$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft File: AkIpyBrDU1oh1g4twyqbiL1q2B8.mft (raw, json) Hash identifier: btvJznvNyo99awg2YIFtJpJPCxIvduM7CmV6VhcZ338= Subject key identifier: B2:48:77:85:B7:BB:49:4B:CD:EB:68:EF:22:79:8A:C6:7E:A0:5D:27 Authority key identifier: 02:42:29:C8:1A:C3:53:5A:21:D6:0E:2D:C3:2A:9B:88:BD:6A:D8:1F Certificate issuer: /CN=A91A0848/serialNumber=024229C81AC3535A21D60E2DC32A9B88BD6AD81F Certificate serial: 0207 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft Manifest number: 01F4 Signing time: Sat 19 Jul 2025 02:48:04 +0000 Manifest this update: Sat 19 Jul 2025 02:48:03 +0000 Manifest next update: Sat 26 Jul 2025 02:48:03 +0000 Files and hashes: 1: AkIpyBrDU1oh1g4twyqbiL1q2B8.crl (hash: vIg/wUJlIO0cSNRZnu/PgXI8ggO1RzF0xT8Lrqd3gmE=) 2: 0FBB769A5DDB11EEAEEA437DC4F9AE02.roa (hash: uKjzis/CrgsSg2LUM/lsbZTCdaGZHhh4O1b0+pc2P3M=) 3: B9D00D3C195A11EE83248835C4F9AE02.roa (hash: wCL8taH4LIUOWXKWcvReDaNZ3+NnYlOsUT+x4rsuWPo=) 4: DE56B490143611EEAB1A5D73C4F9AE02.roa (hash: 3IVp9MXxKURZzAWVcJ2+aQ10UWSD+/QnsDWHqJYEcQI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.crl rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:48:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 519 (0x207) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0848, serialNumber=024229C81AC3535A21D60E2DC32A9B88BD6AD81F Validity Not Before: Jul 19 02:48:03 2025 GMT Not After : Jul 26 02:48:03 2025 GMT Subject: CN=687b0764-3b07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ba:07:a2:cc:46:f4:46:ec:33:cd:c9:a8:48: 19:60:e0:44:2b:1d:48:a9:f3:a7:26:cd:9c:87:5b: 50:78:5c:fe:06:73:6a:12:5f:df:cd:81:65:7d:4d: 91:2c:a7:a9:7a:35:7f:ec:10:c1:53:5f:01:7a:b5: 66:61:86:1b:6e:5a:7b:b7:94:bb:df:2b:84:f7:98: 0b:39:1d:2b:1f:ee:f5:3b:05:71:f6:c5:2c:df:c3: 57:96:83:2f:4e:66:a7:84:cb:c5:00:33:71:b4:40: 15:a2:30:6c:4a:41:26:03:0d:7f:a5:4d:4b:30:a2: 97:99:aa:e0:86:14:ac:b4:6d:45:c6:38:30:01:ea: 28:77:51:35:5e:73:64:58:c2:74:1a:35:29:19:aa: 52:90:5c:50:b6:51:0a:02:a0:a4:c6:2d:83:5a:e9: 5e:b3:4d:55:8b:f4:93:53:c3:4a:c4:93:1b:d0:a3: 9e:c9:00:97:5a:12:82:aa:32:f4:e1:b5:6e:8f:ea: 75:05:95:17:81:79:50:dc:37:c0:84:8c:d7:cf:76: aa:ae:e6:a8:33:d9:a5:37:23:b2:db:77:40:ef:e7: ac:c1:0a:72:9c:a9:26:46:61:f3:5d:5a:29:72:e3: 0a:40:ed:11:93:61:3e:38:a6:77:3a:3d:4c:98:36: 77:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:48:77:85:B7:BB:49:4B:CD:EB:68:EF:22:79:8A:C6:7E:A0:5D:27 X509v3 Authority Key Identifier: