$ rpki-client -vvf rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft File: iXCkAMzM8BCTPDMMN2Ch7F204K0.mft (raw, json) Hash identifier: rfcEimEdsJXquTdUK46gqc5GJzsa03nlgAZ6vST4zg8= Subject key identifier: C1:F5:D0:4A:62:EE:D5:4C:41:A4:B7:AB:90:86:67:8B:47:2D:BF:2A Authority key identifier: 89:70:A4:00:CC:CC:F0:10:93:3C:33:0C:37:60:A1:EC:5D:B4:E0:AD Certificate issuer: /CN=A91C92DC/serialNumber=8970A400CCCCF010933C330C3760A1EC5DB4E0AD Certificate serial: 055C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft Manifest number: 0550 Signing time: Tue 22 Jul 2025 23:46:47 +0000 Manifest this update: Tue 22 Jul 2025 23:46:47 +0000 Manifest next update: Tue 29 Jul 2025 23:46:47 +0000 Files and hashes: 1: iXCkAMzM8BCTPDMMN2Ch7F204K0.crl (hash: EQANYV0BvH1cDPthH/AKRgwn88H/sLWwKQOMv9taIt0=) 2: C3CE90CEF99A11EB936CCA1EC4F9AE02.roa (hash: xQl2oR7pAbge5iF8YPhv/hbmMFqMQxGSZC11zhknFak=) 3: AD1469EC7A3911ECB5639D41C4F9AE02.roa (hash: M0rop6u3XFd48CsMz0Ik0R+4A+HjyQyG2cdgIdeoY8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.crl rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 23:46:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1372 (0x55c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C92DC, serialNumber=8970A400CCCCF010933C330C3760A1EC5DB4E0AD Validity Not Before: Jul 22 23:46:47 2025 GMT Not After : Jul 29 23:46:47 2025 GMT Subject: CN=688022e7-758d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ef:e7:9a:3f:a3:ea:2d:59:e6:67:f2:1a:1c: 79:74:33:c2:6d:9a:8f:fe:ef:18:99:a9:23:b9:0e: f7:2f:0f:8e:76:18:55:8e:72:e0:03:bd:98:b4:ef: 7b:d3:aa:11:14:9b:91:87:ea:fc:5d:93:b3:54:50: 11:a4:f2:b7:d9:9e:44:06:4d:d4:8d:91:4e:ce:8b: 65:e9:33:e1:e1:e1:2e:1f:a3:bf:0b:4c:f6:45:ae: e8:e9:7b:0a:40:58:03:23:56:ae:4e:62:a7:df:02: 1b:a4:ef:9a:6e:71:bf:f7:b3:db:69:1d:e9:72:e5: 87:81:32:7f:6b:b6:ee:5a:e4:23:0f:5d:12:2a:d0: a7:b1:13:8a:ba:d7:f3:f1:6e:54:78:e1:bb:cd:e1: e2:bb:ba:fc:7d:69:e5:56:f2:03:92:6a:30:1e:3e: 9e:9b:6b:64:7e:43:3a:31:c8:60:0b:c3:6d:b7:88: bc:80:44:05:51:72:27:5b:21:81:ec:b1:12:56:f8: 8c:cb:f0:f1:e3:16:dd:88:bb:bb:47:02:eb:82:8c: 14:d2:29:41:fe:16:fc:22:86:d0:9d:a7:5a:df:6f: 02:58:c3:38:31:6b:17:e0:1a:e1:f3:ae:06:45:80: d9:cf:83:21:0b:73:57:fb:d4:18:09:42:07:31:56: bd:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F5:D0:4A:62:EE:D5:4C:41:A4:B7:AB:90:86:67:8B:47:2D:BF:2A X509v3 Authority Key Identifier: