$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft File: IWrR11qT4DeulPbJGJbS1YLY_1Q.mft (raw, json) Hash identifier: oLEDzDzQpWCvb4NVBr9qE9RPqEWrQOJG4A2K2vk7vmY= Subject key identifier: 79:24:26:F2:28:31:B9:1B:7A:63:7D:69:49:60:01:2C:B6:07:34:14 Authority key identifier: 21:6A:D1:D7:5A:93:E0:37:AE:94:F6:C9:18:96:D2:D5:82:D8:FF:54 Certificate issuer: /CN=A91FDDD1/serialNumber=216AD1D75A93E037AE94F6C91896D2D582D8FF54 Certificate serial: 018F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft Manifest number: 0181 Signing time: Sat 23 Aug 2025 03:48:51 +0000 Manifest this update: Sat 23 Aug 2025 03:48:51 +0000 Manifest next update: Sat 30 Aug 2025 03:48:51 +0000 Files and hashes: 1: IWrR11qT4DeulPbJGJbS1YLY_1Q.crl (hash: R64lo5ItAzMpfp5jyTDlxLu1zy3xrVsVhLRHdiN9jD8=) 2: 838096CA3BD311EE84056461C4F9AE02.roa (hash: MRW+pxq2rIQWqz0eewlHDxgHTLGzIYysThVYJrp2BDc=) 3: 27DB37683BD211EE8094355FC4F9AE02.roa (hash: Fv5yzaRaYXm7EcaxJ9d0RT5up4myTdlO4UPvIXp3L88=) 4: 82C54A1E3BD311EE84056461C4F9AE02.roa (hash: mGJXgF/PKI9FEq/cPxsdqAyVl2gi74HVL2n1gwNWhDo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.crl rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:48:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 399 (0x18f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDDD1, serialNumber=216AD1D75A93E037AE94F6C91896D2D582D8FF54 Validity Not Before: Aug 23 03:48:51 2025 GMT Not After : Aug 30 03:48:51 2025 GMT Subject: CN=68a93a23-db85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4e:c1:be:88:9f:87:9b:f0:7b:69:79:2c:03: d5:2c:1a:13:6f:fc:ce:49:01:3f:de:bb:1b:12:f8: f3:16:a4:e5:da:5a:b6:e9:dc:29:ec:d9:a6:c7:1f: 68:9d:31:97:7a:6c:d6:a3:db:58:69:ea:ca:9e:ef: 0e:11:a6:89:95:31:a3:65:21:de:36:0b:99:81:47: 39:42:d8:63:7d:0b:91:99:fe:46:94:0c:a5:44:1b: ac:83:5b:01:b3:0a:ee:87:9f:14:cb:00:7c:26:8d: c8:3d:e0:1b:f9:92:1c:98:6b:54:a0:29:96:11:09: 59:84:6f:e8:2a:50:90:a9:a1:a2:17:f1:d1:56:76: 52:8c:45:e2:ca:5e:64:9e:a0:e1:5c:7b:4e:57:81: 0f:93:3a:ae:29:ba:07:f0:93:a5:e7:4e:91:be:b7: 93:a6:00:c1:cc:0f:2f:79:e7:29:e5:8c:e2:3e:c0: 2a:50:63:ce:71:94:9f:00:7f:9e:5a:3e:61:7b:6c: f6:e0:36:ec:8b:7a:0d:37:7c:fc:69:02:f7:d8:44: 99:a1:b2:28:22:1e:a1:ae:aa:d7:dc:81:cb:43:8e: 2a:b7:d1:f4:63:86:93:0d:bf:80:b2:ef:96:99:17: ab:0b:63:3e:7f:17:37:3b:af:32:a8:aa:1b:21:ae: ca:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:24:26:F2:28:31:B9:1B:7A:63:7D:69:49:60:01:2C:B6:07:34:14 X509v3 Authority Key Identifier: