$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft File: IAg9TfqETFcnVYxMdW2yDfgHzYE.mft (raw, json) Hash identifier: 5pJk7GgL8DpInqr9y4gvnYVgw4W3XGgm9GxfWrEl6Pc= Subject key identifier: 82:47:A6:A1:9E:E2:BA:8C:13:36:5F:BC:47:65:41:9C:82:C5:15:BE Authority key identifier: 20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81 Certificate issuer: /CN=A91EAE60/serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81 Certificate serial: 27A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft Manifest number: 274C Signing time: Fri 18 Jul 2025 15:45:36 +0000 Manifest this update: Fri 18 Jul 2025 15:45:35 +0000 Manifest next update: Fri 25 Jul 2025 15:45:35 +0000 Files and hashes: 1: IAg9TfqETFcnVYxMdW2yDfgHzYE.crl (hash: ZgX5c7biNm60htuEWt9G39D+P5Zl0/rtVTlSUlBzlDw=) 2: B9AC3CD4B0F011E5A08A224DC4F9AE02.roa (hash: H54eXqaAth/AANz7/DMFwtH0FIhN3UXJcrmsK7fhMXQ=) 3: BD84664CB0F011E5A08A224DC4F9AE02.roa (hash: oG5ygd/penwWyXmZZkzYKDAIiWuJVz9Qy2pJuzyaYxo=) 4: BBF567AEB0F011E5A08A224DC4F9AE02.roa (hash: tAGi/sSZ9el7Z/s+1sNJT90gzy4cpKpqrErB6Bm68K0=) 5: AE887848662211E7BC7E2636C4F9AE02.roa (hash: 4dAtwCU1fi5Bo6SCfNalDzxKHkBj/DREl9uromRy6Rs=) 6: 42724A42D87811E98F4DC832C4F9AE02.roa (hash: SILTusquGoHpNsMBJynofIsPOUuJK+mXoArSIu6+szM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 15:45:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10145 (0x27a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE60, serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81 Validity Not Before: Jul 18 15:45:35 2025 GMT Not After : Jul 25 15:45:35 2025 GMT Subject: CN=687a6c1f-62db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:83:16:e6:bf:4c:4f:4f:00:75:cd:40:36:51: a9:33:a7:fa:97:c1:ca:0f:14:d1:c9:38:bd:9b:c2: bf:d3:91:35:99:2c:36:a8:bc:6d:49:30:32:2d:00: 2e:bc:e7:bc:9d:4c:2d:b8:7a:d0:67:99:57:82:f3: 52:28:b1:8b:06:85:a3:62:c6:25:5f:3d:ea:ee:59: 7c:f4:47:8e:bd:6b:12:85:b8:81:2b:eb:9a:8a:17: a1:59:6c:1f:21:f1:41:33:27:a7:77:c2:b5:fa:f2: 3b:f3:cd:4f:62:c8:68:6f:f9:ad:5c:b4:16:c2:52: bf:3a:bd:1d:52:f1:3b:09:8f:5c:40:b5:d3:db:6d: b0:98:f6:57:ed:10:cb:31:6c:ba:1b:73:ad:68:33: 55:ce:e9:1d:4e:2d:d7:1b:18:4b:8c:17:a8:0e:ae: 2f:5d:de:bc:ab:a0:f2:4b:bf:54:a9:6c:7f:85:29: b8:21:8f:46:73:b3:a1:bd:ad:89:a0:75:95:68:60: 89:9d:63:1f:d6:b2:a6:b4:c5:6e:5f:ad:09:2a:3b: f6:64:e6:5c:7e:a4:6e:06:12:e8:a6:a9:da:11:f6: 3b:b5:9e:fe:06:39:17:70:ee:e4:77:8f:ef:c4:b0: 50:58:1c:79:2d:2f:40:f6:63:01:b5:f7:df:c7:ee: cd:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:47:A6:A1:9E:E2:BA:8C:13:36:5F:BC:47:65:41:9C:82:C5:15:BE