$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft File: rI34tAewexNnm3HFASus3eJQHnE.mft (raw, json) Hash identifier: +ltJyizatcbsBb5KF/cU7PqWDOdfuxDsWA+iqB0be3g= Subject key identifier: 75:14:BA:5A:9B:CC:1F:3E:BF:5D:0D:C5:30:74:EE:87:A9:D5:4C:6B Authority key identifier: AC:8D:F8:B4:07:B0:7B:13:67:9B:71:C5:01:2B:AC:DD:E2:50:1E:71 Certificate issuer: /CN=A91FC43D/serialNumber=AC8DF8B407B07B13679B71C5012BACDDE2501E71 Certificate serial: 22D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rI34tAewexNnm3HFASus3eJQHnE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft Manifest number: 22C6 Signing time: Fri 22 Aug 2025 15:54:08 +0000 Manifest this update: Fri 22 Aug 2025 15:54:07 +0000 Manifest next update: Fri 29 Aug 2025 15:54:07 +0000 Files and hashes: 1: rI34tAewexNnm3HFASus3eJQHnE.crl (hash: 7AslvP7I5xehq2KkGeK13ftL18XwbuNIKelUZb9S64Q=) 2: 2D55F42CB0F611E5B464E359C4F9AE02.roa (hash: +yqS5ARpGMGBWr2MyFGiajoFZUJV/KOEs+STzodgJKg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.crl rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rI34tAewexNnm3HFASus3eJQHnE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:54:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8917 (0x22d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC43D, serialNumber=AC8DF8B407B07B13679B71C5012BACDDE2501E71 Validity Not Before: Aug 22 15:54:07 2025 GMT Not After : Aug 29 15:54:07 2025 GMT Subject: CN=68a8929f-f753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:49:09:52:54:cb:1f:2f:07:be:af:e2:65:3b: e2:89:9d:63:af:32:3d:41:18:ee:5a:d0:be:a6:a5: bf:61:1e:61:22:cc:52:ff:c0:49:76:f4:d1:df:d4: 29:58:51:2c:8f:ad:4e:b3:06:89:af:07:f0:e1:7b: 44:c7:65:20:c0:15:24:ab:f7:3d:f4:42:7b:f6:52: 85:ea:c6:ec:96:af:4a:95:9a:8e:4c:b9:9b:bd:70: 70:56:b1:33:7a:f4:6f:67:30:5c:14:bb:c2:6b:e1: 06:97:3e:c4:8f:10:91:4d:c0:60:f5:9e:f7:6b:fb: 16:3c:fd:e6:e3:72:46:59:f2:ef:6e:36:5d:c1:fc: e8:22:c3:62:9e:cc:16:98:92:02:fd:59:c2:15:8e: 87:32:7d:48:ca:5e:7a:93:0b:25:71:cd:f3:a0:5d: 57:dc:27:9c:53:42:03:ad:04:34:dc:af:20:a7:12: e9:fb:72:86:6b:38:d8:58:7c:c1:50:c0:4d:d9:bb: 17:c7:06:0e:e6:8f:d3:8e:d2:00:22:3a:b3:cd:ee: 02:25:c6:b5:8c:0d:3b:f6:1d:bf:38:30:16:3f:83: 29:5a:73:22:3b:04:69:76:ef:4a:b9:02:1b:6b:e2: b3:3d:de:15:ee:dd:7a:83:55:f1:48:61:cd:d8:4a: a2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:14:BA:5A:9B:CC:1F:3E:BF:5D:0D:C5:30:74:EE:87:A9:D5:4C:6B X509v3 Authority Key Identifier: