$ rpki-client -vvf rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft File: I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft (raw, json) Hash identifier: zV0iTkG4usJCRt97omuIQAEOdejPWXcM6hIuyMR74RA= Subject key identifier: A2:54:28:52:79:9A:44:59:61:14:C6:B6:D6:67:00:0E:3B:46:7B:A7 Authority key identifier: 23:C0:B2:D7:AC:E1:09:D3:DF:E8:3A:EB:EF:2E:A3:14:9C:5C:AC:17 Certificate issuer: /CN=A91122B3/serialNumber=23C0B2D7ACE109D3DFE83AEBEF2EA3149C5CAC17 Certificate serial: CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft Manifest number: CA Signing time: Tue 09 Sep 2025 05:51:29 +0000 Manifest this update: Tue 09 Sep 2025 05:51:29 +0000 Manifest next update: Tue 16 Sep 2025 05:51:29 +0000 Files and hashes: 1: I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl (hash: 244OE3Uqp6uxigec0opQFDXMTuWWTmbvgb/Jd9ghJVo=) 2: AA5E96065B9F11EF9F1B175DC4F9AE02.roa (hash: 835GCMndjNXvDx8DWI9YwArs6Gdw+YBn2q/Ep2PzpX0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 05:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 204 (0xcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91122B3, serialNumber=23C0B2D7ACE109D3DFE83AEBEF2EA3149C5CAC17 Validity Not Before: Sep 9 05:51:29 2025 GMT Not After : Sep 16 05:51:29 2025 GMT Subject: CN=68bfc061-6601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4b:0a:72:c1:b1:81:a5:1c:9a:53:92:85:6f: 1b:2b:33:81:0a:cc:2f:ae:2d:ee:65:4b:20:ab:b0: 0a:7e:fb:10:67:2d:ff:eb:ef:80:0a:34:0d:90:af: 67:bc:4a:96:96:b0:63:62:0b:67:2c:5b:90:c0:24: 3a:0b:9c:c4:b1:6c:e4:54:cd:51:63:13:78:35:16: 93:30:c8:bd:e2:b3:ca:df:9e:e3:8d:9a:f4:ec:04: e2:8d:43:50:c2:6d:b1:a1:3e:f1:0c:0d:ed:de:b3: fc:62:13:30:80:31:71:50:53:bb:2d:e9:96:84:98: 07:c7:bd:46:07:bb:e6:43:a7:3b:f0:9e:1c:0c:58: 87:2d:eb:6f:5e:fd:34:a0:a1:ae:d0:81:4a:9c:33: a4:11:33:6a:77:97:d5:60:96:82:23:f6:b8:76:39: 95:f0:52:9f:fd:30:77:36:5c:33:fa:7d:b7:e3:7e: 7c:7f:e6:66:73:e1:05:48:af:a0:93:ea:7a:ad:de: be:1f:d0:2b:d9:ae:87:e5:d0:0b:34:e0:2f:81:e7: a7:e7:05:11:41:01:11:66:b8:22:6d:76:46:e5:85: 35:b7:a1:03:eb:9a:e1:83:a3:35:1a:73:db:e5:c9: af:2b:1e:4f:94:7c:70:4b:ed:fd:6a:af:6f:bb:fa: fe:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:54:28:52:79:9A:44:59:61:14:C6:B6:D6:67:00:0E:3B:46:7B:A7 X509v3 Authority Key Identifier: keyid:23:C0:B2:D7:AC:E1:09:D3:DF:E8:3A:EB:EF:2E:A3:14:9C:5C:AC:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:41:b2:49:74:6e:e9:f9:d1:27:53:f0:1c:f6:27:99:0d:d5: f1:6c:62:83:4c:95:e8:90:8e:8f:09:9b:8d:a0:7f:da:31:6d: 51:7d:e5:1a:c6:cd:d0:3e:9d:9e:12:71:1f:77:1a:5e:0c:0c: a2:23:db:ba:fe:f6:7d:05:90:f8:0d:f4:64:5f:a9:96:ef:57: 8e:32:6c:99:33:3b:d5:af:18:7d:09:77:cb:c0:97:ea:81:3c: ed:a7:c6:7e:e5:bc:6b:af:4f:10:2c:e1:14:b2:32:eb:01:a6: 51:a8:b0:fa:f7:e4:b3:51:09:50:97:e4:fb:ef:e1:cc:b2:d1: f1:05:3f:c6:75:df:67:d7:18:88:dc:5a:01:01:9a:b8:b2:e1: 1a:b0:cd:0f:87:35:23:ef:c2:b3:3f:83:24:45:22:f9:fa:04: ff:e0:a9:9f:9b:68:ed:2f:86:36:e4:2e:37:b7:96:ba:e9:e2: 45:0b:20:80:17:04:95:b8:4e:cf:f5:1d:59:e9:2e:ee:16:36: 34:3d:8f:8a:ad:50:df:26:dc:26:d5:9e:2c:dc:6f:75:99:7f: c5:c2:34:e3:ff:af:84:64:55:1b:16:b0:a4:06:83:35:29:9c: 7a:d1:6c:1c:97:1f:36:7b:96:e8:1f:50:fe:2b:38:61:00:c3: e2:b7:c2:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTIyQjMxMTAvBgNVBAUTKDIzQzBCMkQ3QUNFMTA5RDNERkU4M0FFQkVGMkVBMzE0 OUM1Q0FDMTcwHhcNMjUwOTA5MDU1MTI5WhcNMjUwOTE2MDU1MTI5WjAYMRYwFAYD VQQDEw02OGJmYzA2MS02NjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzksKcsGxgaUcmlOShW8bKzOBCswvri3uZUsgq7AKfvsQZy3/6++ACjQNkK9n vEqWlrBjYgtnLFuQwCQ6C5zEsWzkVM1RYxN4NRaTMMi94rPK357jjZr07ATijUNQ wm2xoT7xDA3t3rP8YhMwgDFxUFO7LemWhJgHx71GB7vmQ6c78J4cDFiHLetvXv00 oKGu0IFKnDOkETNqd5fVYJaCI/a4djmV8FKf/TB3Nlwz+n234358f+Zmc+EFSK+g k+p6rd6+H9Ar2a6H5dALNOAvgeen5wURQQERZrgibXZG5YU1t6ED65rhg6M1GnPb 5cmvKx5PlHxwS+39aq9vu/r+ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKJUKFJ5 mkRZYRTGttZnAA47RnunMB8GA1UdIwQYMBaAFCPAstes4QnT3+g66+8uoxScXKwX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjJCMy81RTRENDc2MjVC OUYxMUVGQTE0QkJCNUNDNEY5QUUwMi9JOEN5MTZ6aENkUGY2RHJyN3k2akZKeGNy QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k4Q3kxNnpoQ2RQZjZEcnI3eTZqRkp4Y3JCYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjJCMy81RTRENDc2MjVCOUYxMUVGQTE0QkJCNUNDNEY5QUUwMi9JOEN5MTZ6aENk UGY2RHJyN3k2akZKeGNyQmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjQbJJdG7p+dEnU/Ac9ieZDdXxbGKDTJXokI6PCZuNoH/aMW1RfeUa xs3QPp2eEnEfdxpeDAyiI9u6/vZ9BZD4DfRkX6mW71eOMmyZMzvVrxh9CXfLwJfq gTztp8Z+5bxrr08QLOEUsjLrAaZRqLD69+SzUQlQl+T77+HMstHxBT/Gdd9n1xiI 3FoBAZq4suEasM0PhzUj78KzP4MkRSL5+gT/4Kmfm2jtL4Y25C43t5a66eJFCyCA FwSVuE7P9R1Z6S7uFjY0PY+KrVDfJtwm1Z4s3G91mX/FwjTj/6+EZFUbFrCkBoM1 KZx60Wwclx82e5boH1D+KzhhAMPit8IT -----END CERTIFICATE-----Generated at Tue Sep 9 14:22:39 2025 by rpki-client