$ rpki-client -vvf rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft File: aIUqt_JxT89U118KrjBorcOLNcw.mft (raw, json) Hash identifier: HmildH1fYwG/WfkI3uOPlpHyNI59H5vnb6R0Pf8aawo= Subject key identifier: F9:4E:27:B2:B5:40:4A:AA:16:F4:02:C1:CC:89:6F:AB:35:48:E4:91 Authority key identifier: 68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC Certificate issuer: /CN=A91187FD/serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC Certificate serial: 020C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft Manifest number: 01DD Signing time: Tue 09 Sep 2025 03:21:38 +0000 Manifest this update: Tue 09 Sep 2025 03:21:38 +0000 Manifest next update: Tue 16 Sep 2025 03:21:38 +0000 Files and hashes: 1: aIUqt_JxT89U118KrjBorcOLNcw.crl (hash: tC4r2YaPcacApaXlIrmkEJXVZ+V00JtFsl3LINxqETc=) 2: AF2D50BE562B11F0A2095579C4F9AE02.roa (hash: 8RemKyfJQtXvAOB/Ei52MDI9KMaFn3vaXMJC+OL2BTo=) 3: 0EE376F8BF7111EEA53E4981C4F9AE02.roa (hash: jgvNZRe9TtRr8CjiSGyPeDv21uzfhNhZZ8tu5qtOBO0=) 4: F8D5DC60BF7111EE806CB182C4F9AE02.roa (hash: 6GO7eV9ptg4bEhjgmfPj3OiDNEEWB+tcYPU19G/hzs4=) 5: A6888CA8562B11F0A9D71979C4F9AE02.roa (hash: iDmp89Xpkp1Fll7WvZDCHcwidt+lSLGg3Xgb3jX5mHY=) 6: F9CB1E5ABF7111EE806CB182C4F9AE02.roa (hash: xJf9OjyZ9tl22O94Y+hCu+z+3Ka7jvHkbMt39lHsOuw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 03:21:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 524 (0x20c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91187FD, serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC Validity Not Before: Sep 9 03:21:38 2025 GMT Not After : Sep 16 03:21:38 2025 GMT Subject: CN=68bf9d42-349e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:dc:68:d0:be:36:bd:e2:f1:6b:be:c8:bd:bd: 86:74:98:c2:95:ec:85:8b:24:37:f8:2e:38:2f:8c: 39:4c:47:3e:ff:07:3e:c0:f1:2d:15:91:8a:5e:32: 89:e8:14:fa:81:23:6f:ea:51:f1:49:f3:8e:1f:d9: 41:d6:c6:58:33:49:93:4e:3e:fa:a5:77:7e:33:1e: ca:6a:22:85:c8:27:65:f0:c1:f5:1e:95:75:a5:9c: a9:dc:76:20:a9:6a:70:4f:6d:b5:08:ed:84:97:cc: c5:76:af:72:40:e6:a2:5a:9b:2f:d6:51:b7:86:1e: af:57:32:5d:90:93:5d:82:8b:0a:0b:11:a1:d4:51: 04:3d:2e:aa:34:cb:98:e3:97:5d:94:6f:37:83:53: ea:d0:08:70:33:4f:56:e1:b3:91:25:b4:eb:3d:21: 77:f1:8a:12:09:95:ec:d0:f6:f2:03:98:01:af:34: 4f:6e:66:2b:8b:ee:e9:fc:41:37:22:57:be:0e:2d: fb:c2:e9:5d:e3:3b:47:5e:3a:e6:7d:5b:e7:bd:f7: fb:cb:00:d3:0e:32:c2:ee:b6:2b:e2:35:e1:0c:bd: 24:48:db:28:93:09:f2:a0:03:3f:b1:68:ad:69:20: 86:a2:98:1f:1d:97:d2:6f:04:29:1e:a5:a6:2e:05: d3:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:4E:27:B2:B5:40:4A:AA:16:F4:02:C1:CC:89:6F:AB:35:48:E4:91 X509v3 Authority Key Identifier: keyid:68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:2f:1b:a6:b8:93:cd:59:78:05:5b:19:25:46:08:f8:1c:7e: 4a:e6:b0:51:fe:13:21:77:ee:b5:2e:d5:9f:f6:1e:83:fe:35: 5d:49:09:66:df:48:85:33:0d:0b:33:a0:e9:72:03:ae:69:db: 8e:7a:97:3a:65:4a:14:a3:99:6c:5e:92:a6:95:91:6b:67:c7: 82:d9:09:fe:61:39:1f:04:3f:cc:ef:9d:6d:41:b0:08:b8:eb: c0:49:7d:4e:2a:98:ee:21:f6:a9:1d:fc:18:0f:09:b3:fe:ce: 4b:51:ea:3b:59:ac:f8:33:a6:96:ee:09:74:8f:82:e1:1a:1e: 3c:e7:c6:ed:ca:d5:34:3e:4f:72:87:8a:22:e2:eb:ac:5c:23: c3:f8:55:d3:1d:f4:db:08:51:90:54:cf:00:06:de:ce:02:38: bf:b9:d9:80:06:44:a5:2b:37:93:66:bb:9e:2f:69:61:50:ed: 82:5e:3d:af:10:e6:fc:9d:29:47:e0:87:a6:d9:04:a8:f7:a1: dd:1b:d4:91:af:92:31:c8:63:26:c4:23:ac:cf:19:52:b7:75: 47:91:67:02:fe:80:d9:4c:0f:69:e9:46:4f:df:84:01:e2:f5: 47:11:eb:9d:3e:ae:e7:12:ca:f5:1e:cd:cf:81:e4:3f:e3:5a: e1:17:54:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg3RkQxMTAvBgNVBAUTKDY4ODUyQUI3RjI3MTRGQ0Y1NEQ3NUYwQUFFMzA2OEFE QzM4QjM1Q0MwHhcNMjUwOTA5MDMyMTM4WhcNMjUwOTE2MDMyMTM4WjAYMRYwFAYD VQQDEw02OGJmOWQ0Mi0zNDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNxo0L42veLxa77Ivb2GdJjCleyFiyQ3+C44L4w5TEc+/wc+wPEtFZGKXjKJ 6BT6gSNv6lHxSfOOH9lB1sZYM0mTTj76pXd+Mx7KaiKFyCdl8MH1HpV1pZyp3HYg qWpwT221CO2El8zFdq9yQOaiWpsv1lG3hh6vVzJdkJNdgosKCxGh1FEEPS6qNMuY 45ddlG83g1Pq0AhwM09W4bORJbTrPSF38YoSCZXs0PbyA5gBrzRPbmYri+7p/EE3 Ile+Di37wuld4ztHXjrmfVvnvff7ywDTDjLC7rYr4jXhDL0kSNsokwnyoAM/sWit aSCGopgfHZfSbwQpHqWmLgXTWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPlOJ7K1 QEqqFvQCwcyJb6s1SOSRMB8GA1UdIwQYMBaAFGiFKrfycU/PVNdfCq4waK3DizXM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODdGRC81NUVENkExNjEw QTAxMUVFOTM0OTNDNTJDNEY5QUUwMi9hSVVxdF9KeFQ4OVUxMThLcmpCb3JjT0xO Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FJVXF0X0p4VDg5VTExOEtyakJvcmNPTE5jdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODdGRC81NUVENkExNjEwQTAxMUVFOTM0OTNDNTJDNEY5QUUwMi9hSVVxdF9KeFQ4 OVUxMThLcmpCb3JjT0xOY3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5LxumuJPNWXgFWxklRgj4HH5K5rBR/hMhd+61LtWf9h6D/jVdSQlm 30iFMw0LM6DpcgOuaduOepc6ZUoUo5lsXpKmlZFrZ8eC2Qn+YTkfBD/M751tQbAI uOvASX1OKpjuIfapHfwYDwmz/s5LUeo7Waz4M6aW7gl0j4LhGh4858btytU0Pk9y h4oi4uusXCPD+FXTHfTbCFGQVM8ABt7OAji/udmABkSlKzeTZrueL2lhUO2CXj2v EOb8nSlH4Iem2QSo96HdG9SRr5IxyGMmxCOszxlSt3VHkWcC/oDZTA9p6UZP34QB 4vVHEeudPq7nEsr1Hs3PgeQ/41rhF1Qc -----END CERTIFICATE-----Generated at Tue Sep 9 23:40:39 2025 by rpki-client