keyid:AC:8D:F8:B4:07:B0:7B:13:67:9B:71:C5:01:2B:AC:DD:E2:50:1E:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rI34tAewexNnm3HFASus3eJQHnE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:1f:9b:fa:8a:43:9d:0a:95:c3:a0:7f:1f:28:0b:e3:82:2f: 09:f4:28:61:6f:d8:31:52:2b:2b:f0:a3:af:03:c1:13:ab:d2: b3:8e:12:37:4c:91:5d:33:7b:f4:59:7c:62:96:95:15:6c:4b: fb:d2:e9:00:2a:a4:d0:98:ea:84:92:68:b0:fe:b0:37:c7:3d: 46:ab:c3:60:8f:a7:b9:32:c2:1f:a2:16:f4:b8:30:f8:f2:42: 24:a9:13:92:57:b8:83:a7:61:97:12:33:ea:cd:7a:1a:53:7b: c5:99:31:00:dc:38:3e:b3:f1:ee:d4:25:95:22:21:ed:f0:32: b9:4b:e2:46:63:46:1b:35:42:bb:d6:45:ad:04:de:74:c0:d3: 52:e0:d2:d8:28:64:6e:31:18:ac:e7:2c:e9:7d:81:17:d7:94: b7:25:da:62:ff:f5:42:40:32:bb:8a:0c:bc:6f:5a:e1:46:bf: 88:83:e8:3d:dc:8e:81:85:53:de:ea:01:b7:99:e1:4b:cd:ec: 30:53:d9:c2:1f:82:2a:56:92:0b:99:27:2e:2d:e1:d7:2d:83: f5:0b:b8:a4:e0:20:4b:97:bb:94:e8:a8:de:14:c4:4b:34:06: d4:a0:45:73:c8:0b:9b:71:12:82:96:f9:81:f8:65:c6:31:b9: 41:34:25:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICItUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM0M0QxMTAvBgNVBAUTKEFDOERGOEI0MDdCMDdCMTM2NzlCNzFDNTAxMkJBQ0RE RTI1MDFFNzEwHhcNMjUwODIyMTU1NDA3WhcNMjUwODI5MTU1NDA3WjAYMRYwFAYD VQQDEw02OGE4OTI5Zi1mNzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAykkJUlTLHy8Hvq/iZTviiZ1jrzI9QRjuWtC+pqW/YR5hIsxS/8BJdvTR39Qp WFEsj61OswaJrwfw4XtEx2UgwBUkq/c99EJ79lKF6sbslq9KlZqOTLmbvXBwVrEz evRvZzBcFLvCa+EGlz7EjxCRTcBg9Z73a/sWPP3m43JGWfLvbjZdwfzoIsNinswW mJIC/VnCFY6HMn1Iyl56kwslcc3zoF1X3CecU0IDrQQ03K8gpxLp+3KGazjYWHzB UMBN2bsXxwYO5o/TjtIAIjqzze4CJca1jA079h2/ODAWP4MpWnMiOwRpdu9KuQIb a+KzPd4V7t16g1XxSGHN2EqinQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHUUulqb zB8+v10NxTB07oep1UxrMB8GA1UdIwQYMBaAFKyN+LQHsHsTZ5txxQErrN3iUB5x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzQzRC9FREIyOEU3RUE0 ODAxMUU1ODMzNzg4ODZDNEY5QUUwMi9ySTM0dEFld2V4Tm5tM0hGQVN1czNlSlFI bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JJMzR0QWV3ZXhObm0zSEZBU3VzM2VKUUhuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzQzRC9FREIyOEU3RUE0ODAxMUU1ODMzNzg4ODZDNEY5QUUwMi9ySTM0dEFld2V4 Tm5tM0hGQVN1czNlSlFIbkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPH5v6ikOdCpXDoH8fKAvjgi8J9Chhb9gxUisr8KOvA8ETq9KzjhI3 TJFdM3v0WXxilpUVbEv70ukAKqTQmOqEkmiw/rA3xz1Gq8Ngj6e5MsIfohb0uDD4 8kIkqROSV7iDp2GXEjPqzXoaU3vFmTEA3Dg+s/Hu1CWVIiHt8DK5S+JGY0YbNUK7 1kWtBN50wNNS4NLYKGRuMRis5yzpfYEX15S3Jdpi//VCQDK7igy8b1rhRr+Ig+g9 3I6BhVPe6gG3meFLzewwU9nCH4IqVpILmScuLeHXLYP1C7ik4CBLl7uU6KjeFMRL NAbUoEVzyAubcRKClvmB+GXGMblBNCWU -----END CERTIFICATE-----Generated at Sat Aug 23 21:30:04 2025 by rpki-client