$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft File: i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft (raw, json) Hash identifier: YxnFhma14Svx8FAB9cbQS3G4b6Wo9t0aAySgYSt+3G8= Subject key identifier: 8F:D4:F5:41:62:D9:E5:0F:3F:C7:FC:6B:1C:EE:6E:E5:6A:37:CD:0E Authority key identifier: 8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8 Certificate issuer: /CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8 Certificate serial: 076A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft Manifest number: 06E3 Signing time: Tue 22 Jul 2025 22:48:08 +0000 Manifest this update: Tue 22 Jul 2025 22:48:07 +0000 Manifest next update: Tue 29 Jul 2025 22:48:07 +0000 Files and hashes: 1: i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl (hash: OPiK45OaZ2S77GeDcTYZ+Dw+C46y+8nIuvPD3XjPv8w=) 2: B7BC1B76506A11EDBB3A804AC4F9AE02.roa (hash: gLMJhNvQtjkqWgYHOYJrflnpuLe5m/iNQsn8pAjqC+o=) 3: 79D30C40BABE11EB825A5D09C4F9AE02.roa (hash: VF1EKdtqMB8DRuSBnFKjSSnE5AI9LEnGrDvhJPYGcJw=) 4: 30CB9694A28911ECBC355360C4F9AE02.roa (hash: iacyWEeXTvXTILxRcADZ+9lCVjiDHQnMplIMRt/73Xk=) 5: 97C79A806C0511EF8B77D10EC4F9AE02.roa (hash: Z/eyVAkA9R8S1+9PHNU8ppbtyyeeA+WhA6oeOKeAzo8=) 6: BB9C14F6AA5511EB86F34077C4F9AE02.roa (hash: bcPbqQLGQnoAzNP2Fmg0TCnc4h72RS0Eli/gU7/zCsQ=) 7: 317095E0A28911ECBC355360C4F9AE02.roa (hash: IjGCmqfeR6dWCwkTJerprQJ5jh4UJlY6ZGEM3z029yo=) 8: 8BB6CB12A4D511EB9E4DF342C4F9AE02.roa (hash: q95wxrZ9LN/HMmU4q1987KOKTt7X/HBomrSB/BVWhIg=) 9: 2AECA58494EE11EE84F9D73CC4F9AE02.roa (hash: I8a2tYdChMy0m+hYeHyoEloBcDOZ+JhPIXTugtfIp8g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 22:48:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1898 (0x76a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC31B, serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8 Validity Not Before: Jul 22 22:48:07 2025 GMT Not After : Jul 29 22:48:07 2025 GMT Subject: CN=68801528-2ea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a8:6f:e6:5e:d3:7d:a9:34:a9:7c:a9:84:60: aa:dd:05:45:18:8b:1b:69:7d:8c:6f:69:46:f4:61: 05:46:56:3b:8e:ed:65:8e:cd:73:fb:d7:eb:36:ea: 71:2f:aa:73:e0:fb:d6:f0:83:74:ea:ef:93:82:68: 75:51:a3:6f:1f:76:59:02:72:49:f3:e1:a0:37:e2: 7b:fc:ce:23:c8:97:85:ad:be:cc:54:ea:ee:03:1f: 05:f9:4b:d0:7d:e6:e7:8f:11:46:f3:8c:fb:92:e4: c1:f8:99:f1:09:1b:74:2a:b7:52:a1:43:07:18:3b: 69:68:00:a8:a8:b7:98:32:57:d3:ab:95:1d:2f:db: 1b:53:91:b2:5c:99:12:07:72:90:e7:a1:6f:4c:5d: 6d:1f:46:02:ea:2a:01:b1:31:64:0e:df:a3:27:05: 2b:bf:fb:ac:a6:8f:85:63:75:2d:ab:33:2f:15:d9: 24:96:6a:22:f0:78:72:c2:53:1c:b1:72:44:29:c3: 1d:83:0d:83:86:5c:e2:50:ac:70:34:ac:c6:ba:8a: d9:91:15:a1:12:32:bc:dd:8e:34:0d:fe:c6:d9:5a: a6:99:7d:b9:83:c9:e6:d7:ce:ff:a9:2b:5d:40:9e: b3:b9:05:7d:d9:10:ad:df:97:88:19:b1:fa:19:94: 8a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:D4:F5:41:62:D9:E5:0F:3F:C7:FC:6B:1C:EE:6E:E5:6A:37:CD:0E X509v3 Authority Key Identifier: keyid:8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:3a:9f:da:9f:3d:38:ac:37:e6:50:ff:fb:21:fc:d2:aa:a9: 4c:65:d5:81:19:04:91:d4:d6:42:39:da:8b:9e:77:93:04:70: 1f:ad:0c:ce:49:95:3d:aa:4e:43:1d:42:8b:b8:3c:d0:f4:0b: 92:26:f4:94:72:73:cd:09:95:55:24:a6:37:35:a8:e3:27:e4: 26:f6:00:09:51:fc:36:cf:c5:11:79:2b:f7:2c:bb:af:fd:77: 4c:22:2c:c2:23:d8:62:44:b8:c3:13:56:ce:06:b5:1a:65:a5: 4a:b0:37:11:07:c7:cf:0a:cc:10:4f:d8:6d:d5:47:3e:0e:b6: 94:b7:95:01:40:01:90:7c:07:6f:f2:06:79:0e:76:8d:61:71: 16:9f:68:c6:21:8f:e2:49:40:9a:90:10:82:04:c0:99:6a:5e: 3c:16:90:04:b6:95:8b:33:ae:9a:dd:52:b1:64:8e:18:d4:3c: 64:82:b2:a4:54:96:56:05:2b:97:5c:55:92:1e:08:8c:7d:6f: 67:2a:7c:00:27:1f:96:79:1f:69:a2:f6:ee:aa:f2:74:51:f8: 8f:84:db:f7:1a:87:6a:46:04:20:2b:d5:ab:5b:14:2a:2e:1a: d2:9f:49:7a:c2:76:91:99:38:d9:d6:96:49:c2:31:a6:1c:eb: 8e:be:ca:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMzMUIxMTAvBgNVBAUTKDhCOEFENUNBMUMzRThCOENGNDY4QjVGNDk2QTkxQUJC MEU0OENGQTgwHhcNMjUwNzIyMjI0ODA3WhcNMjUwNzI5MjI0ODA3WjAYMRYwFAYD VQQDEw02ODgwMTUyOC0yZWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0qhv5l7Tfak0qXyphGCq3QVFGIsbaX2Mb2lG9GEFRlY7ju1ljs1z+9frNupx L6pz4PvW8IN06u+Tgmh1UaNvH3ZZAnJJ8+GgN+J7/M4jyJeFrb7MVOruAx8F+UvQ febnjxFG84z7kuTB+JnxCRt0KrdSoUMHGDtpaACoqLeYMlfTq5UdL9sbU5GyXJkS B3KQ56FvTF1tH0YC6ioBsTFkDt+jJwUrv/uspo+FY3UtqzMvFdkklmoi8HhywlMc sXJEKcMdgw2DhlziUKxwNKzGuorZkRWhEjK83Y40Df7G2VqmmX25g8nm187/qStd QJ6zuQV92RCt35eIGbH6GZSKmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI/U9UFi 2eUPP8f8axzubuVqN80OMB8GA1UdIwQYMBaAFIuK1cocPouM9Gi19JapGrsOSM+o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzMxQi9EMEVDQ0Q0ODg5 M0QxMUVCOTE2REYwMjJDNEY5QUUwMi9pNHJWeWh3LWk0ejBhTFgwbHFrYXV3NUl6 NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2k0clZ5aHctaTR6MGFMWDBscWthdXc1SXo2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzMxQi9EMEVDQ0Q0ODg5M0QxMUVCOTE2REYwMjJDNEY5QUUwMi9pNHJWeWh3LWk0 ejBhTFgwbHFrYXV3NUl6NmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPOp/anz04rDfmUP/7IfzSqqlMZdWBGQSR1NZCOdqLnneTBHAfrQzO SZU9qk5DHUKLuDzQ9AuSJvSUcnPNCZVVJKY3NajjJ+Qm9gAJUfw2z8UReSv3LLuv /XdMIizCI9hiRLjDE1bOBrUaZaVKsDcRB8fPCswQT9ht1Uc+DraUt5UBQAGQfAdv 8gZ5DnaNYXEWn2jGIY/iSUCakBCCBMCZal48FpAEtpWLM66a3VKxZI4Y1DxkgrKk VJZWBSuXXFWSHgiMfW9nKnwAJx+WeR9povbuqvJ0UfiPhNv3GodqRgQgK9WrWxQq LhrSn0l6wnaRmTjZ1pZJwjGmHOuOvsqb -----END CERTIFICATE-----Generated at Wed Jul 23 12:16:20 2025 by rpki-client