$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft File: ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft (raw, json) Hash identifier: hzTN+d4Ul1attnAVRdOR8D7wZmQbqe5oH2feMQFfpjQ= Subject key identifier: F5:03:21:23:D9:8A:A9:78:7F:6A:E0:A2:BC:FF:14:52:4A:7C:1C:72 Authority key identifier: 8A:F7:D8:B8:64:FD:90:45:2F:FD:6D:E9:3B:51:45:6C:79:EF:B3:C7 Certificate issuer: /CN=A91AC4FA/serialNumber=8AF7D8B864FD90452FFD6DE93B51456C79EFB3C7 Certificate serial: 0221 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft Manifest number: 0215 Signing time: Fri 19 Sep 2025 02:37:03 +0000 Manifest this update: Fri 19 Sep 2025 02:37:02 +0000 Manifest next update: Fri 26 Sep 2025 02:37:02 +0000 Files and hashes: 1: ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl (hash: UFgl7hEX4jJvZA1MidorEl366HEyh30PVufXd4nLSAY=) 2: 0B1C46B26C8E11EDA1402673C4F9AE02.roa (hash: eBrKZQqIUQgxJsjLbBp6BZmWWZAOHf0P0YyuhSY1Lts=) 3: 2A40C41C6EC511ED9672CB40C4F9AE02.roa (hash: 2ABgaw5i7gtrVWQKQRB2kERFT6VG3t9JHA5FdKRAAjA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 02:37:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 545 (0x221) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC4FA, serialNumber=8AF7D8B864FD90452FFD6DE93B51456C79EFB3C7 Validity Not Before: Sep 19 02:37:02 2025 GMT Not After : Sep 26 02:37:02 2025 GMT Subject: CN=68ccc1ce-b949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2d:ce:3c:01:09:bf:a4:6c:cf:83:96:3e:bc: 7b:78:f8:53:99:b6:a2:70:58:40:f0:5b:aa:04:6d: 75:45:05:9d:69:d6:94:14:1e:67:b0:60:df:b2:f5: 21:94:ed:1a:77:0b:d7:f5:80:6c:43:cf:21:9e:4e: 1b:cc:fb:d5:86:ea:29:1d:72:7b:52:95:f6:13:04: 85:5b:1b:35:3a:2a:e5:74:cb:29:5d:b8:e6:5d:e6: 98:bb:7a:82:58:79:a1:f4:ab:1f:b3:24:9c:6c:1b: 82:6b:89:b1:00:b5:05:0a:79:55:55:36:ce:99:f5: 82:96:6c:11:8a:95:0c:f3:93:37:17:b3:88:81:1c: a1:f4:fc:48:ec:89:65:bc:5a:35:88:ef:81:6f:01: 00:8d:c2:2d:31:e9:dd:6d:e3:34:6e:57:1a:a5:10: 8d:18:b3:31:6d:d2:57:13:58:9e:6c:f0:82:83:35: c0:48:d2:e0:5f:74:a0:bb:16:76:a5:6e:c6:ef:71: 1a:30:21:6c:42:13:90:2d:5e:b4:c2:8a:4c:55:55: eb:e6:cb:0d:4c:dd:19:a1:9d:5f:a4:72:d5:10:77: c0:e3:4d:04:74:37:7b:18:43:ab:c5:3c:64:57:2a: fc:5f:da:ee:74:a7:ed:a2:48:1a:82:19:e8:20:db: 3a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:03:21:23:D9:8A:A9:78:7F:6A:E0:A2:BC:FF:14:52:4A:7C:1C:72 X509v3 Authority Key Identifier: keyid:8A:F7:D8:B8:64:FD:90:45:2F:FD:6D:E9:3B:51:45:6C:79:EF:B3:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption