$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/iQJ4kAM9XWI71OQ5huiA9qsThJQ.mft File: iQJ4kAM9XWI71OQ5huiA9qsThJQ.mft (raw, json) Hash identifier: 0vIkCE1XsHvr+06Z8CoHinJ0isWbwDa4WRpQsUMycUY= Subject key identifier: 20:43:25:B4:51:FB:A0:7B:7B:9A:16:E6:FE:8C:D7:EF:A7:9C:97:B1 Authority key identifier: 89:02:78:90:03:3D:5D:62:3B:D4:E4:39:86:E8:80:F6:AB:13:84:94 Certificate issuer: /CN=A91ECE62/serialNumber=89027890033D5D623BD4E43986E880F6AB138494 Certificate serial: 0175 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQJ4kAM9XWI71OQ5huiA9qsThJQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/iQJ4kAM9XWI71OQ5huiA9qsThJQ.mft Manifest number: 0171 Signing time: Mon 21 Jul 2025 03:53:52 +0000 Manifest this update: Mon 21 Jul 2025 03:53:52 +0000 Manifest next update: Mon 28 Jul 2025 03:53:52 +0000 Files and hashes: 1: iQJ4kAM9XWI71OQ5huiA9qsThJQ.crl (hash: LIl3bmZ3ZAKunE0E59IdKP/lYc0pV6J8Kh7pmp+gH+s=) 2: 047E1E9C341C11EE84F4D52CC4F9AE02.roa (hash: rbEk2KoFtT0uaq48+jo8FPtXO3/HKOrBaUxyg4fgBYU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/iQJ4kAM9XWI71OQ5huiA9qsThJQ.crl rsync://rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/iQJ4kAM9XWI71OQ5huiA9qsThJQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQJ4kAM9XWI71OQ5huiA9qsThJQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 03:53:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 373 (0x175) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECE62, serialNumber=89027890033D5D623BD4E43986E880F6AB138494 Validity Not Before: Jul 21 03:53:52 2025 GMT Not After : Jul 28 03:53:52 2025 GMT Subject: CN=687db9d0-aebe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:74:36:c9:51:51:96:79:d2:11:0d:40:66:4c: f8:ae:ee:a4:f0:12:82:c0:74:6b:1d:b0:b4:db:47: d4:f5:e6:2a:8d:34:ef:54:39:d6:a4:31:d5:f1:26: 89:79:04:4e:08:6b:64:9a:79:cd:4e:7a:89:55:01: 51:ef:16:9e:9b:fa:7a:94:b8:b7:f4:8e:24:0e:0a: 95:c3:b7:9d:bf:5b:a4:63:dc:20:9f:cb:73:87:e8: d4:99:0a:3c:2d:8a:16:9d:ac:9f:c6:c2:e4:9a:cf: 45:2b:0e:22:ff:6d:3e:94:37:eb:4f:9b:b4:60:01: 29:ce:fd:02:6e:51:62:38:64:64:cb:7d:cc:85:33: 7a:33:2c:a8:b5:4c:e4:e6:6c:25:3b:23:67:a5:d3: b6:ac:a7:e5:34:71:19:93:5c:9c:85:a0:ca:1d:f3: f0:47:f5:08:7e:fc:61:6b:70:30:b1:db:0c:a3:bf: e3:5b:46:3e:0b:af:2a:a6:0d:0e:6d:aa:9d:16:b0: ff:88:64:9d:60:6b:a1:7f:37:a8:ef:a5:4b:d0:eb: 01:89:30:a9:0e:f7:bb:95:32:fb:15:cf:bf:e5:f5: 6e:a1:ab:8a:c5:fa:cd:1f:1c:c5:8e:8d:ce:3e:af: 50:5a:24:d0:d7:a2:0b:9d:48:f5:e3:5f:0a:db:ea: ba:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:43:25:B4:51:FB:A0:7B:7B:9A:16:E6:FE:8C:D7:EF:A7:9C:97:B1 X509v3 Authority Key Identifier: