$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft File: ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft (raw, json) Hash identifier: oDsRvfKYSM7nzo/m4oqPjBv1VHtq+7uYb3KWEe+GLH0= Subject key identifier: 8F:E3:2A:7A:A2:AB:42:C4:3D:B3:A4:CE:93:8E:E8:BD:FF:51:BA:44 Authority key identifier: 8A:F7:D8:B8:64:FD:90:45:2F:FD:6D:E9:3B:51:45:6C:79:EF:B3:C7 Certificate issuer: /CN=A91AC4FA/serialNumber=8AF7D8B864FD90452FFD6DE93B51456C79EFB3C7 Certificate serial: 0202 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft Manifest number: 01F6 Signing time: Mon 21 Jul 2025 02:34:16 +0000 Manifest this update: Mon 21 Jul 2025 02:34:15 +0000 Manifest next update: Mon 28 Jul 2025 02:34:15 +0000 Files and hashes: 1: ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl (hash: o/XwXCZDDt8QDSwKHFTSmBYSq3DLRNbZhFMvZhBuZBc=) 2: 0B1C46B26C8E11EDA1402673C4F9AE02.roa (hash: eBrKZQqIUQgxJsjLbBp6BZmWWZAOHf0P0YyuhSY1Lts=) 3: 2A40C41C6EC511ED9672CB40C4F9AE02.roa (hash: 2ABgaw5i7gtrVWQKQRB2kERFT6VG3t9JHA5FdKRAAjA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 02:34:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 514 (0x202) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC4FA, serialNumber=8AF7D8B864FD90452FFD6DE93B51456C79EFB3C7 Validity Not Before: Jul 21 02:34:15 2025 GMT Not After : Jul 28 02:34:15 2025 GMT Subject: CN=687da727-a9c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:17:2f:75:b4:6e:07:ae:0d:31:bb:af:f9:dd: b8:2f:8e:cd:e2:b8:88:f5:26:4d:fe:f6:86:cb:4e: 57:1d:f3:0d:2c:a0:5b:85:85:13:74:9c:52:3b:68: 99:a0:fd:8a:b0:85:51:6a:67:5e:34:45:eb:b1:23: 53:f0:b2:2e:72:30:8d:9a:7d:be:86:53:00:e3:d4: 47:91:9a:dc:2e:49:47:3e:20:a5:31:7c:60:8d:fc: 1d:69:86:8f:e2:98:dc:bd:50:4e:48:2f:4c:bd:37: be:48:9a:41:d2:95:73:c9:7a:8b:88:85:69:84:6a: 20:01:f6:85:54:62:56:b7:d6:2f:25:ca:bb:60:ef: 47:2c:41:d0:cd:9a:5b:d5:6d:22:e8:ef:11:d2:eb: 90:c1:3c:09:4c:a9:6c:64:3c:9c:d8:b4:61:42:ec: 5f:c0:ef:d5:ce:92:29:52:55:8c:4c:97:a9:3a:20: 94:b8:91:0c:85:04:79:96:b1:cb:2e:9d:94:4c:33: 34:c5:a6:8d:65:ed:3d:98:f7:64:34:46:ea:fb:81: 98:27:7b:be:2b:e5:37:ef:86:a0:f9:13:dd:48:c4: 6e:51:54:b8:68:c9:4f:d6:92:ce:d1:a8:d3:8c:f8: 57:e1:40:b6:bd:8f:bb:97:46:be:4b:48:59:0d:e8: f6:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:E3:2A:7A:A2:AB:42:C4:3D:B3:A4:CE:93:8E:E8:BD:FF:51:BA:44 X509v3 Authority Key Identifier: keyid:8A:F7:D8:B8:64:FD:90:45:2F:FD:6D:E9:3B:51:45:6C:79:EF:B3:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:c2:e9:d7:1b:a3:ce:41:a8:b9:ec:0d:79:26:26:67:ca:3c: 18:09:60:a7:c4:e6:59:66:1a:65:2b:c1:dd:f6:e3:fe:45:a5: 1f:8a:2a:9b:91:68:63:83:e0:b9:06:8f:b2:14:6e:49:a8:fa: 06:2f:51:8c:cc:2b:90:65:d8:c0:f6:c5:ad:ef:b0:59:52:6f: 6a:af:29:8d:1d:7d:53:58:27:25:5e:e8:ed:8c:ed:c3:f3:05: a8:68:54:07:a3:05:96:1e:c5:f3:d2:be:a2:ab:aa:26:26:43: 4b:75:fd:ac:e6:67:60:4b:53:9e:9e:56:8c:65:a6:2b:8c:1c: 21:e1:c1:32:92:0f:ae:fe:5b:69:bf:71:c6:1f:5c:2d:24:12: 34:c8:4c:80:de:e3:51:15:2f:28:02:c0:1d:41:86:72:1c:77: ad:dc:cc:81:b4:17:48:5f:ab:27:4d:31:20:95:6e:f2:36:56: 7e:9f:76:21:09:72:89:03:29:cc:aa:b1:c0:ee:87:44:96:29: 05:92:f6:d0:bf:4f:82:9a:e5:31:e1:ec:94:29:70:7c:f7:bb: 14:3c:3b:74:b8:9a:68:32:91:b1:1d:77:e4:0d:5e:4b:46:6f: 37:bd:51:91:9a:8f:fb:c1:5a:19:22:17:87:53:a1:5d:5a:46: 68:f2:4e:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM0RkExMTAvBgNVBAUTKDhBRjdEOEI4NjRGRDkwNDUyRkZENkRFOTNCNTE0NTZD NzlFRkIzQzcwHhcNMjUwNzIxMDIzNDE1WhcNMjUwNzI4MDIzNDE1WjAYMRYwFAYD VQQDEw02ODdkYTcyNy1hOWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwBcvdbRuB64NMbuv+d24L47N4riI9SZN/vaGy05XHfMNLKBbhYUTdJxSO2iZ oP2KsIVRamdeNEXrsSNT8LIucjCNmn2+hlMA49RHkZrcLklHPiClMXxgjfwdaYaP 4pjcvVBOSC9MvTe+SJpB0pVzyXqLiIVphGogAfaFVGJWt9YvJcq7YO9HLEHQzZpb 1W0i6O8R0uuQwTwJTKlsZDyc2LRhQuxfwO/VzpIpUlWMTJepOiCUuJEMhQR5lrHL Lp2UTDM0xaaNZe09mPdkNEbq+4GYJ3u+K+U374ag+RPdSMRuUVS4aMlP1pLO0ajT jPhX4UC2vY+7l0a+S0hZDej25wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI/jKnqi q0LEPbOkzpOO6L3/UbpEMB8GA1UdIwQYMBaAFIr32Lhk/ZBFL/1t6TtRRWx577PH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzRGQS8zN0NCODc5ODZD OEIxMUVEODdBRkY1NzFDNEY5QUUwMi9pdmZZdUdUOWtFVXZfVzNwTzFGRmJIbnZz OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l2Zll1R1Q5a0VVdl9XM3BPMUZGYkhudnM4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzRGQS8zN0NCODc5ODZDOEIxMUVEODdBRkY1NzFDNEY5QUUwMi9pdmZZdUdUOWtF VXZfVzNwTzFGRmJIbnZzOGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJwunXG6POQai57A15JiZnyjwYCWCnxOZZZhplK8Hd9uP+RaUfiiqb kWhjg+C5Bo+yFG5JqPoGL1GMzCuQZdjA9sWt77BZUm9qrymNHX1TWCclXujtjO3D 8wWoaFQHowWWHsXz0r6iq6omJkNLdf2s5mdgS1OenlaMZaYrjBwh4cEykg+u/ltp v3HGH1wtJBI0yEyA3uNRFS8oAsAdQYZyHHet3MyBtBdIX6snTTEglW7yNlZ+n3Yh CXKJAynMqrHA7odElikFkvbQv0+CmuUx4eyUKXB897sUPDt0uJpoMpGxHXfkDV5L Rm83vVGRmo/7wVoZIheHU6FdWkZo8k6V -----END CERTIFICATE-----Generated at Mon Jul 21 06:56:11 2025 by rpki-client