X509v3 Authority Key Identifier: keyid:20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:22:23:3e:0f:fb:37:32:10:7d:7f:30:25:4e:7d:89:b0:80: ce:b9:e7:05:7e:d5:55:28:e8:74:0b:ac:27:89:ee:05:91:ce: 37:7a:64:a3:fd:4f:93:3a:2c:b6:9d:b9:74:c9:b2:82:f9:7b: a9:43:b0:79:3d:a5:8e:a1:de:04:fa:5d:af:7f:3f:0e:10:0b: 78:a5:0b:91:9b:ac:3e:b4:c0:fe:b4:5d:0d:2f:61:47:e6:e5: 5c:3e:83:2d:28:94:64:a3:8f:ac:56:03:97:93:07:44:02:fa: 1c:78:78:57:a1:b1:f9:ec:c1:bc:c3:cb:cb:8d:94:73:d7:c3: 10:92:6d:8f:c9:56:39:be:ec:03:89:d1:ab:40:58:f4:c5:21: 82:67:32:08:af:f4:cd:ff:01:26:e9:e3:6c:32:7c:49:60:0f: ce:79:0e:dc:84:76:45:d2:2c:3b:8b:6f:ec:71:27:ec:c5:3d: 05:05:4f:1b:03:e9:9d:d0:41:d7:1e:e5:67:8d:29:88:de:bc: ac:13:e4:0c:e0:14:87:25:ea:5c:23:23:11:35:4b:b3:a3:e6: a6:d5:e0:54:38:12:44:b9:69:b1:17:f6:95:ae:8c:8b:d7:23: f3:a2:6e:37:a7:c6:de:66:94:84:67:8d:18:89:2d:69:73:30: a0:70:68:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ6EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFFNjAxMTAvBgNVBAUTKDIwMDgzRDRERkE4NDRDNTcyNzU1OEM0Qzc1NkRCMjBE RjgwN0NEODEwHhcNMjUwNzE4MTU0NTM1WhcNMjUwNzI1MTU0NTM1WjAYMRYwFAYD VQQDEw02ODdhNmMxZi02MmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2IMW5r9MT08Adc1ANlGpM6f6l8HKDxTRyTi9m8K/05E1mSw2qLxtSTAyLQAu vOe8nUwtuHrQZ5lXgvNSKLGLBoWjYsYlXz3q7ll89EeOvWsShbiBK+uaihehWWwf IfFBMyend8K1+vI7881PYshob/mtXLQWwlK/Or0dUvE7CY9cQLXT222wmPZX7RDL MWy6G3OtaDNVzukdTi3XGxhLjBeoDq4vXd68q6DyS79UqWx/hSm4IY9Gc7Ohva2J oHWVaGCJnWMf1rKmtMVuX60JKjv2ZOZcfqRuBhLopqnaEfY7tZ7+BjkXcO7kd4/v xLBQWBx5LS9A9mMBtfffx+7N5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIJHpqGe 4rqMEzZfvEdlQZyCxRW+MB8GA1UdIwQYMBaAFCAIPU36hExXJ1WMTHVtsg34B82B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUU2MC9GMTk5NjcxMkM3 Q0YxMUU0QjEzQkUxMjFDNEY5QUUwMi9JQWc5VGZxRVRGY25WWXhNZFcyeURmZ0h6 WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lBZzlUZnFFVEZjblZZeE1kVzJ5RGZnSHpZRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUU2MC9GMTk5NjcxMkM3Q0YxMUU0QjEzQkUxMjFDNEY5QUUwMi9JQWc5VGZxRVRG Y25WWXhNZFcyeURmZ0h6WUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGIiM+D/s3MhB9fzAlTn2JsIDOuecFftVVKOh0C6wnie4Fkc43emSj /U+TOiy2nbl0ybKC+XupQ7B5PaWOod4E+l2vfz8OEAt4pQuRm6w+tMD+tF0NL2FH 5uVcPoMtKJRko4+sVgOXkwdEAvoceHhXobH57MG8w8vLjZRz18MQkm2PyVY5vuwD idGrQFj0xSGCZzIIr/TN/wEm6eNsMnxJYA/OeQ7chHZF0iw7i2/scSfsxT0FBU8b A+md0EHXHuVnjSmI3rysE+QM4BSHJepcIyMRNUuzo+am1eBUOBJEuWmxF/aVroyL 1yPzom43p8beZpSEZ40YiS1pczCgcGhy -----END CERTIFICATE-----Generated at Sun Jul 20 11:08:27 2025 by rpki-client