$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft File: rI34tAewexNnm3HFASus3eJQHnE.mft (raw, json) Hash identifier: AxemfKwHcH0gukt5qRtLc7J8ntJ7EBQfUKn/pXxVUbI= Subject key identifier: C0:A2:1F:41:A4:83:E2:39:8D:68:A3:7D:F6:82:AC:C3:E1:0F:5D:CA Authority key identifier: AC:8D:F8:B4:07:B0:7B:13:67:9B:71:C5:01:2B:AC:DD:E2:50:1E:71 Certificate issuer: /CN=A91FC43D/serialNumber=AC8DF8B407B07B13679B71C5012BACDDE2501E71 Certificate serial: 22C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rI34tAewexNnm3HFASus3eJQHnE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft Manifest number: 22B5 Signing time: Sun 20 Jul 2025 15:52:22 +0000 Manifest this update: Sun 20 Jul 2025 15:52:21 +0000 Manifest next update: Sun 27 Jul 2025 15:52:21 +0000 Files and hashes: 1: rI34tAewexNnm3HFASus3eJQHnE.crl (hash: Vnd+bQbjd54NMNwiF222sPxt3L+OLVc4tWb4ANHYZf0=) 2: 2D55F42CB0F611E5B464E359C4F9AE02.roa (hash: +yqS5ARpGMGBWr2MyFGiajoFZUJV/KOEs+STzodgJKg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.crl rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rI34tAewexNnm3HFASus3eJQHnE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 15:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8900 (0x22c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC43D, serialNumber=AC8DF8B407B07B13679B71C5012BACDDE2501E71 Validity Not Before: Jul 20 15:52:21 2025 GMT Not After : Jul 27 15:52:21 2025 GMT Subject: CN=687d10b6-343a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:54:cd:4c:15:db:94:08:e4:d2:b3:71:50:fa: c2:a2:3c:81:5b:35:ba:92:63:0e:c7:da:68:b8:84: 96:5d:97:6e:a9:74:10:94:7e:ea:4e:7a:0f:dd:31: 78:72:c8:27:2f:74:ff:50:3a:74:67:75:35:d9:89: 0e:f1:96:c4:56:e2:65:be:ce:65:c3:24:bf:97:59: 2b:fe:5a:8f:6c:50:67:ea:cc:c3:6c:a3:42:14:a8: 0d:0d:e2:bc:04:e9:1d:b8:f4:8f:06:a3:84:4c:f9: 14:e4:82:c3:de:4f:1a:e0:6d:74:51:ad:cf:da:c8: 7f:aa:30:35:e0:82:66:c1:9b:1a:78:ed:d3:36:d3: 54:28:f2:20:2f:46:c5:58:fe:85:45:f1:d8:6a:06: 23:51:f2:c1:ab:f1:83:14:27:ef:95:95:74:2a:8d: da:44:a7:fb:c7:ba:68:3e:0f:d4:52:02:0c:76:f2: ed:84:84:ce:78:3b:3e:1d:99:fe:4a:0b:1c:b8:53: 96:13:c7:a5:6a:12:05:98:5b:c5:e8:d9:a1:d9:ae: b3:8e:57:29:52:8b:05:e2:94:eb:d8:a6:43:da:61: d3:25:9e:35:08:f3:ef:d3:2d:91:ee:51:2f:17:9b: 44:69:9d:33:96:c6:17:ce:9d:7f:00:06:39:25:31: 75:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:A2:1F:41:A4:83:E2:39:8D:68:A3:7D:F6:82:AC:C3:E1:0F:5D:CA X509v3 Authority Key Identifier: keyid:AC:8D:F8:B4:07:B0:7B:13:67:9B:71:C5:01:2B:AC:DD:E2:50:1E:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rI34tAewexNnm3HFASus3eJQHnE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:2f:8d:97:cf:b3:9a:dd:7f:31:23:20:a9:e8:47:de:22:48: ba:82:0f:48:ad:4d:75:53:ba:0d:4d:44:cf:54:1e:1f:61:4d: 43:ba:01:0f:a0:f3:9d:f1:0b:0d:94:04:71:1e:35:fd:13:44: 34:78:bd:85:f1:32:e1:65:a9:fc:48:5f:9e:8e:2a:25:83:d7: b5:58:b4:a5:c7:a6:9a:3b:dc:55:97:45:b7:6c:67:26:84:af: cb:04:7d:30:72:fd:92:46:07:56:84:77:91:05:f1:9f:80:3d: a5:f0:b1:53:70:5c:78:02:ef:05:c9:96:b6:87:e6:8d:1a:02: 6b:b9:c9:c3:0d:35:da:5f:03:7f:01:84:15:a2:ac:55:22:b1: 9a:ef:c4:4b:4c:c3:31:05:6c:e9:30:4a:21:67:1c:b0:1b:d5: 6c:17:3e:ec:f9:ab:3b:6f:f4:3e:e9:1b:ca:ee:ff:31:83:7b: e8:56:84:05:d7:14:0c:76:d4:eb:58:56:49:2b:30:01:f4:a9: d4:e0:7c:1f:2e:e8:44:26:a8:43:98:dd:11:b2:ae:b5:2a:6c: 10:39:23:0c:13:f5:61:b1:fa:39:66:41:6b:43:c1:78:1b:e4: 6d:69:77:03:af:77:46:76:a9:af:36:7a:45:d0:a5:20:3c:56: be:1a:06:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIsQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM0M0QxMTAvBgNVBAUTKEFDOERGOEI0MDdCMDdCMTM2NzlCNzFDNTAxMkJBQ0RE RTI1MDFFNzEwHhcNMjUwNzIwMTU1MjIxWhcNMjUwNzI3MTU1MjIxWjAYMRYwFAYD VQQDEw02ODdkMTBiNi0zNDNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyVTNTBXblAjk0rNxUPrCojyBWzW6kmMOx9pouISWXZduqXQQlH7qTnoP3TF4 csgnL3T/UDp0Z3U12YkO8ZbEVuJlvs5lwyS/l1kr/lqPbFBn6szDbKNCFKgNDeK8 BOkduPSPBqOETPkU5ILD3k8a4G10Ua3P2sh/qjA14IJmwZsaeO3TNtNUKPIgL0bF WP6FRfHYagYjUfLBq/GDFCfvlZV0Ko3aRKf7x7poPg/UUgIMdvLthITOeDs+HZn+ SgscuFOWE8elahIFmFvF6Nmh2a6zjlcpUosF4pTr2KZD2mHTJZ41CPPv0y2R7lEv F5tEaZ0zlsYXzp1/AAY5JTF1rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMCiH0Gk g+I5jWijffaCrMPhD13KMB8GA1UdIwQYMBaAFKyN+LQHsHsTZ5txxQErrN3iUB5x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzQzRC9FREIyOEU3RUE0 ODAxMUU1ODMzNzg4ODZDNEY5QUUwMi9ySTM0dEFld2V4Tm5tM0hGQVN1czNlSlFI bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JJMzR0QWV3ZXhObm0zSEZBU3VzM2VKUUhuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzQzRC9FREIyOEU3RUE0ODAxMUU1ODMzNzg4ODZDNEY5QUUwMi9ySTM0dEFld2V4 Tm5tM0hGQVN1czNlSlFIbkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7L42Xz7Oa3X8xIyCp6EfeIki6gg9IrU11U7oNTUTPVB4fYU1DugEP oPOd8QsNlARxHjX9E0Q0eL2F8TLhZan8SF+ejiolg9e1WLSlx6aaO9xVl0W3bGcm hK/LBH0wcv2SRgdWhHeRBfGfgD2l8LFTcFx4Au8FyZa2h+aNGgJrucnDDTXaXwN/ AYQVoqxVIrGa78RLTMMxBWzpMEohZxywG9VsFz7s+as7b/Q+6RvK7v8xg3voVoQF 1xQMdtTrWFZJKzAB9KnU4HwfLuhEJqhDmN0Rsq61KmwQOSMME/Vhsfo5ZkFrQ8F4 G+RtaXcDr3dGdqmvNnpF0KUgPFa+Gga5 -----END CERTIFICATE-----Generated at Mon Jul 21 07:04:23 2025 by rpki-client