$ rpki-client -vvf rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft File: IYqKoFAmewgF4_3IqTm_j7ywAQE.mft (raw, json) Hash identifier: OYVtfa75VZiw/mP+CnNR3jSNJDPbS+uc4Ty5qGrSyM8= Subject key identifier: 81:91:25:67:3E:CB:D7:1E:F0:05:87:AB:64:E0:65:47:AB:D6:39:5E Authority key identifier: 21:8A:8A:A0:50:26:7B:08:05:E3:FD:C8:A9:39:BF:8F:BC:B0:01:01 Certificate issuer: /CN=A91406AA/serialNumber=218A8AA050267B0805E3FDC8A939BF8FBCB00101 Certificate serial: 06BC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft Manifest number: 0691 Signing time: Fri 18 Jul 2025 22:44:33 +0000 Manifest this update: Fri 18 Jul 2025 22:44:32 +0000 Manifest next update: Fri 25 Jul 2025 22:44:32 +0000 Files and hashes: 1: IYqKoFAmewgF4_3IqTm_j7ywAQE.crl (hash: g3mtBQB4pTanhlbsumX6K0WeV6yCY/3wGEtXdw8Vc00=) 2: 7C7AE9B4A69D11ED970A2E1EC4F9AE02.roa (hash: fUw04+Wc6xwoR+YVBY/WLsyng9md/GVTmSyZYwr11zk=) 3: EC545C28A72B11EDAC3DA56CC4F9AE02.roa (hash: MudkEdFQa6C+ndTjapkqJTQJnMUjbCojJJWyr2cOnbw=) 4: 7EACD6DEA69D11ED970A2E1EC4F9AE02.roa (hash: FzGeC1HGFQjInv7a/tzBBidCqJ5ESeD9M5yJI45g108=) 5: 7DFD24A0A69D11ED970A2E1EC4F9AE02.roa (hash: UXLNG/TKlOwe92B54U28A9vIc0yRc2k66x6iSMWRkzk=) 6: A08AFBB284F211EE89828225C4F9AE02.roa (hash: o0/UmqHBu35TkHikAhbVdhXHi+7hDM8lM9U+g+mEr/c=) 7: ECF2B5A8A72B11EDAC3DA56CC4F9AE02.roa (hash: +kGit6QP9EC8on4uBAyo05LK37M52pka8uD91XBHy+Y=) 8: 7BD18B9EA69D11ED970A2E1EC4F9AE02.roa (hash: G/rvtZ5T81L1+Ut1wIh+MKSJ0KMlgkIN/JGVODcTotI=) 9: EDA092C2A72B11EDAC3DA56CC4F9AE02.roa (hash: 9LXbAzt0/EsGKbz7o7F/OwWTWmMVBzVo73DTWxXTguw=) 10: 7D4AEECAA69D11ED970A2E1EC4F9AE02.roa (hash: 0R2F7phEKy5EqIJBVAvo5pb/1NzWEpCwpH92++JGH9o=) 11: 005CDC821F1411EC85E08546C4F9AE02.roa (hash: 2LEw81p+Fk53aVNuSL1CxAKcvp9Ob9XvQt2+L6XI7mo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.crl rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 22:44:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1724 (0x6bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91406AA, serialNumber=218A8AA050267B0805E3FDC8A939BF8FBCB00101 Validity Not Before: Jul 18 22:44:32 2025 GMT Not After : Jul 25 22:44:32 2025 GMT Subject: CN=687ace51-b599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8c:19:7c:1b:2b:53:c3:06:97:f3:9c:86:8f: 71:2a:0c:78:d0:dc:1d:8d:89:32:d1:95:f0:65:e1: 2b:22:b8:c1:88:8e:fc:c2:e0:0e:59:76:11:11:71: f8:2f:1a:8c:96:88:c6:cb:e0:28:c9:12:e1:d0:0a: 97:84:55:46:55:e2:59:e4:c2:cc:97:64:1f:7a:6c: 8f:5a:d9:df:34:e1:a1:7a:07:a3:16:b8:89:db:48: 60:51:d2:c4:e1:d0:d2:34:3d:a3:9e:f3:cb:5f:0e: b9:75:31:3f:24:80:cd:71:95:96:a5:31:8f:3c:f0: ac:02:79:27:83:42:4f:82:2e:d8:1e:3c:6e:53:d0: d6:10:72:b6:d0:fb:46:e1:a6:e9:ce:c2:cd:24:3d: a5:22:c2:f7:9e:75:8e:94:79:04:bf:e3:57:0c:06: 39:14:7e:ee:fb:c4:10:e4:d9:e8:4a:e5:2a:93:4f: fe:d3:76:32:10:2f:aa:6a:35:6a:1c:67:44:d6:f4: 