f3:7f:64:8e:20:9e:b9:65:69:4e:eb:74:9c:c0:02:5d:cb:3c: e1:e2:42:45:8a:cf:37:a8:fd:f4:11:a2:46:bb:f7:21:f2:b4: 0e:e7:da:d6:1c:b6:8d:2f:0d:d6:0c:f9:f9:34:df:32:be:0f: 13:01:7f:53:f7:e4:64:d1:8b:97:6e:ca:2d:55:e7:bb:0d:d6: a8:ca:ad:7d:fd:5a:a1:89:67:a0:7a:59:89:f9:0f:27:a0:a0: 68:2a:0a:a9:01:28:f6:42:aa:48:8d:f7:41:ac:86:70:da:29: e6:32:84:3a:13:20:83:bb:45:02:4c:97:a0:52:82:17:7a:ee: 4c:78:68:72:50:7a:72:30:ef:f8:fd:a6:82:fc:67:16:cf:2d: 04:0f:06:7d:3b:93:d8:2a:cb:a4:dd:31:eb:1e:40:fb:73:5f: 46:07:b8:b1:79:88:10:2c:0a:5c:be:32:0a:89:7e:d9:ab:ae: 25:b1:a5:66:67:00:f7:b0:58:11:10:20:dc:1f:aa:9d:69:8e: e2:d2:5e:bf:cc:8a:40:de:7a:5d:0f:a1:4b:2a:bb:8d:bd:78: f5:47:b9:1d:68:8e:f3:5f:bd:1c:a2:96:49:ab:74:c8:c1:4b: 68:26:c2:92:70:6d:73:b1:b0:0b:42:c3:22:5d:3a:7e:da:4d: 53:e3:ea:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM0RkExMTAvBgNVBAUTKDhBRjdEOEI4NjRGRDkwNDUyRkZENkRFOTNCNTE0NTZD NzlFRkIzQzcwHhcNMjUwOTE5MDIzNzAyWhcNMjUwOTI2MDIzNzAyWjAYMRYwFAYD VQQDEw02OGNjYzFjZS1iOTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqC3OPAEJv6Rsz4OWPrx7ePhTmbaicFhA8FuqBG11RQWdadaUFB5nsGDfsvUh lO0adwvX9YBsQ88hnk4bzPvVhuopHXJ7UpX2EwSFWxs1OirldMspXbjmXeaYu3qC WHmh9KsfsyScbBuCa4mxALUFCnlVVTbOmfWClmwRipUM85M3F7OIgRyh9PxI7Ill vFo1iO+BbwEAjcItMendbeM0blcapRCNGLMxbdJXE1iebPCCgzXASNLgX3SguxZ2 pW7G73EaMCFsQhOQLV60wopMVVXr5ssNTN0ZoZ1fpHLVEHfA400EdDd7GEOrxTxk Vyr8X9rudKftokgaghnoINs6WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPUDISPZ iql4f2rgorz/FFJKfBxyMB8GA1UdIwQYMBaAFIr32Lhk/ZBFL/1t6TtRRWx577PH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzRGQS8zN0NCODc5ODZD OEIxMUVEODdBRkY1NzFDNEY5QUUwMi9pdmZZdUdUOWtFVXZfVzNwTzFGRmJIbnZz OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l2Zll1R1Q5a0VVdl9XM3BPMUZGYkhudnM4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzRGQS8zN0NCODc5ODZDOEIxMUVEODdBRkY1NzFDNEY5QUUwMi9pdmZZdUdUOWtF VXZfVzNwTzFGRmJIbnZzOGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDzf2SOIJ65ZWlO63ScwAJdyzzh4kJFis83qP30EaJGu/ch8rQO59rW HLaNLw3WDPn5NN8yvg8TAX9T9+Rk0YuXbsotVee7Ddaoyq19/VqhiWegelmJ+Q8n oKBoKgqpASj2QqpIjfdBrIZw2inmMoQ6EyCDu0UCTJegUoIXeu5MeGhyUHpyMO/4 /aaC/GcWzy0EDwZ9O5PYKsuk3THrHkD7c19GB7ixeYgQLApcvjIKiX7Zq64lsaVm ZwD3sFgRECDcH6qdaY7i0l6/zIpA3npdD6FLKruNvXj1R7kdaI7zX70copZJq3TI wUtoJsKScG1zsbALQsMiXTp+2k1T4+pF -----END CERTIFICATE-----Generated at Fri Sep 19 05:37:19 2025 by rpki-client