$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft File: IbLqdC_w7568zvOZh5Dj9bCNa2M.mft (raw, json) Hash identifier: LDCyXAPQLaMuVQ0DuTPcK68bD3vsUeeqmkTr9+XNONw= Subject key identifier: 7C:DF:AA:BA:9F:F4:60:60:D6:28:C2:00:A7:09:3B:27:19:D3:6C:D5 Authority key identifier: 21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63 Certificate issuer: /CN=A91B6172/serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63 Certificate serial: 0211 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft Manifest number: 0206 Signing time: Fri 05 Sep 2025 02:36:08 +0000 Manifest this update: Fri 05 Sep 2025 02:36:08 +0000 Manifest next update: Fri 12 Sep 2025 02:36:08 +0000 Files and hashes: 1: IbLqdC_w7568zvOZh5Dj9bCNa2M.crl (hash: qv7Hu05nmq/BQ3dZBoTbWcNo67mTpQmH1gKaP/sanVU=) 2: ABDDEF28722F11EDA987AB75C4F9AE02.roa (hash: mzTY+yHaxiOoTmhIGnRxe8TteP35OSc9TDFULhxG7es=) 3: AC80FFE2722F11EDA987AB75C4F9AE02.roa (hash: TCA2TacY4ZsDEXX4IqBFag6vpZrZlhAMEJDWvtGJDWs=) 4: 08A71970723811EDB0BD0312C4F9AE02.roa (hash: Tjdi12mwJxE8vytdEEm6LYs9NXU4cX9jhBUfI2VO1fQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 02:36:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 529 (0x211) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6172, serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63 Validity Not Before: Sep 5 02:36:08 2025 GMT Not After : Sep 12 02:36:08 2025 GMT Subject: CN=68ba4c98-1456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1b:01:03:b5:d9:34:e1:19:45:d5:04:a1:33: c5:17:1f:e8:fc:8b:0d:df:af:ab:db:33:df:93:f3: 28:9d:c4:0b:24:98:61:70:42:71:4c:8a:3d:d2:3a: 88:27:f3:ef:3a:f5:1f:d7:e8:cd:f9:77:5e:62:b1: 75:1f:f1:97:f8:12:1f:56:0a:ec:f2:23:e4:70:3b: 3e:98:a1:6a:1d:1a:49:d7:3e:2a:8f:2a:b7:05:4f: 12:23:a4:f6:da:88:c2:d7:30:69:5b:4f:91:02:19: 97:16:c0:51:2f:81:45:3f:33:45:5a:bf:f5:4b:ae: fc:63:2e:a6:92:fc:f4:1b:f3:d2:43:d1:2d:f0:99: a8:32:d2:a6:0f:9c:63:da:4f:b5:cb:03:8d:2a:7e: 4f:2c:d9:8c:96:3e:07:20:b3:fd:86:bd:de:8d:d5: 80:1c:49:15:5f:0c:45:28:e4:31:d3:b9:e6:d8:20: 7a:54:47:db:70:b0:b2:83:01:1b:da:8e:d3:2b:61: bc:d2:54:dc:c1:8f:0b:59:4d:2d:03:dc:47:5f:34: 82:3c:38:2f:56:a6:70:ba:93:1e:d2:87:82:1a:4d: 77:06:69:99:6b:02:24:12:24:7d:22:6e:6a:ee:6e: fc:eb:a5:73:c2:6a:c5:03:96:1e:20:42:a3:a2:bd: 6e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:DF:AA:BA:9F:F4:60:60:D6:28:C2:00:A7:09:3B:27:19:D3:6C:D5 X509v3 Authority Key Identifier: keyid:21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:1c:5b:c5:a9:71:9c:0c:89:d0:99:f3:af:01:23:1c:c0:d1: 23:24:bd:8e:33:12:83:4f:fc:69:4e:f7:96:c2:2c:50:d0:bc: 9e:ee:23:1f:d5:27:aa:86:4e:f1:4f:5b:d2:9e:a5:03:5a:da: 73:63:f2:2e:f1:cf:d1:49:9b:2f:3f:d0:f5:98:03:4c:6c:c2: 81:f5:d8:b6:28:92:2b:4a:35:e2:ac:1f:a8:9c:03:58:c6:09: ab:ab:cc:d7:20:11:86:df:22:94:17:a0:07:26:e4:c6:d6:34: c6:47:e1:0d:69:a6:d2:93:c9:3f:97:32:e5:1e:e0:51:9b:a7: 77:dc:3c:ec:1c:f0:61:e4:99:a1:b6:e3:11:84:c6:ce:b6:80: 56:21:dd:ba:94:50:30:40:aa:86:02:d2:06:48:e4:f5:3c:20: 12:fa:cf:1a:99:0e:a0:21:22:2f:7f:a1:be:1c:72:c9:87:07: 87:3e:88:82:ae:93:97:a4:73:72:ff:29:ce:a9:61:86:1c:7b: 28:c4:1e:bf:65:c3:ed:a9:ed:15:17:fe:0b:53:6f:6b:cd:ae: 13:87:cd:81:a6:84:ba:90:e6:63:f5:65:61:31:c4:cd:e5:b2: 38:f7:4d:70:56:a3:04:c0:d7:b2:e5:da:c7:1a:4d:68:1d:a7: 50:48:f4:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYxNzIxMTAvBgNVBAUTKDIxQjJFQTc0MkZGMEVGOUVCQ0NFRjM5OTg3OTBFM0Y1 QjA4RDZCNjMwHhcNMjUwOTA1MDIzNjA4WhcNMjUwOTEyMDIzNjA4WjAYMRYwFAYD VQQDEw02OGJhNGM5OC0xNDU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuRsBA7XZNOEZRdUEoTPFFx/o/IsN36+r2zPfk/MoncQLJJhhcEJxTIo90jqI J/PvOvUf1+jN+XdeYrF1H/GX+BIfVgrs8iPkcDs+mKFqHRpJ1z4qjyq3BU8SI6T2 2ojC1zBpW0+RAhmXFsBRL4FFPzNFWr/1S678Yy6mkvz0G/PSQ9Et8JmoMtKmD5xj 2k+1ywONKn5PLNmMlj4HILP9hr3ejdWAHEkVXwxFKOQx07nm2CB6VEfbcLCygwEb 2o7TK2G80lTcwY8LWU0tA9xHXzSCPDgvVqZwupMe0oeCGk13BmmZawIkEiR9Im5q 7m7866VzwmrFA5YeIEKjor1uUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHzfqrqf 9GBg1ijCAKcJOycZ02zVMB8GA1UdIwQYMBaAFCGy6nQv8O+evM7zmYeQ4/WwjWtj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjE3Mi9CQTU0QzEzNDcy MkIxMUVEOTdENzNDNUFDNEY5QUUwMi9JYkxxZENfdzc1Njh6dk9aaDVEajliQ05h Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0liTHFkQ193NzU2OHp2T1poNURqOWJDTmEyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjE3Mi9CQTU0QzEzNDcyMkIxMUVEOTdENzNDNUFDNEY5QUUwMi9JYkxxZENfdzc1 Njh6dk9aaDVEajliQ05hMk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRHFvFqXGcDInQmfOvASMcwNEjJL2OMxKDT/xpTveWwixQ0Lye7iMf 1Seqhk7xT1vSnqUDWtpzY/Iu8c/RSZsvP9D1mANMbMKB9di2KJIrSjXirB+onANY xgmrq8zXIBGG3yKUF6AHJuTG1jTGR+ENaabSk8k/lzLlHuBRm6d33DzsHPBh5Jmh tuMRhMbOtoBWId26lFAwQKqGAtIGSOT1PCAS+s8amQ6gISIvf6G+HHLJhweHPoiC rpOXpHNy/ynOqWGGHHsoxB6/ZcPtqe0VF/4LU29rza4Th82BpoS6kOZj9WVhMcTN 5bI4901wVqMEwNey5drHGk1oHadQSPRQ -----END CERTIFICATE-----Generated at Sat Sep 6 13:33:08 2025 by rpki-client