0b:79:8e:89:37:bb:46:1a:f7:ff:92:d2:a3:ee:68: fb:44:14:d6:4e:92:6c:21:2c:97:22:0e:57:95:dd: 5b:48:fb:45:51:99:2c:ad:1b:d0:08:0c:6b:55:1f: d9:a1:3a:32:e8:70:2a:0b:6f:51:9d:ab:88:61:b1: 9f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:91:25:67:3E:CB:D7:1E:F0:05:87:AB:64:E0:65:47:AB:D6:39:5E X509v3 Authority Key Identifier: keyid:21:8A:8A:A0:50:26:7B:08:05:E3:FD:C8:A9:39:BF:8F:BC:B0:01:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:20:d0:bf:39:97:74:3e:98:bb:bc:91:c3:d3:91:a1:d6:ef: 17:86:61:7a:44:13:dc:db:26:1b:8f:aa:b9:17:ed:2a:72:17: fb:e4:38:c1:83:87:9e:9e:3e:f5:61:20:43:25:8c:3e:0b:8d: 96:f1:21:6c:d2:13:2d:7d:c6:4f:5a:d0:06:45:bc:e5:bb:fe: 43:60:c9:fa:92:18:bb:12:63:1f:fb:18:69:58:f6:f7:1d:50: e4:5b:c9:9b:9e:e2:f0:a7:94:6e:5b:8c:f2:d2:5d:f6:65:2a: 50:f3:9b:fb:6e:66:59:9b:b6:18:90:1f:cb:73:11:72:a5:09: d7:dd:bb:36:96:01:e5:47:67:83:e7:47:8f:0e:10:25:57:73: f9:2f:85:09:e7:4c:5d:74:1a:a7:fd:9f:bd:cc:e1:19:8f:e9: 72:d8:f2:7a:7b:8b:95:45:41:78:e0:c1:6a:56:a9:59:f0:45: 29:90:81:7e:96:d8:79:7d:41:39:48:77:e0:8b:a8:85:91:c0: 2f:a2:49:54:5f:c4:d8:5b:89:62:e7:16:5f:dd:b2:f5:5a:dd: 5f:f8:dc:35:c3:20:dd:94:b9:0f:5b:64:48:7a:62:35:87:85: 3e:b6:b9:b4:8c:39:33:6c:7c:18:d2:dd:de:e1:9e:a0:d8:db: 4e:9a:35:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA2QUExMTAvBgNVBAUTKDIxOEE4QUEwNTAyNjdCMDgwNUUzRkRDOEE5MzlCRjhG QkNCMDAxMDEwHhcNMjUwNzE4MjI0NDMyWhcNMjUwNzI1MjI0NDMyWjAYMRYwFAYD VQQDEw02ODdhY2U1MS1iNTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArowZfBsrU8MGl/Ocho9xKgx40NwdjYky0ZXwZeErIrjBiI78wuAOWXYREXH4 LxqMlojGy+AoyRLh0AqXhFVGVeJZ5MLMl2QfemyPWtnfNOGhegejFriJ20hgUdLE 4dDSND2jnvPLXw65dTE/JIDNcZWWpTGPPPCsAnkng0JPgi7YHjxuU9DWEHK20PtG 4abpzsLNJD2lIsL3nnWOlHkEv+NXDAY5FH7u+8QQ5NnoSuUqk0/+03YyEC+qajVq HGdE1vQLeY6JN7tGGvf/ktKj7mj7RBTWTpJsISyXIg5Xld1bSPtFUZksrRvQCAxr VR/ZoToy6HAqC29RnauIYbGf7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIGRJWc+ y9ce8AWHq2TgZUer1jleMB8GA1UdIwQYMBaAFCGKiqBQJnsIBeP9yKk5v4+8sAEB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDZBQS84NjU4RTQ2Njg2 QzExMUVCQkFCMzE4NEJDNEY5QUUwMi9JWXFLb0ZBbWV3Z0Y0XzNJcVRtX2o3eXdB UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lZcUtvRkFtZXdnRjRfM0lxVG1fajd5d0FRRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDZBQS84NjU4RTQ2Njg2QzExMUVCQkFCMzE4NEJDNEY5QUUwMi9JWXFLb0ZBbWV3 Z0Y0XzNJcVRtX2o3eXdBUUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnINC/OZd0Ppi7vJHD05Gh1u8XhmF6RBPc2yYbj6q5F+0qchf75DjB g4eenj71YSBDJYw+C42W8SFs0hMtfcZPWtAGRbzlu/5DYMn6khi7EmMf+xhpWPb3 HVDkW8mbnuLwp5RuW4zy0l32ZSpQ85v7bmZZm7YYkB/LcxFypQnX3bs2lgHlR2eD 50ePDhAlV3P5L4UJ50xddBqn/Z+9zOEZj+ly2PJ6e4uVRUF44MFqVqlZ8EUpkIF+ lth5fUE5SHfgi6iFkcAvoklUX8TYW4li5xZf3bL1Wt1f+Nw1wyDdlLkPW2RIemI1 h4U+trm0jDkzbHwY0t3e4Z6g2NtOmjVe -----END CERTIFICATE-----Generated at Sun Jul 20 16:39:20 2025 by rpki-client