keyid:21:6A:D1:D7:5A:93:E0:37:AE:94:F6:C9:18:96:D2:D5:82:D8:FF:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:e6:aa:6d:fa:a9:38:3f:51:c8:73:1a:f3:42:04:2b:79:73: 16:29:03:3d:3b:20:2a:00:78:e5:d7:68:b9:01:9c:5a:99:9f: b0:78:0e:7b:fb:45:07:90:2e:34:c3:d1:cf:84:18:de:e1:8f: 55:60:2d:74:01:4b:04:6d:8e:1a:fa:68:ff:31:b9:61:f9:f3: b2:d5:2f:0e:45:00:51:88:8a:99:2a:11:5e:c2:35:df:e4:55: 02:d1:77:2c:35:bb:6e:57:05:ec:f5:9e:c1:02:c2:b1:4f:95: 73:86:26:a9:ad:60:e8:66:04:16:7e:c9:bc:9a:83:0d:16:d9: 87:5b:72:54:ae:1e:78:8b:0d:64:3c:8c:e0:6d:24:66:dd:62: 20:c9:6c:f3:7a:48:1a:5a:09:2c:29:b2:6e:37:89:af:59:bb: 7d:aa:94:d6:ed:21:48:7e:8f:66:2e:04:90:2a:11:5d:4a:a7: 9f:dd:6a:33:b8:69:08:39:be:d0:2d:21:ec:fe:be:72:de:b5: dc:d5:4b:45:63:04:c1:4b:c7:fc:6f:5f:dc:96:e6:2a:04:55: 61:69:73:50:04:4c:2e:21:ca:33:1c:8d:cb:c6:d1:0f:85:db: 06:3d:61:9a:53:94:e3:f5:ae:2a:d9:b7:b7:ea:8c:b2:ed:09: e8:d6:9e:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRERDExMTAvBgNVBAUTKDIxNkFEMUQ3NUE5M0UwMzdBRTk0RjZDOTE4OTZEMkQ1 ODJEOEZGNTQwHhcNMjUwODIzMDM0ODUxWhcNMjUwODMwMDM0ODUxWjAYMRYwFAYD VQQDEw02OGE5M2EyMy1kYjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu07Bvoifh5vwe2l5LAPVLBoTb/zOSQE/3rsbEvjzFqTl2lq26dwp7Nmmxx9o nTGXemzWo9tYaerKnu8OEaaJlTGjZSHeNguZgUc5QthjfQuRmf5GlAylRBusg1sB swruh58UywB8Jo3IPeAb+ZIcmGtUoCmWEQlZhG/oKlCQqaGiF/HRVnZSjEXiyl5k nqDhXHtOV4EPkzquKboH8JOl506RvreTpgDBzA8veecp5YziPsAqUGPOcZSfAH+e Wj5he2z24Dbsi3oNN3z8aQL32ESZobIoIh6hrqrX3IHLQ44qt9H0Y4aTDb+Asu+W mRerC2M+fxc3O68yqKobIa7KIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHkkJvIo MbkbemN9aUlgASy2BzQUMB8GA1UdIwQYMBaAFCFq0ddak+A3rpT2yRiW0tWC2P9U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREREMS82OEMxRDQ5NjNC RDAxMUVFOEJBQzM1MUFDNEY5QUUwMi9JV3JSMTFxVDREZXVsUGJKR0piUzFZTFlf MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lXclIxMXFUNERldWxQYkpHSmJTMVlMWV8xUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REREMS82OEMxRDQ5NjNCRDAxMUVFOEJBQzM1MUFDNEY5QUUwMi9JV3JSMTFxVDRE ZXVsUGJKR0piUzFZTFlfMVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCT5qpt+qk4P1HIcxrzQgQreXMWKQM9OyAqAHjl12i5AZxamZ+weA57 +0UHkC40w9HPhBje4Y9VYC10AUsEbY4a+mj/Mblh+fOy1S8ORQBRiIqZKhFewjXf 5FUC0XcsNbtuVwXs9Z7BAsKxT5VzhiaprWDoZgQWfsm8moMNFtmHW3JUrh54iw1k PIzgbSRm3WIgyWzzekgaWgksKbJuN4mvWbt9qpTW7SFIfo9mLgSQKhFdSqef3Woz uGkIOb7QLSHs/r5y3rXc1UtFYwTBS8f8b1/cluYqBFVhaXNQBEwuIcozHI3LxtEP hdsGPWGaU5Tj9a4q2be36oyy7Qno1p5i -----END CERTIFICATE-----Generated at Sat Aug 23 19:14:04 2025 by rpki-client