$ rpki-client -vvf rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.mft File: i1fdFr2X-1v8IdnMqeK4bVUC4og.mft (raw, json) Hash identifier: 0t5eP+Kb9RNBIIQgLj5IkAu2Z2NKnpC2YgE1Kx/+wXE= Subject key identifier: 55:84:F1:3A:EA:84:C0:67:EA:F4:8B:38:1D:2B:05:6F:59:8B:4F:05 Authority key identifier: 8B:57:DD:16:BD:97:FB:5B:FC:21:D9:CC:A9:E2:B8:6D:55:02:E2:88 Certificate issuer: /CN=A91B929F/serialNumber=8B57DD16BD97FB5BFC21D9CCA9E2B86D5502E288 Certificate serial: 05AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i1fdFr2X-1v8IdnMqeK4bVUC4og.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.mft Manifest number: 05A5 Signing time: Fri 18 Jul 2025 23:29:21 +0000 Manifest this update: Fri 18 Jul 2025 23:29:20 +0000 Manifest next update: Fri 25 Jul 2025 23:29:20 +0000 Files and hashes: 1: i1fdFr2X-1v8IdnMqeK4bVUC4og.crl (hash: WHQ7wUiwy31cpR3I1OUM6SgisCwwSpNNIgUNa9LwuI0=) 2: 2EA68D96D65211EB8DAD1886C4F9AE02.roa (hash: 6nBsIW1FtTa2lY5be/el75WgarvUxw35P+urmn+K7Hk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.crl rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i1fdFr2X-1v8IdnMqeK4bVUC4og.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:29:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1450 (0x5aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B929F, serialNumber=8B57DD16BD97FB5BFC21D9CCA9E2B86D5502E288 Validity Not Before: Jul 18 23:29:20 2025 GMT Not After : Jul 25 23:29:20 2025 GMT Subject: CN=687ad8d1-8531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d7:8a:dc:72:b6:ce:12:99:b5:58:0f:3f:79: 76:8d:c9:a4:ae:b6:1d:b8:3b:4a:d0:c5:9f:4d:89: 7b:fc:f5:da:6c:b3:23:d5:e2:61:06:4f:f2:21:b1: 83:92:cb:f1:f8:12:bb:79:5c:9e:6d:0a:9b:1d:34: 74:69:f8:eb:62:ee:c3:77:50:02:6d:76:00:fa:59: 98:e1:70:8a:82:01:18:b7:c3:57:b1:da:dc:94:e8: e7:eb:4c:6b:8a:42:df:dc:01:7c:06:18:85:43:aa: cb:cb:ad:93:ea:60:a9:e7:74:88:ed:d1:0a:0a:33: 29:78:14:2d:74:1f:54:cb:eb:eb:82:46:4c:a8:43: c4:42:92:c4:a7:e2:91:23:97:55:6a:00:5a:b4:88: 42:f9:05:6a:94:db:20:a1:fd:7a:58:0e:15:02:90: bd:38:b0:e8:f9:49:57:5f:eb:1e:2f:28:54:34:67: 9c:9f:16:29:b6:17:ca:ee:17:6e:7a:06:d3:f2:ae: 70:b4:9f:86:16:86:26:f1:78:80:f9:63:80:36:b6: 20:b4:1b:48:db:ae:27:d5:38:0a:e4:aa:8f:7f:20: e0:9d:2a:24:e4:46:11:b7:70:a3:c5:e2:3c:24:04: 90:6c:09:00:e1:a3:38:05:11:0b:1a:73:aa:cc:ca: e4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:84:F1:3A:EA:84:C0:67:EA:F4:8B:38:1D:2B:05:6F:59:8B:4F:05 X509v3 Authority Key Identifier: keyid:8B:57:DD:16:BD:97:FB:5B:FC:21:D9:CC:A9:E2:B8:6D:55:02:E2:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i1fdFr2X-1v8IdnMqeK4bVUC4og.