.roa (hash: S974N0P9f8Bg6Jc7BIscRXeUqpVDlIBE/NP1Bo0j0PA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.crl rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQlGzanedd75YJiV-_Ie2Exy9Oc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:42:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 146 (0x92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7537, serialNumber=210946CDA9DE75DEF9609895FBF21ED84C72F4E7 Validity Not Before: Aug 23 06:42:38 2025 GMT Not After : Aug 30 06:42:38 2025 GMT Subject: CN=68a962df-ccb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:08:6a:83:63:13:43:f2:05:da:ef:c9:1c:d1: 44:71:a0:7a:c3:49:0f:38:c1:e9:08:0d:3b:6f:a6: 68:b0:90:e1:c5:61:36:40:f3:98:4a:33:fe:7a:c4: 40:a1:b4:ea:9e:0a:d6:f8:b7:01:05:75:ed:b0:06: 5b:d6:8b:a6:1e:07:33:ad:ce:3d:27:03:e0:ff:c7: fa:5f:a9:8d:8f:e5:a6:fd:21:bc:b1:0b:b0:44:fe: ab:f1:d0:8c:d4:4d:4f:3a:40:b3:62:34:a3:c4:67: 07:52:a4:7a:35:b7:0b:e3:65:c1:f6:d4:bb:ca:b8: ac:5a:a9:8f:fe:d2:d0:62:41:cc:81:ab:3a:e0:7c: 49:1c:47:e3:e8:41:1b:70:a4:a9:fe:76:09:91:95: a1:2d:0e:d2:be:e5:c1:fc:7f:8a:b1:51:a9:f8:04: 1f:b2:5f:bf:e8:a4:10:6c:f5:37:14:75:3e:d6:5f: cb:30:7a:88:d9:50:08:42:dd:a9:d4:cb:1b:eb:3b: e6:7b:8e:79:f0:09:5f:ee:30:89:30:1e:77:2f:5e: 23:eb:59:f4:9f:3c:43:a1:2e:1f:0a:23:80:3f:56: ad:39:b7:da:01:a8:d8:86:39:5b:89:30:52:24:6c: 1a:db:a0:63:8e:fb:06:b7:a4:71:fe:99:0d:ee:53: 57:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:A5:5D:FB:51:37:A8:3F:B2:0C:26:27:5A:EE:87:8B:11:2C:BC:12 X509v3 Authority Key Identifier: keyid:21:09:46:CD:A9:DE:75:DE:F9:60:98:95:FB:F2:1E:D8:4C:72:F4:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQlGzanedd75YJiV-_Ie2Exy9Oc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:39:3e:10:13:0f:54:26:3e:bd:b2:c4:24:b2:18:b0:55:90: 79:66:1a:97:84:e4:bd:b6:fe:c8:e4:d0:db:1a:4f:70:93:7b: 39:28:65:c2:ff:f2:65:3a:66:28:81:55:1e:59:7e:31:b2:47: cc:ba:7b:54:cb:ab:88:0b:5c:3f:c2:fc:4e:1c:a4:01:d3:33: 01:85:41:21:dd:a4:eb:7a:a4:c6:db:84:e4:e1:43:d2:f9:80: 82:76:18:7f:15:58:2e:78:3e:a0:81:e1:26:75:3e:31:45:d4: d4:5e:81:b1:42:6a:cf:ce:0b:4f:44:dd:c6:a4:25:45:25:3a: 35:3a:6e:c7:0e:86:b7:01:63:56:55:b5:f9:68:a7:1e:0f:de: a2:c9:4e:93:68:c2:2b:e7:b6:a2:e9:09:cf:19:9c:4a:59:de: 55:5e:c6:9a:f9:89:0e:3f:28:da:e6:0e:71:85:df:1e:84:f8: 90:62:32:8a:82:e4:b6:64:af:70:8b:a2:62:ef:b6:c0:9e:fa: 54:d4:1e:72:0f:08:41:15:01:79:33:57:8e:5d:48:6c:cd:d8: ec:4a:c0:6d:8e:e9:3e:bc:91:00:78:de:35:df:77:eb:1e:2f: 41:8f:99:93:73:96:71:23:5f:19:e9:46:61:64:82:ad:f0:b5: 0f:3b:75:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc1MzcxMTAvBgNVBAUTKDIxMDk0NkNEQTlERTc1REVGOTYwOTg5NUZCRjIxRUQ4 NEM3MkY0RTcwHhcNMjUwODIzMDY0MjM4WhcNMjUwODMwMDY0MjM4WjAYMRYwFAYD VQQDEw02OGE5NjJkZi1jY2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoAhqg2MTQ/IF2u/JHNFEcaB6w0kPOMHpCA07b6ZosJDhxWE2QPOYSjP+esRA obTqngrW+LcBBXXtsAZb1oumHgczrc49JwPg/8f6X6mNj+Wm/SG8sQuwRP6r8dCM 1E1POkCzYjSjxGcHUqR6NbcL42XB9tS7yrisWqmP/tLQYkHMgas64HxJHEfj6EEb cKSp/nYJkZWhLQ7SvuXB/H+KsVGp+AQfsl+/6KQQbPU3FHU+1l/LMHqI2VAIQt2p 1Msb6zvme4558Alf7jCJMB53L14j61n0nzxDoS4fCiOAP1atObfaAajYhjlbiTBS JGwa26BjjvsGt6Rx/pkN7lNXTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLilXftR N6g/sgwmJ1ruh4sRLLwSMB8GA1UdIwQYMBaAFCEJRs2p3nXe+WCYlfvyHthMcvTn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzUzNy84N0RENTQ4Q0Ey NzExMUVGQTM5MkYwNzlDNEY5QUUwMi9JUWxHemFuZWRkNzVZSmlWLV9JZTJFeHk5 T2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lRbEd6YW5lZGQ3NVlKaVYtX0llMkV4eTlPYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzUzNy84N0RENTQ4Q0EyNzExMUVGQTM5MkYwNzlDNEY5QUUwMi9JUWxHemFuZWRk NzVZSmlWLV9JZTJFeHk5T2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdOT4QEw9UJj69ssQkshiwVZB5ZhqXhOS9tv7I5NDbGk9wk3s5KGXC //JlOmYogVUeWX4xskfMuntUy6uIC1w/wvxOHKQB0zMBhUEh3aTreqTG24Tk4UPS +YCCdhh/FVgueD6ggeEmdT4xRdTUXoGxQmrPzgtPRN3GpCVFJTo1Om7HDoa3AWNW VbX5aKceD96iyU6TaMIr57ai6QnPGZxKWd5VXsaa+YkOPyja5g5xhd8ehPiQYjKK guS2ZK9wi6Ji77bAnvpU1B5yDwhBFQF5M1eOXUhszdjsSsBtjuk+vJEAeN4133fr Hi9Bj5mTc5ZxI18Z6UZhZIKt8LUPO3XR -----END CERTIFICATE-----Generated at Sat Aug 23 21:23:03 2025 by rpki-client