$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft File: IcjytuAdCoLRPDUYjDyT5vUUupQ.mft (raw, json) Hash identifier: pqblI+sw5OxXxoCDJwJAIffSnlya3F88+ZzWqxxDbGc= Subject key identifier: 15:CE:69:C5:44:9A:B3:B5:A3:4E:CD:FA:33:35:79:CF:82:9B:D5:86 Authority key identifier: 21:C8:F2:B6:E0:1D:0A:82:D1:3C:35:18:8C:3C:93:E6:F5:14:BA:94 Certificate issuer: /CN=A91A9C62/serialNumber=21C8F2B6E01D0A82D13C35188C3C93E6F514BA94 Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcjytuAdCoLRPDUYjDyT5vUUupQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft Manifest number: 11 Signing time: Sat 23 Aug 2025 08:18:49 +0000 Manifest this update: Sat 23 Aug 2025 08:18:48 +0000 Manifest next update: Sat 30 Aug 2025 08:18:48 +0000 Files and hashes: 1: IcjytuAdCoLRPDUYjDyT5vUUupQ.crl (hash: 4HfE8ecyZOsh5t228SbxFY71D7nfn3ofnSyVJ1GBm74=) 2: 08EAF5106C2111F0B46AAC57C4F9AE02.roa (hash: WDMb5z1Oep3KObXAq9yk+eELcjcBrGqtQZEb/aGlqi4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.crl rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcjytuAdCoLRPDUYjDyT5vUUupQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:18:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9C62, serialNumber=21C8F2B6E01D0A82D13C35188C3C93E6F514BA94 Validity Not Before: Aug 23 08:18:48 2025 GMT Not After : Aug 30 08:18:48 2025 GMT Subject: CN=68a97969-7c01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:58:fe:d3:ba:15:22:85:eb:d3:c7:e3:dc:1e: 34:69:cc:8b:c4:ce:a6:96:41:fa:94:6d:da:57:f7: ff:d2:f6:77:c3:b1:c8:78:d1:5e:5e:7a:b3:df:f5: 31:a4:5a:ad:62:05:7b:5b:cd:8c:85:92:51:ea:c2: 2e:3a:60:87:50:c9:1d:04:4b:65:14:7a:39:ef:63: 08:7d:14:f6:3f:47:c2:e4:85:f1:57:0a:5a:11:a8: fd:21:bc:8f:ec:e8:4f:10:0b:52:af:81:e8:8f:1a: b1:1b:48:51:65:f1:27:19:f5:c9:d9:12:29:eb:58: e2:ce:66:3f:1e:1f:ff:25:16:e1:f9:7b:df:cd:b4: ec:75:e1:3a:5a:45:16:5e:7d:b1:82:48:1a:e8:fd: c9:f6:2b:12:5a:88:8e:4e:ec:39:7a:11:28:8e:b5: f2:10:90:ff:a1:6f:c3:c4:85:df:53:f3:53:0c:5c: 65:43:c0:12:6f:e0:43:99:f6:e7:01:ae:b5:d4:d8: 91:ac:e4:6d:fe:fd:6c:e2:86:66:e6:21:6a:bc:07: 37:40:8e:7b:04:66:2b:a4:43:08:9f:50:56:fe:6f: 8e:9e:b0:dc:7a:ce:ec:cb:bf:02:55:e9:81:20:2b: e7:6b:ae:d1:df:51:43:f5:c4:d9:c8:c8:5a:01:ad: 54:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:CE:69:C5:44:9A:B3:B5:A3:4E:CD:FA:33:35:79:CF:82:9B:D5:86 X509v3 Authority Key Identifier: keyid:21:C8:F2:B6:E0:1D:0A:82:D1:3C:35:18:8C:3C:93:E6:F5:14:BA:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcjytuAdCoLRPDUYjDyT5vUUupQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:ba:72:3f:ea:59:74:df:48:6f:98:60:7f:05:4b:b8:0a:1c: 0b:d7:2b:b6:67:d2:8e:b9:75:3a:7e:51:cc:35:45:b3:08:2c: f0:3b:0a:9c:d2:2b:ae:c1:40:1f:2f:13:36:08:4b:b7:34:10: df:98:4c:26:0e:a6:ba:d5:4b:ea:7d:20:3b:ec:ec:a3:c3:e5: 0b:9e:66:1c:b6:67:d0:c8:8e:05:98:80:3f:3c:c9:31:9b:71: b8:ee:eb:48:f8:26:4c:46:83:f8:51:2b:12:00:ae:ce:b4:5e: 00:55:ef:1e:95:7b:49:5c:8c:7d:79:3f:0d:ed:7a:ce:f4:c9: 3f:dd:3c:e0:80:a7:5f:26:c9:ad:22:3d:7b:40:7c:e5:21:e0: ac:ac:76:7d:1e:9d:b4:9b:28:ba:3b:eb:3e:4a:2f:bc:88:8f: 11:84:4b:d3:a8:28:51:f1:30:7b:34:f5:c8:0e:cf:8e:69:17: 13:fe:a0:23:67:d5:bc:3d:6e:ec:21:6c:07:b0:e9:9c:76:69: d0:41:24:ab:08:b5:9a:89:17:75:84:82:bd:65:03:a0:c2:1f: 80:9a:b7:58:b7:5c:29:36:ea:32:66:85:a0:02:02:2b:0b:89: 59:aa:2a:08:ad:90:23:e2:0b:2a:01:73:cd:e0:7b:88:4f:2e: 40:c2:90:5d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OUM2MjExMC8GA1UEBRMoMjFDOEYyQjZFMDFEMEE4MkQxM0MzNTE4OEMzQzkzRTZG NTE0QkE5NDAeFw0yNTA4MjMwODE4NDhaFw0yNTA4MzAwODE4NDhaMBgxFjAUBgNV BAMTDTY4YTk3OTY5LTdjMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFWP7TuhUihevTx+PcHjRpzIvEzqaWQfqUbdpX9//S9nfDsch40V5eerPf9TGk Wq1iBXtbzYyFklHqwi46YIdQyR0ES2UUejnvYwh9FPY/R8LkhfFXCloRqP0hvI/s 6E8QC1KvgeiPGrEbSFFl8ScZ9cnZEinrWOLOZj8eH/8lFuH5e9/NtOx14TpaRRZe fbGCSBro/cn2KxJaiI5O7Dl6ESiOtfIQkP+hb8PEhd9T81MMXGVDwBJv4EOZ9ucB rrXU2JGs5G3+/WzihmbmIWq8BzdAjnsEZiukQwifUFb+b46esNx6zuzLvwJV6YEg K+drrtHfUUP1xNnIyFoBrVRDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFc5pxUSa s7WjTs36MzV5z4Kb1YYwHwYDVR0jBBgwFoAUIcjytuAdCoLRPDUYjDyT5vUUupQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5QzYyLzBBRUFBQ0Q2NkI2 NjExRjBCN0Y4RUI0MEM0RjlBRTAyL0ljanl0dUFkQ29MUlBEVVlqRHlUNXZVVXVw US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSWNqeXR1QWRDb0xSUERVWWpEeVQ1dlVVdXBRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 QzYyLzBBRUFBQ0Q2NkI2NjExRjBCN0Y4RUI0MEM0RjlBRTAyL0ljanl0dUFkQ29M UlBEVVlqRHlUNXZVVXVwUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIy6cj/qWXTfSG+YYH8FS7gKHAvXK7Zn0o65dTp+Ucw1RbMILPA7CpzS K67BQB8vEzYIS7c0EN+YTCYOprrVS+p9IDvs7KPD5QueZhy2Z9DIjgWYgD88yTGb cbju60j4JkxGg/hRKxIArs60XgBV7x6Ve0lcjH15Pw3tes70yT/dPOCAp18mya0i PXtAfOUh4Kysdn0enbSbKLo76z5KL7yIjxGES9OoKFHxMHs09cgOz45pFxP+oCNn 1bw9buwhbAew6Zx2adBBJKsItZqJF3WEgr1lA6DCH4Cat1i3XCk26jJmhaACAisL iVmqKgitkCPiCyoBc83ge4hPLkDCkF0= -----END CERTIFICATE-----Generated at Sun Aug 24 22:20:52 2025 by rpki-client