$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.mft File: iEiqzfKVEwPnCY9BnYygBCKJDGk.mft (raw, json) Hash identifier: JmMvp5eT1OZAY5M0l4e89UyGh5WqMtpK2AdUqpWqxQY= Subject key identifier: 1D:69:13:86:E9:A5:AF:4E:63:DB:DB:CE:AF:AB:CB:D0:49:0A:63:62 Authority key identifier: 88:48:AA:CD:F2:95:13:03:E7:09:8F:41:9D:8C:A0:04:22:89:0C:69 Certificate issuer: /CN=A91A8047/serialNumber=8848AACDF2951303E7098F419D8CA00422890C69 Certificate serial: 97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEiqzfKVEwPnCY9BnYygBCKJDGk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.mft Manifest number: 8E Signing time: Sat 19 Jul 2025 06:50:25 +0000 Manifest this update: Sat 19 Jul 2025 06:50:25 +0000 Manifest next update: Sat 26 Jul 2025 06:50:25 +0000 Files and hashes: 1: iEiqzfKVEwPnCY9BnYygBCKJDGk.crl (hash: iEZvoT0dpIQDy7e4urDxhL8XYkqMraJcBy5nytPRemw=) 2: 029310329B1911EFA0BD6470C4F9AE02.roa (hash: ipUtH6de1n3QDXNmS4idd62IMEQfE9S8Kl6BBzpD9nQ=) 3: 07BAAB7C9B1611EFB5C28465C4F9AE02.roa (hash: ofbztl5uVlglZWvlUxP/w/vzUs13H0jw290VgxrDPX8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.crl rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEiqzfKVEwPnCY9BnYygBCKJDGk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:50:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 151 (0x97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8047, serialNumber=8848AACDF2951303E7098F419D8CA00422890C69 Validity Not Before: Jul 19 06:50:25 2025 GMT Not After : Jul 26 06:50:25 2025 GMT Subject: CN=687b4031-31fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1c:65:31:41:eb:36:b4:21:52:8a:3f:4e:58: 4b:8e:7c:0b:44:e2:10:eb:cd:c5:c2:62:3a:29:43: 2b:15:cc:06:c1:b7:85:b8:fc:59:45:c3:1d:79:b9: 55:d8:ce:8a:13:86:68:f8:0b:4c:20:60:69:55:51: 5d:68:23:00:c0:91:33:91:33:40:b7:46:65:4d:1a: f5:97:18:a4:d1:b3:c9:e8:61:3d:1c:c1:a3:e6:54: d3:9a:63:7b:9c:3e:83:47:de:0f:41:a3:c5:a5:1c: a6:50:38:73:19:7c:06:f1:09:40:f3:0f:48:4f:9c: c2:63:6b:01:72:3f:44:c8:8b:81:92:12:54:9f:41: a3:1f:82:5f:ab:63:f8:6d:e4:7f:d8:bf:f4:be:4c: 31:33:94:50:d7:06:fd:de:a5:38:b6:8a:4c:57:07: e3:fd:d8:eb:b7:cd:92:be:1b:8e:d9:b6:d6:8a:bb: d6:1a:1c:47:7e:41:e1:5d:02:fd:fc:75:6f:68:d5: 3d:14:93:30:6e:12:e6:f8:96:ad:ec:d6:51:5c:93: 19:d5:aa:5e:24:d2:1e:82:69:a1:9d:bf:cc:fd:fd: 33:0b:5f:0a:1a:77:98:07:60:1f:8e:f2:0a:7e:f6: 24:0d:a0:72:b3:56:03:4b:bd:1f:18:90:85:83:aa: 58:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:69:13:86:E9:A5:AF:4E:63:DB:DB:CE:AF:AB:CB:D0:49:0A:63:62 X509v3 Authority Key Identifier: keyid:88:48:AA:CD:F2:95:13:03:E7:09:8F:41:9D:8C:A0:04:22:89:0C:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEiqzfKVEwPnCY9BnYygBCKJDGk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:2e:d8:7a:53:02:c7:5b:15:1b:53:da:3d:8c:9e:c7:25:3f: ae:d5:02:43:94:5a:31:cb:4c:67:24:46:68:37:03:c5:d3:0a: f5:ca:ae:98:ad:2e:7a:09:74:00:fe:08:1f:2c:f7:d4:17:82: d6:f4:f0:c7:34:f4:b0:d1:ec:ff:a1:01:44:cf:83:83:1a:b5: 50:2e:5b:9f:fe:15:ce:bd:d3:cb:b0:8e:6f:fd:8b:e9:f8:80: 2d:45:99:79:29:91:d6:45:5c:9b:93:e4:83:00:37:ae:6d:c8: 48:ad:72:38:f5:fb:9a:75:e3:31:50:50:f8:b6:9b:a3:39:fa: 31:2b:ee:55:b2:cc:90:a9:e8:66:49:be:a5:45:53:1a:87:18: 00:bf:aa:5a:2e:7c:35:ed:ab:81:e4:71:94:5e:93:96:60:3e: b3:40:fe:39:5e:79:f2:e6:b0:6c:15:29:75:70:92:61:f3:57: f3:64:9d:0c:85:95:f9:db:70:3e:55:0e:4e:7f:53:7f:90:81: f9:14:ba:c2:3c:39:d5:ab:b6:bd:3e:34:bd:3c:83:d1:8a:be: 89:86:e5:c6:cb:ba:f4:d0:26:81:7d:7d:eb:f6:d2:98:8a:3a: ed:4d:75:4f:20:d7:58:2f:73:93:7b:2d:ef:ca:5a:7a:47:1f: ba:c9:f8:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgwNDcxMTAvBgNVBAUTKDg4NDhBQUNERjI5NTEzMDNFNzA5OEY0MTlEOENBMDA0 MjI4OTBDNjkwHhcNMjUwNzE5MDY1MDI1WhcNMjUwNzI2MDY1MDI1WjAYMRYwFAYD VQQDEw02ODdiNDAzMS0zMWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuBxlMUHrNrQhUoo/TlhLjnwLROIQ683FwmI6KUMrFcwGwbeFuPxZRcMdeblV 2M6KE4Zo+AtMIGBpVVFdaCMAwJEzkTNAt0ZlTRr1lxik0bPJ6GE9HMGj5lTTmmN7 nD6DR94PQaPFpRymUDhzGXwG8QlA8w9IT5zCY2sBcj9EyIuBkhJUn0GjH4Jfq2P4 beR/2L/0vkwxM5RQ1wb93qU4topMVwfj/djrt82SvhuO2bbWirvWGhxHfkHhXQL9 /HVvaNU9FJMwbhLm+Jat7NZRXJMZ1apeJNIegmmhnb/M/f0zC18KGneYB2AfjvIK fvYkDaBys1YDS70fGJCFg6pYvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB1pE4bp pa9OY9vbzq+ry9BJCmNiMB8GA1UdIwQYMBaAFIhIqs3ylRMD5wmPQZ2MoAQiiQxp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODA0Ny8zNDRBMDFBMjlC MTUxMUVGODZFQjM3NDZDNEY5QUUwMi9pRWlxemZLVkV3UG5DWTlCbll5Z0JDS0pE R2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lFaXF6ZktWRXdQbkNZOUJuWXlnQkNLSkRHay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODA0Ny8zNDRBMDFBMjlCMTUxMUVGODZFQjM3NDZDNEY5QUUwMi9pRWlxemZLVkV3 UG5DWTlCbll5Z0JDS0pER2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLLth6UwLHWxUbU9o9jJ7HJT+u1QJDlFoxy0xnJEZoNwPF0wr1yq6Y rS56CXQA/ggfLPfUF4LW9PDHNPSw0ez/oQFEz4ODGrVQLluf/hXOvdPLsI5v/Yvp +IAtRZl5KZHWRVybk+SDADeubchIrXI49fuadeMxUFD4tpujOfoxK+5VssyQqehm Sb6lRVMahxgAv6paLnw17auB5HGUXpOWYD6zQP45Xnny5rBsFSl1cJJh81fzZJ0M hZX523A+VQ5Of1N/kIH5FLrCPDnVq7a9PjS9PIPRir6JhuXGy7r00CaBfX3r9tKY ijrtTXVPINdYL3OTey3vylp6Rx+6yfh+ -----END CERTIFICATE-----Generated at Sun Jul 20 08:01:53 2025 by rpki-client