keyid:89:02:78:90:03:3D:5D:62:3B:D4:E4:39:86:E8:80:F6:AB:13:84:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/iQJ4kAM9XWI71OQ5huiA9qsThJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQJ4kAM9XWI71OQ5huiA9qsThJQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/iQJ4kAM9XWI71OQ5huiA9qsThJQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:6d:da:e2:05:80:c6:65:d8:a3:4b:d1:41:29:1e:f1:f7:6c: 1f:73:fa:c0:ab:56:d4:a9:d8:33:97:19:71:31:4b:ac:7a:0f: 32:70:c2:a1:d7:6e:37:50:ef:76:7e:d2:47:a6:6e:14:b4:64: 7d:f2:af:50:a2:41:fb:0c:0a:c6:94:31:a9:66:97:5f:ba:43: 66:6f:d5:1f:e9:06:37:29:78:fe:16:75:24:b2:5e:e1:b2:2c: 3a:c1:9b:9d:9f:17:bf:36:7b:ae:48:7f:58:7c:3b:87:ad:42: 3a:bd:0a:de:30:4b:21:28:82:80:af:d8:41:0e:4f:24:8b:eb: 0d:6e:b6:73:6d:57:a1:2b:5f:0b:d4:6d:64:a5:27:02:aa:9d: 99:a7:09:f8:14:0f:83:cf:34:7c:bb:50:c8:d4:f8:b7:e4:f5: 5e:78:8e:f6:c6:97:7e:2f:59:92:a6:84:fe:e0:04:83:84:23: a4:1d:78:de:be:f9:35:c6:85:f6:c0:6d:af:6d:08:d4:ab:99: 2d:58:93:5b:9e:4f:09:d3:44:27:3c:ec:87:31:08:d1:77:d4: 7b:bd:b7:a0:1d:18:6c:a8:d3:4d:4d:89:8b:d2:1f:5e:f4:db: 5a:8f:b3:55:a4:84:89:b4:15:c5:82:15:82:e1:68:f0:27:ce: 7b:e7:bf:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNFNjIxMTAvBgNVBAUTKDg5MDI3ODkwMDMzRDVENjIzQkQ0RTQzOTg2RTg4MEY2 QUIxMzg0OTQwHhcNMjUwNzIxMDM1MzUyWhcNMjUwNzI4MDM1MzUyWjAYMRYwFAYD VQQDEw02ODdkYjlkMC1hZWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl3Q2yVFRlnnSEQ1AZkz4ru6k8BKCwHRrHbC020fU9eYqjTTvVDnWpDHV8SaJ eQROCGtkmnnNTnqJVQFR7xaem/p6lLi39I4kDgqVw7edv1ukY9wgn8tzh+jUmQo8 LYoWnayfxsLkms9FKw4i/20+lDfrT5u0YAEpzv0CblFiOGRky33MhTN6MyyotUzk 5mwlOyNnpdO2rKflNHEZk1ychaDKHfPwR/UIfvxha3AwsdsMo7/jW0Y+C68qpg0O baqdFrD/iGSdYGuhfzeo76VL0OsBiTCpDve7lTL7Fc+/5fVuoauKxfrNHxzFjo3O Pq9QWiTQ16ILnUj1418K2+q68QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCBDJbRR +6B7e5oW5v6M1++nnJexMB8GA1UdIwQYMBaAFIkCeJADPV1iO9TkOYbogParE4SU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0U2Mi8yMUQ1Q0NERTM0 MUIxMUVFOUY4NDkwMjhDNEY5QUUwMi9pUUo0a0FNOVhXSTcxT1E1aHVpQTlxc1Ro SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lRSjRrQU05WFdJNzFPUTVodWlBOXFzVGhKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Q0U2Mi8yMUQ1Q0NERTM0MUIxMUVFOUY4NDkwMjhDNEY5QUUwMi9pUUo0a0FNOVhX STcxT1E1aHVpQTlxc1RoSlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJbdriBYDGZdijS9FBKR7x92wfc/rAq1bUqdgzlxlxMUuseg8ycMKh 1243UO92ftJHpm4UtGR98q9QokH7DArGlDGpZpdfukNmb9Uf6QY3KXj+FnUksl7h siw6wZudnxe/NnuuSH9YfDuHrUI6vQreMEshKIKAr9hBDk8ki+sNbrZzbVehK18L 1G1kpScCqp2Zpwn4FA+DzzR8u1DI1Pi35PVeeI72xpd+L1mSpoT+4ASDhCOkHXje vvk1xoX2wG2vbQjUq5ktWJNbnk8J00QnPOyHMQjRd9R7vbegHRhsqNNNTYmL0h9e 9Ntaj7NVpISJtBXFghWC4WjwJ85757/F -----END CERTIFICATE-----Generated at Mon Jul 21 09:27:54 2025 by rpki-client