keyid:02:42:29:C8:1A:C3:53:5A:21:D6:0E:2D:C3:2A:9B:88:BD:6A:D8:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:3f:04:72:a9:fd:48:e2:e2:82:16:a3:f8:14:28:cd:40:b7: 90:c6:01:18:df:ac:f9:c7:38:e2:eb:7e:79:e3:c1:37:24:83: 4d:b8:d6:ce:4d:2d:e5:5e:86:1d:16:c6:08:10:5c:c9:02:95: 53:73:99:1b:52:96:af:77:75:71:94:fd:18:0a:ba:d5:29:c6: fd:89:cc:91:65:26:5d:05:e9:93:33:66:81:4d:f9:e0:e7:29: 38:8f:04:ef:5c:81:f3:9f:b6:e6:5c:1a:db:cc:78:59:5e:67: 77:9b:b6:dc:75:2a:82:aa:4e:d3:77:11:6d:2b:31:d8:bc:26: 9e:23:37:dd:43:72:46:1c:4a:69:b9:21:0d:cf:96:89:0f:37: 58:2a:43:28:05:71:85:ae:8b:e8:c6:76:d9:18:df:b3:db:1f: c1:7c:e7:8f:d9:d1:95:f3:a7:bd:dc:76:86:0f:79:06:a5:de: 59:ec:36:5c:d7:78:ac:cf:3f:c0:4e:26:38:a9:89:90:73:e4: 21:9e:7c:da:9a:6c:f7:ae:6f:e0:6a:ff:fd:8b:6a:00:13:fd: b1:de:09:ab:0d:9c:db:04:fc:f6:1f:67:0e:ce:ca:f6:92:dc: 19:56:85:60:e5:79:73:da:c3:2a:02:17:38:73:d2:b1:05:4f: a9:fe:53:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA4NDgxMTAvBgNVBAUTKDAyNDIyOUM4MUFDMzUzNUEyMUQ2MEUyREMzMkE5Qjg4 QkQ2QUQ4MUYwHhcNMjUwNzE5MDI0ODAzWhcNMjUwNzI2MDI0ODAzWjAYMRYwFAYD VQQDEw02ODdiMDc2NC0zYjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwboHosxG9EbsM83JqEgZYOBEKx1IqfOnJs2ch1tQeFz+BnNqEl/fzYFlfU2R LKepejV/7BDBU18BerVmYYYbblp7t5S73yuE95gLOR0rH+71OwVx9sUs38NXloMv TmanhMvFADNxtEAVojBsSkEmAw1/pU1LMKKXmarghhSstG1FxjgwAeood1E1XnNk WMJ0GjUpGapSkFxQtlEKAqCkxi2DWules01Vi/STU8NKxJMb0KOeyQCXWhKCqjL0 4bVuj+p1BZUXgXlQ3DfAhIzXz3aqruaoM9mlNyOy23dA7+eswQpynKkmRmHzXVop cuMKQO0Rk2E+OKZ3Oj1MmDZ3twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLJId4W3 u0lLzeto7yJ5isZ+oF0nMB8GA1UdIwQYMBaAFAJCKcgaw1NaIdYOLcMqm4i9atgf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDg0OC82NEQ4QjFERTc3 RTQxMUVEOTdGNTkzNERDNEY5QUUwMi9Ba0lweUJyRFUxb2gxZzR0d3lxYmlMMXEy QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FrSXB5QnJEVTFvaDFnNHR3eXFiaUwxcTJCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDg0OC82NEQ4QjFERTc3RTQxMUVEOTdGNTkzNERDNEY5QUUwMi9Ba0lweUJyRFUx b2gxZzR0d3lxYmlMMXEyQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmPwRyqf1I4uKCFqP4FCjNQLeQxgEY36z5xzji635548E3JINNuNbO TS3lXoYdFsYIEFzJApVTc5kbUpavd3VxlP0YCrrVKcb9icyRZSZdBemTM2aBTfng 5yk4jwTvXIHzn7bmXBrbzHhZXmd3m7bcdSqCqk7TdxFtKzHYvCaeIzfdQ3JGHEpp uSENz5aJDzdYKkMoBXGFrovoxnbZGN+z2x/BfOeP2dGV86e93HaGD3kGpd5Z7DZc 13iszz/ATiY4qYmQc+Qhnnzammz3rm/gav/9i2oAE/2x3gmrDZzbBPz2H2cOzsr2 ktwZVoVg5Xlz2sMqAhc4c9KxBU+p/lOV -----END CERTIFICATE-----Generated at Sun Jul 20 19:03:23 2025 by rpki-client