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:f2:75:af:98:2e:a0:fc:81:52:4e:b7:11:34:0f:86:07:9f: ef:e7:9b:40:ca:ab:e2:0e:49:7c:d6:e3:7c:25:9b:47:39:56: 65:49:60:83:7e:0c:d8:2c:6c:f7:b1:35:e8:5b:c2:4e:b6:b7: 58:6f:a7:1f:36:b8:e0:2f:0e:1c:a2:29:15:10:20:04:a6:d1: f2:0b:4e:2f:98:ee:b6:13:ee:b8:3f:8f:57:1a:0e:22:8f:69: 85:2f:7c:99:0e:6c:b6:a1:11:98:ac:27:79:62:39:2b:96:de: d2:49:40:76:e4:2b:a2:c7:07:aa:b6:67:18:48:bc:d4:4d:be: 45:fd:d7:30:53:7a:a1:e3:55:f0:74:7d:87:60:a5:b5:38:03: d6:77:a8:63:98:04:88:76:13:9a:0e:07:13:9c:a2:f7:3a:03: bf:e1:e4:c5:00:44:87:57:10:30:b9:05:77:3b:05:f3:a5:1a: 17:61:13:51:37:d8:7a:3c:e1:0a:e2:d1:28:60:5c:7e:f7:68: 37:93:7e:b8:12:00:cc:ae:dd:96:58:11:b7:4c:62:49:23:3e: 3f:5e:15:e3:cc:21:2e:e0:3f:78:db:07:f3:36:36:c3:56:57: ed:13:9a:b2:d5:10:82:e0:d5:d7:6a:42:b7:8b:d1:3a:27:95: 31:f2:ba:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkyOUYxMTAvBgNVBAUTKDhCNTdERDE2QkQ5N0ZCNUJGQzIxRDlDQ0E5RTJCODZE NTUwMkUyODgwHhcNMjUwNzE4MjMyOTIwWhcNMjUwNzI1MjMyOTIwWjAYMRYwFAYD VQQDEw02ODdhZDhkMS04NTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4deK3HK2zhKZtVgPP3l2jcmkrrYduDtK0MWfTYl7/PXabLMj1eJhBk/yIbGD ksvx+BK7eVyebQqbHTR0afjrYu7Dd1ACbXYA+lmY4XCKggEYt8NXsdrclOjn60xr ikLf3AF8BhiFQ6rLy62T6mCp53SI7dEKCjMpeBQtdB9Uy+vrgkZMqEPEQpLEp+KR I5dVagBatIhC+QVqlNsgof16WA4VApC9OLDo+UlXX+seLyhUNGecnxYpthfK7hdu egbT8q5wtJ+GFoYm8XiA+WOANrYgtBtI264n1TgK5KqPfyDgnSok5EYRt3CjxeI8 JASQbAkA4aM4BRELGnOqzMrkqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFWE8Trq hMBn6vSLOB0rBW9Zi08FMB8GA1UdIwQYMBaAFItX3Ra9l/tb/CHZzKniuG1VAuKI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTI5Ri8zQkU1NDlDRUQ2 NEUxMUVCOTRENEYyN0RDNEY5QUUwMi9pMWZkRnIyWC0xdjhJZG5NcWVLNGJWVUM0 b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2kxZmRGcjJYLTF2OElkbk1xZUs0YlZVQzRvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTI5Ri8zQkU1NDlDRUQ2NEUxMUVCOTRENEYyN0RDNEY5QUUwMi9pMWZkRnIyWC0x djhJZG5NcWVLNGJWVUM0b2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAy8nWvmC6g/IFSTrcRNA+GB5/v55tAyqviDkl81uN8JZtHOVZlSWCD fgzYLGz3sTXoW8JOtrdYb6cfNrjgLw4coikVECAEptHyC04vmO62E+64P49XGg4i j2mFL3yZDmy2oRGYrCd5Yjkrlt7SSUB25CuixweqtmcYSLzUTb5F/dcwU3qh41Xw dH2HYKW1OAPWd6hjmASIdhOaDgcTnKL3OgO/4eTFAESHVxAwuQV3OwXzpRoXYRNR N9h6POEK4tEoYFx+92g3k364EgDMrt2WWBG3TGJJIz4/XhXjzCEu4D942wfzNjbD VlftE5qy1RCC4NXXakK3i9E6J5Ux8rpL -----END CERTIFICATE-----Generated at Sun Jul 20 14:07:51 2025 by rpki-client