keyid:89:70:A4:00:CC:CC:F0:10:93:3C:33:0C:37:60:A1:EC:5D:B4:E0:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:f9:9a:b2:8a:af:04:e6:e3:94:8e:7d:14:fe:cb:28:62:53: cf:7b:9d:f5:ea:98:90:87:10:13:82:eb:56:d5:36:28:07:d7: 17:bd:46:5f:c5:e9:12:0e:34:73:12:b1:c4:8f:9e:aa:db:2a: c9:70:e5:34:72:18:4b:01:60:22:6c:02:15:c9:a2:0f:54:46: 53:65:3d:f7:dc:24:da:31:11:9a:6a:fa:26:b4:ff:5e:d0:0f: ab:b0:a6:26:28:ba:5c:a9:cc:9a:be:ba:b1:b1:79:90:d6:4c: 5b:8b:66:78:fa:1b:fb:ea:7d:c1:ac:bf:08:c5:7b:c3:f0:63: ca:bd:fd:74:a9:2f:38:5f:1d:4a:77:8f:43:16:1c:7f:f1:67: df:0b:9b:03:3b:db:00:6e:ee:e0:d5:cd:0c:62:ef:28:31:cb: ab:90:61:fd:e3:3d:93:7f:4e:5c:1e:7e:53:9b:c5:54:30:af: 31:c4:75:d1:a2:bc:23:bc:bd:e1:ec:e5:c8:56:b8:28:a0:06: ed:98:5c:5a:e6:68:e0:88:fa:6c:cd:1f:1d:41:18:e9:37:65: 32:b4:e7:07:d0:b8:b5:7b:1f:3b:05:a1:97:64:a1:48:b5:c7: 61:3d:19:a1:f3:f2:05:c8:3a:e4:05:aa:fd:97:a6:0c:f7:1e: b5:52:9d:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkyREMxMTAvBgNVBAUTKDg5NzBBNDAwQ0NDQ0YwMTA5MzNDMzMwQzM3NjBBMUVD NURCNEUwQUQwHhcNMjUwNzIyMjM0NjQ3WhcNMjUwNzI5MjM0NjQ3WjAYMRYwFAYD VQQDEw02ODgwMjJlNy03NThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAne/nmj+j6i1Z5mfyGhx5dDPCbZqP/u8YmakjuQ73Lw+OdhhVjnLgA72YtO97 06oRFJuRh+r8XZOzVFARpPK32Z5EBk3UjZFOzotl6TPh4eEuH6O/C0z2Ra7o6XsK QFgDI1auTmKn3wIbpO+abnG/97PbaR3pcuWHgTJ/a7buWuQjD10SKtCnsROKutfz 8W5UeOG7zeHiu7r8fWnlVvIDkmowHj6em2tkfkM6MchgC8Ntt4i8gEQFUXInWyGB 7LESVviMy/Dx4xbdiLu7RwLrgowU0ilB/hb8IobQnada328CWMM4MWsX4Brh864G RYDZz4MhC3NX+9QYCUIHMVa91wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMH10Epi 7tVMQaS3q5CGZ4tHLb8qMB8GA1UdIwQYMBaAFIlwpADMzPAQkzwzDDdgoexdtOCt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTJEQy9DNjA1NzhBMEY5 OTgxMUVCOEFGNDlDMURDNEY5QUUwMi9pWENrQU16TThCQ1RQRE1NTjJDaDdGMjA0 SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lYQ2tBTXpNOEJDVFBETU1OMkNoN0YyMDRLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTJEQy9DNjA1NzhBMEY5OTgxMUVCOEFGNDlDMURDNEY5QUUwMi9pWENrQU16TThC Q1RQRE1NTjJDaDdGMjA0SzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBS+Zqyiq8E5uOUjn0U/ssoYlPPe5316piQhxATgutW1TYoB9cXvUZf xekSDjRzErHEj56q2yrJcOU0chhLAWAibAIVyaIPVEZTZT333CTaMRGaavomtP9e 0A+rsKYmKLpcqcyavrqxsXmQ1kxbi2Z4+hv76n3BrL8IxXvD8GPKvf10qS84Xx1K d49DFhx/8WffC5sDO9sAbu7g1c0MYu8oMcurkGH94z2Tf05cHn5Tm8VUMK8xxHXR orwjvL3h7OXIVrgooAbtmFxa5mjgiPpszR8dQRjpN2UytOcH0Li1ex87BaGXZKFI tcdhPRmh8/IFyDrkBar9l6YM9x61Up1X -----END CERTIFICATE-----Generated at Wed Jul 23 11:56:34 2025 by rpki-client